@eshal-bot/chat-widget 0.1.41 → 0.1.43

package/dist/chat-widget.js

@@ -8582,31 +8582,34 @@
   };
 
   /**
-   * Constructs the WebSocket URL.
-   * @param {string} apiBaseUrl - The base URL of the API (used when wsBaseUrl is not provided).
-   * @param {string} [wsBaseUrl] - Explicit WebSocket base URL (e.g. wss://knowledge-api-prod.eshal.ai/ws).
-   *                               When provided, it is returned directly without any transformation.
-   * @returns {string} The WebSocket base URL.
+   * Constructs the voice WebSocket base URL — ALWAYS derived from the API
+   * base URL the widget is embedded with, as `wss://{host}/voice/ws`.
+   *
+   * `/voice/ws/{org}/{session}` is terminated by the frontend custom server
+   * (packages/frontend/server.js), which proxies it in-cluster to
+   * knowledge-api on `/ws`. The widget always talks to the same origin it
+   * loaded its config from, so the WS endpoint is fully determined by
+   * `apiBaseUrl`. There is intentionally NO override parameter: voice can
+   * never be pointed at the (no-longer-public) knowledge-api LoadBalancer by
+   * a stale embed option or backend config value.
+   *
+   * @param {string} apiBaseUrl - Frontend base URL, e.g. https://demo.eshal.ai
+   * @returns {string} Voice WS base, e.g. wss://demo.eshal.ai/voice/ws
    */
-  const getWebSocketUrl = (apiBaseUrl, wsBaseUrl) => {
-    if (wsBaseUrl) {
-      return wsBaseUrl.replace(/\/$/, '');
-    }
+  const getWebSocketUrl = apiBaseUrl => {
     if (!apiBaseUrl) {
-      // Default fallback if no API base URL is provided
+      // No base URL yet (config still loading) — safe public default.
       return 'wss://dev.eshal.ai/voice/ws';
     }
     try {
       const url = new URL(apiBaseUrl);
-      // Replace http/https with ws/wss
+      // http→ws, https→wss; point at the frontend voice-proxy path.
       url.protocol = url.protocol.replace(/^http/, 'ws');
-      // Append the WebSocket specific path
       url.pathname = '/voice/ws';
-      // Ensure it returns a clean URL without extra slashes
+      // Clean URL without a trailing slash.
       return url.toString().replace(/\/$/, '');
     } catch (error) {
       console.error("Invalid API base URL provided for WebSocket:", error);
-      // Fallback to default if URL parsing fails
       return 'wss://dev.eshal.ai/voice/ws';
     }
   };
@@ -8926,13 +8929,17 @@
       welcomeMessage,
       quickQuestions = [],
       apiBaseUrl,
-      wsBaseUrl,
       apiKey,
       organizationId,
       autoOpen,
       openDelay,
       darkMode,
       enableVoiceInteraction = false,
+      // behavior.provideCitations — forwarded as enable_citation on the chat
+      // request so the backend skips citation generation when disabled. The
+      // Sources render is also gated in MessageBubble (defence-in-depth, same
+      // as the dashboard testing lab). Defaults to true.
+      provideCitations = true,
       onboardingQuestions = [],
       onboardingEnabled = false,
       collectionPrompt,
@@ -9077,8 +9084,9 @@
     const visitorProfileRef = reactExports.useRef(null);
     const websocketUrl = reactExports.useMemo(() => {
       if (!organizationId) return null;
-      // Construct WebSocket URL from the API base URL
-      const resolvedWsBaseUrl = getWebSocketUrl(apiBaseUrl, wsBaseUrl);
+      // Voice WS base is always derived from apiBaseUrl (the frontend origin
+      // the widget is embedded with) → wss://{host}/voice/ws. No override.
+      const resolvedWsBaseUrl = getWebSocketUrl(apiBaseUrl);
       return "".concat(resolvedWsBaseUrl, "/").concat(organizationId, "/").concat(bidiSessionId);
     }, [apiBaseUrl, organizationId, bidiSessionId]);
     const getNextMessageId = reactExports.useCallback(() => {
@@ -9455,6 +9463,11 @@
           message: trimmed,
           type: apiType,
           conversationId: bidiSessionId,
+          // Citation toggle (behavior.provideCitations). Mirrors the testing
+          // lab's useChat.ts so knowledge-api skips citation generation when
+          // the admin disabled them. The Sources panel is also gated client-
+          // side in MessageBubble (defence-in-depth). Defaults to on.
