@elqnt/chat 3.3.0 → 3.5.0

package/TIER2_AUTH.md

@@ -0,0 +1,258 @@
+# Chat realtime tier-2 authorization — full reference
+
+> Audience: agents and engineers touching the chat realtime path (`@elqnt/chat`
+> realtime hooks, the `chat` Go service, or any app that mounts `useChat`).
+> This is the deep reference; `SKILL.md` has the day-to-day usage. See also
+> `packages/@elqnt/CONVENTIONS.md` → "Transport tiers" / "Security rule for
+> tier 2".
+
+---
+
+## TL;DR
+
+The chat **realtime** surface (SSE `/stream`, REST `/create` `/send` `/load`
+`/typing` `/end` `/event`, and the WebSocket) is **tier 2**: clients reach the
+`chat` Go service **directly, bypassing the API gateway** (gateways buffer SSE
+and tie up proxy workers on long-lived connections). Because the gateway — and
+its JWT check — is not in the path, **the chat service authorizes every
+connection itself** by validating a short-lived signed token and deriving
+`orgId` / `userId` / `product` from the token's claims.
+
+- **Client:** pass `getToken` to `useChat` (or `token`). The package attaches it
+  as `?token=` on `/stream` (EventSource can't set headers) and as
+  `Authorization: Bearer` on the POSTs.
+- **Server:** validates HS256 with the shared `JWT_SECRET`, audience
+  `eloquent-api`, issuer `eloquent-gateway`, expiry. Identity comes **only** from
+  the token — body/query `orgId`/`userId` are no longer trusted.
+- **Enforcement:** on by default (`CHAT_AUTH_ENFORCE=true`); a kill-switch allows
+  a brief migration window.
+
+---
+
+## Why this exists (the bug it closes)
+
+Before this change the realtime handlers authorized on `isOriginAllowed` **only**,
+and that function **returned `true` when the `Origin` header was absent**
+(`// Allow requests without Origin header`). `Origin` is a browser-only courtesy
+header — absent on any server-to-server / CLI / script client and trivially
+forged. So **any non-browser client could `create` / `send` / `stream` as any
+`orgId`/`userId` it supplied in the request body or query**. That is an
+authentication/authorization bypass on an internet-exposed service.
+
+Tier 2's whole premise is that the *service* must close this, since the gateway
+isn't there to. Origin is now kept only as **defense-in-depth (CORS)** — it never
+authorizes, and a missing `Origin` no longer grants access.
+
+---
+
+## Architecture
+
+```
+Browser / non-browser client
+        │  signed token: ?token= on /stream, Authorization: Bearer on POSTs
+        ▼  (DIRECT — no API gateway)
+┌──────────────────────────────────────────────────────────────┐
+│  chat (Go service)                                             │
+│   ServeSSE / RESTHandler / ServeWS                             │
+│     → TokenValidator.Authorize(r)                              │
+│         • extract Bearer header OR ?token=                     │
+│         • verify HS256 (JWT_SECRET), exp, aud, iss             │
+│         • reject alg=none / forged / expired / wrong aud|iss   │
+│     → derive orgId / userId / product FROM CLAIMS              │
+│       (body/query identity is ignored, except migration mode)  │
+│     → origin check kept as CORS defense-in-depth only          │
+└──────────────────────────────────────────────────────────────┘
+```
+
+History (`useChatHistory`) is **tier 1** — gateway HTTP with a bearer JWT — and
+is unchanged.
+
+---
+
+## The token (claim shape)
+
+One signing path serves both tiers: tokens minted by the API gateway, by
+`@elqnt/api-client/server`'s `generateServerToken`, or by an app's
+`/api/gateway-token` route all validate here.
+
+```jsonc
+{
+  "org_id":  "<org-uuid>",          // tenant — the security boundary
+  "user_id": "<user / visitor id>", // conversation identity
+  "email":   "<email>",
+  "role":    "user",
+  "scopes":  ["chat:connect"],      // (any scope set; chat does not gate on scope today)
+  "product": "eloquent",            // routing
+  "iss": "eloquent-gateway",        // always accepted; JWT_ISSUER also accepted
+  "aud": "eloquent-api",            // must match JWT_AUDIENCE
+  "exp": <now + 1h>                 // short-lived
+}
+```
+
+Algorithm: **HS256**, signed with `JWT_SECRET` (shared across services via
+`common.env`). `alg=none` and any non-HMAC method are rejected.
+
+---
+
+## Server: `TokenValidator`
+
+`backend/services/chat/services/token_validator.go`.
+
+| Method | Purpose |
+|---|---|
+| `NewTokenValidator(secret, audience, issuers, enforce, logger)` | Construct. `"eloquent-gateway"` is always an accepted issuer in addition to `issuers`. |
+| `Validate(tokenString) (*ChatTokenClaims, error)` | Verify method/signature/exp/aud/iss; require non-empty `org_id`+`user_id`. |
+| `ExtractToken(r) string` | `Authorization: Bearer …` **or** `?token=`. |
+| `Authorize(r) (claims, ok)` | The one-call gate used by every handler. |
+
+`Authorize` return contract:
+
+| `claims` | `ok` | Meaning |
+|---|---|---|
+| non-nil | `true` | Authorized — use `claims.OrgID/UserID/Product`. |
+| `nil` | `true` | No token, **but enforcement is OFF** (migration). Caller falls back to query identity and logs. |
+| `nil` | `false` | **Reject (HTTP 401).** |
+
+Fail-closed: when enforcing with no configured secret, `Authorize` returns
+`ok=false` (never trusts an unverifiable token).
+
+### Wiring
+
+- `ServeSSE` (`sse-handler.go`): after the origin/method checks, `Authorize`;
+  401 on failure; then `orgID/userID = claims.OrgID/UserID`.
+- `RESTHandler` (`rest-handler.go`): `authorizeREST(w, r)` runs CORS + OPTIONS +
+  POST + token in one place; each handler then calls
+  `applyTokenIdentity(claims, &req.OrgID, &req.UserID)` so body identity is
+  overwritten by the token (org-only for agent-join/leave/agent-context).
+- `ServeWS` (`ws-handler.go`): `Authorize` before the upgrade; identity from
+  claims; legacy-org remap still applied to the derived org.
+
+---
+
+## Configuration (env)
+
+| Var | Default | Meaning |
+|---|---|---|
+| `JWT_SECRET` | — (required to enforce) | HS256 signing secret (shared; `common.env`). |
+| `JWT_ISSUER` | `eloquent` | Accepted issuer (in addition to the always-accepted `eloquent-gateway`). |
+| `JWT_AUDIENCE` | `eloquent-api` | Required token audience. |
+| `CHAT_AUTH_ENFORCE` | `true` | **Secure default.** `false` = migration window: validate-if-present, allow + log token-less connects. |
+
+If `CHAT_AUTH_ENFORCE=true` and `JWT_SECRET` is empty, the service **refuses to
+start** (rather than booting fail-open).
+
+---
+
+## Client: `@elqnt/chat`
+
+`getToken` / `token` exist on `UseChatOptions`, `TransportConfig`, and the
+low-level `stream-api` options. `getToken` is awaited **before every connect and
+every REST send**, so a long-lived stream keeps working as short-lived tokens
+roll over. A static `token` is also accepted but does not refresh.
+
+### Authenticated app (logged-in user)
+
+```tsx
+import { useChat } from "@elqnt/chat/hooks";
+import { getGatewayToken } from "@elqnt/api-client/browser";
+
+const chat = useChat({
+  baseUrl,            // the chat service endpoint (CHAT_SERVER_BASE_URL → …/api/v1/chat)
+  orgId, userId,
+  getToken: getGatewayToken,   // session token from /api/gateway-token, scoped to the user's org/user
+});
+```
+
+### Anonymous (public widget, marketing demo)
+
+The browser must **never** choose the org. Mint the token in a **server action
+bound to a server-trusted org** — Next.js encrypts bound arguments, so a browser
+caller cannot substitute a different org. The visitor id (non-privileged
+conversation identity) may come from the client.
+
+```ts
+// actions/chat-token-actions.ts
+"use server";
+import * as jose from "jose";
+
+export async function mintAnonChatToken(orgId: string, product: string, userId: string) {
+  const secret = new TextEncoder().encode(process.env.JWT_SECRET!);
+  return new jose.SignJWT({ org_id: orgId, user_id: userId, role: "user",
+                            scopes: ["chat:connect"], product })
+    .setProtectedHeader({ alg: "HS256" })
+    .setIssuedAt().setIssuer("eloquent-gateway").setAudience("eloquent-api")
+    .setExpirationTime("1h").sign(secret);
+}
+```
+
+```tsx
+// server component — bind the TRUSTED org (resolved server-side from widgetId / DEMO_ORG_ID)
+<WidgetRuntime getChatToken={mintAnonChatToken.bind(null, widget.orgId, "eloquent")} />
+
+// client component
+const chat = useChat({ baseUrl, orgId, userId: visitorId,
+  getToken: () => getChatToken(visitorId) });  // org is baked into the bound action
+```
+
+> **Security rule:** the bound `orgId` must come from a trusted server source
+> (a widget resolved server-side, a `DEMO_ORG_ID` env, a verified session) —
+> never from a client-supplied query param or POST body.
