@exotel-npm-dev/exotel-ai-assist 1.0.0 → 1.0.2

package/dist/controller/index.js

@@ -398,13 +398,14 @@ class BroadcastChannelTransport {
     if (this.socket) {
       this.socket.close(1000, "reconnecting");
     }
-    // authToken is passed as a subprotocol so it is sent in the
-    // Sec-WebSocket-Protocol header — the only way to include auth
-    // credentials in a browser WebSocket handshake.
     this.socket = new WebSocket(url);
     this.socket.onopen = () => {
       var _a;
       this.socketConnected = true;
+      this.socket.send(JSON.stringify({
+        type: "auth",
+        access_token: authToken
+      }));
       const msg = {
         type: "CONNECTED"
       };
@@ -429,11 +430,12 @@ class BroadcastChannelTransport {
       (_a = this.handler) === null || _a === void 0 ? void 0 : _a.call(this, msg);
       this.channel.postMessage(msg);
     };
-    this.socket.onclose = () => {
+    this.socket.onclose = ev => {
       var _a;
       this.socketConnected = false;
       const msg = {
-        type: "DISCONNECTED"
+        type: "DISCONNECTED",
+        code: ev.code
       };
       (_a = this.handler) === null || _a === void 0 ? void 0 : _a.call(this, msg);
       this.channel.postMessage(msg);
@@ -1537,9 +1539,9 @@ class Utils {
     const INTERNAL_KEYS = new Set(["authToken", "accountId", "wssBaseUrl", "reconnectInterval", "maxReconnectAttempts"]);
     // Mandatory server params remapped to the names the API expects.
     // accountId is embedded in the URL path — never sent as a query param.
-    const mandatory = [["access_token", String(params.authToken)]];
+    const pairs = [];
     if (params.call_sid !== undefined && params.call_sid !== null) {
-      mandatory.push(["call_sid", String(params.call_sid)]);
+      pairs.push(["call_sid", String(params.call_sid)]);
     }
     // Extra caller-supplied params, excluding internals and already-mapped keys.
     const extra = Object.entries(params).filter(([k, v]) => !INTERNAL_KEYS.has(k) && k !== "call_sid" && v !== undefined && v !== null).map(([k, v]) => [k, String(v)]);
@@ -1549,7 +1551,7 @@ class Utils {
     // array as a plain object, turning index 0 into a key and the inner
     // array's toString() (comma-joined) into the value.
     const query = new URLSearchParams();
-    [...mandatory, ...extra].forEach(([k, v]) => query.append(k, v));
+    [...pairs, ...extra].forEach(([k, v]) => query.append(k, v));
     return query.toString();
   }
   /**
@@ -1645,7 +1647,11 @@ class ExotelAIAssistController extends EventEmitter {
       case "DISCONNECTED":
         this._setStatus("disconnected");
         this.emit("onCallEnd");
-        this._scheduleReconnect();
+        // Close codes 4001 (auth_failed) and 4002 (auth_timeout) are permanent
+        // auth failures — reconnecting with the same token would fail again.
+        if (msg.code !== 4001 && msg.code !== 4002) {
+          this._scheduleReconnect();
+        }
         break;
       case "ERROR":
         this._setStatus("error");
@@ -1657,14 +1663,26 @@ class ExotelAIAssistController extends EventEmitter {
     }
   }
   _handleServerPayload(raw) {
+    var _a;
     let parsed;
     try {
       parsed = JSON.parse(raw);
-    } catch (_a) {
+    } catch (_b) {
       this.emit("error", new Error(`Failed to parse server message: ${raw}`));
       return;
     }
     this.emit("raw", parsed);
+    // Auth error messages arrive before the server closes the connection.
+    // Treat both as fatal — the server will follow up with a 4001/4002 close.
+    const msgType = parsed.type;
+    if (msgType === "auth_failed" || msgType === "auth_timeout") {
+      const detail = (_a = parsed.error) !== null && _a !== void 0 ? _a : msgType;
+      const err = new Error(detail);
+      err.code = msgType.toUpperCase();
+      this._setStatus("error");
+      this.emit("error", err);
+      return;
+    }
     if (parsed.config) {
       this.emit("botConfig", parsed.config);
     }