+          enable_citation: provideCitations !== null && provideCitations !== void 0 ? provideCitations : true,
           // Identify this as a widget call so the knowledge-api side
           // (chat_utils.EXTERNAL_CHAT_CHANNELS in services/
           // knowledge-api) can enforce the visibility ACL — private
@@ -9559,7 +9572,7 @@
           setIsLoading(false);
         }
       }
-    }, [apiBaseUrl, apiKey, getNextMessageId, organizationId, messages, bidiSessionId, routingChoice, widgetFilter]);
+    }, [apiBaseUrl, apiKey, getNextMessageId, organizationId, messages, bidiSessionId, routingChoice, widgetFilter, provideCitations]);
     const handleOnboardingFormSubmit = reactExports.useCallback(async answers => {
       const questions = getOnboardingQuestions(onboardingQuestions);
       if (questions.length === 0) return;
@@ -31823,7 +31836,7 @@
             if (typeof document === 'undefined') {
               return null;
             }
-            if ('currentScript' in document && 1 < 2 /* hack to trip TS' flow analysis */) {
+            if (document.currentScript && document.currentScript.tagName === 'SCRIPT' && 1 < 2 /* hack to trip TS' flow analysis */) {
               return /** @type {any} */document.currentScript;
             }
 
@@ -54629,6 +54642,7 @@
       organizationId,
       onPromptSuggestionClick,
       allowFeedback = true,
+      provideCitations = true,
       onFeedback,
       headerTextColor
     } = _ref17;
@@ -54737,7 +54751,7 @@
                 }), message.decisionResponse && /*#__PURE__*/jsxRuntimeExports.jsxs("div", {
                   className: "mt-2 text-xs ".concat(isDark ? "text-gray-400" : "text-gray-500"),
                   children: ["Selected: ", message.decisionResponse.selectedOption]
-                }), ((_message$sources = message.sources) === null || _message$sources === void 0 ? void 0 : _message$sources.length) > 0 && /*#__PURE__*/jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, {
+                }), provideCitations !== false && ((_message$sources = message.sources) === null || _message$sources === void 0 ? void 0 : _message$sources.length) > 0 && /*#__PURE__*/jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, {
                   children: [/*#__PURE__*/jsxRuntimeExports.jsx("div", {
                     className: "mt-3",
                     style: {
@@ -54762,7 +54776,7 @@
                   textColor: messageTextColor,
                   fontFamily: messageFontFamily,
                   fontSize: messageFontSize
-                }), ((_message$sources2 = message.sources) === null || _message$sources2 === void 0 ? void 0 : _message$sources2.length) > 0 && /*#__PURE__*/jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, {
+                }), provideCitations !== false && ((_message$sources2 = message.sources) === null || _message$sources2 === void 0 ? void 0 : _message$sources2.length) > 0 && /*#__PURE__*/jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, {
                   children: [/*#__PURE__*/jsxRuntimeExports.jsx("div", {
                     className: "mt-3",
                     style: {
@@ -54905,6 +54919,7 @@
       organizationId,
       onPromptSuggestionClick,
       allowFeedback,
+      provideCitations,
       onFeedback,
       headerTextColor
     } = _ref19;
@@ -54948,6 +54963,7 @@
       organizationId: organizationId,
       onPromptSuggestionClick: onPromptSuggestionClick,
       allowFeedback: allowFeedback,
+      provideCitations: provideCitations,
       onFeedback: onFeedback,
       headerTextColor: headerTextColor
     });
@@ -55803,6 +55819,7 @@
       onPromptSuggestionClick,
       conversationResetKey,
       allowFeedback,
+      provideCitations,
       onFeedback,
       headerTextColor,
       // Inline filter slots — rendered in the initial-state region