+
+---
+
+## How the package attaches the token
+
+| Surface | Mechanism |
+|---|---|
+| SSE `/stream` (EventSource, `transport/sse.ts`) | `?token=<jwt>` appended to the URL (headers impossible on EventSource). |
+| SSE `/stream` (fetch fallback, `transport/sse-fetch.ts`) | `?token=` **and** `Authorization: Bearer` (fetch can set headers). |
+| POST `/create` `/send` `/load` `/typing` `/end` `/event` | `Authorization: Bearer <jwt>` header. |
+
+`resolveTransportToken(cfg)` (in `transport/types.ts`) prefers `getToken` and
+falls back to `token`; it never throws (a failing provider → tokenless → the
+service rejects when enforcing).
+
+---
+
+## Rollout / migration
+
+1. Deploy the service with `CHAT_AUTH_ENFORCE=false` (migration window): tokens
+   are validated when present, token-less connects are allowed + logged.
+2. Ship every client with `getToken` (web app done: home, admin tester, widget,
+   demo). Update any native / WhatsApp / server-to-server callers to send a
+   token too.
+3. Flip `CHAT_AUTH_ENFORCE=true` (the default) once clients are updated; remove
+   the override.
+
+The kill-switch defaults secure — leaving it unset is the production posture.
+
+---
+
+## Verification
+
+- `go build ./...` + `go vet` clean in `backend/services/chat`.
+- `services/token_validator_test.go` — 11 tests: forged signature, `alg=none`,
+  expired, wrong audience/issuer, token-less rejection (enforce), migration-mode
+  allow, header-vs-query, and **identity derived from the token, not a spoofed
+  query**.
+- `@elqnt/chat` builds (ESM/CJS/DTS); `eloquent-app` `tsc --noEmit` clean.
+
+---
+
+## File map
+
+**Backend (`backend/services/chat/`)**
+- `services/token_validator.go` — validator + `Authorize` gate *(new)*
+- `services/token_validator_test.go` — tests *(new)*
+- `handlers/sse-handler.go`, `handlers/rest-handler.go`, `handlers/ws-handler.go` — wired
+- `main.go` — env + validator construction + kill-switch
+
+**Package (`packages/@elqnt/chat/`)**
+- `transport/types.ts` — `getToken`/`token` on `TransportConfig` + `resolveTransportToken`
+- `transport/sse.ts`, `transport/sse-fetch.ts` — attach token
+- `api/stream-api.ts` — `token`/`getToken` on the low-level functions
+- `hooks/use-chat.ts` — `getToken`/`token` options, refreshed via ref
+
+**App (`apps/eloquent-app/`)**
+- `actions/chat-token-actions.ts` — anonymous bound-org minter *(new)*
+- home chat wrapper + context, admin agent tester, widget runtime + page, demo page + component

package/dist/api/index.d.mts

@@ -43,6 +43,17 @@ interface StreamApiOptions {
     orgId: string;
     /** User ID */
     userId: string;
+    /**
+     * Tier-2 signed token (REQUIRED in production). The chat service authorizes
+     * the request from this token and derives orgId/userId/product from its
+     * claims (the body orgId/userId are not trusted for authorization). Pass a
+     * static `token`, or a `getToken` provider that is awaited per call so
+     * short-lived tokens refresh. See SKILL.md and @elqnt/api-client/server's
+     * generateServerToken for the claim shape.
+     */
+    token?: string;
+    /** Token provider, awaited per call. Takes precedence over `token`. */
+    getToken?: () => Promise<string | null | undefined> | string | null | undefined;
 }
 /**
  * Response from stream API calls

package/dist/api/index.d.ts

@@ -43,6 +43,17 @@ interface StreamApiOptions {
     orgId: string;
     /** User ID */
     userId: string;
+    /**
+     * Tier-2 signed token (REQUIRED in production). The chat service authorizes
+     * the request from this token and derives orgId/userId/product from its
+     * claims (the body orgId/userId are not trusted for authorization). Pass a
+     * static `token`, or a `getToken` provider that is awaited per call so
+     * short-lived tokens refresh. See SKILL.md and @elqnt/api-client/server's
+     * generateServerToken for the claim shape.
+     */
+    token?: string;
+    /** Token provider, awaited per call. Takes precedence over `token`. */
+    getToken?: () => Promise<string | null | undefined> | string | null | undefined;
 }
 /**
  * Response from stream API calls

package/dist/api/index.js

@@ -1,4 +1,3 @@
-"use client";
 "use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -54,10 +53,22 @@ module.exports = __toCommonJS(api_exports);
 var import_browser2 = require("@elqnt/api-client/browser");
 
 // api/stream-api.ts
-async function streamFetch(url, body) {
+async function resolveToken(opts) {
+  if (opts.getToken) {
+    try {
+      return await opts.getToken() ?? void 0;
+    } catch {
+      return void 0;
+    }
+  }
+  return opts.token ?? void 0;
+}
+async function streamFetch(url, body, token) {
+  const headers = { "Content-Type": "application/json" };
+  if (token) headers["Authorization"] = `Bearer ${token}`;
   const response = await fetch(url, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers,
     body: JSON.stringify(body)
   });
   if (!response.ok) {
@@ -72,9 +83,11 @@ async function streamFetch(url, body) {
 }
 async function createChat(options) {
   const { baseUrl, orgId, userId, metadata } = options;
+  const token = await resolveToken(options);
   const result = await streamFetch(
     `${baseUrl}/create`,
-    { orgId, userId, metadata }
+    { orgId, userId, metadata },
+    token
   );
   if (!result.success || !result.data?.chatKey) {
     throw new Error(result.error || "Failed to create chat");
@@ -83,6 +96,7 @@ async function createChat(options) {
 }
 async function sendChatMessage(options) {
   const { baseUrl, orgId, chatKey, userId, content, attachments, metadata } = options;
+  const token = await resolveToken(options);
   const message = {
     id: `msg_${Date.now()}_${Math.random().toString(36).slice(2)}`,
     role: "user",
@@ -99,18 +113,19 @@ async function sendChatMessage(options) {
     userId,
     message,
     metadata
-  });
+  }, token);
   if (!result.success) {
     throw new Error(result.error || "Failed to send message");
   }
 }
 async function loadChat(options) {
   const { baseUrl, orgId, chatKey, userId } = options;
+  const token = await resolveToken(options);
   const result = await streamFetch(`${baseUrl}/load`, {
     orgId,
     chatKey,
     userId
-  });
+  }, token);
   if (!result.success || !result.data?.chat) {
     throw new Error(result.error || "Failed to load chat");
   }
@@ -118,37 +133,40 @@ async function loadChat(options) {
 }
 async function endChat(options) {
   const { baseUrl, orgId, chatKey, userId, reason } = options;
+  const token = await resolveToken(options);
   const result = await streamFetch(`${baseUrl}/end`, {
     orgId,
     chatKey,
     userId,
     data: reason ? { reason } : void 0
-  });
+  }, token);
   if (!result.success) {
     throw new Error(result.error || "Failed to end chat");
   }
 }
 async function sendTypingIndicator(options) {
   const { baseUrl, orgId, chatKey, userId, typing } = options;
+  const token = await resolveToken(options);
   const result = await streamFetch(`${baseUrl}/typing`, {
     orgId,
     chatKey,
     userId,
     typing
-  });
+  }, token);
   if (!result.success) {
     throw new Error(result.error || "Failed to send typing indicator");
   }
 }
 async function sendEvent(options) {
   const { baseUrl, orgId, chatKey, userId, type, data } = options;
+  const token = await resolveToken(options);
   const result = await streamFetch(`${baseUrl}/event`, {
     type,
     orgId,
     chatKey,
     userId,
     data
-  });
+  }, token);
   if (!result.success) {
     throw new Error(result.error || "Failed to send event");
   }

