@eshal-bot/chat-widget 0.1.62 → 0.1.63

package/dist/chat-widget.js

@@ -8011,14 +8011,18 @@
    * @param {object} request - Chat request object
    * @param {string} apiBaseUrl - Base URL for the API
    */
-  const sendStreamingRequest = async (request, apiBaseUrl, organizationId) => {
+  const sendStreamingRequest = async (request, apiBaseUrl, organizationId, secretKey) => {
     const headers = {
       'Content-Type': 'application/json',
       Accept: 'text/event-stream'
     };
 
-    // Add organization ID header if provided
-    if (organizationId) {
+    // Mode A — secret key (direct embed): key replaces orgId in the header
+    // Mode B — proxy (@eshal-bot/server): no header from widget; proxy injects x-eshal-sig + x-eshal-org
+    // Mode C — legacy: orgId sent directly
+    if (secretKey) {
+      headers['x-eshal-key'] = secretKey;
+    } else if (organizationId) {
       headers['x-eshal-org'] = organizationId;
     }
     const response = await fetch("".concat(apiBaseUrl.replace(/\/$/, ''), "/api/v1/support"), {
@@ -9129,6 +9133,7 @@
       apiBaseUrl,
       apiKey,
       organizationId,
+      secretKey,
       autoOpen,
       openDelay,
       darkMode,
@@ -9765,7 +9770,7 @@
         if (apiType === 'userName' || apiType === 'email' || apiType === 'phone') {
           // For onboarding fields, just consume the stream without processing.
           // Single attempt — no retry, no user-visible partial state to clean up.
-          const stream = await sendStreamingRequest(chatRequest, apiBaseUrl, organizationId);
+          const stream = await sendStreamingRequest(chatRequest, apiBaseUrl, organizationId, secretKey);
           const reader = stream.getReader();
           const decoder = new TextDecoder();
           while (true) {
@@ -9784,7 +9789,7 @@
           let lastErr;
           for (let attempt = 0; attempt <= STREAM_RETRY_DELAYS_MS.length; attempt += 1) {
             try {
-              const stream = await sendStreamingRequest(chatRequest, apiBaseUrl, organizationId);
+              const stream = await sendStreamingRequest(chatRequest, apiBaseUrl, organizationId, secretKey);
               await processStream(stream, setMessages);
               updateActivity(organizationId);
               return {
@@ -91865,6 +91870,9 @@
                 fontSize: 11,
                 fill: labelColor
               },
+              angle: 0,
+              textAnchor: "middle",
+              interval: 0,
               label: props.xAxisLabel ? {
                 value: props.xAxisLabel,
                 position: 'insideBottom',
@@ -92143,6 +92151,9 @@
                 fontSize: 11,
                 fill: labelColor
               },
+              angle: 0,
+              textAnchor: "middle",
+              interval: 0,
               label: props.xAxisLabel ? {
                 value: props.xAxisLabel,
                 position: 'insideBottom',
@@ -92713,10 +92724,12 @@
 
