@eshal-bot/chat-widget 0.1.101 → 0.1.102

package/dist/chat-widget.esm.js

@@ -1 +1 @@
-export{S as default}from"./chat-widget-index-B5VwIIEZ.esm.js";import"react";import"react-dom/client";import"react-dom";import"react/jsx-runtime";
+export{S as default}from"./chat-widget-index-BcPgyNKZ.esm.js";import"react";import"react-dom/client";import"react-dom";import"react/jsx-runtime";

package/dist/chat-widget.js

@@ -8183,6 +8183,10 @@
       // (the full follow-up question) on click. Kept here or it's whitelisted
       // out before render; click handlers fall back to `text` when absent.
       submitText: typeof p.submitText === 'string' ? p.submitText : undefined,
+      // EV-2979: the server mints a per-chip promptId so click rows can
+      // be joined to their impression row. This whitelist would strip it
+      // otherwise. Optional - older payloads simply have none.
+      promptId: typeof p.promptId === 'string' ? p.promptId : undefined,
       confidence: typeof p.confidence === 'number' ? p.confidence : undefined
     })).filter(p => p.text);
     return normalized.length ? normalized : undefined;
@@ -18799,6 +18803,162 @@
     });
   };
 
+  /**
+   * EV-2979 - auto-prompt chip CLICK telemetry (client half).
+   *
+   * Impressions are logged server-side at the chip-generation call sites;
+   * clicks can only be observed on the client, so this module is the last
+   * link in the funnel. It posts to the Express support proxy at
+   * `POST /api/v1/support/chip-click`, which re-derives the organization
+   * from the verified widget auth (EV-2388 - the client MUST NOT send an
+   * organizationId) and forwards to knowledge-api.
+   *
+   * Hard rules, in priority order over "did the event land":
+   *   1. Never block, delay or break the chip's real action. Callers must
+   *      not await this; every failure path resolves to `false` and never
+   *      throws.
+   *   2. Never send PII beyond what the chip itself already contains
+   *      (its label, its submit text, its position, the conversation id).
+   *   3. Be a silent no-op when there is nothing safe to send: no API base
+   *      URL, no conversation id, or telemetry disabled by config.
+   *
+   * Transport: `navigator.sendBeacon` is preferred because the browser
+   * keeps it in flight across the re-render (and even a navigation) that
+   * a chip click triggers. sendBeacon cannot set request headers, so the
+   * in-app Bearer path (`getAuthToken` present, i.e. session auth) falls
+   * back to `fetch(..., { keepalive: true })`, which has the same
+   * survive-the-unload property but can carry Authorization. Mode B
+   * embeds have no token - the HMAC signature is added by the
+   * @eshal-bot/server proxy - so those take the sendBeacon path.
+   */
+
+  const CHIP_CLICK_PATH = '/api/v1/support/chip-click';
+
+  /**
+   * Builds the wire payload for a chip click.
+   *
+   * `chipText` is deliberately the chip's SHORT LABEL (`text`), not the
+   * displayed question (`submitText`): impression rows store `chip_text`
+   * from `text`, so using the label is what makes clicks joinable to
+   * impressions. EV-2977 changed only what the chip DISPLAYS.
+   *
+   * @param {{chip?: object|string, submitText?: string, position?: number,
+   *          conversationId?: string, source?: string}} args
+   * @returns {object|null} payload, or null when there is no usable chipText
+   */
+  function buildChipClickPayload() {
+    let {
+      chip,
+      submitText,
+      position,
+      conversationId,
+      source = 'widget'
+    } = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+    const isObject = chip && typeof chip === 'object';
+    const label = isObject && typeof chip.text === 'string' ? chip.text : '';
+    const submit = typeof submitText === 'string' && submitText ? submitText : isObject && typeof chip.submitText === 'string' ? chip.submitText : typeof chip === 'string' ? chip : '';
+    const chipText = label || submit;
+    if (!chipText) return null;
+    const payload = {
+      conversationId,
+      chipText,
+      submitText: submit || undefined,
+      position: Number.isInteger(position) ? position : undefined,
+      source
+    };
+
