@fstacksoftware/chatwoot-embed 1.2.0

package/README.md

@@ -0,0 +1,125 @@
+# @fstacksoftware/chatwoot-embed
+
+Chatwoot widget cho **Shopify embedded app** (Remix/React):
+
+- Giữ phiên chat khi app chạy trong iframe Shopify admin (cookie bị chặn → shim qua localStorage)
+- Identity validation (HMAC) tự động
+- Lưu phiên vào contact attribute `init_session` → **mọi thiết bị của 1 shop dùng chung 1 cuộc chat**
+
+## Cài đặt
+
+```bash
+npm i @fstacksoftware/chatwoot-embed
+```
+
+## Chuẩn bị phía Chatwoot (1 lần)
+
+1. Inbox (Website) → **Configuration → Identity Validation** → copy HMAC token
+2. Inbox → Settings: bật _Allow messages after conversation resolved_, tắt _Allow users to end conversation_
+3. Tạo agent riêng (vd `API Bot`) → Profile → copy **Access Token**
+4. Token phiên không hết hạn:
+    ```bash
+    docker compose exec rails bundle exec rails runner \
+      'c=InstallationConfig.find_or_initialize_by(name:"WIDGET_TOKEN_EXPIRY"); c.value="36500"; c.locked=false; c.save!'
+    ```
+
+## ENV
+
+```env
+CHATWOOT_BASE_URL=https://we.fstack.asia
+CHATWOOT_WEBSITE_TOKEN=xxx
+CHATWOOT_ACCOUNT_ID=1
+CHATWOOT_API_TOKEN=xxx
+CHATWOOT_HMAC_TOKEN=xxx
+```
+
+## Sử dụng (Remix + Shopify)
+
+### 1. Server instance — `app/chatwoot.server.ts`
+
+```ts
+import { createChatwootServer } from "@fstacksoftware/chatwoot-embed";
+
+export const chatwoot = createChatwootServer({
+    baseUrl: process.env.CHATWOOT_BASE_URL!,
+    websiteToken: process.env.CHATWOOT_WEBSITE_TOKEN!,
+    apiToken: process.env.CHATWOOT_API_TOKEN!,
+    accountId: process.env.CHATWOOT_ACCOUNT_ID,
+    hmacToken: process.env.CHATWOOT_HMAC_TOKEN,
+});
+```
+
+### 2. Loader — `app/root.tsx`
+
+```ts
+import { chatwoot } from "./chatwoot.server";
+
+export async function loader({ request }: LoaderFunctionArgs) {
+    const { session } = await authenticate.admin(request);
+    return {
+        // ...
+        chatwootBoot: await chatwoot.getBootData(session.shop),
+    };
+}
+```
+
+### 3. Route lưu phiên — `app/routes/api.chatwoot-session.ts`
+
+```ts
+import type { ActionFunctionArgs } from "@remix-run/node";
+import { authenticate } from "../shopify.server";
+import { chatwoot } from "../chatwoot.server";
+
+export async function action({ request }: ActionFunctionArgs) {
+    const { session } = await authenticate.admin(request);
+    return chatwoot.handleSessionRequest(request, session.shop);
+}
+```
+
+### 4. Client
+
+```tsx
+import { useChatwoot, openChat } from "@fstacksoftware/chatwoot-embed";
+
+function App() {
+    const { chatwootBoot } = useLoaderData<typeof loader>();
+    const shop = useShop(); // dữ liệu shop của app bạn
+
+    useChatwoot({
+        boot: chatwootBoot,
+        user: { name: shop?.name, email: shop?.email },
+        attributes: { app: "Kivoly", shopify_plan: shop?.planDisplayName },
+        disabled:
+            typeof window !== "undefined" &&
+            localStorage.getItem("supportAgent") === "true",
+    });
+
+    return <button onClick={openChat}>Chat with us</button>;
+}
+```
+
+Hoặc dạng component: `<ChatwootWidget boot={chatwootBoot} user={...} />`
+
+## API — tất cả import từ `@fstacksoftware/chatwoot-embed`
+
+**Server** (loader/action):
+
+| Hàm                                                   | Mô tả                                                                           |
+| ----------------------------------------------------- | ------------------------------------------------------------------------------- |
+| `createChatwootServer(config)`                        | Tạo instance                                                                    |
+| `.getBootData(identifier)`                            | `{ baseUrl, websiteToken, identifier, identifierHash, initSession }` cho loader |
+| `.handleSessionRequest(request, identifier)`          | Xử lý POST lưu `init_session`                                                   |
+| `await .identifierHash(identifier)`                   | HMAC SHA256 (Web Crypto)                                                        |
+| `.getInitSession(id)` / `.saveInitSession(id, token)` | Đọc/ghi thủ công                                                                |
+
+**React**: `useChatwoot({ boot, user?, attributes?, sessionEndpoint?, settings?, disabled? })`, `<ChatwootWidget />`
+
+**Client**: `openChat`, `closeChat`, `toggleChat`, `setChatVisible`, `setChatAttributes`, `resetChatwoot`, `getChatwoot`, `loadChatwoot`, `onChatwootReady`, `identifyChatwoot`
+
+> Chỉ gọi `createChatwootServer(...)` trong file `*.server.ts` để `apiToken`/`hmacToken` không bao giờ vào bundle client.
+
+## Bảo mật
+
+- `apiToken`, `hmacToken` chỉ dùng ở server (`/server` entry).
+- `init_session` chỉ được ghi khi token thuộc đúng contact của shop đã `authenticate.admin`.
+- Nên bật **Enforce user identity validation** sau khi chạy ổn.

package/dist/index.cjs

@@ -0,0 +1,340 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ChatwootWidget: () => ChatwootWidget,
+  closeChat: () => closeChat,
+  createChatwootServer: () => createChatwootServer,
+  getChatwoot: () => getChatwoot,
+  identifyChatwoot: () => identifyChatwoot,
+  installCookieShim: () => installCookieShim,
+  isInIframe: () => isInIframe,
+  loadChatwoot: () => loadChatwoot,
+  onChatwootReady: () => onChatwootReady,
+  openChat: () => openChat,
+  resetChatwoot: () => resetChatwoot,
+  setChatAttributes: () => setChatAttributes,
+  setChatVisible: () => setChatVisible,
+  toggleChat: () => toggleChat,
+  useChatwoot: () => useChatwoot
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/client.ts
+var STORE_PREFIX = "cwcookie:";
+var CW_COOKIE_RE = /^\s*(cw_conversation|cw_user_[A-Za-z0-9]+)=([^;]*)/;
+var shimInstalled = false;
+var tokenListener;
+var isBrowser = () => typeof window !== "undefined" && typeof document !== "undefined";
+var storage = {
+  get(k) {
+    try {
+      return localStorage.getItem(k);
+    } catch {
+      return null;
+    }
+  },
+  set(k, v) {
+    try {
+      localStorage.setItem(k, v);
+    } catch {
+    }
+  },
+  remove(k) {
+    try {
+      localStorage.removeItem(k);
+    } catch {
+    }
+  },
+  keys(prefix) {
+    const out = [];
+    try {
+      for (let i = 0; i < localStorage.length; i++) {
+        const k = localStorage.key(i);
+        if (k?.startsWith(prefix)) out.push(k.slice(prefix.length));
+      }
+    } catch {
+    }
+    return out;
+  }
+};
+var isInIframe = () => {
+  if (!isBrowser()) return false;
+  try {
+    return window.self !== window.top;
+  } catch {
+    return true;
+  }
+};
+var installCookieShim = () => {
+  if (!isBrowser() || shimInstalled || !isInIframe()) return;
+  const native = Object.getOwnPropertyDescriptor(Document.prototype, "cookie");