package/dist/api/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../api/index.ts","../../api/stream-api.ts","../../api/memory.ts"],"sourcesContent":["/**\n * Chat API\n *\n * API functions for chat operations.\n *\n * ## Browser API (uses @elqnt/api-client)\n * ```typescript\n * import { getChatHistoryApi, getChatApi } from \"@elqnt/chat/api\";\n *\n * const history = await getChatHistoryApi({ baseUrl, orgId, limit: 10 });\n * const chat = await getChatApi(chatKey, { baseUrl, orgId });\n * ```\n *\n * ## Stream API (direct HTTP calls)\n * ```typescript\n * import { createChat, sendChatMessage, loadChat } from \"@elqnt/chat/api\";\n *\n * const chatKey = await createChat({ baseUrl, orgId, userId });\n * await sendChatMessage({ baseUrl, orgId, chatKey, userId, content: \"Hello!\" });\n * ```\n */\n\nimport { browserApiRequest } from \"@elqnt/api-client/browser\";\nimport type { ApiResponse, ApiClientOptions } from \"@elqnt/api-client\";\nimport type { ResponseMetadata } from \"@elqnt/types\";\nimport type { ChatSummary, Chat } from \"../models\";\n\n// Re-export types from models\nexport type { ChatSummary, Chat } from \"../models\";\n\n// Re-export stream API functions\nexport {\n  createChat,\n  sendChatMessage,\n  loadChat,\n  endChat,\n  sendTypingIndicator,\n  sendEvent,\n} from \"./stream-api\";\n\nexport type {\n  StreamApiOptions,\n  StreamApiResponse,\n  CreateChatApiOptions,\n  CreateChatResponseData,\n  SendMessageApiOptions,\n  LoadChatApiOptions,\n  LoadChatResponseData,\n  EndChatApiOptions,\n  TypingApiOptions,\n  SendEventApiOptions,\n} from \"./stream-api\";\n\n// =============================================================================\n// TYPES\n// =============================================================================\n\nexport interface ChatHistoryResponse {\n  chats: ChatSummary[];\n  total: number;\n  hasMore: boolean;\n  metadata: ResponseMetadata;\n}\n\nexport interface ChatResponse {\n  chat: ChatSummary;\n  metadata: ResponseMetadata;\n}\n\nexport interface UpdateChatResponse {\n  chatKey: string;\n  title: string;\n  pinned: boolean;\n  metadata: ResponseMetadata;\n}\n\nexport interface ActiveChatsResponse {\n  chats: ChatSummary[];\n  metadata: ResponseMetadata;\n}\n\nexport interface ActiveChatsCountResponse {\n  count: number;\n  metadata: ResponseMetadata;\n}\n\nexport interface WaitingChatsCountResponse {\n  count: number;\n  metadata: ResponseMetadata;\n}\n\nexport interface QueueResponse {\n  queues: Queue[];\n  metadata: ResponseMetadata;\n}\n\nexport interface Queue {\n  id: string;\n  name: string;\n  agentId: string;\n  waitingCount: number;\n  activeCount: number;\n}\n\nexport interface AgentSession {\n  agentId: string;\n  userId: string;\n  userEmail: string;\n  status: string;\n  connectedAt: string;\n  lastActivityAt: string;\n}\n\nexport interface OnlineSessionsResponse {\n  sessions: AgentSession[];\n  metadata: ResponseMetadata;\n}\n\nexport interface AgentSessionResponse {\n  session: AgentSession;\n  metadata: ResponseMetadata;\n}\n\n// =============================================================================\n// CHAT HISTORY\n// =============================================================================\n\nexport async function getChatHistoryApi(\n  options: ApiClientOptions & { limit?: number; offset?: number; skipCache?: boolean }\n): Promise<ApiResponse<ChatHistoryResponse>> {\n  return browserApiRequest(\"/api/v1/chats\", {\n    method: \"POST\",\n    body: {\n      limit: options.limit || 15,\n      offset: options.offset || 0,\n      ...(options.skipCache ? { skipCache: true } : {}),\n    },\n    ...options,\n  });\n}\n\nexport async function getChatApi(\n  chatKey: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<ChatResponse>> {\n  return browserApiRequest(`/api/v1/chats/${chatKey}`, {\n    method: \"GET\",\n    ...options,\n  });\n}\n\nexport async function updateChatApi(\n  chatKey: string,\n  updates: { title?: string; pinned?: boolean },\n  options: ApiClientOptions\n): Promise<ApiResponse<UpdateChatResponse>> {\n  return browserApiRequest(`/api/v1/chats/${chatKey}`, {\n    method: \"PATCH\",\n    body: updates,\n    ...options,\n  });\n}\n\nexport async function deleteChatApi(\n  chatKey: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<{ success: boolean; metadata: ResponseMetadata }>> {\n  return browserApiRequest(`/api/v1/chats/${chatKey}`, {\n    method: \"DELETE\",\n    ...options,\n  });\n}\n\n// =============================================================================\n// ACTIVE CHATS\n// =============================================================================\n\nexport async function getActiveChatsCountApi(\n  options: ApiClientOptions\n): Promise<ApiResponse<ActiveChatsCountResponse>> {\n  return browserApiRequest(\"/api/v1/chats/active/count\", {\n    method: \"GET\",\n    ...options,\n  });\n}\n\nexport async function getActiveChatsApi(\n  options: ApiClientOptions & { pastHours?: number }\n): Promise<ApiResponse<ActiveChatsResponse>> {\n  const params = new URLSearchParams();\n  if (options.pastHours) params.set(\"pastHours\", String(options.pastHours));\n  const queryString = params.toString();\n  return browserApiRequest(`/api/v1/chats/active${queryString ? `?${queryString}` : \"\"}`, {\n    method: \"GET\",\n    ...options,\n  });\n}\n\n// =============================================================================\n// PROJECT CHATS\n// =============================================================================\n\nexport async function updateProjectChatTitleApi(\n  projectId: string,\n  chatKey: string,\n  title: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<{ success: boolean; metadata: ResponseMetadata }>> {\n  return browserApiRequest(`/api/v1/projects/${projectId}/chats/${chatKey}/title`, {\n    method: \"PUT\",\n    body: { title },\n    ...options,\n  });\n}\n\nexport async function addChatToProjectApi(\n  projectId: string,\n  chatKey: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<{ success: boolean; metadata: ResponseMetadata }>> {\n  return browserApiRequest(`/api/v1/projects/${projectId}/chats`, {\n    method: \"POST\",\n    body: { chatKey },\n    ...options,\n  });\n}\n\n// =============================================================================\n// WAITING CHATS\n// =============================================================================\n\nexport async function getWaitingChatsCountApi(\n  options: ApiClientOptions\n): Promise<ApiResponse<WaitingChatsCountResponse>> {\n  return browserApiRequest(\"/api/v1/chats/waiting/count\", {\n    method: \"GET\",\n    ...options,\n  });\n}\n\nexport async function getChatsByUserApi(\n  userEmail: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<ChatHistoryResponse>> {\n  return browserApiRequest(`/api/v1/chats/user/${encodeURIComponent(userEmail)}`, {\n    method: \"GET\",\n    ...options,\n  });\n}\n\n// =============================================================================\n// QUEUES\n// =============================================================================\n\nexport async function listQueuesApi(\n  options: ApiClientOptions\n): Promise<ApiResponse<QueueResponse>> {\n  return browserApiRequest(\"/api/v1/queues\", {\n    method: \"GET\",\n    ...options,\n  });\n}\n\n// =============================================================================\n// AGENT SESSIONS\n// =============================================================================\n\nexport async function getOnlineSessionsApi(\n  options: ApiClientOptions\n): Promise<ApiResponse<OnlineSessionsResponse>> {\n  return browserApiRequest(\"/api/v1/agents/sessions/online\", {\n    method: \"GET\",\n    ...options,\n  });\n}\n\nexport async function getAgentSessionApi(\n  agentId: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<AgentSessionResponse>> {\n  return browserApiRequest(`/api/v1/agents/sessions/${agentId}`, {\n    method: \"GET\",\n    ...options,\n  });\n}\n\n// =============================================================================\n// MEMORY\n// =============================================================================\n\nexport {\n  getProfileApi,\n  patchProfileApi,\n  replaceProfileApi,\n  clearProfileApi,\n  deleteContactApi,\n  deleteNoteApi,\n  getSummaryApi,\n  clearSummaryApi,\n  regenerateSummaryApi,\n} from \"./memory\";\n\nexport type { SummaryView } from \"./memory\";\n","/**\n * Stream API\n *\n * Low-level functions for chat streaming operations.\n * These are used internally by the transport layer but can also\n * be used directly for custom implementations.\n *\n * @example\n * ```typescript\n * import { createChat, sendChatMessage, loadChat } from \"@elqnt/chat/api\";\n *\n * // Create a new chat\n * const chatKey = await createChat({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   userId: \"user-456\",\n * });\n *\n * // Send a message\n * await sendChatMessage({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey,\n *   userId: \"user-456\",\n *   content: \"Hello!