+    // The chip payload is growing a `promptId` concurrently. Read it
+    // defensively and simply omit the key until it exists - this must
+    // never become a hard dependency.
+    const promptId = isObject ? chip === null || chip === void 0 ? void 0 : chip.promptId : undefined;
+    if (typeof promptId === 'string' && promptId) payload.promptId = promptId;
+    return payload;
+  }
+
+  /**
+   * Fire-and-forget chip-click beacon.
+   *
+   * @param {object} args
+   * @param {string} [args.apiBaseUrl]      Support API base (same one /csat uses).
+   * @param {string} [args.conversationId]  Required; no conversation = no event.
+   * @param {object|string} [args.chip]     The chip object from the suggestions row.
+   * @param {string} [args.submitText]      What the click submits.
+   * @param {number} [args.position]        0-based index within the strip.
+   * @param {string} [args.source]          Surface id, defaults to "widget".
+   * @param {Function} [args.getAuthToken]  Optional async () => token (in-app path).
+   * @param {boolean} [args.enabled]        Config kill-switch, defaults to true.
+   * @returns {Promise<boolean>} true only if a request was actually dispatched.
+   */
+  async function sendChipClickBeacon() {
+    let {
+      apiBaseUrl,
+      conversationId,
+      chip,
+      submitText,
+      position,
+      source = 'widget',
+      getAuthToken,
+      enabled = true
+    } = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+    try {
+      if (enabled === false) return false;
+      if (!apiBaseUrl || typeof apiBaseUrl !== 'string') return false;
+      if (!conversationId || typeof conversationId !== 'string') return false;
+      const payload = buildChipClickPayload({
+        chip,
+        submitText,
+        position,
+        conversationId,
+        source
+      });
+      if (!payload) return false;
+      const url = "".concat(apiBaseUrl.replace(/\/$/, '')).concat(CHIP_CLICK_PATH);
+      const body = JSON.stringify(payload);
+      let token;
+      if (typeof getAuthToken === 'function') {
+        try {
+          token = await getAuthToken();
+        } catch (_unused) {
+          token = undefined;
+        }
+      }
+
+      // No Authorization header needed -> sendBeacon, the most
+      // re-render/unload-proof transport available.
+      if (!token && typeof navigator !== 'undefined' && typeof navigator.sendBeacon === 'function' && typeof Blob !== 'undefined') {
+        try {
+          const queued = navigator.sendBeacon(url, new Blob([body], {
+            type: 'application/json'
+          }));
+          if (queued) return true;
+          // sendBeacon returns false when the user agent refuses to queue
+          // (payload over the per-origin budget); fall through to fetch.
+        } catch (_unused2) {
+          // Fall through to fetch.
+        }
+      }
+      if (typeof fetch !== 'function') return false;
+      const headers = {
+        'Content-Type': 'application/json'
+      };
+      if (token) headers.Authorization = "Bearer ".concat(token);
+
+      // Not awaited by callers; keepalive keeps it alive past the
+      // re-render the click causes.
+      await fetch(url, {
+        method: 'POST',
+        headers,
+        credentials: 'include',
+        keepalive: true,
+        body
+      });
+      return true;
+    } catch (_unused3) {
+      // Telemetry only - never surface to the user, never rethrow.
+      return false;
+    }
+  }
+
   const DEFAULT_AGENT_BUBBLE_COLOR = "#ffffff";
   const DEFAULT_USER_MESSAGE_COLOR = "#f5f5f5";
   const DEFAULT_TEXT_COLOR = "#000000";
@@ -18915,6 +19075,9 @@
       // (submitText) instead of the title-case label. Display-only;
       // kill-switch via behavior.autoPromptQuestionDisplay (default on).
       autoPromptQuestionDisplay = true,
+      // EV-2979: fire-and-forget click telemetry for auto-prompt chips.
+      // Kill-switch via behavior.autoPromptClickTelemetry (default on).
+      autoPromptClickTelemetry = true,
       allowFeedback = true,
       provideCitations = true,
       onFeedback,
@@ -18951,37 +19114,23 @@
       (_panelRef$current = panelRef.current) === null || _panelRef$current === void 0 || _panelRef$current.focus();
     }, []);
 