+  if (!native?.get || !native?.set) return;
+  const nGet = native.get;
+  const nSet = native.set;
+  Object.defineProperty(document, "cookie", {
+    configurable: true,
+    get() {
+      let value = nGet.call(document);
+      for (const name of storage.keys(STORE_PREFIX)) {
+        if (new RegExp(`(^|;\\s*)${name}=`).test(value)) continue;
+        const v = storage.get(STORE_PREFIX + name);
+        if (v) value = value ? `${value}; ${name}=${v}` : `${name}=${v}`;
+      }
+      return value;
+    },
+    set(raw) {
+      const m = CW_COOKIE_RE.exec(raw);
+      if (m) {
+        const [, name, val] = m;
+        const expired = !val || /expires=Thu, 01 Jan 1970/i.test(raw) || /max-age=(0|-)/i.test(raw);
+        if (expired) {
+          storage.remove(STORE_PREFIX + name);
+        } else {
+          const changed = storage.get(STORE_PREFIX + name) !== val;
+          storage.set(STORE_PREFIX + name, val);
+          if (changed && name === "cw_conversation") tokenListener?.(val);
+        }
+      }
+      nSet.call(document, raw);
+    }
+  });
+  shimInstalled = true;
+};
+var seedSession = (token) => {
+  if (isInIframe()) storage.set(`${STORE_PREFIX}cw_conversation`, token);
+  else document.cookie = `cw_conversation=${token}; path=/; max-age=31536000; SameSite=Lax`;
+};
+var getChatwoot = () => isBrowser() ? window.$chatwoot : void 0;
+var loadChatwoot = (opts) => {
+  if (!isBrowser() || !opts.baseUrl || !opts.websiteToken) return;
+  if (window.chatwootSDK || document.getElementById("chatwoot-sdk")) return;
+  const baseUrl = opts.baseUrl.replace(/\/$/, "");
+  tokenListener = (token) => {
+    opts.onSessionToken?.(token);
+    if (opts.sessionEndpoint) {
+      fetch(opts.sessionEndpoint, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ token })
+      }).catch(() => {
+      });
+    }
+  };
+  installCookieShim();
+  if (opts.sessionToken) seedSession(opts.sessionToken);
+  window.chatwootSettings = { position: "right", type: "standard", ...opts.settings };
+  const script = document.createElement("script");
+  script.id = "chatwoot-sdk";
+  script.src = `${baseUrl}/packs/js/sdk.js`;
+  script.async = true;
+  script.onload = () => window.chatwootSDK?.run({ websiteToken: opts.websiteToken, baseUrl });
+  document.body.appendChild(script);
+};
+var onChatwootReady = (callback) => {
+  if (!isBrowser()) return () => {
+  };
+  if (window.$chatwoot?.hasLoaded) {
+    callback();
+    return () => {
+    };
+  }
+  window.addEventListener("chatwoot:ready", callback);
+  return () => window.removeEventListener("chatwoot:ready", callback);
+};
+var identifyChatwoot = (identifier, user, attributes) => {
+  const cw = getChatwoot();
+  if (!cw || !identifier) return;
+  cw.setUser(identifier, user);
+  if (attributes && Object.keys(attributes).length) cw.setCustomAttributes(attributes);
+};
+var openChat = () => getChatwoot()?.toggle("open");
+var closeChat = () => getChatwoot()?.toggle("close");
+var toggleChat = () => {
+  const cw = getChatwoot();
+  if (cw) cw.toggle(cw.isOpen ? "close" : "open");
+};
+var setChatVisible = (visible) => getChatwoot()?.toggleBubbleVisibility(visible ? "show" : "hide");
+var setChatAttributes = (attrs) => getChatwoot()?.setCustomAttributes(attrs);
+var resetChatwoot = () => getChatwoot()?.reset();
+
+// src/react.ts
+var import_react = require("react");
+function useChatwoot({
+  boot,
+  user,
+  attributes,
+  sessionEndpoint = "/api/chatwoot-session",
+  settings,
+  disabled
+}) {
+  const loaded = (0, import_react.useRef)(false);
+  (0, import_react.useEffect)(() => {
+    if (disabled || !boot || loaded.current) return;
+    loaded.current = true;
+    loadChatwoot({
+      baseUrl: boot.baseUrl,
+      websiteToken: boot.websiteToken,
+      sessionToken: boot.initSession,
+      sessionEndpoint: sessionEndpoint || void 0,
+      settings
+    });
+  }, [disabled, boot?.baseUrl, boot?.websiteToken]);
+  const userKey = JSON.stringify(user ?? {});
+  const attrKey = JSON.stringify(attributes ?? {});
+  (0, import_react.useEffect)(() => {
+    if (disabled || !boot?.identifier) return;
+    return onChatwootReady(
+      () => identifyChatwoot(boot.identifier, { ...user, identifier_hash: boot.identifierHash || void 0 }, attributes)
+    );
+  }, [disabled, boot?.identifier, boot?.identifierHash, userKey, attrKey]);
+}
+function ChatwootWidget(props) {
+  useChatwoot(props);
+  return null;
+}
+
+// src/server.ts
+var decodeJwt = (token) => {
+  try {
+    const b64 = token.split(".")[1].replace(/-/g, "+").replace(/_/g, "/");
+    const json = decodeURIComponent(
+      atob(b64.padEnd(b64.length + (4 - b64.length % 4) % 4, "=")).split("").map((c) => "%" + c.charCodeAt(0).toString(16).padStart(2, "0")).join("")
+    );
+    return JSON.parse(json);
+  } catch {
+    return null;
+  }
+};
+var hmacSha256Hex = async (key, message) => {
+  const enc = new TextEncoder();
+  const k = await globalThis.crypto.subtle.importKey("raw", enc.encode(key), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  const sig = await globalThis.crypto.subtle.sign("HMAC", k, enc.encode(message));
+  return Array.from(new Uint8Array(sig), (b) => b.toString(16).padStart(2, "0")).join("");
+};
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+function createChatwootServer(config) {
+  const base = config.baseUrl.replace(/\/$/, "");
+  const account = config.accountId ?? 1;
+  const attr = config.sessionAttribute ?? "init_session";
+  const timeout = config.timeoutMs ?? 5e3;
+  const log = config.logger ?? console;
+  const ttl = config.cacheTtlMs ?? 10 * 6e4;
+  const cache = /* @__PURE__ */ new Map();
+  const cacheSet = (id, token) => {
+    if (!ttl) return;
+    if (cache.size > 5e3) cache.clear();
+    cache.set(id, { token, until: Date.now() + ttl });
+  };
+  const api = async (path, init = {}) => {
+    try {
+      const res = await fetch(`${base}/api/v1/accounts/${account}${path}`, {
+        ...init,
+        headers: { "Content-Type": "application/json", api_access_token: config.apiToken, ...init.headers ?? {} },
+        signal: AbortSignal.timeout(timeout)
+      });
+      if (!res.ok) {
+        log.error(`[chatwoot] ${init.method ?? "GET"} ${path} -> ${res.status}`);
+        return null;
+      }
+      return await res.json();
+    } catch (e) {
+      log.error(`[chatwoot] ${path}: ${e.message}`);
+      return null;
+    }
+  };
+  const identifierHash = async (identifier) => config.hmacToken && identifier ? hmacSha256Hex(config.hmacToken, identifier) : "";
+  const isUsableToken = (token) => {
+    const p = decodeJwt(token);
+    return !!p?.source_id && (!p.exp || p.exp * 1e3 > Date.now() + 864e5);
+  };