\",\n * });\n * ```\n */\n\nimport type { Chat, ChatMessage } from \"../models\";\n\n/**\n * Base options for all stream API calls\n */\nexport interface StreamApiOptions {\n  /** Base URL for the chat server */\n  baseUrl: string;\n  /** Organization ID */\n  orgId: string;\n  /** User ID */\n  userId: string;\n}\n\n/**\n * Response from stream API calls\n */\nexport interface StreamApiResponse<T = unknown> {\n  success: boolean;\n  data?: T;\n  error?: string;\n}\n\n/**\n * Create chat options\n */\nexport interface CreateChatApiOptions extends StreamApiOptions {\n  /** Optional metadata for the new chat */\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Create chat response data\n */\nexport interface CreateChatResponseData {\n  chatKey: string;\n}\n\n/**\n * Send message options\n */\nexport interface SendMessageApiOptions extends StreamApiOptions {\n  /** Chat key */\n  chatKey: string;\n  /** Message content */\n  content: string;\n  /** Optional attachments */\n  attachments?: unknown[];\n  /** Optional message metadata */\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Load chat options\n */\nexport interface LoadChatApiOptions extends StreamApiOptions {\n  /** Chat key to load */\n  chatKey: string;\n}\n\n/**\n * Load chat response data\n */\nexport interface LoadChatResponseData {\n  chat: Chat;\n}\n\n/**\n * End chat options\n */\nexport interface EndChatApiOptions extends StreamApiOptions {\n  /** Chat key to end */\n  chatKey: string;\n  /** Optional end reason */\n  reason?: string;\n}\n\n/**\n * Typing indicator options\n */\nexport interface TypingApiOptions extends StreamApiOptions {\n  /** Chat key */\n  chatKey: string;\n  /** Whether user is typing */\n  typing: boolean;\n}\n\n/**\n * Generic event options\n */\nexport interface SendEventApiOptions extends StreamApiOptions {\n  /** Chat key */\n  chatKey: string;\n  /** Event type */\n  type: string;\n  /** Event data */\n  data?: Record<string, unknown>;\n}\n\n/**\n * Internal fetch helper\n */\nasync function streamFetch<T>(\n  url: string,\n  body: Record<string, unknown>\n): Promise<StreamApiResponse<T>> {\n  const response = await fetch(url, {\n    method: \"POST\",\n    headers: { \"Content-Type\": \"application/json\" },\n    body: JSON.stringify(body),\n  });\n\n  if (!response.ok) {\n    const errorText = await response.text();\n    return {\n      success: false,\n      error: `API error: ${response.status} - ${errorText}`,\n    };\n  }\n\n  const data = await response.json();\n  return { success: true, data };\n}\n\n/**\n * Create a new chat session\n *\n * @param options - Create chat options\n * @returns Chat key of the created chat\n *\n * @example\n * ```typescript\n * const chatKey = await createChat({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   userId: \"user-456\",\n *   metadata: { source: \"website\" },\n * });\n * ```\n */\nexport async function createChat(\n  options: CreateChatApiOptions\n): Promise<string> {\n  const { baseUrl, orgId, userId, metadata } = options;\n\n  const result = await streamFetch<CreateChatResponseData>(\n    `${baseUrl}/create`,\n    { orgId, userId, metadata }\n  );\n\n  if (!result.success || !result.data?.chatKey) {\n    throw new Error(result.error || \"Failed to create chat\");\n  }\n\n  return result.data.chatKey;\n}\n\n/**\n * Send a message in a chat\n *\n * @param options - Send message options\n *\n * @example\n * ```typescript\n * await sendChatMessage({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n *   content: \"Hello!\",\n * });\n * ```\n */\nexport async function sendChatMessage(\n  options: SendMessageApiOptions\n): Promise<void> {\n  const { baseUrl, orgId, chatKey, userId, content, attachments, metadata } =\n    options;\n\n  const message: Partial<ChatMessage> = {\n    id: `msg_${Date.now()}_${Math.random().toString(36).slice(2)}`,\n    role: \"user\",\n    content,\n    time: Date.now(),\n    status: \"sending\",\n    senderId: userId,\n    createdAt: Date.now(),\n    attachments: attachments as ChatMessage[\"attachments\"],\n  };\n\n  const result = await streamFetch(`${baseUrl}/send`, {\n    orgId,\n    chatKey,\n    userId,\n    message,\n    metadata,\n  });\n\n  if (!result.success) {\n    throw new Error(result.error || \"Failed to send message\");\n  }\n}\n\n/**\n * Load an existing chat\n *\n * @param options - Load chat options\n * @returns The loaded chat object\n *\n * @example\n * ```typescript\n * const chat = await loadChat({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n * });\n * ```\n */\nexport async function loadChat(options: LoadChatApiOptions): Promise<Chat> {\n  const { baseUrl, orgId, chatKey, userId } = options;\n\n  const result = await streamFetch<LoadChatResponseData>(`${baseUrl}/load`, {\n    orgId,\n    chatKey,\n    userId,\n  });\n\n  if (!result.success || !result.data?.chat) {\n    throw new Error(result.error || \"Failed to load chat\");\n  }\n\n  return result.data.chat;\n}\n\n/**\n * End a chat session\n *\n * @param options - End chat options\n *\n * @example\n * ```typescript\n * await endChat({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n *   reason: \"User closed chat\",\n * });\n * ```\n */\nexport async function endChat(options: EndChatApiOptions): Promise<void> {\n  const { baseUrl, orgId, chatKey, userId, reason } = options;\n\n  const result = await streamFetch(`${baseUrl}/end`, {\n    orgId,\n    chatKey,\n    userId,\n    data: reason ? { reason } : undefined,\n  });\n\n  if (!result.success) {\n    throw new Error(result.error || \"Failed to end chat\");\n  }\n}\n\n/**\n * Send typing indicator\n *\n * @param options - Typing indicator options\n *\n * @example\n * ```typescript\n * // User started typing\n * await sendTypingIndicator({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n *   typing: true,\n * });\n *\n * // User stopped typing\n * await sendTypingIndicator({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n *   typing: false,\n * });\n * ```\n */\nexport async function sendTypingIndicator(\n  options: TypingApiOptions\n): Promise<void> {\n  const { baseUrl, orgId, chatKey, userId, typing } = options;\n\n  const result = await streamFetch(`${baseUrl}/typing`, {\n    orgId,\n    chatKey,\n    userId,\n    typing,\n  });\n\n  if (!result.success) {\n    throw new Error(result.error || \"Failed to send typing indicator\");\n  }\n}\n\n/**\n * Send a generic event\n *\n * @param options - Event options\n *\n * @example\n * ```typescript\n * await sendEvent({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n *   type: \"skill_activate\",\n *   data: { skillId: \"research\" },\n * });\n * ```\n */\nexport async function sendEvent(options: SendEventApiOptions): Promise<void> {\n  const { baseUrl, orgId, chatKey, userId, type, data } = options;\n\n  const result = await streamFetch(`${baseUrl}/event`, {\n    type,\n    orgId,\n    chatKey,\n    userId,\n    data,\n  });\n\n  if (!result.success) {\n    throw new Error(result.error || \"Failed to send event\");\n  }\n}\n","import { browserApiRequest } from \"@elqnt/api-client/browser\";\nimport type { ApiClientOptions, ApiResponse } from \"@elqnt/api-client\";\nimport type { MemoryProfile } from \"../models\";\n\nexport interface SummaryView {\n  chatKey: string;\n  text: string;\n  updatedAt: string;\n}\n\nexport const getProfileApi = (o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(\"/api/v1/memory/profile\", { method: \"GET\", ...o });\n\nexport const patchProfileApi = (patch: Partial<MemoryProfile>, o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(\"/api/v1/memory/profile\", { method: \"PATCH\", body: patch, ...o });\n\nexport const replaceProfileApi = (p: MemoryProfile, o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(\"/api/v1/memory/profile\", { method: \"PUT\", body: p, ...o });\n\nexport const clearProfileApi = (o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(\"/api/v1/memory/profile\", { method: \"DELETE\", ...o });\n\nexport const deleteContactApi = (name: string, o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(`/api/v1/memory/profile/contacts/${encodeURIComponent(name)}`, { method: \"DELETE\", ...o });\n\nexport const deleteNoteApi = (index: number, o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(`/api/v1/memory/profile/notes/${index}`, { method: \"DELETE\", ...o });\n\nexport const getSummaryApi = (chatKey: string, o: ApiClientOptions): Promise<ApiResponse<SummaryView>> =>\n  browserApiRequest(`/api/v1/chats/${chatKey}/summary`, { method: \"GET\", ...o });\n\nexport