@@ -55958,6 +55975,7 @@
         apiBaseUrl: apiBaseUrl,
         organizationId: organizationId,
         allowFeedback: allowFeedback,
+        provideCitations: provideCitations,
         onFeedback: onFeedback,
         headerTextColor: headerTextColor
       }, message.id)), (() => {
@@ -59579,6 +59597,7 @@
       onResetConversation,
       autoPromptEnabled = true,
       allowFeedback = true,
+      provideCitations = true,
       onFeedback,
       onRefreshChat,
       onCopyChat,
@@ -60117,6 +60136,7 @@
               organizationId: organizationId,
               conversationResetKey: conversationId,
               allowFeedback: allowFeedback,
+              provideCitations: provideCitations,
               onFeedback: onFeedback,
               headerTextColor: headerTextColor,
               beforePromptsSlot: showInlineFilter ? /*#__PURE__*/jsxRuntimeExports.jsx(CategoryFilterInline, {
@@ -60383,7 +60403,6 @@
       // Required props for dynamic config
       orgId,
       apiBaseUrl,
-      wsBaseUrl,
       // Optional override props (will override fetched config if provided)
       darkMode,
       primaryColor,
@@ -60455,7 +60474,7 @@
 
     // Map API response to widget props (use props as overrides if provided)
     const widgetConfig = reactExports.useMemo(() => {
-      var _agentConfig$config, _cfg$identity, _cfg$branding, _cfg$typography, _cfg$messages, _cfg$voice, _cfg$onboarding, _cfg$disclaimer, _cfg$csat, _cfg$inactivity, _cfg$behavior, _cfg$security, _cfg$layout, _ref2, _messages$bundles$loc, _messages$bundles, _messages$bundles$en, _messages$bundles2, _ref3, _ref4, _ref5, _ref6, _branding$chatbotAvat, _branding$chatbotAvat2, _ref7, _ref8, _ref9, _ref0, _ref1, _ref10, _ref11, _ref12, _ref13, _ref14, _ref15, _ref16, _ref17, _ref18, _inactivity$timeoutVa, _inactivity$timeoutUn, _ref19, _ref20, _ref21, _ref22, _ref23, _ref24, _ref25, _ref26, _csat$enabled, _csat$format, _csat$prompt, _csat$triggerType, _csat$idleTimeoutMins, _csat$followUpEnabled, _csat$followUpPrompt, _behavior$autoPromptE, _behavior$allowFeedba;
+      var _agentConfig$config, _cfg$identity, _cfg$branding, _cfg$typography, _cfg$messages, _cfg$voice, _cfg$onboarding, _cfg$disclaimer, _cfg$csat, _cfg$inactivity, _cfg$behavior, _cfg$security, _cfg$layout, _ref2, _messages$bundles$loc, _messages$bundles, _messages$bundles$en, _messages$bundles2, _ref3, _ref4, _ref5, _ref6, _branding$chatbotAvat, _branding$chatbotAvat2, _ref7, _ref8, _ref9, _ref0, _ref1, _ref10, _ref11, _ref12, _ref13, _ref14, _ref15, _ref16, _ref17, _ref18, _inactivity$timeoutVa, _inactivity$timeoutUn, _ref19, _ref20, _ref21, _ref22, _ref23, _ref24, _ref25, _ref26, _csat$enabled, _csat$format, _csat$prompt, _csat$triggerType, _csat$idleTimeoutMins, _csat$followUpEnabled, _csat$followUpPrompt, _behavior$autoPromptE, _behavior$allowFeedba, _behavior$provideCita;
       if (!agentConfig) {
         return null;
       }
@@ -60546,7 +60565,12 @@
         csatFollowUpEnabled: (_csat$followUpEnabled = csat.followUpEnabled) !== null && _csat$followUpEnabled !== void 0 ? _csat$followUpEnabled : false,
         csatFollowUpPrompt: (_csat$followUpPrompt = csat.followUpPrompt) !== null && _csat$followUpPrompt !== void 0 ? _csat$followUpPrompt : null,
         autoPromptEnabled: (_behavior$autoPromptE = behavior.autoPromptEnabled) !== null && _behavior$autoPromptE !== void 0 ? _behavior$autoPromptE : true,
-        allowFeedback: (_behavior$allowFeedba = behavior.allowFeedback) !== null && _behavior$allowFeedba !== void 0 ? _behavior$allowFeedba : true
+        allowFeedback: (_behavior$allowFeedba = behavior.allowFeedback) !== null && _behavior$allowFeedba !== void 0 ? _behavior$allowFeedba : true,
+        // behavior.provideCitations — when false, hide the Sources panel on
+        // every message and tell the backend to skip citation generation.
