@eshal-bot/chat-widget 0.2.37 → 0.2.39

package/dist/chat-widget-markdown-chunk.js

@@ -88751,6 +88751,27 @@
   function fill(text, values) {
     return Object.entries(values).reduce((s, [k, v]) => s.replace(`{${k}}`, String(v)), String(text));
   }
+
+  /** EV-4941: keep a masked address on one line ("+91 ••••• 6138"). */
+  const noBreak = text => String(text ?? '').replace(/ /g, '\u00a0');
+
+  /**
+   * EV-4939: a number whose calling code is not among the allowed ones, so the
+   * card can say so before Send. Only numbers typed with +; a partial code that
+   * could still become an allowed one is not flagged.
+   */
+  function blockedByCountry(address, codes) {
+    if (!Array.isArray(codes) || codes.length === 0 || !String(address).trim().startsWith('+')) return false;
+    const digits = String(address).replace(/\D/g, '');
+    if (!digits) return false;
+    return !codes.some(c => digits.startsWith(c) || c.startsWith(digits));
+  }
+
+  /** "14:59" for a lockout's time left. */
+  function clock(seconds) {
+    const s = Math.max(0, Math.ceil(seconds));
+    return `${Math.floor(s / 60)}:${String(s % 60).padStart(2, '0')}`;
+  }
   function boxStyle(isDark) {
     return {
       border: `1px solid ${BRAND_BLUE$1}`,
@@ -88824,6 +88845,10 @@
     const [error, setError] = React.useState(null);
     const [resendIn, setResendIn] = React.useState(0);
     const [cancelled, setCancelled] = React.useState(false);
+    // EV-4939: a lockout's end from the server, and the allowed calling codes.
+    const [lockUntil, setLockUntil] = React.useState(null);
+    const [lockIn, setLockIn] = React.useState(0);
+    const [callingCodes, setCallingCodes] = React.useState(null);
     const resumedRef = React.useRef(false);
     const pendingKey = React.useRef(Symbol('verify-card'));
     // A card the conversation already moved past (a later visitor turn exists,
@@ -88871,6 +88896,31 @@
         clearInterval(id);
       };
     }, [mode, step, ctx, t]);
+    React.useEffect(() => {
+      if (mode !== 'sms' || !ctx?.config) return undefined;
+      let gone = false;
+      ctx.config().then(res => {
+        const codes = res?.body?.sms_calling_codes;
+        if (!gone && Array.isArray(codes)) setCallingCodes(codes.map(String));
+      }).catch(() => undefined);
+      return () => {
+        gone = true;
+      };
+    }, [mode, ctx]);
+    React.useEffect(() => {
+      if (!lockUntil) return undefined;
+      const tick = () => {
+        const left = (lockUntil - Date.now()) / 1000;
+        if (left <= 0) {
+          setLockUntil(null);
+          setLockIn(0);
+          setError(null);
+        } else setLockIn(left);
+      };
+      tick();
+      const id = setInterval(tick, 1000);
+      return () => clearInterval(id);
+    }, [lockUntil]);
     React.useEffect(() => {
       if (resendIn <= 0) return undefined;
       const id = setTimeout(() => setResendIn(s => s - 1), 1000);
@@ -88908,12 +88958,20 @@
         });
         if (res.ok) {
           setMasked(res.body?.masked || address.trim());
+          setLockUntil(null);
+          // EV-4941: if the card goes back to the number step (lockout, expiry,
+          // a new number), the field reads "+91 90749 76138", not "+919074976138".
+          if (res.body?.formatted) setAddress(String(res.body.formatted));
           setResendIn(Number(res.body?.resend_after_s) || 60);
           setCode('');
           setStep('code');
         } else {
           setError(res.body?.error || t('verifyGenericError'));
           if (res.body?.resendAfterS) setResendIn(Number(res.body.resendAfterS));
+          if (res.body?.code === 'locked' && res.body?.lockedUntil) {
+            setLockUntil(Date.parse(res.body.lockedUntil));
+            setResendIn(0);
+          }
         }
       } catch {
         setError(t('verifyGenericError'));
@@ -88955,6 +89013,11 @@
         } else {
           setError(res.body?.error || t('verifyGenericError'));
           if (res.body?.code === 'expired' || res.body?.code === 'locked') setStep('address');
+          // EV-4939: a lockout holds Send for its whole length, as a countdown.