const clearSummaryApi = (chatKey: string, o: ApiClientOptions): Promise<ApiResponse<void>> =>\n  browserApiRequest(`/api/v1/chats/${chatKey}/summary`, { method: \"DELETE\", ...o });\n\nexport const regenerateSummaryApi = (chatKey: string, o: ApiClientOptions): Promise<ApiResponse<SummaryView>> =>\n  browserApiRequest(`/api/v1/chats/${chatKey}/summary/regenerate`, { method: \"POST\", ...o });\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsBA,IAAAA,kBAAkC;;;AC6GlC,eAAe,YACb,KACA,MAC+B;AAC/B,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,YAAY,MAAM,SAAS,KAAK;AACtC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,cAAc,SAAS,MAAM,MAAM,SAAS;AAAA,IACrD;AAAA,EACF;AAEA,QAAM,OAAO,MAAM,SAAS,KAAK;AACjC,SAAO,EAAE,SAAS,MAAM,KAAK;AAC/B;AAkBA,eAAsB,WACpB,SACiB;AACjB,QAAM,EAAE,SAAS,OAAO,QAAQ,SAAS,IAAI;AAE7C,QAAM,SAAS,MAAM;AAAA,IACnB,GAAG,OAAO;AAAA,IACV,EAAE,OAAO,QAAQ,SAAS;AAAA,EAC5B;AAEA,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,SAAS;AAC5C,UAAM,IAAI,MAAM,OAAO,SAAS,uBAAuB;AAAA,EACzD;AAEA,SAAO,OAAO,KAAK;AACrB;AAkBA,eAAsB,gBACpB,SACe;AACf,QAAM,EAAE,SAAS,OAAO,SAAS,QAAQ,SAAS,aAAa,SAAS,IACtE;AAEF,QAAM,UAAgC;AAAA,IACpC,IAAI,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAAA,IAC5D,MAAM;AAAA,IACN;AAAA,IACA,MAAM,KAAK,IAAI;AAAA,IACf,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,WAAW,KAAK,IAAI;AAAA,IACpB;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,YAAY,GAAG,OAAO,SAAS;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,OAAO,SAAS,wBAAwB;AAAA,EAC1D;AACF;AAkBA,eAAsB,SAAS,SAA4C;AACzE,QAAM,EAAE,SAAS,OAAO,SAAS,OAAO,IAAI;AAE5C,QAAM,SAAS,MAAM,YAAkC,GAAG,OAAO,SAAS;AAAA,IACxE;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,MAAM;AACzC,UAAM,IAAI,MAAM,OAAO,SAAS,qBAAqB;AAAA,EACvD;AAEA,SAAO,OAAO,KAAK;AACrB;AAkBA,eAAsB,QAAQ,SAA2C;AACvE,QAAM,EAAE,SAAS,OAAO,SAAS,QAAQ,OAAO,IAAI;AAEpD,QAAM,SAAS,MAAM,YAAY,GAAG,OAAO,QAAQ;AAAA,IACjD;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,SAAS,EAAE,OAAO,IAAI;AAAA,EAC9B,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,OAAO,SAAS,oBAAoB;AAAA,EACtD;AACF;AA4BA,eAAsB,oBACpB,SACe;AACf,QAAM,EAAE,SAAS,OAAO,SAAS,QAAQ,OAAO,IAAI;AAEpD,QAAM,SAAS,MAAM,YAAY,GAAG,OAAO,WAAW;AAAA,IACpD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,OAAO,SAAS,iCAAiC;AAAA,EACnE;AACF;AAmBA,eAAsB,UAAU,SAA6C;AAC3E,QAAM,EAAE,SAAS,OAAO,SAAS,QAAQ,MAAM,KAAK,IAAI;AAExD,QAAM,SAAS,MAAM,YAAY,GAAG,OAAO,UAAU;AAAA,IACnD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,OAAO,SAAS,sBAAsB;AAAA,EACxD;AACF;;;ACjXA,qBAAkC;AAU3B,IAAM,gBAAgB,CAAC,UAC5B,kCAAkB,0BAA0B,EAAE,QAAQ,OAAO,GAAG,EAAE,CAAC;AAE9D,IAAM,kBAAkB,CAAC,OAA+B,UAC7D,kCAAkB,0BAA0B,EAAE,QAAQ,SAAS,MAAM,OAAO,GAAG,EAAE,CAAC;AAE7E,IAAM,oBAAoB,CAAC,GAAkB,UAClD,kCAAkB,0BAA0B,EAAE,QAAQ,OAAO,MAAM,GAAG,GAAG,EAAE,CAAC;AAEvE,IAAM,kBAAkB,CAAC,UAC9B,kCAAkB,0BAA0B,EAAE,QAAQ,UAAU,GAAG,EAAE,CAAC;AAEjE,IAAM,mBAAmB,CAAC,MAAc,UAC7C,kCAAkB,mCAAmC,mBAAmB,IAAI,CAAC,IAAI,EAAE,QAAQ,UAAU,GAAG,EAAE,CAAC;AAEtG,IAAM,gBAAgB,CAAC,OAAe,UAC3C,kCAAkB,gCAAgC,KAAK,IAAI,EAAE,QAAQ,UAAU,GAAG,EAAE,CAAC;AAEhF,IAAM,gBAAgB,CAAC,SAAiB,UAC7C,kCAAkB,iBAAiB,OAAO,YAAY,EAAE,QAAQ,OAAO,GAAG,EAAE,CAAC;AAExE,IAAM,kBAAkB,CAAC,SAAiB,UAC/C,kCAAkB,iBAAiB,OAAO,YAAY,EAAE,QAAQ,UAAU,GAAG,EAAE,CAAC;AAE3E,IAAM,uBAAuB,CAAC,SAAiB,UACpD,kCAAkB,iBAAiB,OAAO,uBAAuB,EAAE,QAAQ,QAAQ,GAAG,EAAE,CAAC;;;AF4F3F,eAAsB,kBACpB,SAC2C;AAC3C,aAAO,mCAAkB,iBAAiB;AAAA,IACxC,QAAQ;AAAA,IACR,MAAM;AAAA,MACJ,OAAO,QAAQ,SAAS;AAAA,MACxB,QAAQ,QAAQ,UAAU;AAAA,MAC1B,GAAI,QAAQ,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,IACjD;AAAA,IACA,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,WACpB,SACA,SACoC;AACpC,aAAO,mCAAkB,iBAAiB,OAAO,IAAI;AAAA,IACnD,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,cACpB,SACA,SACA,SAC0C;AAC1C,aAAO,mCAAkB,iBAAiB,OAAO,IAAI;AAAA,IACnD,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,cACpB,SACA,SACwE;AACxE,aAAO,mCAAkB,iBAAiB,OAAO,IAAI;AAAA,IACnD,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAMA,eAAsB,uBACpB,SACgD;AAChD,aAAO,mCAAkB,8BAA8B;AAAA,IACrD,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,kBACpB,SAC2C;AAC3C,QAAM,SAAS,IAAI,gBAAgB;AACnC,MAAI,QAAQ,UAAW,QAAO,IAAI,aAAa,OAAO,QAAQ,SAAS,CAAC;AACxE,QAAM,cAAc,OAAO,SAAS;AACpC,aAAO,mCAAkB,uBAAuB,cAAc,IAAI,WAAW,KAAK,EAAE,IAAI;AAAA,IACtF,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAMA,eAAsB,0BACpB,WACA,SACA,OACA,SACwE;AACxE,aAAO,mCAAkB,oBAAoB,SAAS,UAAU,OAAO,UAAU;AAAA,IAC/E,QAAQ;AAAA,IACR,MAAM,EAAE,MAAM;AAAA,IACd,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,oBACpB,WACA,SACA,SACwE;AACxE,aAAO,mCAAkB,oBAAoB,SAAS,UAAU;AAAA,IAC9D,QAAQ;AAAA,IACR,MAAM,EAAE,QAAQ;AAAA,IAChB,GAAG;AAAA,EACL,CAAC;AACH;AAMA,eAAsB,wBACpB,SACiD;AACjD,aAAO,mCAAkB,+BAA+B;AAAA,IACtD,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,kBACpB,WACA,SAC2C;AAC3C,aAAO,mCAAkB,sBAAsB,mBAAmB,SAAS,CAAC,IAAI;AAAA,IAC9E,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAMA,eAAsB,cACpB,SACqC;AACrC,aAAO,mCAAkB,kBAAkB;AAAA,IACzC,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAMA,eAAsB,qBACpB,SAC8C;AAC9C,aAAO,mCAAkB,kCAAkC;AAAA,IACzD,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,mBACpB,SACA,SAC4C;AAC5C,aAAO,mCAAkB,2BAA2B,OAAO,IAAI;AAAA,IAC7D,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;","names":["import_browser"]}
+{"version":3,"sources":["../../api/index.ts","../../api/stream-api.ts","../../api/memory.ts"],"sourcesContent":["/**\n * Chat API\n *\n * API functions for chat operations.\n *\n * ## Browser API (uses @elqnt/api-client)\n * ```typescript\n * import { getChatHistoryApi, getChatApi } from \"@elqnt/chat/api\";\n *\n * const history = await getChatHistoryApi({ baseUrl, orgId, limit: 10 });\n * const chat = await getChatApi(chatKey, { baseUrl, orgId });\n * ```\n *\n * ## Stream API (direct HTTP calls)\n * ```typescript\n * import { createChat, sendChatMessage, loadChat } from \"@elqnt/chat/api\";\n *\n * const chatKey = await createChat({ baseUrl, orgId, userId });\n * await sendChatMessage({ baseUrl, orgId, chatKey, userId, content: \"Hello!\" });\n * ```\n */\n\nimport { browserApiRequest } from \"@elqnt/api-client/browser\";\nimport type { ApiResponse, ApiClientOptions } from \"@elqnt/api-client\";\nimport type { ResponseMetadata } from \"@elqnt/types\";\nimport type { ChatSummary, Chat } from \"../models\";\n\n// Re-export types from models\nexport type { ChatSummary, Chat } from \"../models\";\n\n// Re-export stream API functions\nexport {\n  createChat,\n  sendChatMessage,\n  loadChat,\n  endChat,\n  sendTypingIndicator,\n  sendEvent,\n} from \"./stream-api\";\n\nexport type {\n  StreamApiOptions,\n  StreamApiResponse,\n  CreateChatApiOptions,\n  CreateChatResponseData,\n  SendMessageApiOptions,\n  LoadChatApiOptions,\n  LoadChatResponseData,\n  EndChatApiOptions,\n  TypingApiOptions,\n  SendEventApiOptions,\n} from \"./stream-api\";\n\n// =============================================================================\n// TYPES\n// =============================================================================\n\nexport interface ChatHistoryResponse {\n  chats: ChatSummary[];\n  total: number;\n  hasMore: boolean;\n  metadata: ResponseMetadata;\n}\n\nexport interface ChatResponse {\n  chat: ChatSummary;\n  metadata: ResponseMetadata;\n}\n\nexport interface UpdateChatResponse {\n  chatKey: string;\n  title: string;\n  pinned: boolean;\n  metadata: ResponseMetadata;\n}\n\nexport interface ActiveChatsResponse {\n  chats: ChatSummary[];\n  metadata: ResponseMetadata;\n}\n\nexport interface ActiveChatsCountResponse {\n  count: number;\n  metadata: ResponseMetadata;\n}\n\nexport interface WaitingChatsCountResponse {\n  count: number;\n  metadata: ResponseMetadata;\n}\n\nexport interface QueueResponse {\n  queues: Queue[];\n  metadata: ResponseMetadata;\n}\n\nexport interface Queue {\n  id: string;\n  name: string;\n  agentId: string;\n  waitingCount: number;\n  activeCount: number;\n}\n\nexport interface AgentSession {\n  agentId: string;\n  userId: string;\n  userEmail: string;\n  status: string;\n  connectedAt: string;\n  lastActivityAt: string;\n}\n\nexport interface OnlineSessionsResponse {\n  sessions: AgentSession[];\n  metadata: ResponseMetadata;\n}\n\nexport interface AgentSessionResponse {\n  session: AgentSession;\n  metadata: ResponseMetadata;\n}\n\n// =============================================================================\n// CHAT HISTORY\n// =============================================================================\n\nexport async function getChatHistoryApi(\n  options: ApiClientOptions & { limit?: number; offset?: number; skipCache?: boolean }\n): Promise<ApiResponse<ChatHistoryResponse>> {\n  return browserApiRequest(\"/api/v1/chats\", {\n    method: \"POST\",\n    body: {\n      limit: options.limit || 15,\n      offset: options.offset || 0,\n      ...