-    // EV-2842 - chip click telemetry. Fire-and-forget POST to the
-    // HMAC-verified support proxy (same auth pattern as the CSAT calls
+    // EV-2842 / EV-2979 - chip click telemetry. Fire-and-forget POST to
+    // the verified support proxy (same auth pattern as the CSAT calls
     // below). A telemetry failure must never block or delay submitting
-    // the chip's text, so this is never awaited and swallows everything.
-    const reportChipClick = reactExports.useCallback(async (submitValue, prompt, index) => {
-      try {
-        if (!apiBaseUrl) return;
-        const headers = {
-          "Content-Type": "application/json"
-        };
-        if (typeof getAuthToken === "function") {
-          const token = await getAuthToken();
-          if (token) headers["Authorization"] = "Bearer ".concat(token);
-        }
-        await fetch("".concat(apiBaseUrl.replace(/\/$/, ""), "/api/v1/support/chip-click"), {
-          method: "POST",
-          headers,
-          credentials: "include",
-          keepalive: true,
-          body: JSON.stringify({
-            conversationId,
-            chipText: prompt && prompt.text || String(submitValue !== null && submitValue !== void 0 ? submitValue : ""),
-            submitText: String(submitValue !== null && submitValue !== void 0 ? submitValue : ""),
-            position: Number.isInteger(index) ? index : undefined,
-            source: "widget"
-          })
-        });
-      } catch (_unused) {
-        // Telemetry only - never surface to the user.
-      }
-    }, [apiBaseUrl, getAuthToken, conversationId]);
+    // the chip's text, so this is never awaited and sendChipClickBeacon
+    // swallows everything internally.
+    const reportChipClick = reactExports.useCallback((submitValue, prompt, index) => {
+      void sendChipClickBeacon({
+        apiBaseUrl,
+        conversationId,
+        chip: prompt,
+        submitText: submitValue == null ? undefined : String(submitValue),
+        position: index,
+        source: "widget",
+        getAuthToken,
+        enabled: autoPromptClickTelemetry
+      });
+    }, [apiBaseUrl, getAuthToken, conversationId, autoPromptClickTelemetry]);
     const stableOnPromptSuggestionClick = reactExports.useCallback((text, prompt, index) => {
       // EV-2842: record the chip click (not awaited). Only fires when a
       // prompt OBJECT rode along - i.e. a real auto-prompt chip row -
@@ -19003,7 +19152,7 @@
         if (!raw) return null;
         const parsed = JSON.parse(raw);
         if (typeof (parsed === null || parsed === void 0 ? void 0 : parsed.width) === "number" && typeof (parsed === null || parsed === void 0 ? void 0 : parsed.height) === "number" && parsed.width >= _WIDGET_MIN_W && parsed.height >= _WIDGET_MIN_H) return parsed;
-      } catch (_unused2) {/* fall through */}
+      } catch (_unused) {/* fall through */}
       return null;
     });
     const resizeAxisRef = reactExports.useRef(null);
@@ -19051,7 +19200,7 @@
       if (!widgetSize) return;
       try {
         window.localStorage.setItem(_WIDGET_SIZE_KEY, JSON.stringify(widgetSize));
-      } catch (_unused3) {/* ignore */}
+      } catch (_unused2) {/* ignore */}
     }, [widgetSize]);
     const handleResizeStart = (axis, e) => {
       e.preventDefault();
@@ -19079,7 +19228,7 @@
       try {
         var _getSession$csatSubmi, _getSession;
         return (_getSession$csatSubmi = (_getSession = getSession(organizationId)) === null || _getSession === void 0 ? void 0 : _getSession.csatSubmitted) !== null && _getSession$csatSubmi !== void 0 ? _getSession$csatSubmi : false;
-      } catch (_unused4) {
+      } catch (_unused3) {
         return false;
       }
     });
@@ -19098,7 +19247,7 @@
         const submitted = (_getSession$csatSubmi2 = (_getSession2 = getSession(organizationId)) === null || _getSession2 === void 0 ? void 0 : _getSession2.csatSubmitted) !== null && _getSession$csatSubmi2 !== void 0 ? _getSession$csatSubmi2 : false;
         setCsatSubmitted(submitted);
         if (submitted) setShowCsat(false);
-      } catch (_unused5) {}
+      } catch (_unused4) {}
     }, [conversationId]);
 