+  const findContact = async (identifier) => {
+    const data = await api(`/contacts/search?q=${encodeURIComponent(identifier)}`);
+    return data?.payload?.find((c) => c.identifier === identifier) ?? null;
+  };
+  const getInitSession = async (identifier) => {
+    const hit = cache.get(identifier);
+    if (hit && hit.until > Date.now() && (!hit.token || isUsableToken(hit.token))) return hit.token;
+    const raw = (await findContact(identifier))?.custom_attributes?.[attr];
+    const token = typeof raw === "string" && isUsableToken(raw) ? raw : null;
+    if (token) cacheSet(identifier, token);
+    return token;
+  };
+  const saveInitSession = async (identifier, token) => {
+    const payload = decodeJwt(token);
+    if (!payload?.source_id) return { ok: false, reason: "invalid_token" };
+    let contact = null;
+    for (let i = 0; i < 6 && !contact; i++) {
+      if (i) await sleep(1e3);
+      contact = await findContact(identifier);
+    }
+    if (!contact) return { ok: false, reason: "contact_not_found" };
+    const full = await api(`/contacts/${contact.id}`);
+    const sources = full?.payload?.contact_inboxes?.map((ci) => ci.source_id);
+    if (sources && !sources.includes(payload.source_id)) return { ok: false, reason: "token_not_owned" };
+    if (contact.custom_attributes?.[attr] === token) {
+      cacheSet(identifier, token);
+      return { ok: true, reason: "unchanged" };
+    }
+    const updated = await api(`/contacts/${contact.id}`, {
+      method: "PUT",
+      body: JSON.stringify({ custom_attributes: { ...contact.custom_attributes ?? {}, [attr]: token } })
+    });
+    if (updated) cacheSet(identifier, token);
+    return updated ? { ok: true, reason: "saved" } : { ok: false, reason: "update_failed" };
+  };
+  const getBootData = async (identifier) => ({
+    baseUrl: base,
+    websiteToken: config.websiteToken,
+    identifier,
+    identifierHash: await identifierHash(identifier),
+    initSession: await getInitSession(identifier)
+  });
+  const handleSessionRequest = async (request, identifier) => {
+    const body = await request.json().catch(() => ({}));
+    if (typeof body.token !== "string" || body.token.split(".").length !== 3) {
+      return Response.json({ ok: false, reason: "invalid_token" }, { status: 400 });
+    }
+    const result = await saveInitSession(identifier, body.token);
+    return Response.json(result, { status: result.ok ? 200 : 422 });
+  };
+  const clearCache = (identifier) => identifier ? cache.delete(identifier) : cache.clear();
+  return { identifierHash, findContact, clearCache, getInitSession, saveInitSession, getBootData, handleSessionRequest };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ChatwootWidget,
+  closeChat,
+  createChatwootServer,
+  getChatwoot,
+  identifyChatwoot,
+  installCookieShim,
+  isInIframe,
+  loadChatwoot,
+  onChatwootReady,
+  openChat,
+  resetChatwoot,
+  setChatAttributes,
+  setChatVisible,
+  toggleChat,
+  useChatwoot
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/client.ts","../src/react.ts","../src/server.ts"],"sourcesContent":["// 1 entry duy nhất: import { ... } from '@fstacksoftware/chatwoot-embed'\nexport * from \"./client\";\nexport * from \"./react\";\nexport * from \"./server\";\nexport type * from \"./types\";\n","// Client: chạy trên trình duyệt\nimport type { ChatwootInstance, ChatwootSettings, ChatwootUser } from './types';\n\n\nconst STORE_PREFIX = 'cwcookie:';\nconst CW_COOKIE_RE = /^\\s*(cw_conversation|cw_user_[A-Za-z0-9]+)=([^;]*)/;\n\nlet shimInstalled = false;\nlet tokenListener: ((token: string) => void) | undefined;\n\nconst isBrowser = () => typeof window !== 'undefined' && typeof document !== 'undefined';\n\nconst storage = {\n\tget(k: string) {\n\t\ttry { return localStorage.getItem(k); } catch { return null; }\n\t},\n\tset(k: string, v: string) {\n\t\ttry { localStorage.setItem(k, v); } catch { /* blocked */ }\n\t},\n\tremove(k: string) {\n\t\ttry { localStorage.removeItem(k); } catch { /* blocked */ }\n\t},\n\tkeys(prefix: string) {\n\t\tconst out: string[] = [];\n\t\ttry {\n\t\t\tfor (let i = 0; i < localStorage.length; i++) {\n\t\t\t\tconst k = localStorage.key(i);\n\t\t\t\tif (k?.startsWith(prefix)) out.push(k.slice(prefix.length));\n\t\t\t}\n\t\t} catch { /* blocked */ }\n\t\treturn out;\n\t},\n};\n\nexport const isInIframe = () => {\n\tif (!isBrowser()) return false;\n\ttry {\n\t\treturn window.self !== window.top;\n\t} catch {\n\t\treturn true;\n\t}\n};\n\n/**\n * Trong iframe khác site (Shopify admin), cookie SameSite=Lax của SDK bị chặn -> mỗi lần F5 là phiên mới.\n * Shim document.cookie cho key cw_*: ghi -> localStorage, đọc -> từ localStorage.\n */\nexport const installCookieShim = () => {\n\tif (!isBrowser() || shimInstalled || !isInIframe()) return;\n\tconst native = Object.getOwnPropertyDescriptor(Document.prototype, 'cookie');\n\tif (!native?.get || !native?.set) return;\n\tconst nGet = native.get;\n\tconst nSet = native.set;\n\n\tObject.defineProperty(document, 'cookie', {\n\t\tconfigurable: true,\n\t\tget() {\n\t\t\tlet value: string = nGet.call(document);\n\t\t\tfor (const name of storage.keys(STORE_PREFIX)) {\n\t\t\t\tif (new RegExp(`(^|;\\\\s*)${name}=`).test(value)) continue;\n\t\t\t\tconst v = storage.get(STORE_PREFIX + name);\n\t\t\t\tif (v) value = value ? `${value}; ${name}=${v}` : `${name}=${v}`;\n\t\t\t}\n\t\t\treturn value;\n\t\t},\n\t\tset(raw: string) {\n\t\t\tconst m = CW_COOKIE_RE.exec(raw);\n\t\t\tif (m) {\n\t\t\t\tconst [, name, val] = m;\n\t\t\t\tconst expired = !val || /expires=Thu, 01 Jan 1970/i.test(raw) || /max-age=(0|-)/i.test(raw);\n\t\t\t\tif (expired) {\n\t\t\t\t\tstorage.remove(STORE_PREFIX + name);\n\t\t\t\t} else {\n\t\t\t\t\tconst changed = storage.get(STORE_PREFIX + name) !== val;\n\t\t\t\t\tstorage.set(STORE_PREFIX + name, val);\n\t\t\t\t\tif (changed && name === 'cw_conversation') tokenListener?.(val);\n\t\t\t\t}\n\t\t\t}\n\t\t\tnSet.call(document, raw);\n\t\t},\n\t});\n\tshimInstalled = true;\n};\n\nconst seedSession = (token: string) => {\n\tif (isInIframe()) storage.set(`${STORE_PREFIX}cw_conversation`, token);\n\telse document.cookie = `cw_conversation=${token}; path=/; max-age=31536000; SameSite=Lax`;\n};\n\nexport type LoadChatwootOptions = {\n\tbaseUrl: string;\n\twebsiteToken: string;\n\t/** Token phiên đã lưu (init_session) -> mở lại đúng phiên/cuộc chat cũ */\n\tsessionToken?: string | null;\n\t/** Gọi khi Chatwoot cấp token phiên mới */\n\tonSessionToken?: (token: string) => void;\n\t/** Nếu set, tự POST { token } tới endpoint này khi có token mới (vd: /api/chatwoot-session) */\n\tsessionEndpoint?: string;\n\tsettings?: ChatwootSettings;\n};\n\nexport const getChatwoot = (): ChatwootInstance | undefined => (isBrowser() ? window.