(options.skipCache ? { skipCache: true } : {}),\n    },\n    ...options,\n  });\n}\n\nexport async function getChatApi(\n  chatKey: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<ChatResponse>> {\n  return browserApiRequest(`/api/v1/chats/${chatKey}`, {\n    method: \"GET\",\n    ...options,\n  });\n}\n\nexport async function updateChatApi(\n  chatKey: string,\n  updates: { title?: string; pinned?: boolean },\n  options: ApiClientOptions\n): Promise<ApiResponse<UpdateChatResponse>> {\n  return browserApiRequest(`/api/v1/chats/${chatKey}`, {\n    method: \"PATCH\",\n    body: updates,\n    ...options,\n  });\n}\n\nexport async function deleteChatApi(\n  chatKey: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<{ success: boolean; metadata: ResponseMetadata }>> {\n  return browserApiRequest(`/api/v1/chats/${chatKey}`, {\n    method: \"DELETE\",\n    ...options,\n  });\n}\n\n// =============================================================================\n// ACTIVE CHATS\n// =============================================================================\n\nexport async function getActiveChatsCountApi(\n  options: ApiClientOptions\n): Promise<ApiResponse<ActiveChatsCountResponse>> {\n  return browserApiRequest(\"/api/v1/chats/active/count\", {\n    method: \"GET\",\n    ...options,\n  });\n}\n\nexport async function getActiveChatsApi(\n  options: ApiClientOptions & { pastHours?: number }\n): Promise<ApiResponse<ActiveChatsResponse>> {\n  const params = new URLSearchParams();\n  if (options.pastHours) params.set(\"pastHours\", String(options.pastHours));\n  const queryString = params.toString();\n  return browserApiRequest(`/api/v1/chats/active${queryString ? `?${queryString}` : \"\"}`, {\n    method: \"GET\",\n    ...options,\n  });\n}\n\n// =============================================================================\n// PROJECT CHATS\n// =============================================================================\n\nexport async function updateProjectChatTitleApi(\n  projectId: string,\n  chatKey: string,\n  title: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<{ success: boolean; metadata: ResponseMetadata }>> {\n  return browserApiRequest(`/api/v1/projects/${projectId}/chats/${chatKey}/title`, {\n    method: \"PUT\",\n    body: { title },\n    ...options,\n  });\n}\n\nexport async function addChatToProjectApi(\n  projectId: string,\n  chatKey: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<{ success: boolean; metadata: ResponseMetadata }>> {\n  return browserApiRequest(`/api/v1/projects/${projectId}/chats`, {\n    method: \"POST\",\n    body: { chatKey },\n    ...options,\n  });\n}\n\n// =============================================================================\n// WAITING CHATS\n// =============================================================================\n\nexport async function getWaitingChatsCountApi(\n  options: ApiClientOptions\n): Promise<ApiResponse<WaitingChatsCountResponse>> {\n  return browserApiRequest(\"/api/v1/chats/waiting/count\", {\n    method: \"GET\",\n    ...options,\n  });\n}\n\nexport async function getChatsByUserApi(\n  userEmail: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<ChatHistoryResponse>> {\n  return browserApiRequest(`/api/v1/chats/user/${encodeURIComponent(userEmail)}`, {\n    method: \"GET\",\n    ...options,\n  });\n}\n\n// =============================================================================\n// QUEUES\n// =============================================================================\n\nexport async function listQueuesApi(\n  options: ApiClientOptions\n): Promise<ApiResponse<QueueResponse>> {\n  return browserApiRequest(\"/api/v1/queues\", {\n    method: \"GET\",\n    ...options,\n  });\n}\n\n// =============================================================================\n// AGENT SESSIONS\n// =============================================================================\n\nexport async function getOnlineSessionsApi(\n  options: ApiClientOptions\n): Promise<ApiResponse<OnlineSessionsResponse>> {\n  return browserApiRequest(\"/api/v1/agents/sessions/online\", {\n    method: \"GET\",\n    ...options,\n  });\n}\n\nexport async function getAgentSessionApi(\n  agentId: string,\n  options: ApiClientOptions\n): Promise<ApiResponse<AgentSessionResponse>> {\n  return browserApiRequest(`/api/v1/agents/sessions/${agentId}`, {\n    method: \"GET\",\n    ...options,\n  });\n}\n\n// =============================================================================\n// MEMORY\n// =============================================================================\n\nexport {\n  getProfileApi,\n  patchProfileApi,\n  replaceProfileApi,\n  clearProfileApi,\n  deleteContactApi,\n  deleteNoteApi,\n  getSummaryApi,\n  clearSummaryApi,\n  regenerateSummaryApi,\n} from \"./memory\";\n\nexport type { SummaryView } from \"./memory\";\n","/**\n * Stream API\n *\n * Low-level functions for chat streaming operations.\n * These are used internally by the transport layer but can also\n * be used directly for custom implementations.\n *\n * @example\n * ```typescript\n * import { createChat, sendChatMessage, loadChat } from \"@elqnt/chat/api\";\n *\n * // Create a new chat\n * const chatKey = await createChat({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   userId: \"user-456\",\n * });\n *\n * // Send a message\n * await sendChatMessage({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey,\n *   userId: \"user-456\",\n *   content: \"Hello!\",\n * });\n * ```\n */\n\nimport type { Chat, ChatMessage } from \"../models\";\n\n/**\n * Base options for all stream API calls\n */\nexport interface StreamApiOptions {\n  /** Base URL for the chat server */\n  baseUrl: string;\n  /** Organization ID */\n  orgId: string;\n  /** User ID */\n  userId: string;\n  /**\n   * Tier-2 signed token (REQUIRED in production). The chat service authorizes\n   * the request from this token and derives orgId/userId/product from its\n   * claims (the body orgId/userId are not trusted for authorization). Pass a\n   * static `token`, or a `getToken` provider that is awaited per call so\n   * short-lived tokens refresh. See SKILL.md and @elqnt/api-client/server's\n   * generateServerToken for the claim shape.\n   */\n  token?: string;\n  /** Token provider, awaited per call. Takes precedence over `token`. */\n  getToken?: () => Promise<string | null | undefined> | string | null | undefined;\n}\n\n/** Resolve a per-call token from a static value or provider (never throws). */\nasync function resolveToken(opts: {\n  token?: string;\n  getToken?: StreamApiOptions[\"getToken\"];\n}): Promise<string | undefined> {\n  if (opts.getToken) {\n    try {\n      return (await opts.getToken()) ?? undefined;\n    } catch {\n      return undefined;\n    }\n  }\n  return opts.token ?? undefined;\n}\n\n/**\n * Response from stream API calls\n */\nexport interface StreamApiResponse<T = unknown> {\n  success: boolean;\n  data?: T;\n  error?: string;\n}\n\n/**\n * Create chat options\n */\nexport interface CreateChatApiOptions extends StreamApiOptions {\n  /** Optional metadata for the new chat */\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Create chat response data\n */\nexport interface CreateChatResponseData {\n  chatKey: string;\n}\n\n/**\n * Send message options\n */\nexport interface SendMessageApiOptions extends StreamApiOptions {\n  /** Chat key */\n  chatKey: string;\n  /** Message content */\n  content: string;\n  /** Optional attachments */\n  attachments?: unknown[];\n  /** Optional message metadata */\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Load chat options\n */\nexport interface LoadChatApiOptions extends StreamApiOptions {\n  /** Chat key to load */\n  chatKey: string;\n}\n\n/**\n * Load chat response data\n */\nexport interface LoadChatResponseData {\n  chat: Chat;\n}\n\n/**\n * End chat options\n */\nexport interface EndChatApiOptions extends StreamApiOptions {\n  /** Chat key to end */\n  chatKey: string;\n  /** Optional end reason */\n  reason?: string;\n}\n\n/**\n * Typing indicator options\n */\nexport interface