package/dist/index.js

@@ -19816,13 +19816,14 @@ class BroadcastChannelTransport {
     if (this.socket) {
       this.socket.close(1000, "reconnecting");
     }
-    // authToken is passed as a subprotocol so it is sent in the
-    // Sec-WebSocket-Protocol header — the only way to include auth
-    // credentials in a browser WebSocket handshake.
     this.socket = new WebSocket(url);
     this.socket.onopen = () => {
       var _a;
       this.socketConnected = true;
+      this.socket.send(JSON.stringify({
+        type: "auth",
+        access_token: authToken
+      }));
       const msg = {
         type: "CONNECTED"
       };
@@ -19847,11 +19848,12 @@ class BroadcastChannelTransport {
       (_a = this.handler) === null || _a === void 0 ? void 0 : _a.call(this, msg);
       this.channel.postMessage(msg);
     };
-    this.socket.onclose = () => {
+    this.socket.onclose = ev => {
       var _a;
       this.socketConnected = false;
       const msg = {
-        type: "DISCONNECTED"
+        type: "DISCONNECTED",
+        code: ev.code
       };
       (_a = this.handler) === null || _a === void 0 ? void 0 : _a.call(this, msg);
       this.channel.postMessage(msg);
@@ -20955,9 +20957,9 @@ class Utils {
     const INTERNAL_KEYS = new Set(["authToken", "accountId", "wssBaseUrl", "reconnectInterval", "maxReconnectAttempts"]);
     // Mandatory server params remapped to the names the API expects.
     // accountId is embedded in the URL path — never sent as a query param.
-    const mandatory = [["access_token", String(params.authToken)]];
+    const pairs = [];
     if (params.call_sid !== undefined && params.call_sid !== null) {
-      mandatory.push(["call_sid", String(params.call_sid)]);
+      pairs.push(["call_sid", String(params.call_sid)]);
     }
     // Extra caller-supplied params, excluding internals and already-mapped keys.
     const extra = Object.entries(params).filter(([k, v]) => !INTERNAL_KEYS.has(k) && k !== "call_sid" && v !== undefined && v !== null).map(([k, v]) => [k, String(v)]);
@@ -20967,7 +20969,7 @@ class Utils {
     // array as a plain object, turning index 0 into a key and the inner
     // array's toString() (comma-joined) into the value.
     const query = new URLSearchParams();
-    [...mandatory, ...extra].forEach(([k, v]) => query.append(k, v));
+    [...pairs, ...extra].forEach(([k, v]) => query.append(k, v));
     return query.toString();
   }
   /**
@@ -21063,7 +21065,11 @@ class ExotelAIAssistController extends EventEmitter {
       case "DISCONNECTED":
         this._setStatus("disconnected");
         this.emit("onCallEnd");
-        this._scheduleReconnect();
+        // Close codes 4001 (auth_failed) and 4002 (auth_timeout) are permanent
+        // auth failures — reconnecting with the same token would fail again.
+        if (msg.code !== 4001 && msg.code !== 4002) {
+          this._scheduleReconnect();
+        }
         break;
       case "ERROR":
         this._setStatus("error");
@@ -21075,14 +21081,26 @@ class ExotelAIAssistController extends EventEmitter {
     }
   }
   _handleServerPayload(raw) {
+    var _a;
     let parsed;
     try {
       parsed = JSON.parse(raw);
-    } catch (_a) {
+    } catch (_b) {
       this.emit("error", new Error(`Failed to parse server message: ${raw}`));
       return;
     }
     this.emit("raw", parsed);
+    // Auth error messages arrive before the server closes the connection.
+    // Treat both as fatal — the server will follow up with a 4001/4002 close.
+    const msgType = parsed.type;
+    if (msgType === "auth_failed" || msgType === "auth_timeout") {
+      const detail = (_a = parsed.error) !== null && _a !== void 0 ? _a : msgType;
+      const err = new Error(detail);
+      err.code = msgType.toUpperCase();
+      this._setStatus("error");
+      this.emit("error", err);
+      return;
+    }
     if (parsed.config) {
       this.emit("botConfig", parsed.config);
     }
@@ -21257,7 +21275,7 @@ function styleInject(css, ref) {
   }
 }
 