$chatwoot : undefined);\n\nexport const loadChatwoot = (opts: LoadChatwootOptions) => {\n\tif (!isBrowser() || !opts.baseUrl || !opts.websiteToken) return;\n\tif (window.chatwootSDK || document.getElementById('chatwoot-sdk')) return;\n\n\tconst baseUrl = opts.baseUrl.replace(/\\/$/, '');\n\ttokenListener = (token) => {\n\t\topts.onSessionToken?.(token);\n\t\tif (opts.sessionEndpoint) {\n\t\t\tfetch(opts.sessionEndpoint, {\n\t\t\t\tmethod: 'POST',\n\t\t\t\theaders: { 'Content-Type': 'application/json' },\n\t\t\t\tbody: JSON.stringify({ token }),\n\t\t\t}).catch(() => {});\n\t\t}\n\t};\n\n\tinstallCookieShim(); // phải trước khi inject sdk.js\n\tif (opts.sessionToken) seedSession(opts.sessionToken);\n\n\twindow.chatwootSettings = { position: 'right', type: 'standard', ...opts.settings };\n\tconst script = document.createElement('script');\n\tscript.id = 'chatwoot-sdk';\n\tscript.src = `${baseUrl}/packs/js/sdk.js`;\n\tscript.async = true;\n\tscript.onload = () => window.chatwootSDK?.run({ websiteToken: opts.websiteToken, baseUrl });\n\tdocument.body.appendChild(script);\n};\n\n/** Chạy callback khi widget sẵn sàng. Trả về hàm huỷ đăng ký. */\nexport const onChatwootReady = (callback: () => void) => {\n\tif (!isBrowser()) return () => {};\n\tif (window.$chatwoot?.hasLoaded) {\n\t\tcallback();\n\t\treturn () => {};\n\t}\n\twindow.addEventListener('chatwoot:ready', callback);\n\treturn () => window.removeEventListener('chatwoot:ready', callback);\n};\n\nexport const identifyChatwoot = (\n\tidentifier: string,\n\tuser: ChatwootUser,\n\tattributes?: Record<string, unknown>\n) => {\n\tconst cw = getChatwoot();\n\tif (!cw || !identifier) return;\n\tcw.setUser(identifier, user);\n\tif (attributes && Object.keys(attributes).length) cw.setCustomAttributes(attributes);\n};\n\nexport const openChat = () => getChatwoot()?.toggle('open');\nexport const closeChat = () => getChatwoot()?.toggle('close');\nexport const toggleChat = () => {\n\tconst cw = getChatwoot();\n\tif (cw) cw.toggle(cw.isOpen ? 'close' : 'open');\n};\nexport const setChatVisible = (visible: boolean) => getChatwoot()?.toggleBubbleVisibility(visible ? 'show' : 'hide');\nexport const setChatAttributes = (attrs: Record<string, unknown>) => getChatwoot()?.setCustomAttributes(attrs);\nexport const resetChatwoot = () => getChatwoot()?.reset();\n","import { useEffect, useRef } from 'react';\nimport { identifyChatwoot, loadChatwoot, onChatwootReady } from './client';\nimport type { ChatwootBootData, ChatwootSettings, ChatwootUser } from './types';\n\n\n\nexport type UseChatwootOptions = {\n\t/** Từ server: createChatwootServer(...).getBootData(shop) */\n\tboot: ChatwootBootData | null | undefined;\n\tuser?: Omit<ChatwootUser, 'identifier_hash'>;\n\tattributes?: Record<string, unknown>;\n\t/** Endpoint lưu init_session. Mặc định /api/chatwoot-session. false = tắt */\n\tsessionEndpoint?: string | false;\n\tsettings?: ChatwootSettings;\n\t/** true = không load widget (vd: support agent) */\n\tdisabled?: boolean;\n};\n\nexport function useChatwoot({\n\tboot,\n\tuser,\n\tattributes,\n\tsessionEndpoint = '/api/chatwoot-session',\n\tsettings,\n\tdisabled,\n}: UseChatwootOptions) {\n\tconst loaded = useRef(false);\n\n\tuseEffect(() => {\n\t\tif (disabled || !boot || loaded.current) return;\n\t\tloaded.current = true;\n\t\tloadChatwoot({\n\t\t\tbaseUrl: boot.baseUrl,\n\t\t\twebsiteToken: boot.websiteToken,\n\t\t\tsessionToken: boot.initSession,\n\t\t\tsessionEndpoint: sessionEndpoint || undefined,\n\t\t\tsettings,\n\t\t});\n\t\t// eslint-disable-next-line react-hooks/exhaustive-deps\n\t}, [disabled, boot?.baseUrl, boot?.websiteToken]);\n\n\tconst userKey = JSON.stringify(user ?? {});\n\tconst attrKey = JSON.stringify(attributes ?? {});\n\n\tuseEffect(() => {\n\t\tif (disabled || !boot?.identifier) return;\n\t\treturn onChatwootReady(() =>\n\t\t\tidentifyChatwoot(boot.identifier, { ...user, identifier_hash: boot.identifierHash || undefined }, attributes)\n\t\t);\n\t\t// eslint-disable-next-line react-hooks/exhaustive-deps\n\t}, [disabled, boot?.identifier, boot?.identifierHash, userKey, attrKey]);\n}\n\n/** Component tiện dụng: <ChatwootWidget boot={...} user={...} /> */\nexport function ChatwootWidget(props: UseChatwootOptions) {\n\tuseChatwoot(props);\n\treturn null;\n}\n","// Server-side helpers (gọi trong loader/action). Dùng Web Crypto -> không phụ thuộc node:crypto,\n// nên package chỉ cần 1 entry. apiToken/hmacToken chỉ được truyền ở code server (.server.ts).\nimport type { ChatwootBootData } from './types';\n\nexport type ChatwootServerConfig = {\n\tbaseUrl: string;\n\twebsiteToken: string;\n\t/** Access Token của agent dùng cho API (nên tạo agent riêng) */\n\tapiToken: string;\n\taccountId?: number | string;\n\t/** Inbox → Configuration → Identity Validation */\n\thmacToken?: string;\n\t/** Tên custom attribute lưu phiên. Mặc định: init_session */\n\tsessionAttribute?: string;\n\ttimeoutMs?: number;\n\t/** Cache init_session trong RAM theo identifier. Mặc định 10 phút. 0 = tắt */\n\tcacheTtlMs?: number;\n\tlogger?: Pick<Console, 'error'>;\n};\n\ntype CwContact = {\n\tid: number;\n\tidentifier: string | null;\n\tcustom_attributes?: Record<string, unknown>;\n\tcontact_inboxes?: { source_id: string }[];\n};\n\ntype JwtPayload = { source_id?: string; inbox_id?: number; exp?: number };\n\nexport type SaveResult = {\n\tok: boolean;\n\treason: 'saved' | 'unchanged' | 'invalid_token' | 'contact_not_found' | 'token_not_owned' | 'update_failed';\n};\n\nconst decodeJwt = (token: string): JwtPayload | null => {\n\ttry {\n\t\tconst b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n\t\tconst json = decodeURIComponent(\n\t\t\tatob(b64.padEnd(b64.length + ((4 - (b64.length % 4)) % 4), '='))\n\t\t\t\t.split('')\n\t\t\t\t.map((c) => '%' + c.charCodeAt(0).toString(16).padStart(2, '0'))\n\t\t\t\t.join('')\n\t\t);\n\t\treturn JSON.parse(json);\n\t} catch {\n\t\treturn null;\n\t}\n};\n\nconst hmacSha256Hex = async (key: string, message: string) => {\n\tconst enc = new TextEncoder();\n\tconst k = await globalThis.crypto.subtle.importKey('raw', enc.encode(key), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);\n\tconst sig = await globalThis.crypto.subtle.sign('HMAC', k, enc.encode(message));\n\treturn Array.from(new Uint8Array(sig), (b) => b.toString(16).padStart(2, '0')).join('');\n};\n\nconst sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\nexport function createChatwootServer(config: ChatwootServerConfig) {\n\tconst base = config.baseUrl.replace(/\\/$/, '');\n\tconst account = config.accountId ?? 1;\n\tconst attr = config.sessionAttribute ?? 'init_session';\n\tconst timeout = config.timeoutMs ?? 5000;\n\tconst log = config.logger ?? console;\n\tconst ttl = config.cacheTtlMs ?? 