TypingApiOptions extends StreamApiOptions {\n  /** Chat key */\n  chatKey: string;\n  /** Whether user is typing */\n  typing: boolean;\n}\n\n/**\n * Generic event options\n */\nexport interface SendEventApiOptions extends StreamApiOptions {\n  /** Chat key */\n  chatKey: string;\n  /** Event type */\n  type: string;\n  /** Event data */\n  data?: Record<string, unknown>;\n}\n\n/**\n * Internal fetch helper\n */\nasync function streamFetch<T>(\n  url: string,\n  body: Record<string, unknown>,\n  token?: string\n): Promise<StreamApiResponse<T>> {\n  const headers: Record<string, string> = { \"Content-Type\": \"application/json\" };\n  if (token) headers[\"Authorization\"] = `Bearer ${token}`;\n\n  const response = await fetch(url, {\n    method: \"POST\",\n    headers,\n    body: JSON.stringify(body),\n  });\n\n  if (!response.ok) {\n    const errorText = await response.text();\n    return {\n      success: false,\n      error: `API error: ${response.status} - ${errorText}`,\n    };\n  }\n\n  const data = await response.json();\n  return { success: true, data };\n}\n\n/**\n * Create a new chat session\n *\n * @param options - Create chat options\n * @returns Chat key of the created chat\n *\n * @example\n * ```typescript\n * const chatKey = await createChat({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   userId: \"user-456\",\n *   metadata: { source: \"website\" },\n * });\n * ```\n */\nexport async function createChat(\n  options: CreateChatApiOptions\n): Promise<string> {\n  const { baseUrl, orgId, userId, metadata } = options;\n  const token = await resolveToken(options);\n\n  const result = await streamFetch<CreateChatResponseData>(\n    `${baseUrl}/create`,\n    { orgId, userId, metadata },\n    token\n  );\n\n  if (!result.success || !result.data?.chatKey) {\n    throw new Error(result.error || \"Failed to create chat\");\n  }\n\n  return result.data.chatKey;\n}\n\n/**\n * Send a message in a chat\n *\n * @param options - Send message options\n *\n * @example\n * ```typescript\n * await sendChatMessage({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n *   content: \"Hello!\",\n * });\n * ```\n */\nexport async function sendChatMessage(\n  options: SendMessageApiOptions\n): Promise<void> {\n  const { baseUrl, orgId, chatKey, userId, content, attachments, metadata } =\n    options;\n  const token = await resolveToken(options);\n\n  const message: Partial<ChatMessage> = {\n    id: `msg_${Date.now()}_${Math.random().toString(36).slice(2)}`,\n    role: \"user\",\n    content,\n    time: Date.now(),\n    status: \"sending\",\n    senderId: userId,\n    createdAt: Date.now(),\n    attachments: attachments as ChatMessage[\"attachments\"],\n  };\n\n  const result = await streamFetch(`${baseUrl}/send`, {\n    orgId,\n    chatKey,\n    userId,\n    message,\n    metadata,\n  }, token);\n\n  if (!result.success) {\n    throw new Error(result.error || \"Failed to send message\");\n  }\n}\n\n/**\n * Load an existing chat\n *\n * @param options - Load chat options\n * @returns The loaded chat object\n *\n * @example\n * ```typescript\n * const chat = await loadChat({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n * });\n * ```\n */\nexport async function loadChat(options: LoadChatApiOptions): Promise<Chat> {\n  const { baseUrl, orgId, chatKey, userId } = options;\n  const token = await resolveToken(options);\n\n  const result = await streamFetch<LoadChatResponseData>(`${baseUrl}/load`, {\n    orgId,\n    chatKey,\n    userId,\n  }, token);\n\n  if (!result.success || !result.data?.chat) {\n    throw new Error(result.error || \"Failed to load chat\");\n  }\n\n  return result.data.chat;\n}\n\n/**\n * End a chat session\n *\n * @param options - End chat options\n *\n * @example\n * ```typescript\n * await endChat({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n *   reason: \"User closed chat\",\n * });\n * ```\n */\nexport async function endChat(options: EndChatApiOptions): Promise<void> {\n  const { baseUrl, orgId, chatKey, userId, reason } = options;\n  const token = await resolveToken(options);\n\n  const result = await streamFetch(`${baseUrl}/end`, {\n    orgId,\n    chatKey,\n    userId,\n    data: reason ? { reason } : undefined,\n  }, token);\n\n  if (!result.success) {\n    throw new Error(result.error || \"Failed to end chat\");\n  }\n}\n\n/**\n * Send typing indicator\n *\n * @param options - Typing indicator options\n *\n * @example\n * ```typescript\n * // User started typing\n * await sendTypingIndicator({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n *   typing: true,\n * });\n *\n * // User stopped typing\n * await sendTypingIndicator({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n *   typing: false,\n * });\n * ```\n */\nexport async function sendTypingIndicator(\n  options: TypingApiOptions\n): Promise<void> {\n  const { baseUrl, orgId, chatKey, userId, typing } = options;\n  const token = await resolveToken(options);\n\n  const result = await streamFetch(`${baseUrl}/typing`, {\n    orgId,\n    chatKey,\n    userId,\n    typing,\n  }, token);\n\n  if (!result.success) {\n    throw new Error(result.error || \"Failed to send typing indicator\");\n  }\n}\n\n/**\n * Send a generic event\n *\n * @param options - Event options\n *\n * @example\n * ```typescript\n * await sendEvent({\n *   baseUrl: \"https://api.example.com/chat\",\n *   orgId: \"org-123\",\n *   chatKey: \"chat-789\",\n *   userId: \"user-456\",\n *   type: \"skill_activate\",\n *   data: { skillId: \"research\" },\n * });\n * ```\n */\nexport async function sendEvent(options: SendEventApiOptions): Promise<void> {\n  const { baseUrl, orgId, chatKey, userId, type, data } = options;\n  const token = await resolveToken(options);\n\n  const result = await streamFetch(`${baseUrl}/event`, {\n    type,\n    orgId,\n    chatKey,\n    userId,\n    data,\n  }, token);\n\n  if (!result.success) {\n    throw new Error(result.error || \"Failed to send event\");\n  }\n}\n","import { browserApiRequest } from \"@elqnt/api-client/browser\";\nimport type { ApiClientOptions, ApiResponse } from \"@elqnt/api-client\";\nimport type { MemoryProfile } from \"../models\";\n\nexport interface SummaryView {\n  chatKey: string;\n  text: string;\n  updatedAt: string;\n}\n\nexport const getProfileApi = (o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(\"/api/v1/memory/profile\", { method: \"GET\", ...o });\n\nexport const patchProfileApi = (patch: Partial<MemoryProfile>, o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(\"/api/v1/memory/profile\", { method: \"PATCH\", body: patch, ...o });\n\nexport const replaceProfileApi = (p: MemoryProfile, o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(\"/api/v1/memory/profile\", { method: \"PUT\", body: p, ...o });\n\nexport const clearProfileApi = (o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(\"/api/v1/memory/profile\", { method: \"DELETE\", ...o });\n\nexport const deleteContactApi = (name: string, o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(`/api/v1/memory/profile/contacts/${encodeURIComponent(name)}`, { method: \"DELETE\", ...o });\n\nexport const deleteNoteApi = (index: number, o: ApiClientOptions): Promise<ApiResponse<MemoryProfile>> =>\n  browserApiRequest(`/api/v1/memory/profile/notes/${index}`, { method: \"DELETE\", ...o });\n\nexport const getSummaryApi = (chatKey: string, o: ApiClientOptions): Promise<ApiResponse<SummaryView>> =>\n  browserApiRequest(`/api/v1/chats/${chatKey}/summary`, { method: \"GET\", ...o });\n\nexport const clearSummaryApi = (chatKey: string, o: ApiClientOptions): Promise<ApiResponse<void>> =>\n  browserApiRequest(`/api/v1/chats/${chatKey}/summary`, { method: \"DELETE\", ...o });\n\nexport const regenerateSummaryApi = (chatKey: string, o: ApiClientOptions): Promise<ApiResponse<SummaryView>> =>\n  browserApiRequest(`/api/v1/chats/${chatKey}/summary/regenerate`, { method: \"POST\", ...o });\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsBA,IAAAA,kBAAkC;;;ACiClC,eAAe,aAAa,MAGI;AAC9B,MAAI,KAAK,UAAU;AACjB,QAAI;AACF,aAAQ,MAAM,KAAK,SAAS,KAAM;AAAA,IACpC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,KAAK,SAAS;AACvB;AA0FA,eAAe,YACb,KACA,MACA,OAC+B;AAC/B,QAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,MAAI,MAAO,SAAQ,eAAe,IAAI,UAAU,KAAK;AAErD,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,YAAY,MAAM,SAAS,KAAK;AACtC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,cAAc,SAAS,MAAM,MAAM,SAAS;AAAA,IACrD;AAAA,EACF;AAEA,QAAM,OAAO,MAAM,SAAS,KAAK;AACjC,SAAO,EAAE,SAAS,MAAM,KAAK;AAC/B;AAkBA,eAAsB,WACpB,SACiB;AACjB,QAAM,EAAE,SAAS,OAAO,QAAQ,SAAS,IAAI;AAC7C,QAAM,QAAQ,MAAM,aAAa,OAAO;AAExC,QAAM,SAAS,MAAM;AAAA,IACnB,GAAG,OAAO;AAAA,IACV,EAAE,OAAO,QAAQ,SAAS;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,SAAS;AAC5C,UAAM,IAAI,MAAM,OAAO,SAAS,uBAAuB;AAAA,EACzD;AAEA,SAAO,OAAO,KAAK;AACrB;AAkBA,eAAsB,gBACpB,SACe;AACf,QAAM,EAAE,SAAS,OAAO,SAAS,QAAQ,SAAS,aAAa,SAAS,IACtE;AACF,QAAM,QAAQ,MAAM,aAAa,OAAO;AAExC,QAAM,UAAgC;AAAA,IACpC,IAAI,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAAA,IAC5D,MAAM;AAAA,IACN;AAAA,IACA,MAAM,KAAK,IAAI;AAAA,IACf,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,WAAW,KAAK,IAAI;AAAA,IACpB;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,YAAY,GAAG,OAAO,SAAS;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAG,KAAK;AAER,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,OAAO,SAAS,wBAAwB;AAAA,EAC1D;AACF;AAkBA,eAAsB,SAAS,SAA4C;AACzE,QAAM,EAAE,SAAS,OAAO,SAAS,OAAO,IAAI;AAC5C,QAAM,QAAQ,MAAM,aAAa,OAAO;AAExC,QAAM,SAAS,MAAM,YAAkC,GAAG,OAAO,SAAS;AAAA,IACxE;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAG,KAAK;AAER,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM,MAAM;AACzC,UAAM,IAAI,MAAM,OAAO,SAAS,qBAAqB;AAAA,EACvD;AAEA,SAAO,OAAO,KAAK;AACrB;AAkBA,eAAsB,QAAQ,SAA2C;AACvE,QAAM,EAAE,SAAS,OAAO,SAAS,QAAQ,OAAO,IAAI;AACpD,QAAM,QAAQ,MAAM,aAAa,OAAO;AAExC,QAAM,SAAS,MAAM,YAAY,GAAG,OAAO,QAAQ;AAAA,IACjD;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,SAAS,EAAE,OAAO,IAAI;AAAA,EAC9B,GAAG,KAAK;AAER,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,OAAO,SAAS,oBAAoB;AAAA,EACtD;AACF;AA4BA,eAAsB,oBACpB,SACe;AACf,QAAM,EAAE,SAAS,OAAO,SAAS,QAAQ,OAAO,IAAI;AACpD,QAAM,QAAQ,MAAM,aAAa,OAAO;AAExC,QAAM,SAAS,MAAM,YAAY,GAAG,OAAO,WAAW;AAAA,IACpD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAG,KAAK;AAER,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,OAAO,SAAS,iCAAiC;AAAA,EACnE;AACF;AAmBA,eAAsB,UAAU,SAA6C;AAC3E,QAAM,EAAE,SAAS,OAAO,SAAS,QAAQ,MAAM,KAAK,IAAI;AACxD,QAAM,QAAQ,MAAM,aAAa,OAAO;AAExC,QAAM,SAAS,MAAM,YAAY,GAAG,OAAO,UAAU;AAAA,IACnD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAAG,KAAK;AAER,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,OAAO,SAAS,sBAAsB;AAAA,EACxD;AACF;;;ACtZA,qBAAkC;AAU3B,IAAM,gBAAgB,CAAC,UAC5B,kCAAkB,0BAA0B,EAAE,QAAQ,OAAO,GAAG,EAAE,CAAC;AAE9D,IAAM,kBAAkB,CAAC,OAA+B,UAC7D,kCAAkB,0BAA0B,EAAE,QAAQ,SAAS,MAAM,OAAO,GAAG,EAAE,CAAC;AAE7E,IAAM,oBAAoB,CAAC,GAAkB,UAClD,kCAAkB,0BAA0B,EAAE,QAAQ,OAAO,MAAM,GAAG,GAAG,EAAE,CAAC;AAEvE,IAAM,kBAAkB,CAAC,UAC9B,kCAAkB,0BAA0B,EAAE,QAAQ,UAAU,GAAG,EAAE,CAAC;AAEjE,IAAM,mBAAmB,CAAC,MAAc,UAC7C,kCAAkB,mCAAmC,mBAAmB,IAAI,CAAC,IAAI,EAAE,QAAQ,UAAU,GAAG,EAAE,CAAC;AAEtG,IAAM,gBAAgB,CAAC,OAAe,UAC3C,kCAAkB,gCAAgC,KAAK,IAAI,EAAE,QAAQ,UAAU,GAAG,EAAE,CAAC;AAEhF,IAAM,gBAAgB,CAAC,SAAiB,UAC7C,kCAAkB,iBAAiB,OAAO,YAAY,EAAE,QAAQ,OAAO,GAAG,EAAE,CAAC;AAExE,IAAM,kBAAkB,CAAC,SAAiB,UAC/C,kCAAkB,iBAAiB,OAAO,YAAY,EAAE,QAAQ,UAAU,GAAG,EAAE,CAAC;AAE3E,IAAM,uBAAuB,CAAC,SAAiB,UACpD,kCAAkB,iBAAiB,OAAO,uBAAuB,EAAE,QAAQ,QAAQ,GAAG,EAAE,CAAC;;;AF4F3F,eAAsB,kBACpB,SAC2C;AAC3C,aAAO,mCAAkB,iBAAiB;AAAA,IACxC,QAAQ;AAAA,IACR,MAAM;AAAA,MACJ,OAAO,QAAQ,SAAS;AAAA,MACxB,QAAQ,QAAQ,UAAU;AAAA,MAC1B,GAAI,QAAQ,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,IACjD;AAAA,IACA,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,WACpB,SACA,SACoC;AACpC,aAAO,mCAAkB,iBAAiB,OAAO,IAAI;AAAA,IACnD,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,cACpB,SACA,SACA,SAC0C;AAC1C,aAAO,mCAAkB,iBAAiB,OAAO,IAAI;AAAA,IACnD,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,cACpB,SACA,SACwE;AACxE,aAAO,mCAAkB,iBAAiB,OAAO,IAAI;AAAA,IACnD,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAMA,eAAsB,uBACpB,SACgD;AAChD,aAAO,mCAAkB,8BAA8B;AAAA,IACrD,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,kBACpB,SAC2C;AAC3C,QAAM,SAAS,IAAI,gBAAgB;AACnC,MAAI,QAAQ,UAAW,QAAO,IAAI,aAAa,OAAO,QAAQ,SAAS,CAAC;AACxE,QAAM,cAAc,OAAO,SAAS;AACpC,aAAO,mCAAkB,uBAAuB,cAAc,IAAI,WAAW,KAAK,EAAE,IAAI;AAAA,IACtF,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAMA,eAAsB,0BACpB,WACA,SACA,OACA,SACwE;AACxE,aAAO,mCAAkB,oBAAoB,SAAS,UAAU,OAAO,UAAU;AAAA,IAC/E,QAAQ;AAAA,IACR,MAAM,EAAE,MAAM;AAAA,IACd,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,oBACpB,WACA,SACA,SACwE;AACxE,aAAO,mCAAkB,oBAAoB,SAAS,UAAU;AAAA,IAC9D,QAAQ;AAAA,IACR,MAAM,EAAE,QAAQ;AAAA,IAChB,GAAG;AAAA,EACL,CAAC;AACH;AAMA,eAAsB,wBACpB,SACiD;AACjD,aAAO,mCAAkB,+BAA+B;AAAA,IACtD,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,kBACpB,WACA,SAC2C;AAC3C,aAAO,mCAAkB,sBAAsB,mBAAmB,SAAS,CAAC,IAAI;AAAA,IAC9E,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAMA,eAAsB,cACpB,SACqC;AACrC,aAAO,mCAAkB,kBAAkB;AAAA,IACzC,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAMA,eAAsB,qBACpB,SAC8C;AAC9C,aAAO,mCAAkB,kCAAkC;AAAA,IACzD,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAsB,mBACpB,SACA,SAC4C;AAC5C,aAAO,mCAAkB,2BAA2B,OAAO,IAAI;AAAA,IAC7D,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AACH;","names":["import_browser"]}

package/dist/api/index.mjs

@@ -1,13 +1,23 @@
-"use client";
-
 // api/index.ts
 import { browserApiRequest as browserApiRequest2 } from "@elqnt/api-client/browser";
 
 // api/stream-api.ts
-async function streamFetch(url, body) {
+async function resolveToken(opts) {
+  if (opts.getToken) {
+    try {
+      return await opts.getToken() ?? void 0;
+    } catch {
+      return void 0;
+    }
+  }
+  return opts.token ?? void 0;
+}
+async function streamFetch(url, body, token) {
+  const headers = { "Content-Type": "application/json" };
+  if (token) headers["Authorization"] = `Bearer ${token}`;
   const response = await fetch(url, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers,
     body: JSON.stringify(body)
   });
   if (!response.ok) {
@@ -22,9 +32,11 @@ async function streamFetch(url, body) {
 }
 async function createChat(options) {
   const { baseUrl, orgId, userId, metadata } = options;
+  const token = await resolveToken(options);
   const result = await streamFetch(
     `${baseUrl}/create`,
-    { orgId, userId, metadata }
+    { orgId, userId, metadata },
+    token
   );
   if (!result.success || !result.data?.chatKey) {
     throw new Error(result.error || "Failed to create chat");
@@ -33,6 +45,7 @@ async function createChat(options) {
 }
 async function sendChatMessage(options) {
   const { baseUrl, orgId, chatKey, userId, content, attachments, metadata } = options;
+  const token = await resolveToken(options);
   const message = {
     id: `msg_${Date.now()}_${Math.random().toString(36).slice(2)}`,
     role: "user",
@@ -49,18 +62,19 @@ async function sendChatMessage(options) {
     userId,
     message,
     metadata
-  });
+  }, token);
   if (!result.success) {
     throw new Error(result.error || "Failed to send message");
   }
 }
 async function loadChat(options) {
   const { baseUrl, orgId, chatKey, userId } = options;
+  const token = await resolveToken(options);
   const result = await streamFetch(`${baseUrl}/load`, {
     orgId,
     chatKey,
     userId
-  });
+  }, token);
   if (!result.success || !result.data?.chat) {
     throw new Error(result.error || "Failed to load chat");
   }
@@ -68,37 +82,40 @@ async function loadChat(options) {
 }
 async function endChat(options) {
   const { baseUrl, orgId, chatKey, userId, reason } = options;
+  const token = await resolveToken(options);
   const result = await streamFetch(`${baseUrl}/end`, {
     orgId,
     chatKey,
     userId,
     data: reason ? { reason } : void 0
-  });
+  }, token);
   if (!result.success) {
     throw new Error(result.error || "Failed to end chat");
   }
 }
 async function sendTypingIndicator(options) {
   const { baseUrl, orgId, chatKey, userId, typing } = options;
+  const token = await resolveToken(options);
   const result = await streamFetch(`${baseUrl}/typing`, {
     orgId,
     chatKey,
     userId,
     typing
-  });
+  }, token);
   if (!result.success) {
     throw new Error(result.error || "Failed to send typing indicator");
   }
 }
 async function sendEvent(options) {
   const { baseUrl, orgId, chatKey, userId, type, data } = options;
+  const token = await resolveToken(options);
   const result = await streamFetch(`${baseUrl}/event`, {
     type,
     orgId,
     chatKey,
     userId,
     data
-  });
+  }, token);
   if (!result.success) {
     throw new Error(result.error || "Failed to send event");
   }