   // ISO date / datetime prefix — matches the typical SQL output the
   // agent's tools produce when GROUP BY-ing by month
-  // (`DATE_TRUNC('month', col)` → `YYYY-MM-DD`). Used by formatAxisTick
-  // below so a chart of monthly expenses shows "Jan '26" / "Feb '26"
-  // horizontally instead of "2026 01 01" slanted (EV-1187 follow-up).
-  const ISO_DATE_RE = /^(\d{4})-(\d{2})-(\d{2})(?:T|$)/;
+  // (`DATE_TRUNC('month', col)` → `YYYY-MM-DD`, or `to_char(..,'YYYY-MM')`
+  // → `YYYY-MM`). Used by formatAxisTick below so a chart of monthly
+  // expenses shows "Jan '26" / "Feb '26" horizontally instead of
+  // "2026 01 01" or "2026 01" slanted (EV-1187 follow-up + 2026-06-24
+  // day-less variant fix).
+  const ISO_DATE_RE = /^(\d{4})-(\d{2})(?:-\d{2})?(?:[T\s]|$)/;
   function formatIsoDateAsMonthTick(value) {
     if (typeof value !== 'string') return null;
     const m = value.match(ISO_DATE_RE);
@@ -96219,7 +96232,18 @@
     copyChat: "Copy Chat",
     startChat: "Start Chat",
     startingVoiceSession: "Starting voice session...",
-    allowMicAccess: "Allow microphone access"
+    allowMicAccess: "Allow microphone access",
+    // Onboarding-form validation messages. These are the English fallback for
+    // every locale (translate() falls back to EN[key]); without them the form
+    // rendered the raw key strings ("emailInvalid", etc.). `fieldRequiredSuffix`
+    // is appended after a field label: `${label} ${fieldRequiredSuffix}`.
+    emailRequired: "Please enter your email address",
+    nameRequired: "Please enter your name",
+    phoneRequired: "Please enter your phone number",
+    fieldRequiredSuffix: "is required",
+    emailInvalid: "Please enter a valid email address",
+    nameInvalid: "Please enter a valid name",
+    phoneInvalid: "Please enter a valid phone number"
   };
   const DICTIONARIES = {
     en: EN,
@@ -99609,6 +99633,7 @@
       apiBaseUrl,
       apiKey,
       organizationId,
+      secretKey,
       conversationId,
       conciergeId,
       onboardingQuestions = [],
@@ -100405,6 +100430,7 @@
   /**
    * @param {string|undefined|null} apiBaseUrl
    * @param {string|undefined|null} orgId
+   * @param {string|undefined|null} secretKey  — Mode A/B: orgId resolved server-side
    * @returns {{
    *   categories: Array<{id:string,label:string,count:number,tags:string[]}>,
    *   loading: boolean,
@@ -100412,14 +100438,17 @@
    *   hasFilters: boolean,
    * }}
    */
-  function useFilterCatalog(apiBaseUrl, orgId) {
+  function useFilterCatalog(apiBaseUrl, orgId, secretKey) {
+    // Mode A: secretKey present, orgId null → key-based endpoint
+    // Mode C: orgId present (legacy) → orgId-in-path endpoint
+    const hasAuth = !!(apiBaseUrl && (orgId || secretKey));
     const [state, setState] = reactExports.useState({
       categories: [],
-      loading: !!(apiBaseUrl && orgId),
+      loading: hasAuth,
       error: null
     });
     reactExports.useEffect(() => {
-      if (!apiBaseUrl || !orgId) {
+      if (!apiBaseUrl || !orgId && !secretKey) {
         setState({
           categories: [],
           loading: false,
@@ -100427,8 +100456,8 @@
         });
         return;
       }
-      const key = "".concat(apiBaseUrl, "|").concat(orgId);
-      const cached = _PROCESS_CACHE.get(key);
+      const cacheKey = secretKey ? "".concat(apiBaseUrl, "|__key__") : "".concat(apiBaseUrl, "|").concat(orgId);
+      const cached = _PROCESS_CACHE.get(cacheKey);
       if (cached) {
         setState({
           categories: cached,
@@ -100442,12 +100471,15 @@
         loading: true,
         error: null
       }));
-      const url = "".concat(apiBaseUrl.replace(/\/$/, ""), "/api/v1/widget/filters/").concat(encodeURIComponent(orgId));
+      const base = apiBaseUrl.replace(/\/$/, "");
+      const url = secretKey ? "".concat(base, "/api/v1/widget/filters") : "".concat(base, "/api/v1/widget/filters/").concat(encodeURIComponent(orgId));
+      const headers = {
+        Accept: "application/json"
+      };
+      if (secretKey) headers["x-eshal-key"] = secretKey;
       fetch(url, {
         method: "GET",
-        headers: {
-          Accept: "application/json"
-        }
+        headers
       }).then(async res => {
         if (!res.ok) {
           throw new Error("filter catalog HTTP ".concat(res.status));
@@ -100456,7 +100488,7 @@
         return Array.isArray(body === null || body === void 0 ? void 0 : body.categories) ? body.categories : [];
       }).then(categories => {
         if (cancelled) return;
-        _PROCESS_CACHE.set(key, categories);
+        _PROCESS_CACHE.set(cacheKey, categories);
         setState({
           categories,
           loading: false,
@@ -100478,7 +100510,7 @@
       return () => {
         cancelled = true;
       };
-    }, [apiBaseUrl, orgId]);
+    }, [apiBaseUrl, orgId, secretKey]);
     const hasFilters = reactExports.useMemo(() => Array.isArray(state.categories) && state.categories.length > 0, [state.categories]);
     return _objectSpread2(_objectSpread2({}, state), {}, {
       hasFilters
@@ -100560,17 +100592,25 @@
    * @param {string} orgId - Organization ID
    * @returns {Promise<object>} Agent configuration object
    */
-  const fetchAgentConfig = async (apiBaseUrl, orgId) => {
-    if (!apiBaseUrl || !orgId) {
-      throw new Error("apiBaseUrl and orgId are required");
+  const fetchAgentConfig = async (apiBaseUrl, orgId, secretKey) => {
+    if (!apiBaseUrl) {
+      throw new Error("apiBaseUrl is required");
+    }
+    if (!secretKey && !orgId) {
+      throw new Error("secretKey or orgId is required");
     }
     try {
-      const url = "".concat(apiBaseUrl.replace(/\/$/, ''), "/api/v1/deploy-agent/").concat(orgId);
+      const base = apiBaseUrl.replace(/\/$/, '');
+      // Mode A/B: no orgId in URL — backend resolves org from x-eshal-key or HMAC sig
+      // Mode C legacy: orgId in URL path, no header needed
+      const url = secretKey ? "".concat(base, "/api/v1/deploy-agent") : "".concat(base, "/api/v1/deploy-agent/").concat(orgId);
+      const headers = {
+        "Content-Type": "application/json"
+      };
+      if (secretKey) headers['x-eshal-key'] = secretKey;
       const response = await fetch(url, {
         method: "GET",
-        headers: {
-          "Content-Type": "application/json"
-        },
+        headers,
         credentials: "include"
       });
       if (!response.ok) {
@@ -100587,8 +100627,11 @@
   const ChatWidget = _ref => {
     var _agentConfig$concierg;
     let {
-      // Required props for dynamic config
+      // Auth — at least one of secretKey (Mode A/B) or orgId (Mode C legacy) is needed.
+      secretKey,
+      // sk_live_... from ChatWidget.init({ secretKey, apiBaseUrl })
       orgId,
+      // legacy — kept for backward compatibility
       apiBaseUrl,
       // Optional override props (will override fetched config if provided)
       darkMode,
@@ -100639,14 +100682,21 @@
     // Fetch agent configuration on mount
     reactExports.useEffect(() => {
       const loadAgentConfig = async () => {
-        if (!orgId || !apiBaseUrl) {
-          setConfigError("orgId and apiBaseUrl are required");
+        if (!apiBaseUrl) {
+          setConfigError("apiBaseUrl is required");
+          setIsLoadingConfig(false);
+          return;
+        }
+        if (!secretKey && !orgId) {
+          setConfigError("secretKey or orgId is required");
           setIsLoadingConfig(false);
           return;
         }
         try {
           setIsLoadingConfig(true);
-          const config = await fetchAgentConfig(apiBaseUrl, orgId);
+          // Pass secretKey for Mode A/B — fetchAgentConfig will send it as a
+          // header and omit the orgId path segment. Pass orgId for Mode C legacy.
+          const config = await fetchAgentConfig(apiBaseUrl, orgId, secretKey);
           setAgentConfig(config);
           setConfigError(null);
         } catch (error) {
@@ -100657,7 +100707,7 @@
         }
       };
       loadAgentConfig();
-    }, [orgId, apiBaseUrl]);
+    }, [orgId, secretKey, apiBaseUrl]);
 