10 * 60_000;\n\tconst cache = new Map<string, { token: string | null; until: number }>();\n\tconst cacheSet = (id: string, token: string | null) => {\n\t\tif (!ttl) return;\n\t\tif (cache.size > 5000) cache.clear(); // chặn phình RAM\n\t\tcache.set(id, { token, until: Date.now() + ttl });\n\t};\n\n\tconst api = async <T>(path: string, init: RequestInit = {}): Promise<T | null> => {\n\t\ttry {\n\t\t\tconst res = await fetch(`${base}/api/v1/accounts/${account}${path}`, {\n\t\t\t\t...init,\n\t\t\t\theaders: { 'Content-Type': 'application/json', api_access_token: config.apiToken, ...(init.headers ?? {}) },\n\t\t\t\tsignal: AbortSignal.timeout(timeout),\n\t\t\t});\n\t\t\tif (!res.ok) {\n\t\t\t\tlog.error(`[chatwoot] ${init.method ?? 'GET'} ${path} -> ${res.status}`);\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\treturn (await res.json()) as T;\n\t\t} catch (e) {\n\t\t\tlog.error(`[chatwoot] ${path}: ${(e as Error).message}`);\n\t\t\treturn null;\n\t\t}\n\t};\n\n\tconst identifierHash = async (identifier: string) =>\n\t\tconfig.hmacToken && identifier ? hmacSha256Hex(config.hmacToken, identifier) : '';\n\n\tconst isUsableToken = (token: string) => {\n\t\tconst p = decodeJwt(token);\n\t\treturn !!p?.source_id && (!p.exp || p.exp * 1000 > Date.now() + 86_400_000);\n\t};\n\n\tconst findContact = async (identifier: string) => {\n\t\tconst data = await api<{ payload: CwContact[] }>(`/contacts/search?q=${encodeURIComponent(identifier)}`);\n\t\treturn data?.payload?.find((c) => c.identifier === identifier) ?? null;\n\t};\n\n\tconst getInitSession = async (identifier: string) => {\n\t\tconst hit = cache.get(identifier);\n\t\tif (hit && hit.until > Date.now() && (!hit.token || isUsableToken(hit.token))) return hit.token;\n\n\t\tconst raw = (await findContact(identifier))?.custom_attributes?.[attr];\n\t\tconst token = typeof raw === 'string' && isUsableToken(raw) ? raw : null;\n\t\tif (token) cacheSet(identifier, token); // không cache null: shop mới sẽ có token ngay sau lần chat đầu\n\t\treturn token;\n\t};\n\n\tconst saveInitSession = async (identifier: string, token: string): Promise<SaveResult> => {\n\t\tconst payload = decodeJwt(token);\n\t\tif (!payload?.source_id) return { ok: false, reason: 'invalid_token' };\n\n\t\tlet contact: CwContact | null = null;\n\t\tfor (let i = 0; i < 6 && !contact; i++) {\n\t\t\tif (i) await sleep(1000);\n\t\t\tcontact = await findContact(identifier);\n\t\t}\n\t\tif (!contact) return { ok: false, reason: 'contact_not_found' };\n\n\t\tconst full = await api<{ payload: CwContact }>(`/contacts/${contact.id}`);\n\t\tconst sources = full?.payload?.contact_inboxes?.map((ci) => ci.source_id);\n\t\tif (sources && !sources.includes(payload.source_id)) return { ok: false, reason: 'token_not_owned' };\n\t\tif (contact.custom_attributes?.[attr] === token) {\n\t\t\tcacheSet(identifier, token);\n\t\t\treturn { ok: true, reason: 'unchanged' };\n\t\t}\n\n\t\tconst updated = await api(`/contacts/${contact.id}`, {\n\t\t\tmethod: 'PUT',\n\t\t\tbody: JSON.stringify({ custom_attributes: { ...(contact.custom_attributes ?? {}), [attr]: token } }),\n\t\t});\n\t\tif (updated) cacheSet(identifier, token);\n\t\treturn updated ? { ok: true, reason: 'saved' } : { ok: false, reason: 'update_failed' };\n\t};\n\n\t/** Gọi trong loader, trả về cho client */\n\tconst getBootData = async (identifier: string): Promise<ChatwootBootData> => ({\n\t\tbaseUrl: base,\n\t\twebsiteToken: config.websiteToken,\n\t\tidentifier,\n\t\tidentifierHash: await identifierHash(identifier),\n\t\tinitSession: await getInitSession(identifier),\n\t});\n\n\t/** Dùng trong route action: return chatwoot.handleSessionRequest(request, session.shop) */\n\tconst handleSessionRequest = async (request: Request, identifier: string) => {\n\t\tconst body = (await request.json().catch(() => ({}))) as { token?: unknown };\n\t\tif (typeof body.token !== 'string' || body.token.split('.').length !== 3) {\n\t\t\treturn Response.json({ ok: false, reason: 'invalid_token' }, { status: 400 });\n\t\t}\n\t\tconst result = await saveInitSession(identifier, body.token);\n\t\treturn Response.json(result, { status: result.ok ? 200 : 422 });\n\t};\n\n\tconst clearCache = (identifier?: string) => (identifier ? cache.delete(identifier) : cache.clear());\n\n\treturn { identifierHash, findContact, clearCache, getInitSession, saveInitSession, getBootData, handleSessionRequest };\n}\n\nexport type ChatwootServer = ReturnType<typeof createChatwootServer>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACIA,IAAM,eAAe;AACrB,IAAM,eAAe;AAErB,IAAI,gBAAgB;AACpB,IAAI;AAEJ,IAAM,YAAY,MAAM,OAAO,WAAW,eAAe,OAAO,aAAa;AAE7E,IAAM,UAAU;AAAA,EACf,IAAI,GAAW;AACd,QAAI;AAAE,aAAO,aAAa,QAAQ,CAAC;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAM;AAAA,EAC9D;AAAA,EACA,IAAI,GAAW,GAAW;AACzB,QAAI;AAAE,mBAAa,QAAQ,GAAG,CAAC;AAAA,IAAG,QAAQ;AAAA,IAAgB;AAAA,EAC3D;AAAA,EACA,OAAO,GAAW;AACjB,QAAI;AAAE,mBAAa,WAAW,CAAC;AAAA,IAAG,QAAQ;AAAA,IAAgB;AAAA,EAC3D;AAAA,EACA,KAAK,QAAgB;AACpB,UAAM,MAAgB,CAAC;AACvB,QAAI;AACH,eAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC7C,cAAM,IAAI,aAAa,IAAI,CAAC;AAC5B,YAAI,GAAG,WAAW,MAAM,EAAG,KAAI,KAAK,EAAE,MAAM,OAAO,MAAM,CAAC;AAAA,MAC3D;AAAA,IACD,QAAQ;AAAA,IAAgB;AACxB,WAAO;AAAA,EACR;AACD;AAEO,IAAM,aAAa,MAAM;AAC/B,MAAI,CAAC,UAAU,EAAG,QAAO;AACzB,MAAI;AACH,WAAO,OAAO,SAAS,OAAO;AAAA,EAC/B,QAAQ;AACP,WAAO;AAAA,EACR;AACD;AAMO,IAAM,oBAAoB,MAAM;AACtC,MAAI,CAAC,UAAU,KAAK,iBAAiB,CAAC,WAAW,EAAG;AACpD,QAAM,SAAS,OAAO,yBAAyB,SAAS,WAAW,QAAQ;AAC3E,MAAI,CAAC,QAAQ,OAAO,CAAC,QAAQ,IAAK;AAClC,QAAM,OAAO,OAAO;AACpB,QAAM,OAAO,OAAO;AAEpB,SAAO,eAAe,UAAU,UAAU;AAAA,IACzC,cAAc;AAAA,IACd,MAAM;AACL,UAAI,QAAgB,KAAK,KAAK,QAAQ;AACtC,iBAAW,QAAQ,QAAQ,KAAK,YAAY,GAAG;AAC9C,YAAI,IAAI,OAAO,YAAY,IAAI,GAAG,EAAE,KAAK,KAAK,EAAG;AACjD,cAAM,IAAI,QAAQ,IAAI,eAAe,IAAI;AACzC,YAAI,EAAG,SAAQ,QAAQ,GAAG,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC;AAAA,MAC/D;AACA,aAAO;AAAA,IACR;AAAA,IACA,IAAI,KAAa;AAChB,YAAM,IAAI,aAAa,KAAK,GAAG;AAC/B,UAAI,GAAG;AACN,cAAM,CAAC,EAAE,MAAM,GAAG,IAAI;AACtB,cAAM,UAAU,CAAC,OAAO,4BAA4B,KAAK,GAAG,KAAK,iBAAiB,KAAK,GAAG;AAC1F,YAAI,SAAS;AACZ,kBAAQ,OAAO,eAAe,IAAI;AAAA,QACnC,OAAO;AACN,gBAAM,UAAU,QAAQ,IAAI,eAAe,IAAI,MAAM;AACrD,kBAAQ,IAAI,eAAe,MAAM,GAAG;AACpC,cAAI,WAAW,SAAS,kBAAmB,iBAAgB,GAAG;AAAA,QAC/D;AAAA,MACD;AACA,WAAK,KAAK,UAAU,GAAG;AAAA,IACxB;AAAA,EACD,CAAC;AACD,kBAAgB;AACjB;AAEA,IAAM,cAAc,CAAC,UAAkB;AACtC,MAAI,WAAW,EAAG,SAAQ,IAAI,GAAG,YAAY,mBAAmB,KAAK;AAAA,MAChE,UAAS,SAAS,mBAAmB,KAAK;AAChD;AAcO,IAAM,cAAc,MAAqC,UAAU,IAAI,OAAO,YAAY;AAE1F,IAAM,eAAe,CAAC,SAA8B;AAC1D,MAAI,CAAC,UAAU,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,aAAc;AACzD,MAAI,OAAO,eAAe,SAAS,eAAe,cAAc,EAAG;AAEnE,QAAM,UAAU,KAAK,QAAQ,QAAQ,OAAO,EAAE;AAC9C,kBAAgB,CAAC,UAAU;AAC1B,SAAK,iBAAiB,KAAK;AAC3B,QAAI,KAAK,iBAAiB;AACzB,YAAM,KAAK,iBAAiB;AAAA,QAC3B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,MAC/B,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAClB;AAAA,EACD;AAEA,oBAAkB;AAClB,MAAI,KAAK,aAAc,aAAY,KAAK,YAAY;AAEpD,SAAO,mBAAmB,EAAE,UAAU,SAAS,MAAM,YAAY,GAAG,KAAK,SAAS;AAClF,QAAM,SAAS,SAAS,cAAc,QAAQ;AAC9C,SAAO,KAAK;AACZ,SAAO,MAAM,GAAG,OAAO;AACvB,SAAO,QAAQ;AACf,SAAO,SAAS,MAAM,OAAO,aAAa,IAAI,EAAE,cAAc,KAAK,cAAc,QAAQ,CAAC;AAC1F,WAAS,KAAK,YAAY,MAAM;AACjC;AAGO,IAAM,kBAAkB,CAAC,aAAyB;AACxD,MAAI,CAAC,UAAU,EAAG,QAAO,MAAM;AAAA,EAAC;AAChC,MAAI,OAAO,WAAW,WAAW;AAChC,aAAS;AACT,WAAO,MAAM;AAAA,IAAC;AAAA,EACf;AACA,SAAO,iBAAiB,kBAAkB,QAAQ;AAClD,SAAO,MAAM,OAAO,oBAAoB,kBAAkB,QAAQ;AACnE;AAEO,IAAM,mBAAmB,CAC/B,YACA,MACA,eACI;AACJ,QAAM,KAAK,YAAY;AACvB,MAAI,CAAC,MAAM,CAAC,WAAY;AACxB,KAAG,QAAQ,YAAY,IAAI;AAC3B,MAAI,cAAc,OAAO,KAAK,UAAU,EAAE,OAAQ,IAAG,oBAAoB,UAAU;AACpF;AAEO,IAAM,WAAW,MAAM,YAAY,GAAG,OAAO,MAAM;AACnD,IAAM,YAAY,MAAM,YAAY,GAAG,OAAO,OAAO;AACrD,IAAM,aAAa,MAAM;AAC/B,QAAM,KAAK,YAAY;AACvB,MAAI,GAAI,IAAG,OAAO,GAAG,SAAS,UAAU,MAAM;AAC/C;AACO,IAAM,iBAAiB,CAAC,YAAqB,YAAY,GAAG,uBAAuB,UAAU,SAAS,MAAM;AAC5G,IAAM,oBAAoB,CAAC,UAAmC,YAAY,GAAG,oBAAoB,KAAK;AACtG,IAAM,gBAAgB,MAAM,YAAY,GAAG,MAAM;;;ACjKxD,mBAAkC;AAkB3B,SAAS,YAAY;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AAAA,EAClB;AAAA,EACA;AACD,GAAuB;AACtB,QAAM,aAAS,qBAAO,KAAK;AAE3B,8BAAU,MAAM;AACf,QAAI,YAAY,CAAC,QAAQ,OAAO,QAAS;AACzC,WAAO,UAAU;AACjB,iBAAa;AAAA,MACZ,SAAS,KAAK;AAAA,MACd,cAAc,KAAK;AAAA,MACnB,cAAc,KAAK;AAAA,MACnB,iBAAiB,mBAAmB;AAAA,MACpC;AAAA,IACD,CAAC;AAAA,EAEF,GAAG,CAAC,UAAU,MAAM,SAAS,MAAM,YAAY,CAAC;AAEhD,QAAM,UAAU,KAAK,UAAU,QAAQ,CAAC,CAAC;AACzC,QAAM,UAAU,KAAK,UAAU,cAAc,CAAC,CAAC;AAE/C,8BAAU,MAAM;AACf,QAAI,YAAY,CAAC,MAAM,WAAY;AACnC,WAAO;AAAA,MAAgB,MACtB,iBAAiB,KAAK,YAAY,EAAE,GAAG,MAAM,iBAAiB,KAAK,kBAAkB,OAAU,GAAG,UAAU;AAAA,IAC7G;AAAA,EAED,GAAG,CAAC,UAAU,MAAM,YAAY,MAAM,gBAAgB,SAAS,OAAO,CAAC;AACxE;AAGO,SAAS,eAAe,OAA2B;AACzD,cAAY,KAAK;AACjB,SAAO;AACR;;;ACvBA,IAAM,YAAY,CAAC,UAAqC;AACvD,MAAI;AACH,UAAM,MAAM,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AACpE,UAAM,OAAO;AAAA,MACZ,KAAK,IAAI,OAAO,IAAI,UAAW,IAAK,IAAI,SAAS,KAAM,GAAI,GAAG,CAAC,EAC7D,MAAM,EAAE,EACR,IAAI,CAAC,MAAM,MAAM,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC9D,KAAK,EAAE;AAAA,IACV;AACA,WAAO,KAAK,MAAM,IAAI;AAAA,EACvB,QAAQ;AACP,WAAO;AAAA,EACR;AACD;AAEA,IAAM,gBAAgB,OAAO,KAAa,YAAoB;AAC7D,QAAM,MAAM,IAAI,YAAY;AAC5B,QAAM,IAAI,MAAM,WAAW,OAAO,OAAO,UAAU,OAAO,IAAI,OAAO,GAAG,GAAG,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AAC7H,QAAM,MAAM,MAAM,WAAW,OAAO,OAAO,KAAK,QAAQ,GAAG,IAAI,OAAO,OAAO,CAAC;AAC9E,SAAO,MAAM,KAAK,IAAI,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACvF;AAEA,IAAM,QAAQ,CAAC,OAAe,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE3D,SAAS,qBAAqB,QAA8B;AAClE,QAAM,OAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAC7C,QAAM,UAAU,OAAO,aAAa;AACpC,QAAM,OAAO,OAAO,oBAAoB;AACxC,QAAM,UAAU,OAAO,aAAa;AACpC,QAAM,MAAM,OAAO,UAAU;AAC7B,QAAM,MAAM,OAAO,cAAc,KAAK;AACtC,QAAM,QAAQ,oBAAI,IAAqD;AACvE,QAAM,WAAW,CAAC,IAAY,UAAyB;AACtD,QAAI,CAAC,IAAK;AACV,QAAI,MAAM,OAAO,IAAM,OAAM,MAAM;AACnC,UAAM,IAAI,IAAI,EAAE,OAAO,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC;AAAA,EACjD;AAEA,QAAM,MAAM,OAAU,MAAc,OAAoB,CAAC,MAAyB;AACjF,QAAI;AACH,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,oBAAoB,OAAO,GAAG,IAAI,IAAI;AAAA,QACpE,GAAG;AAAA,QACH,SAAS,EAAE,gBAAgB,oBAAoB,kBAAkB,OAAO,UAAU,GAAI,KAAK,WAAW,CAAC,EAAG;AAAA,QAC1G,QAAQ,YAAY,QAAQ,OAAO;AAAA,MACpC,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACZ,YAAI,MAAM,cAAc,KAAK,UAAU,KAAK,IAAI,IAAI,OAAO,IAAI,MAAM,EAAE;AACvE,eAAO;AAAA,MACR;AACA,aAAQ,MAAM,IAAI,KAAK;AAAA,IACxB,SAAS,GAAG;AACX,UAAI,MAAM,cAAc,IAAI,KAAM,EAAY,OAAO,EAAE;AACvD,aAAO;AAAA,IACR;AAAA,EACD;AAEA,QAAM,iBAAiB,OAAO,eAC7B,OAAO,aAAa,aAAa,cAAc,OAAO,WAAW,UAAU,IAAI;AAEhF,QAAM,gBAAgB,CAAC,UAAkB;AACxC,UAAM,IAAI,UAAU,KAAK;AACzB,WAAO,CAAC,CAAC,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,MAAO,KAAK,IAAI,IAAI;AAAA,EACjE;AAEA,QAAM,cAAc,OAAO,eAAuB;AACjD,UAAM,OAAO,MAAM,IAA8B,sBAAsB,mBAAmB,UAAU,CAAC,EAAE;AACvG,WAAO,MAAM,SAAS,KAAK,CAAC,MAAM,EAAE,eAAe,UAAU,KAAK;AAAA,EACnE;AAEA,QAAM,iBAAiB,OAAO,eAAuB;AACpD,UAAM,MAAM,MAAM,IAAI,UAAU;AAChC,QAAI,OAAO,IAAI,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI,SAAS,cAAc,IAAI,KAAK,GAAI,QAAO,IAAI;AAE1F,UAAM,OAAO,MAAM,YAAY,UAAU,IAAI,oBAAoB,IAAI;AACrE,UAAM,QAAQ,OAAO,QAAQ,YAAY,cAAc,GAAG,IAAI,MAAM;AACpE,QAAI,MAAO,UAAS,YAAY,KAAK;AACrC,WAAO;AAAA,EACR;AAEA,QAAM,kBAAkB,OAAO,YAAoB,UAAuC;AACzF,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,CAAC,SAAS,UAAW,QAAO,EAAE,IAAI,OAAO,QAAQ,gBAAgB;AAErE,QAAI,UAA4B;AAChC,aAAS,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,KAAK;AACvC,UAAI,EAAG,OAAM,MAAM,GAAI;AACvB,gBAAU,MAAM,YAAY,UAAU;AAAA,IACvC;AACA,QAAI,CAAC,QAAS,QAAO,EAAE,IAAI,OAAO,QAAQ,oBAAoB;AAE9D,UAAM,OAAO,MAAM,IAA4B,aAAa,QAAQ,EAAE,EAAE;AACxE,UAAM,UAAU,MAAM,SAAS,iBAAiB,IAAI,CAAC,OAAO,GAAG,SAAS;AACxE,QAAI,WAAW,CAAC,QAAQ,SAAS,QAAQ,SAAS,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,kBAAkB;AACnG,QAAI,QAAQ,oBAAoB,IAAI,MAAM,OAAO;AAChD,eAAS,YAAY,KAAK;AAC1B,aAAO,EAAE,IAAI,MAAM,QAAQ,YAAY;AAAA,IACxC;AAEA,UAAM,UAAU,MAAM,IAAI,aAAa,QAAQ,EAAE,IAAI;AAAA,MACpD,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,EAAE,mBAAmB,EAAE,GAAI,QAAQ,qBAAqB,CAAC,GAAI,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;AAAA,IACpG,CAAC;AACD,QAAI,QAAS,UAAS,YAAY,KAAK;AACvC,WAAO,UAAU,EAAE,IAAI,MAAM,QAAQ,QAAQ,IAAI,EAAE,IAAI,OAAO,QAAQ,gBAAgB;AAAA,EACvF;AAGA,QAAM,cAAc,OAAO,gBAAmD;AAAA,IAC7E,SAAS;AAAA,IACT,cAAc,OAAO;AAAA,IACrB;AAAA,IACA,gBAAgB,MAAM,eAAe,UAAU;AAAA,IAC/C,aAAa,MAAM,eAAe,UAAU;AAAA,EAC7C;AAGA,QAAM,uBAAuB,OAAO,SAAkB,eAAuB;AAC5E,UAAM,OAAQ,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACnD,QAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,MAAM,GAAG,EAAE,WAAW,GAAG;AACzE,aAAO,SAAS,KAAK,EAAE,IAAI,OAAO,QAAQ,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7E;AACA,UAAM,SAAS,MAAM,gBAAgB,YAAY,KAAK,KAAK;AAC3D,WAAO,SAAS,KAAK,QAAQ,EAAE,QAAQ,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,EAC/D;AAEA,QAAM,aAAa,CAAC,eAAyB,aAAa,MAAM,OAAO,UAAU,IAAI,MAAM,MAAM;AAEjG,SAAO,EAAE,gBAAgB,aAAa,YAAY,gBAAgB,iBAAiB,aAAa,qBAAqB;AACtH;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,133 @@
+type ChatwootUser = {
+    name?: string;
+    email?: string;
+    phone_number?: string;
+    avatar_url?: string;
+    identifier_hash?: string;
+};
+type ChatwootSettings = {
+    position?: 'left' | 'right';
+    type?: 'standard' | 'expanded_bubble';
+    locale?: string;
+    hideMessageBubble?: boolean;
+    launcherTitle?: string;
+    darkMode?: 'light' | 'auto';
+    [key: string]: unknown;
+};
+type ChatwootInstance = {
+    hasLoaded?: boolean;
+    isOpen?: boolean;
+    toggle: (state?: 'open' | 'close') => void;
+    toggleBubbleVisibility: (state: 'show' | 'hide') => void;
