@eshal-bot/chat-widget 0.1.97 → 0.1.99

package/dist/chat-widget.esm.js

@@ -1 +1 @@
-export{S as default}from"./chat-widget-index-CHqB62M7.esm.js";import"react";import"react-dom/client";import"react-dom";import"react/jsx-runtime";
+export{S as default}from"./chat-widget-index-BHNeh4MK.esm.js";import"react";import"react-dom/client";import"react-dom";import"react/jsx-runtime";

package/dist/chat-widget.js

@@ -16546,13 +16546,43 @@
       message: backendMsg
     };
   }
-  function putWithProgress(_ref2) {
+
+  // Give back session budget the backend reserved at /presign admission time
+  // (EV-2791) - fired when a chip is removed or its upload fails AFTER that
+  // reservation succeeded, so a not-actually-sent file doesn't permanently
+  // inflate the conversation's "used" total for the rest of the session TTL.
+  // Fire-and-forget: a failed release just leaves the budget a bit tighter
+  // than it truly is, never more permissive, so it's safe to ignore errors.
+  function releaseSessionBytes(_ref2) {
+    let {
+      apiEndpoint,
+      conversationId,
+      size,
+      authHeader
+    } = _ref2;
+    fetch(joinUrl(apiEndpoint, "/api/v1/chat-attachments/release"), {
+      method: "POST",
+      credentials: "include",
+      headers: _objectSpread2({
+        "Content-Type": "application/json"
+      }, authHeader ? {
+        Authorization: authHeader
+      } : {}),
+      body: JSON.stringify({
+        conversationId,
+        size
+      })
+    }).catch(() => {
+      /* best-effort - see comment above */
+    });
+  }
+  function putWithProgress(_ref3) {
     let {
       url,
       file,
       onProgress,
       registerXhr
-    } = _ref2;
+    } = _ref3;
     return new Promise((resolve, reject) => {
       const xhr = new XMLHttpRequest();
       registerXhr(xhr);
@@ -16583,7 +16613,7 @@
   // `url` is consumed today (READ SAS URL that knowledge-api's
   // attachment_ingest fetches bytes from). Malformed / empty JSON
   // resolves to `{}` - the upload succeeded, the read URL is best-effort.
-  function postMultipartWithProgress(_ref3) {
+  function postMultipartWithProgress(_ref4) {
     let {
       url,
       file,
@@ -16591,7 +16621,7 @@
       authHeader,
       onProgress,
       registerXhr
-    } = _ref3;
+    } = _ref4;
     return new Promise((resolve, reject) => {
       const xhr = new XMLHttpRequest();
       registerXhr(xhr);
@@ -16636,14 +16666,14 @@
       xhr.send(form);
     });
   }
-  function useFileUpload(_ref4) {
+  function useFileUpload(_ref5) {
     let {
       conversationId,
       config,
       apiEndpoint,
       authHeader,
       onError
-    } = _ref4;
+    } = _ref5;
     const [attachments, setAttachments] = reactExports.useState([]);
     const inflightRef = reactExports.useRef(new Map());
     const idCounterRef = reactExports.useRef(0);
@@ -16746,6 +16776,9 @@
           })
         });
       } catch (err) {
+        // Never reached the server - no reservation was ever made, so just
+        // undo this attachment's optimistic client-side estimate (EV-2791).
+        sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - file.size);
         errorPatch(attachmentId, "network", "Network error while requesting upload.");
         return;
       }
@@ -16759,13 +16792,34 @@
         } catch (_unused4) {
           /* body not JSON - keep defaults */
         }
+        // decideAttachmentPolicy rejects BEFORE reserving budget, so there's
+        // nothing to release server-side - only undo the client estimate.
+        sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - file.size);
         errorPatch(attachmentId, backendCode, backendMsg);
         return;
       }
+
+      // presignRes.ok means decideAttachmentPolicy's LAST step ran -
+      // addSessionBytes already reserved this file's bytes server-side.
+      // Mark it so removeAttachment (and every error path below) knows to
+      // call /release rather than just correcting the client estimate.
+      patchAttachment(attachmentId, {
+        reservedBytes: file.size
+      });
       let presign;
       try {
         presign = await presignRes.json();
       } catch (_unused5) {
+        releaseSessionBytes({
+          apiEndpoint,
+          conversationId,
+          size: file.size,
+          authHeader
+        });
+        sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - file.size);
+        patchAttachment(attachmentId, {
+          reservedBytes: 0
+        });
         errorPatch(attachmentId, "unknown", "Malformed presign response.");
         return;
       }
@@ -16824,6 +16878,16 @@
           });
           if (!confirmed.ok) {
             inflightRef.current.delete(attachmentId);
+            releaseSessionBytes({
+              apiEndpoint,
+              conversationId,
+              size: file.size,
+              authHeader
+            });
+            sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - file.size);
+            patchAttachment(attachmentId, {
+              reservedBytes: 0
+            });
             errorPatch(attachmentId, confirmed.code, confirmed.message);
             return;
           }
@@ -16832,7 +16896,19 @@
         }
       } catch (err) {
         inflightRef.current.delete(attachmentId);
+        // Aborted means removeAttachment already released this reservation -