     // Auto-scroll hook
@@ -20080,7 +20229,7 @@
 
     // Map API response to widget props (use props as overrides if provided)
     const widgetConfig = reactExports.useMemo(() => {
-      var _agentConfig$config, _cfg$identity, _cfg$branding, _cfg$typography, _cfg$messages, _cfg$voice, _cfg$onboarding, _cfg$disclaimer, _cfg$csat, _cfg$inactivity, _cfg$behavior, _cfg$security, _cfg$layout, _ref2, _messages$bundles$loc, _messages$bundles, _messages$bundles$en, _messages$bundles2, _ref3, _ref4, _security$domains, _ref5, _ref6, _ref7, _branding$chatbotAvat, _branding$chatbotAvat2, _ref8, _ref9, _ref0, _ref1, _ref10, _ref11, _ref12, _ref13, _typography$headerTex, _identity$subtitle, _identity$showStatus, _identity$statusMode, _identity$officeHours, _ref14, _ref15, _ref16, _ref17, _ref18, _ref19, _inactivity$timeoutVa, _inactivity$timeoutUn, _ref20, _ref21, _ref22, _ref23, _ref24, _ref25, _ref26, _ref27, _csat$enabled, _csat$format, _csat$prompt, _csat$triggerType, _csat$idleTimeoutMins, _csat$followUpEnabled, _csat$followUpPrompt, _behavior$autoPromptE, _behavior$autoPromptQ, _behavior$allowFeedba, _behavior$provideCita, _agentConfig$organiza, _cfg$chatFeatures;
+      var _agentConfig$config, _cfg$identity, _cfg$branding, _cfg$typography, _cfg$messages, _cfg$voice, _cfg$onboarding, _cfg$disclaimer, _cfg$csat, _cfg$inactivity, _cfg$behavior, _cfg$security, _cfg$layout, _ref2, _messages$bundles$loc, _messages$bundles, _messages$bundles$en, _messages$bundles2, _ref3, _ref4, _security$domains, _ref5, _ref6, _ref7, _branding$chatbotAvat, _branding$chatbotAvat2, _ref8, _ref9, _ref0, _ref1, _ref10, _ref11, _ref12, _ref13, _typography$headerTex, _identity$subtitle, _identity$showStatus, _identity$statusMode, _identity$officeHours, _ref14, _ref15, _ref16, _ref17, _ref18, _ref19, _inactivity$timeoutVa, _inactivity$timeoutUn, _ref20, _ref21, _ref22, _ref23, _ref24, _ref25, _ref26, _ref27, _csat$enabled, _csat$format, _csat$prompt, _csat$triggerType, _csat$idleTimeoutMins, _csat$followUpEnabled, _csat$followUpPrompt, _behavior$autoPromptE, _behavior$autoPromptQ, _behavior$autoPromptC, _behavior$allowFeedba, _behavior$provideCita, _agentConfig$organiza, _cfg$chatFeatures;
       if (!agentConfig) {
         return null;
       }
@@ -20180,6 +20329,11 @@
         // (submit payload untouched). Kill-switch per deployment: set
         // behavior.autoPromptQuestionDisplay=false to revert to labels.
         autoPromptQuestionDisplay: (_behavior$autoPromptQ = behavior.autoPromptQuestionDisplay) !== null && _behavior$autoPromptQ !== void 0 ? _behavior$autoPromptQ : true,
+        // EV-2979: fire-and-forget chip-click telemetry (the click half of
+        // the impression funnel). Default on; set
+        // behavior.autoPromptClickTelemetry=false to silence it for a
+        // deployment that does not want click events recorded.
+        autoPromptClickTelemetry: (_behavior$autoPromptC = behavior.autoPromptClickTelemetry) !== null && _behavior$autoPromptC !== void 0 ? _behavior$autoPromptC : true,
         allowFeedback: (_behavior$allowFeedba = behavior.allowFeedback) !== null && _behavior$allowFeedba !== void 0 ? _behavior$allowFeedba : true,
         // behavior.provideCitations - when false, hide the Sources panel on
         // every message and tell the backend to skip citation generation.
@@ -20478,6 +20632,7 @@
           onResetConversation: resetConversation,
           autoPromptEnabled: widgetConfig.autoPromptEnabled,
           autoPromptQuestionDisplay: widgetConfig.autoPromptQuestionDisplay,
+          autoPromptClickTelemetry: widgetConfig.autoPromptClickTelemetry,
           allowFeedback: widgetConfig.allowFeedback,
           provideCitations: widgetConfig.provideCitations,
           onFeedback: handleMessageFeedback,