+    setUser: (identifier: string, user: ChatwootUser) => void;
+    setCustomAttributes: (attrs: Record<string, unknown>) => void;
+    deleteCustomAttribute: (key: string) => void;
+    setLocale: (locale: string) => void;
+    setLabel: (label: string) => void;
+    removeLabel: (label: string) => void;
+    reset: () => void;
+};
+/** Dữ liệu server trả cho client (qua loader) */
+type ChatwootBootData = {
+    baseUrl: string;
+    websiteToken: string;
+    identifier: string;
+    identifierHash: string;
+    initSession: string | null;
+};
+declare global {
+    interface Window {
+        chatwootSettings?: ChatwootSettings;
+        chatwootSDK?: {
+            run: (cfg: {
+                websiteToken: string;
+                baseUrl: string;
+            }) => void;
+        };
+        $chatwoot?: ChatwootInstance;
+    }
+}
+
+declare const isInIframe: () => boolean;
+/**
+ * Trong iframe khác site (Shopify admin), cookie SameSite=Lax của SDK bị chặn -> mỗi lần F5 là phiên mới.
+ * Shim document.cookie cho key cw_*: ghi -> localStorage, đọc -> từ localStorage.
+ */
+declare const installCookieShim: () => void;
+type LoadChatwootOptions = {
+    baseUrl: string;
+    websiteToken: string;
+    /** Token phiên đã lưu (init_session) -> mở lại đúng phiên/cuộc chat cũ */
+    sessionToken?: string | null;
+    /** Gọi khi Chatwoot cấp token phiên mới */
+    onSessionToken?: (token: string) => void;
+    /** Nếu set, tự POST { token } tới endpoint này khi có token mới (vd: /api/chatwoot-session) */
+    sessionEndpoint?: string;
+    settings?: ChatwootSettings;
+};
+declare const getChatwoot: () => ChatwootInstance | undefined;
+declare const loadChatwoot: (opts: LoadChatwootOptions) => void;
+/** Chạy callback khi widget sẵn sàng. Trả về hàm huỷ đăng ký. */
+declare const onChatwootReady: (callback: () => void) => () => void;
+declare const identifyChatwoot: (identifier: string, user: ChatwootUser, attributes?: Record<string, unknown>) => void;
+declare const openChat: () => void | undefined;
+declare const closeChat: () => void | undefined;
+declare const toggleChat: () => void;
+declare const setChatVisible: (visible: boolean) => void | undefined;
+declare const setChatAttributes: (attrs: Record<string, unknown>) => void | undefined;
+declare const resetChatwoot: () => void | undefined;
+
+type UseChatwootOptions = {
+    /** Từ server: createChatwootServer(...).getBootData(shop) */
+    boot: ChatwootBootData | null | undefined;
+    user?: Omit<ChatwootUser, 'identifier_hash'>;
+    attributes?: Record<string, unknown>;
+    /** Endpoint lưu init_session. Mặc định /api/chatwoot-session. false = tắt */
+    sessionEndpoint?: string | false;
+    settings?: ChatwootSettings;
+    /** true = không load widget (vd: support agent) */
+    disabled?: boolean;
+};
+declare function useChatwoot({ boot, user, attributes, sessionEndpoint, settings, disabled, }: UseChatwootOptions): void;
+/** Component tiện dụng: <ChatwootWidget boot={...} user={...} /> */
+declare function ChatwootWidget(props: UseChatwootOptions): null;
+
+type ChatwootServerConfig = {
+    baseUrl: string;
+    websiteToken: string;
+    /** Access Token của agent dùng cho API (nên tạo agent riêng) */
+    apiToken: string;
+    accountId?: number | string;
+    /** Inbox → Configuration → Identity Validation */
+    hmacToken?: string;
+    /** Tên custom attribute lưu phiên. Mặc định: init_session */
+    sessionAttribute?: string;
+    timeoutMs?: number;
+    /** Cache init_session trong RAM theo identifier. Mặc định 10 phút. 0 = tắt */
+    cacheTtlMs?: number;
+    logger?: Pick<Console, 'error'>;
+};
+type CwContact = {
+    id: number;
+    identifier: string | null;
+    custom_attributes?: Record<string, unknown>;
+    contact_inboxes?: {
+        source_id: string;
+    }[];
+};
+type SaveResult = {
+    ok: boolean;
+    reason: 'saved' | 'unchanged' | 'invalid_token' | 'contact_not_found' | 'token_not_owned' | 'update_failed';
+};
+declare function createChatwootServer(config: ChatwootServerConfig): {
+    identifierHash: (identifier: string) => Promise<string>;
+    findContact: (identifier: string) => Promise<CwContact | null>;
+    clearCache: (identifier?: string) => boolean | void;
+    getInitSession: (identifier: string) => Promise<string | null>;
+    saveInitSession: (identifier: string, token: string) => Promise<SaveResult>;
+    getBootData: (identifier: string) => Promise<ChatwootBootData>;
+    handleSessionRequest: (request: Request, identifier: string) => Promise<Response>;
+};
+type ChatwootServer = ReturnType<typeof createChatwootServer>;
+
+export { type ChatwootBootData, type ChatwootInstance, type ChatwootServer, type ChatwootServerConfig, type ChatwootSettings, type ChatwootUser, ChatwootWidget, type LoadChatwootOptions, type SaveResult, type UseChatwootOptions, closeChat, createChatwootServer, getChatwoot, identifyChatwoot, installCookieShim, isInIframe, loadChatwoot, onChatwootReady, openChat, resetChatwoot, setChatAttributes, setChatVisible, toggleChat, useChatwoot };

package/dist/index.d.ts

@@ -0,0 +1,133 @@
+type ChatwootUser = {
+    name?: string;
+    email?: string;
+    phone_number?: string;
+    avatar_url?: string;
+    identifier_hash?: string;
+};
+type ChatwootSettings = {
+    position?: 'left' | 'right';
+    type?: 'standard' | 'expanded_bubble';
+    locale?: string;
+    hideMessageBubble?: boolean;
+    launcherTitle?: string;
+    darkMode?: 'light' | 'auto';
+    [key: string]: unknown;
+};
+type ChatwootInstance = {
+    hasLoaded?: boolean;
+    isOpen?: boolean;
+    toggle: (state?: 'open' | 'close') => void;
+    toggleBubbleVisibility: (state: 'show' | 'hide') => void;
+    setUser: (identifier: string, user: ChatwootUser) => void;
+    setCustomAttributes: (attrs: Record<string, unknown>) => void;
+    deleteCustomAttribute: (key: string) => void;
+    setLocale: (locale: string) => void;
+    setLabel: (label: string) => void;
+    removeLabel: (label: string) => void;
+    reset: () => void;
+};
+/** Dữ liệu server trả cho client (qua loader) */
+type ChatwootBootData = {
+    baseUrl: string;
+    websiteToken: string;
+    identifier: string;
+    identifierHash: string;
+    initSession: string | null;
+};
+declare global {
+    interface Window {
+        chatwootSettings?: ChatwootSettings;
+        chatwootSDK?: {
+            run: (cfg: {
+                websiteToken: string;
+                baseUrl: string;
+            }) => void;
+        };
+        $chatwoot?: ChatwootInstance;
+    }
+}
+
+declare const isInIframe: () => boolean;
+/**
+ * Trong iframe khác site (Shopify admin), cookie SameSite=Lax của SDK bị chặn -> mỗi lần F5 là phiên mới.