+        // releasing again here would double-count the give-back.
         if (err && err.aborted) return;
+        releaseSessionBytes({
+          apiEndpoint,
+          conversationId,
+          size: file.size,
+          authHeader
+        });
+        sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - file.size);
+        patchAttachment(attachmentId, {
+          reservedBytes: 0
+        });
         errorPatch(attachmentId, "network", "Upload failed. Please retry.");
         return;
       }
@@ -16875,7 +16951,11 @@
           size: file.size,
           mimeType: file.type,
           status: "uploading",
-          progress: 0
+          progress: 0,
+          // Set once /presign confirms the server actually reserved this
+          // file's bytes (EV-2791) - removeAttachment uses it to decide
+          // whether a removal needs to call /release.
+          reservedBytes: 0
         };
         setAttachments(prev => [...prev, entry]);
         // Reserve session budget at ADMISSION, not upload completion -
@@ -16892,8 +16972,22 @@
         xhr.abort();
         inflightRef.current.delete(id);
       }
+      // EV-2791: a chip removed before Send had its bytes reserved server-side
+      // at /presign admission time - give them back, or the session's "used"
+      // total stays inflated by every file the user attached-then-removed,
+      // for the rest of the 24h session TTL.
+      const removed = attachmentsRef.current.find(a => a.id === id);
+      if (removed && removed.reservedBytes > 0) {
+        releaseSessionBytes({
+          apiEndpoint,
+          conversationId,
+          size: removed.reservedBytes,
+          authHeader
+        });
+        sessionBytesRef.current.bytes = Math.max(0, sessionBytesRef.current.bytes - removed.reservedBytes);
+      }
       setAttachments(prev => prev.filter(a => a.id !== id));
-    }, []);
+    }, [apiEndpoint, authHeader, conversationId]);
     const clearAll = reactExports.useCallback(() => {
       for (const xhr of inflightRef.current.values()) xhr.abort();
       inflightRef.current.clear();
@@ -17075,7 +17169,11 @@
           },
           children: suggestions.map((p, index) => /*#__PURE__*/jsxRuntimeExports.jsx("button", {
             type: "button",
-            onClick: () => onSuggestionClick(p.submitText || p.text || p),
+            onClick: () =>
+            // EV-2842: pass the prompt object + position so the click
+            // handler can record telemetry; extra args are ignored by
+            // handlers that only read the submit value.
+            onSuggestionClick(p.submitText || p.text || p, p, index),
             dir: "auto",
             className: "inline-flex items-center rounded-full px-4 py-1.5 whitespace-nowrap flex-shrink-0 border-0 transition-transform duration-150 active:scale-95",
             style: {
@@ -18758,9 +18856,48 @@
       var _panelRef$current;
       (_panelRef$current = panelRef.current) === null || _panelRef$current === void 0 || _panelRef$current.focus();
     }, []);
-    const stableOnPromptSuggestionClick = reactExports.useCallback(text => {
+
+    // EV-2842 - chip click telemetry. Fire-and-forget POST to the
+    // HMAC-verified support proxy (same auth pattern as the CSAT calls
+    // below). A telemetry failure must never block or delay submitting
+    // the chip's text, so this is never awaited and swallows everything.
+    const reportChipClick = reactExports.useCallback(async (submitValue, prompt, index) => {
+      try {
+        if (!apiBaseUrl) return;
+        const headers = {
+          "Content-Type": "application/json"
+        };
+        if (typeof getAuthToken === "function") {
+          const token = await getAuthToken();
+          if (token) headers["Authorization"] = "Bearer ".concat(token);
+        }
+        await fetch("".concat(apiBaseUrl.replace(/\/$/, ""), "/api/v1/support/chip-click"), {
+          method: "POST",
+          headers,
+          credentials: "include",
+          keepalive: true,
+          body: JSON.stringify({
+            conversationId,
+            chipText: prompt && prompt.text || String(submitValue !== null && submitValue !== void 0 ? submitValue : ""),
+            submitText: String(submitValue !== null && submitValue !== void 0 ? submitValue : ""),
+            position: Number.isInteger(index) ? index : undefined,
+            source: "widget"
+          })
+        });
+      } catch (_unused) {
+        // Telemetry only - never surface to the user.
+      }
+    }, [apiBaseUrl, getAuthToken, conversationId]);
+    const stableOnPromptSuggestionClick = reactExports.useCallback((text, prompt, index) => {
+      // EV-2842: record the chip click (not awaited). Only fires when a
+      // prompt OBJECT rode along - i.e. a real auto-prompt chip row -
+      // so A2UI buttons / onboarding handlers that call this with just
+      // a string are not miscounted as chip clicks.
+      if (prompt && typeof prompt === "object") {
+        reportChipClick(text, prompt, index);
+      }
       if (onPromptSuggestionClick) onPromptSuggestionClick(text);else onDirectSend === null || onDirectSend === void 0 || onDirectSend(text);
-    }, [onPromptSuggestionClick, onDirectSend]);
+    }, [onPromptSuggestionClick, onDirectSend, reportChipClick]);
 