+        // Defaults to true so agents that haven't set the field keep showing
+        // citations (matches the testing-lab / chatbot-preview default).
+        provideCitations: (_behavior$provideCita = behavior.provideCitations) !== null && _behavior$provideCita !== void 0 ? _behavior$provideCita : true
       };
     }, [agentConfig, darkMode, primaryColor, position, companyName, conciergeName, companyLogo, welcomeMessage, quickQuestions, quickQuestionsEnabled, textColor, agentMessageBubbleColor, userMessageBoxColor, assistantTextColor, userTextColor, fontFamily, fontSize, defaultLanguage, orgId, headerTextBold, headerTextItalic, enableVoiceInteraction, disclaimerEnabled, disclaimerText, disclaimerPosition, disclaimerLinkLabel, disclaimerLinkUrl, showPoweredBy, onboardingQuestions, onboardingEnabled, collectionPrompt, allowedDomains, agentMessageBubbleFontFamily, agentMessageBubbleFontSize, userMessageBubbleFontFamily, userMessageBubbleFontSize
     // CSAT dependencies
@@ -60566,7 +60590,6 @@
       welcomeMessage: "Hi! How can we help?",
       quickQuestions: [],
       apiBaseUrl: apiBaseUrl || "",
-      wsBaseUrl: agentConfig === null || agentConfig === void 0 ? void 0 : agentConfig.wsBaseUrl,
       apiKey: apiKey || "",
       organizationId: orgId || "",
       autoOpen: false,
@@ -60576,7 +60599,7 @@
       onboardingQuestions: [],
       onboardingEnabled: false,
       collectionPrompt: undefined
-    }), [apiBaseUrl, wsBaseUrl, apiKey, orgId]);
+    }), [apiBaseUrl, apiKey, orgId]);
 
     // ALWAYS call hooks before any early returns (Rules of Hooks)
     const {
@@ -60617,7 +60640,11 @@
       welcomeMessage: widgetConfig.welcomeMessage,
       quickQuestions: widgetConfig.quickQuestions,
       apiBaseUrl,
-      wsBaseUrl: agentConfig === null || agentConfig === void 0 ? void 0 : agentConfig.wsBaseUrl,
+      // Voice WS endpoint is derived entirely from apiBaseUrl inside
+      // useChatState (→ wss://{host}/voice/ws, the frontend voice proxy).
+      // Nothing is forwarded/overridable here, so a stale backend or embed
+      // wsBaseUrl can't point voice at the old (now non-public)
+      // knowledge-api LoadBalancer.
       apiKey,
       organizationId: widgetConfig.organizationId,
       autoOpen,
@@ -60627,6 +60654,9 @@
       onboardingQuestions: widgetConfig.onboardingQuestions,
       onboardingEnabled: widgetConfig.onboardingEnabled,
       collectionPrompt: widgetConfig.collectionPrompt,
+      // Gates the chat request's enable_citation flag (text path). Voice
+      // already reads provideCitations from the DB in voice_chat.py.
+      provideCitations: widgetConfig.provideCitations,
       inactivityTimeoutValue: widgetConfig.inactivityTimeoutValue,
       inactivityTimeoutUnit: widgetConfig.inactivityTimeoutUnit,
       // Sliding-window cap for the localStorage transcript. Comes from
@@ -60793,6 +60823,7 @@
           onResetConversation: resetConversation,
           autoPromptEnabled: widgetConfig.autoPromptEnabled,
           allowFeedback: widgetConfig.allowFeedback,
+          provideCitations: widgetConfig.provideCitations,
           onFeedback: handleMessageFeedback,
           onRefreshChat: handleRefreshChat,
           onCopyChat: handleCopyChat