-var css_248z = ".oa-panel{background:#fff;font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif}.oa-panel,.oa-theme-root{display:flex;flex-direction:column;height:100%;min-height:0;width:100%}.oa-theme-root{position:relative}.oa-header-title{color:#111827;font-size:16px;font-weight:600;line-height:20px;margin:0}.oa-tabs{width:100%}.oa-tabs-content{display:flex;flex:1;flex-direction:column;min-height:0;overflow:hidden}.oa-tabs-list{border-bottom:1px solid #e5e7eb;display:flex;gap:20px;padding:0}.oa-tabs-trigger{align-items:center;background:transparent;border:none;border-radius:0;color:#6b7280;cursor:pointer;display:inline-flex;font-size:15px;font-weight:500;gap:6px;outline:none;padding:10px 0;position:relative}.oa-tabs-trigger:hover{color:#374151}.oa-tabs-trigger[data-state=active]{color:#2563eb}.oa-tabs-trigger[data-state=active]:after{background:#2563eb;border-radius:2px;bottom:-1px;content:\"\";height:2px;left:0;position:absolute;right:0}.oa-suggestion-card{border:1px solid rgba(17,24,39,.04);border-radius:12px;padding:12px}.oa-suggestion-card--recent-wrapper{animation:oa-suggestion-enter .4s ease-out,oa-border-shimmer 3s ease-in-out .4s infinite;background:linear-gradient(90deg,#7c3aed,#e11d48,#7c3aed);background-size:200% 100%;border-radius:12px;padding:2px}.oa-suggestion-card--recent-wrapper .oa-suggestion-card--recent{border:none}.oa-suggestion-card--recent{animation:none;background:linear-gradient(90deg,#f5f3ff 0,#fef3f2 50%,#fff7ed);border-radius:9px}.oa-suggestion-card--older{background:#f5f5f5;border:1px solid #e5e7eb}.oa-suggestion-card--older .oa-suggestion-text{color:#252525}@keyframes oa-suggestion-enter{0%{opacity:.3;transform:scale(.97)}to{opacity:1;transform:scale(1)}}@keyframes oa-border-shimmer{0%,to{background-position:0 50%}50%{background-position:100% 50%}}.oa-suggestion-text{color:#111827;font-size:13px;line-height:18px;white-space:pre-wrap}.oa-copy-icon{align-items:center;background:#fff;border:1px solid #e5e7eb;border-radius:8px;color:#6b7280;cursor:pointer;display:inline-flex;height:32px;justify-content:center;min-height:32px;min-width:32px;padding:0;width:32px}.oa-copy-icon:hover{background:#f9fafb;color:#374151}@keyframes oa-toast-in{0%{opacity:0;transform:translateY(6px)}to{opacity:1;transform:translateY(0)}}.oa-muted{color:#6b7280}";
+var css_248z = ".oa-panel{background:#fff;font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif}.oa-panel,.oa-theme-root{display:flex;flex-direction:column;height:100%;min-height:0;width:100%}.oa-theme-root{position:relative}.oa-header-title{color:#111827;font-size:16px;font-weight:600;line-height:20px;margin:0}.oa-tabs{width:100%}.oa-tabs-content{flex:1;min-height:0;overflow:hidden}.oa-tabs-content[data-state=inactive]{display:none!important}.oa-tabs-content[data-state=active]{display:flex;flex-direction:column}.oa-tabs-list{border-bottom:1px solid #e5e7eb;display:flex;gap:20px;padding:0}.oa-tabs-trigger{align-items:center;background:transparent;border:none;border-radius:0;color:#6b7280;cursor:pointer;display:inline-flex;font-size:15px;font-weight:500;gap:6px;outline:none;padding:10px 0;position:relative}.oa-tabs-trigger:hover{color:#374151}.oa-tabs-trigger[data-state=active]{color:#2563eb}.oa-tabs-trigger[data-state=active]:after{background:#2563eb;border-radius:2px;bottom:-1px;content:\"\";height:2px;left:0;position:absolute;right:0}.oa-suggestion-card{border:1px solid rgba(17,24,39,.04);border-radius:12px;padding:12px}.oa-suggestion-card--recent-wrapper{animation:oa-suggestion-enter .4s ease-out,oa-border-shimmer 3s ease-in-out .4s infinite;background:linear-gradient(90deg,#7c3aed,#e11d48,#7c3aed);background-size:200% 100%;border-radius:12px;padding:2px}.oa-suggestion-card--recent-wrapper .oa-suggestion-card--recent{border:none}.oa-suggestion-card--recent{animation:none;background:linear-gradient(90deg,#f5f3ff 0,#fef3f2 50%,#fff7ed);border-radius:9px}.oa-suggestion-card--older{background:#f5f5f5;border:1px solid #e5e7eb}.oa-suggestion-card--older .oa-suggestion-text{color:#252525}@keyframes oa-suggestion-enter{0%{opacity:.3;transform:scale(.97)}to{opacity:1;transform:scale(1)}}@keyframes oa-border-shimmer{0%,to{background-position:0 50%}50%{background-position:100% 50%}}.oa-suggestion-text{color:#111827;font-size:13px;line-height:18px;white-space:pre-wrap}.oa-copy-icon{align-items:center;background:#fff;border:1px solid #e5e7eb;border-radius:8px;color:#6b7280;cursor:pointer;display:inline-flex;height:32px;justify-content:center;min-height:32px;min-width:32px;padding:0;width:32px}.oa-copy-icon:hover{background:#f9fafb;color:#374151}@keyframes oa-toast-in{0%{opacity:0;transform:translateY(6px)}to{opacity:1;transform:translateY(0)}}.oa-muted{color:#6b7280}";
 styleInject(css_248z);
 
