@frontera-sdk/chat 1.52.43 → 1.52.44

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontera-sdk/chat",
-  "version": "1.52.43",
+  "version": "1.52.44",
   "description": "Typed client and React hooks for chatting with a Frontera agent from your own application.",
   "keywords": [
     "frontera",
@@ -50,6 +50,10 @@
       "types": "./src/token-session.ts",
       "import": "./src/token-session.ts"
     },
+    "./public-token": {
+      "types": "./src/public-token.ts",
+      "import": "./src/public-token.ts"
+    },
     "./callback-page": {
       "types": "./src/callback-page.ts",
       "import": "./src/callback-page.ts"
@@ -77,7 +81,7 @@
     "smoke": "bun run scripts/smoke.ts"
   },
   "dependencies": {
-    "@frontera-sdk/core": "1.52.43"
+    "@frontera-sdk/core": "1.52.44"
   },
   "peerDependencies": {
     "@ai-sdk/react": "^3.0.0",

package/src/public-token.ts

@@ -0,0 +1,79 @@
+/**
+ * Start a chat for an anonymous visitor of a public website, from the browser.
+ *
+ * A public website key (`fpk_…`) is made to sit in page JavaScript: it reaches
+ * one Agent, only from the origins listed on it, and only to mint a short-lived
+ * token that chats and does nothing else. So, unlike the server exchange in
+ * `auth.ts`, this runs where the visitor is and needs no backend of your own.
+ *
+ * The platform names the visitor, not the page. What comes back with the first
+ * token is a visitor pass; this keeps it in `localStorage` and shows it at the
+ * next mint, so a returning visitor gets their conversations back. Storage can
+ * be unavailable (a private window, blocked site data) — the chat then still
+ * works, and each page load is simply a new visitor.
+ */
+
+import { errorFromResponse } from '@frontera-sdk/core/errors'
+
+import type { ChatToken } from './types'
+
+export interface PublicChatTokenOptions {
+  /** Your deployment's API origin, for example `https://api.acme.example`. */
+  apiBaseUrl: string
+  /** The Agent's public website key, `fpk_…`. */
+  publishableKey: string
+  /** Test seam. Defaults to the global. */
+  fetchImpl?: typeof fetch
+  /** Test seam. Defaults to `localStorage`, when there is one. */
+  storage?: Pick<Storage, 'getItem' | 'setItem' | 'removeItem'> | null
+}
+
+/** One pass per key, so two Agents on one site never share a visitor. */
+export function visitorPassStorageKey(publishableKey: string): string {
+  return `frontera:visitor:${publishableKey.slice(0, 12)}`
+}
+
+function defaultStorage(): PublicChatTokenOptions['storage'] {
+  try {
+    return typeof localStorage === 'undefined' ? null : localStorage
+  } catch {
+    return null
+  }
+}
+
+function read(storage: PublicChatTokenOptions['storage'], key: string): string | null {
+  try {
+    return storage?.getItem(key) ?? null
+  } catch {
+    return null
+  }
+}
+
+function write(storage: PublicChatTokenOptions['storage'], key: string, value: string): void {
+  try {
+    storage?.setItem(key, value)
+  } catch {
+    // Full or blocked: the next visit is a new visitor, nothing more.
+  }
+}
+
+export async function mintPublicChatToken(options: PublicChatTokenOptions): Promise<ChatToken> {
+  const storage = options.storage === undefined ? defaultStorage() : options.storage
+  const passKey = visitorPassStorageKey(options.publishableKey)
+  const visitorPass = read(storage, passKey)
+
+  const response = await (options.fetchImpl ?? fetch)(`${options.apiBaseUrl}/v1/chat-tokens/public`, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    // Never `include`: this call carries the key, not anyone's cookies.
+    credentials: 'omit',
+    body: JSON.stringify({ publishableKey: options.publishableKey, ...(visitorPass ? { visitorPass } : {}) }),
+  })
+  const body = (await response.json().catch(() => null)) as
+    | { data?: { token: string; expiresAt: string; visitorPass?: string } }
+    | null
+  if (!response.ok || !body?.data) throw errorFromResponse(response.status, body)
+
+  if (body.data.visitorPass) write(storage, passKey, body.data.visitorPass)
+  return { token: body.data.token, expiresAt: body.data.expiresAt }
+}