+          if (res.body?.code === 'locked' && res.body?.lockedUntil) {
+            setLockUntil(Date.parse(res.body.lockedUntil));
+            setResendIn(0);
+          }
         }
       } catch {
         setError(t('verifyGenericError'));
@@ -88972,11 +89035,21 @@
             fontWeight: 600
           },
           children: ["\u2713 ", fill(t('verifyDone'), {
-            target: masked
+            target: noBreak(masked)
           })]
         })
       });
     }
+    const countryBlocked = mode === 'sms' && blockedByCountry(address, callingCodes);
+    const errorLine = text => text ? /*#__PURE__*/jsxRuntimeExports.jsx("div", {
+      role: "alert",
+      style: {
+        color: '#b42318',
+        fontSize: 13
+      },
+      children: text
+    }) : null;
+    const sendDisabled = busy || !address.trim() || resendIn > 0 || lockIn > 0 || countryBlocked;
     return /*#__PURE__*/jsxRuntimeExports.jsxs("div", {
       style: boxStyle(isDark),
       "data-testid": "verify-card",
@@ -89006,28 +89079,30 @@
             value: address,
             onChange: e => setAddress(e.target.value),
             onKeyDown: e => {
-              if (e.key === 'Enter') send();
+              if (e.key === 'Enter' && !sendDisabled) send();
             }
           })]
-        }), /*#__PURE__*/jsxRuntimeExports.jsx("button", {
+        }), errorLine(countryBlocked ? t('verifyCountryNotAllowed') : error), /*#__PURE__*/jsxRuntimeExports.jsx("button", {
           type: "button",
-          style: buttonStyle(busy || !address.trim() || resendIn > 0),
-          disabled: busy || !address.trim() || resendIn > 0,
+          style: buttonStyle(sendDisabled),
+          disabled: sendDisabled,
           onClick: send,
-          children: busy ? t('verifySending') : resendIn > 0 ? fill(t('verifyResendIn'), {
+          children: busy ? t('verifySending') : lockIn > 0 ? fill(t('verifyLockedFor'), {
+            time: clock(lockIn)
+          }) : resendIn > 0 ? fill(t('verifyResendIn'), {
             seconds: resendIn
           }) : t('verifySendCode')
         })]
       }) : /*#__PURE__*/jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, {
         children: [/*#__PURE__*/jsxRuntimeExports.jsx("span", {
           children: fill(t('verifyEnterCode'), {
-            target: masked
+            target: noBreak(masked)
           })
         }), /*#__PURE__*/jsxRuntimeExports.jsx("input", {
+          // EV-4941: the widget's own font; spacing keeps the digits apart.
           style: {
             ...inputStyle(isDark),
             letterSpacing: '0.3em',
-            fontFamily: 'monospace',
             fontSize: 18
           },
           "aria-label": t('verifyCodeLabel'),
@@ -89039,7 +89114,7 @@
           onKeyDown: e => {
             if (e.key === 'Enter') confirm();
           }
-        }), /*#__PURE__*/jsxRuntimeExports.jsx("button", {
+        }), errorLine(error), /*#__PURE__*/jsxRuntimeExports.jsx("button", {
           type: "button",
           style: buttonStyle(busy || code.length !== 6),
           disabled: busy || code.length !== 6,
@@ -89065,23 +89140,22 @@
           onClick: () => {
             setStep('address');
             setError(null);
+            // EV-4939: the wait was for the old address; a new one starts fresh.
+            setResendIn(0);
           },
-          children: t('verifyDifferent')
+          children: mode === 'sms' ? t('verifyDifferentNumber') : t('verifyDifferent')
         })]
-      }), error && /*#__PURE__*/jsxRuntimeExports.jsx("div", {
-        role: "alert",
-        style: {
-          color: '#b42318',
-          fontSize: 12
-        },
-        children: error
       }), /*#__PURE__*/jsxRuntimeExports.jsx("button", {
         type: "button",
         style: {
           ...linkStyle,
           color: isDark ? '#9ca3af' : '#6b7280'
         },
-        onClick: () => setCancelled(true),
+        onClick: () => {
+          // EV-4942: tell the server, so the agent sees the cancel.
+          if (ctx.cancel) Promise.resolve(ctx.cancel()).catch(() => undefined);
+          setCancelled(true);
+        },
         disabled: busy,
         children: t('verifyCancel')
       })]