     // ─── Resizable widget ────────────────────────────────────────────
     const anchorRight = launcherPosition.includes("right");
@@ -18772,7 +18909,7 @@
         if (!raw) return null;
         const parsed = JSON.parse(raw);
         if (typeof (parsed === null || parsed === void 0 ? void 0 : parsed.width) === "number" && typeof (parsed === null || parsed === void 0 ? void 0 : parsed.height) === "number" && parsed.width >= _WIDGET_MIN_W && parsed.height >= _WIDGET_MIN_H) return parsed;
-      } catch (_unused) {/* fall through */}
+      } catch (_unused2) {/* fall through */}
       return null;
     });
     const resizeAxisRef = reactExports.useRef(null);
@@ -18820,7 +18957,7 @@
       if (!widgetSize) return;
       try {
         window.localStorage.setItem(_WIDGET_SIZE_KEY, JSON.stringify(widgetSize));
-      } catch (_unused2) {/* ignore */}
+      } catch (_unused3) {/* ignore */}
     }, [widgetSize]);
     const handleResizeStart = (axis, e) => {
       e.preventDefault();
@@ -18848,7 +18985,7 @@
       try {
         var _getSession$csatSubmi, _getSession;
         return (_getSession$csatSubmi = (_getSession = getSession(organizationId)) === null || _getSession === void 0 ? void 0 : _getSession.csatSubmitted) !== null && _getSession$csatSubmi !== void 0 ? _getSession$csatSubmi : false;
-      } catch (_unused3) {
+      } catch (_unused4) {
         return false;
       }
     });
@@ -18867,7 +19004,7 @@
         const submitted = (_getSession$csatSubmi2 = (_getSession2 = getSession(organizationId)) === null || _getSession2 === void 0 ? void 0 : _getSession2.csatSubmitted) !== null && _getSession$csatSubmi2 !== void 0 ? _getSession$csatSubmi2 : false;
         setCsatSubmitted(submitted);
         if (submitted) setShowCsat(false);
-      } catch (_unused4) {}
+      } catch (_unused5) {}
     }, [conversationId]);
 
     // Auto-scroll hook