 function Sparkle() {

package/dist/react/index.js

@@ -5102,13 +5102,14 @@ class BroadcastChannelTransport {
     if (this.socket) {
       this.socket.close(1000, "reconnecting");
     }
-    // authToken is passed as a subprotocol so it is sent in the
-    // Sec-WebSocket-Protocol header — the only way to include auth
-    // credentials in a browser WebSocket handshake.
     this.socket = new WebSocket(url);
     this.socket.onopen = () => {
       var _a;
       this.socketConnected = true;
+      this.socket.send(JSON.stringify({
+        type: "auth",
+        access_token: authToken
+      }));
       const msg = {
         type: "CONNECTED"
       };
@@ -5133,11 +5134,12 @@ class BroadcastChannelTransport {
       (_a = this.handler) === null || _a === void 0 ? void 0 : _a.call(this, msg);
       this.channel.postMessage(msg);
     };
-    this.socket.onclose = () => {
+    this.socket.onclose = ev => {
       var _a;
       this.socketConnected = false;
       const msg = {
-        type: "DISCONNECTED"
+        type: "DISCONNECTED",
+        code: ev.code
       };
       (_a = this.handler) === null || _a === void 0 ? void 0 : _a.call(this, msg);
       this.channel.postMessage(msg);
@@ -6241,9 +6243,9 @@ class Utils {
     const INTERNAL_KEYS = new Set(["authToken", "accountId", "wssBaseUrl", "reconnectInterval", "maxReconnectAttempts"]);
     // Mandatory server params remapped to the names the API expects.
     // accountId is embedded in the URL path — never sent as a query param.
-    const mandatory = [["access_token", String(params.authToken)]];
+    const pairs = [];
     if (params.call_sid !== undefined && params.call_sid !== null) {
-      mandatory.push(["call_sid", String(params.call_sid)]);
+      pairs.push(["call_sid", String(params.call_sid)]);
     }
     // Extra caller-supplied params, excluding internals and already-mapped keys.
     const extra = Object.entries(params).filter(([k, v]) => !INTERNAL_KEYS.has(k) && k !== "call_sid" && v !== undefined && v !== null).map(([k, v]) => [k, String(v)]);
@@ -6253,7 +6255,7 @@ class Utils {
     // array as a plain object, turning index 0 into a key and the inner
     // array's toString() (comma-joined) into the value.
     const query = new URLSearchParams();
-    [...mandatory, ...extra].forEach(([k, v]) => query.append(k, v));
+    [...pairs, ...extra].forEach(([k, v]) => query.append(k, v));
     return query.toString();
   }
   /**
@@ -6349,7 +6351,11 @@ class ExotelAIAssistController extends EventEmitter {
       case "DISCONNECTED":
         this._setStatus("disconnected");
         this.emit("onCallEnd");
-        this._scheduleReconnect();
+        // Close codes 4001 (auth_failed) and 4002 (auth_timeout) are permanent
+        // auth failures — reconnecting with the same token would fail again.
+        if (msg.code !== 4001 && msg.code !== 4002) {
+          this._scheduleReconnect();
+        }
         break;
       case "ERROR":
         this._setStatus("error");
@@ -6361,14 +6367,26 @@ class ExotelAIAssistController extends EventEmitter {
     }
   }
   _handleServerPayload(raw) {
+    var _a;
     let parsed;
     try {
       parsed = JSON.parse(raw);
-    } catch (_a) {
+    } catch (_b) {
       this.emit("error", new Error(`Failed to parse server message: ${raw}`));
       return;
     }
     this.emit("raw", parsed);
+    // Auth error messages arrive before the server closes the connection.
+    // Treat both as fatal — the server will follow up with a 4001/4002 close.
+    const msgType = parsed.type;
+    if (msgType === "auth_failed" || msgType === "auth_timeout") {
+      const detail = (_a = parsed.error) !== null && _a !== void 0 ? _a : msgType;
+      const err = new Error(detail);
+      err.code = msgType.toUpperCase();
+      this._setStatus("error");
+      this.emit("error", err);
+      return;
+    }
     if (parsed.config) {
       this.emit("botConfig", parsed.config);
     }
@@ -6543,7 +6561,7 @@ function styleInject(css, ref) {
   }
 }
 
