@eshal-bot/chat-widget 0.1.63 → 0.1.65

package/dist/chat-widget.js

@@ -100596,14 +100596,13 @@
     if (!apiBaseUrl) {
       throw new Error("apiBaseUrl is required");
     }
-    if (!secretKey && !orgId) {
-      throw new Error("secretKey or orgId is required");
-    }
+    // Mode A: secretKey in header, no orgId in URL
+    // Mode B (proxy): no secretKey, no orgId — proxy intercepts and signs the request
+    // Mode C legacy: orgId in URL path
+
     try {
       const base = apiBaseUrl.replace(/\/$/, '');
-      // Mode A/B: no orgId in URL — backend resolves org from x-eshal-key or HMAC sig
-      // Mode C legacy: orgId in URL path, no header needed
-      const url = secretKey ? "".concat(base, "/api/v1/deploy-agent") : "".concat(base, "/api/v1/deploy-agent/").concat(orgId);
+      const url = orgId ? "".concat(base, "/api/v1/deploy-agent/").concat(orgId) : "".concat(base, "/api/v1/deploy-agent");
       const headers = {
         "Content-Type": "application/json"
       };
@@ -100687,11 +100686,8 @@
           setIsLoadingConfig(false);
           return;
         }
-        if (!secretKey && !orgId) {
-          setConfigError("secretKey or orgId is required");
-          setIsLoadingConfig(false);
-          return;
-        }
+        // Mode B proxy: neither secretKey nor orgId in browser — proxy handles auth
+
         try {
           setIsLoadingConfig(true);
           // Pass secretKey for Mode A/B — fetchAgentConfig will send it as a
@@ -101203,7 +101199,8 @@
         // Mode A/B: secretKey present — orgId derived server-side from the key
         // Mode C legacy: orgId in config — backward compatible
         // Both: apiBaseUrl required
-        const hasNewAuth = (config.secretKey || config.orgId) && config.apiBaseUrl;
+        // Mode B proxy: apiBaseUrl alone is enough — no secretKey or orgId in browser
+        const hasNewAuth = config.apiBaseUrl;
         const widgetProps = hasNewAuth ? _objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2(_objectSpread2({
           // Auth props — secretKey replaces orgId in Mode A/B
           secretKey: config.secretKey || null,