     // Map API response to widget props (use props as overrides if provided)
     const widgetConfig = reactExports.useMemo(() => {
@@ -100835,6 +100885,7 @@
       // knowledge-api LoadBalancer.
       apiKey,
       organizationId: widgetConfig.organizationId,
+      secretKey,
       autoOpen,
       openDelay,
       darkMode: widgetConfig.darkMode,
@@ -100861,14 +100912,15 @@
       // navigation (but not a page refresh — feedback is not written to
       // localStorage so it resets on reload as intended).
       updateMessageFeedback(messageContent, feedback);
-      if (!orgId || !conversationId || !apiBaseUrl) return;
+      if (!orgId && !secretKey || !conversationId || !apiBaseUrl) return;
       const base = apiBaseUrl.replace(/\/$/, "");
+      const feedbackHeaders = {
+        "Content-Type": "application/json"
+      };
+      if (secretKey) feedbackHeaders['x-eshal-key'] = secretKey;else if (orgId) feedbackHeaders['x-eshal-org'] = orgId;
       fetch("".concat(base, "/api/v1/support/feedback"), {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          "x-eshal-org": orgId
-        },
+        headers: feedbackHeaders,
         credentials: "include",
         body: JSON.stringify({
           messageContent,
@@ -100894,7 +100946,7 @@
     const {
       categories: filterCategories,
       hasFilters: showFilterStep
-    } = useFilterCatalog(apiBaseUrl, orgId);
+    } = useFilterCatalog(apiBaseUrl, orgId, secretKey);
 
     // Copy chat handler — copy all messages to clipboard
     const handleCopyChat = reactExports.useCallback(() => {
@@ -101000,6 +101052,7 @@
           apiBaseUrl: apiBaseUrl,
           apiKey: apiKey,
           organizationId: widgetConfig.organizationId,
+          secretKey: secretKey,
           conversationId: conversationId,
           conciergeId: (_agentConfig$concierg = agentConfig === null || agentConfig === void 0 ? void 0 : agentConfig.conciergeId) !== null && _agentConfig$concierg !== void 0 ? _agentConfig$concierg : agentConfig === null || agentConfig === void 0 ? void 0 : agentConfig.id,
           onboardingQuestions: widgetConfig.onboardingQuestions,
@@ -101147,11 +101200,14 @@
         }
 
         // Render component
-        // If orgId and apiBaseUrl are provided, use dynamic config
-        // Otherwise, use the old static config approach for backward compatibility
-        const widgetProps = config.orgId && config.apiBaseUrl ? _objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2({
-          // Required props
-          orgId: config.orgId,
+        // Mode A/B: secretKey present — orgId derived server-side from the key
+        // Mode C legacy: orgId in config — backward compatible
+        // Both: apiBaseUrl required
+        const hasNewAuth = (config.secretKey || config.orgId) && config.apiBaseUrl;
+        const widgetProps = hasNewAuth ? _objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2({
+          // Auth props — secretKey replaces orgId in Mode A/B
+          secretKey: config.secretKey || null,
+          orgId: config.orgId || null,
           apiBaseUrl: config.apiBaseUrl
         }, options.wsBaseUrl !== undefined && {
           wsBaseUrl: config.wsBaseUrl