-var css_248z = ".oa-panel{background:#fff;font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif}.oa-panel,.oa-theme-root{display:flex;flex-direction:column;height:100%;min-height:0;width:100%}.oa-theme-root{position:relative}.oa-header-title{color:#111827;font-size:16px;font-weight:600;line-height:20px;margin:0}.oa-tabs{width:100%}.oa-tabs-content{display:flex;flex:1;flex-direction:column;min-height:0;overflow:hidden}.oa-tabs-list{border-bottom:1px solid #e5e7eb;display:flex;gap:20px;padding:0}.oa-tabs-trigger{align-items:center;background:transparent;border:none;border-radius:0;color:#6b7280;cursor:pointer;display:inline-flex;font-size:15px;font-weight:500;gap:6px;outline:none;padding:10px 0;position:relative}.oa-tabs-trigger:hover{color:#374151}.oa-tabs-trigger[data-state=active]{color:#2563eb}.oa-tabs-trigger[data-state=active]:after{background:#2563eb;border-radius:2px;bottom:-1px;content:\"\";height:2px;left:0;position:absolute;right:0}.oa-suggestion-card{border:1px solid rgba(17,24,39,.04);border-radius:12px;padding:12px}.oa-suggestion-card--recent-wrapper{animation:oa-suggestion-enter .4s ease-out,oa-border-shimmer 3s ease-in-out .4s infinite;background:linear-gradient(90deg,#7c3aed,#e11d48,#7c3aed);background-size:200% 100%;border-radius:12px;padding:2px}.oa-suggestion-card--recent-wrapper .oa-suggestion-card--recent{border:none}.oa-suggestion-card--recent{animation:none;background:linear-gradient(90deg,#f5f3ff 0,#fef3f2 50%,#fff7ed);border-radius:9px}.oa-suggestion-card--older{background:#f5f5f5;border:1px solid #e5e7eb}.oa-suggestion-card--older .oa-suggestion-text{color:#252525}@keyframes oa-suggestion-enter{0%{opacity:.3;transform:scale(.97)}to{opacity:1;transform:scale(1)}}@keyframes oa-border-shimmer{0%,to{background-position:0 50%}50%{background-position:100% 50%}}.oa-suggestion-text{color:#111827;font-size:13px;line-height:18px;white-space:pre-wrap}.oa-copy-icon{align-items:center;background:#fff;border:1px solid #e5e7eb;border-radius:8px;color:#6b7280;cursor:pointer;display:inline-flex;height:32px;justify-content:center;min-height:32px;min-width:32px;padding:0;width:32px}.oa-copy-icon:hover{background:#f9fafb;color:#374151}@keyframes oa-toast-in{0%{opacity:0;transform:translateY(6px)}to{opacity:1;transform:translateY(0)}}.oa-muted{color:#6b7280}";
+var css_248z = ".oa-panel{background:#fff;font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif}.oa-panel,.oa-theme-root{display:flex;flex-direction:column;height:100%;min-height:0;width:100%}.oa-theme-root{position:relative}.oa-header-title{color:#111827;font-size:16px;font-weight:600;line-height:20px;margin:0}.oa-tabs{width:100%}.oa-tabs-content{flex:1;min-height:0;overflow:hidden}.oa-tabs-content[data-state=inactive]{display:none!important}.oa-tabs-content[data-state=active]{display:flex;flex-direction:column}.oa-tabs-list{border-bottom:1px solid #e5e7eb;display:flex;gap:20px;padding:0}.oa-tabs-trigger{align-items:center;background:transparent;border:none;border-radius:0;color:#6b7280;cursor:pointer;display:inline-flex;font-size:15px;font-weight:500;gap:6px;outline:none;padding:10px 0;position:relative}.oa-tabs-trigger:hover{color:#374151}.oa-tabs-trigger[data-state=active]{color:#2563eb}.oa-tabs-trigger[data-state=active]:after{background:#2563eb;border-radius:2px;bottom:-1px;content:\"\";height:2px;left:0;position:absolute;right:0}.oa-suggestion-card{border:1px solid rgba(17,24,39,.04);border-radius:12px;padding:12px}.oa-suggestion-card--recent-wrapper{animation:oa-suggestion-enter .4s ease-out,oa-border-shimmer 3s ease-in-out .4s infinite;background:linear-gradient(90deg,#7c3aed,#e11d48,#7c3aed);background-size:200% 100%;border-radius:12px;padding:2px}.oa-suggestion-card--recent-wrapper .oa-suggestion-card--recent{border:none}.oa-suggestion-card--recent{animation:none;background:linear-gradient(90deg,#f5f3ff 0,#fef3f2 50%,#fff7ed);border-radius:9px}.oa-suggestion-card--older{background:#f5f5f5;border:1px solid #e5e7eb}.oa-suggestion-card--older .oa-suggestion-text{color:#252525}@keyframes oa-suggestion-enter{0%{opacity:.3;transform:scale(.97)}to{opacity:1;transform:scale(1)}}@keyframes oa-border-shimmer{0%,to{background-position:0 50%}50%{background-position:100% 50%}}.oa-suggestion-text{color:#111827;font-size:13px;line-height:18px;white-space:pre-wrap}.oa-copy-icon{align-items:center;background:#fff;border:1px solid #e5e7eb;border-radius:8px;color:#6b7280;cursor:pointer;display:inline-flex;height:32px;justify-content:center;min-height:32px;min-width:32px;padding:0;width:32px}.oa-copy-icon:hover{background:#f9fafb;color:#374151}@keyframes oa-toast-in{0%{opacity:0;transform:translateY(6px)}to{opacity:1;transform:translateY(0)}}.oa-muted{color:#6b7280}";
 styleInject(css_248z);
 
 function Sparkle() {

package/dist/types/index.d.ts

@@ -82,6 +82,7 @@ export type WorkerInboundMessage = {
     type: "CONNECTED";
 } | {
     type: "DISCONNECTED";
+    code?: number;
 } | {
     type: "ERROR";
     message: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exotel-npm-dev/exotel-ai-assist",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "AI-powered real-time suggestions, transcript, and sentiment for agent calls",
   "license": "Apache-2.0",
   "main": "dist/index.js",