+ * Shim document.cookie cho key cw_*: ghi -> localStorage, đọc -> từ localStorage.
+ */
+declare const installCookieShim: () => void;
+type LoadChatwootOptions = {
+    baseUrl: string;
+    websiteToken: string;
+    /** Token phiên đã lưu (init_session) -> mở lại đúng phiên/cuộc chat cũ */
+    sessionToken?: string | null;
+    /** Gọi khi Chatwoot cấp token phiên mới */
+    onSessionToken?: (token: string) => void;
+    /** Nếu set, tự POST { token } tới endpoint này khi có token mới (vd: /api/chatwoot-session) */
+    sessionEndpoint?: string;
+    settings?: ChatwootSettings;
+};
+declare const getChatwoot: () => ChatwootInstance | undefined;
+declare const loadChatwoot: (opts: LoadChatwootOptions) => void;
+/** Chạy callback khi widget sẵn sàng. Trả về hàm huỷ đăng ký. */
+declare const onChatwootReady: (callback: () => void) => () => void;
+declare const identifyChatwoot: (identifier: string, user: ChatwootUser, attributes?: Record<string, unknown>) => void;
+declare const openChat: () => void | undefined;
+declare const closeChat: () => void | undefined;
+declare const toggleChat: () => void;
+declare const setChatVisible: (visible: boolean) => void | undefined;
+declare const setChatAttributes: (attrs: Record<string, unknown>) => void | undefined;
+declare const resetChatwoot: () => void | undefined;
+
+type UseChatwootOptions = {
+    /** Từ server: createChatwootServer(...).getBootData(shop) */
+    boot: ChatwootBootData | null | undefined;
+    user?: Omit<ChatwootUser, 'identifier_hash'>;
+    attributes?: Record<string, unknown>;
+    /** Endpoint lưu init_session. Mặc định /api/chatwoot-session. false = tắt */
+    sessionEndpoint?: string | false;
+    settings?: ChatwootSettings;
+    /** true = không load widget (vd: support agent) */
+    disabled?: boolean;
+};
+declare function useChatwoot({ boot, user, attributes, sessionEndpoint, settings, disabled, }: UseChatwootOptions): void;
+/** Component tiện dụng: <ChatwootWidget boot={...} user={...} /> */
+declare function ChatwootWidget(props: UseChatwootOptions): null;
+
+type ChatwootServerConfig = {
+    baseUrl: string;
+    websiteToken: string;
+    /** Access Token của agent dùng cho API (nên tạo agent riêng) */
+    apiToken: string;
+    accountId?: number | string;
+    /** Inbox → Configuration → Identity Validation */
+    hmacToken?: string;
+    /** Tên custom attribute lưu phiên. Mặc định: init_session */
+    sessionAttribute?: string;
+    timeoutMs?: number;
+    /** Cache init_session trong RAM theo identifier. Mặc định 10 phút. 0 = tắt */
+    cacheTtlMs?: number;
+    logger?: Pick<Console, 'error'>;
+};
+type CwContact = {
+    id: number;
+    identifier: string | null;
+    custom_attributes?: Record<string, unknown>;
+    contact_inboxes?: {
+        source_id: string;
+    }[];
+};
+type SaveResult = {
+    ok: boolean;
+    reason: 'saved' | 'unchanged' | 'invalid_token' | 'contact_not_found' | 'token_not_owned' | 'update_failed';
+};
+declare function createChatwootServer(config: ChatwootServerConfig): {
+    identifierHash: (identifier: string) => Promise<string>;
+    findContact: (identifier: string) => Promise<CwContact | null>;
+    clearCache: (identifier?: string) => boolean | void;
+    getInitSession: (identifier: string) => Promise<string | null>;
+    saveInitSession: (identifier: string, token: string) => Promise<SaveResult>;
+    getBootData: (identifier: string) => Promise<ChatwootBootData>;
+    handleSessionRequest: (request: Request, identifier: string) => Promise<Response>;
+};
+type ChatwootServer = ReturnType<typeof createChatwootServer>;
+
+export { type ChatwootBootData, type ChatwootInstance, type ChatwootServer, type ChatwootServerConfig, type ChatwootSettings, type ChatwootUser, ChatwootWidget, type LoadChatwootOptions, type SaveResult, type UseChatwootOptions, closeChat, createChatwootServer, getChatwoot, identifyChatwoot, installCookieShim, isInIframe, loadChatwoot, onChatwootReady, openChat, resetChatwoot, setChatAttributes, setChatVisible, toggleChat, useChatwoot };

package/dist/index.js

@@ -0,0 +1,299 @@
+// src/client.ts
+var STORE_PREFIX = "cwcookie:";
+var CW_COOKIE_RE = /^\s*(cw_conversation|cw_user_[A-Za-z0-9]+)=([^;]*)/;
+var shimInstalled = false;
+var tokenListener;
+var isBrowser = () => typeof window !== "undefined" && typeof document !== "undefined";
+var storage = {
+  get(k) {
+    try {
+      return localStorage.getItem(k);
+    } catch {
+      return null;
+    }
+  },
+  set(k, v) {
+    try {
+      localStorage.setItem(k, v);
+    } catch {
+    }
+  },
+  remove(k) {
+    try {
+      localStorage.removeItem(k);
+    } catch {
+    }
+  },
+  keys(prefix) {
+    const out = [];
+    try {
+      for (let i = 0; i < localStorage.length; i++) {
+        const k = localStorage.key(i);
+        if (k?.startsWith(prefix)) out.push(k.slice(prefix.length));
+      }
+    } catch {
+    }
+    return out;
+  }
+};
+var isInIframe = () => {
+  if (!isBrowser()) return false;
+  try {
+    return window.self !== window.top;
+  } catch {
+    return true;
+  }
+};
+var installCookieShim = () => {
+  if (!isBrowser() || shimInstalled || !isInIframe()) return;
+  const native = Object.getOwnPropertyDescriptor(Document.prototype, "cookie");
+  if (!native?.get || !native?.set) return;
+  const nGet = native.get;
+  const nSet = native.set;
+  Object.defineProperty(document, "cookie", {
+    configurable: true,
+    get() {
+      let value = nGet.call(document);
+      for (const name of storage.keys(STORE_PREFIX)) {
+        if (new RegExp(`(^|;\\s*)${name}=`).test(value)) continue;
+        const v = storage.get(STORE_PREFIX + name);
+        if (v) value = value ? `${value}; ${name}=${v}` : `${name}=${v}`;
+      }
+      return value;
+    },
+    set(raw) {
+      const m = CW_COOKIE_RE.exec(raw);
+      if (m) {
+        const [, name, val] = m;
+        const expired = !val || /expires=Thu, 01 Jan 1970/i.test(raw) || /max-age=(0|-)/i.test(raw);
+        if (expired) {
+          storage.remove(STORE_PREFIX + name);
+        } else {
+          const changed = storage.get(STORE_PREFIX + name) !== val;
+          storage.set(STORE_PREFIX + name, val);
+          if (changed && name === "cw_conversation") tokenListener?.(val);
+        }
+      }
+      nSet.call(document, raw);
+    }
+  });
+  shimInstalled = true;
+};
+var seedSession = (token) => {
+  if (isInIframe()) storage.set(`${STORE_PREFIX}cw_conversation`, token);
+  else document.cookie = `cw_conversation=${token}; path=/; max-age=31536000; SameSite=Lax`;
+};
+var getChatwoot = () => isBrowser() ? window.$chatwoot : void 0;
+var loadChatwoot = (opts) => {
+  if (!isBrowser() || !opts.baseUrl || !opts.websiteToken) return;
+  if (window.chatwootSDK || document.getElementById("chatwoot-sdk")) return;
+  const baseUrl = opts.baseUrl.replace(/\/$/, "");
+  tokenListener = (token) => {
+    opts.onSessionToken?.(token);
+    if (opts.sessionEndpoint) {
+      fetch(opts.sessionEndpoint, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ token })
+      }).catch(() => {
+      });
+    }
+  };
+  installCookieShim();
+  if (opts.sessionToken) seedSession(opts.sessionToken);
+  window.chatwootSettings = { position: "right", type: "standard", ...opts.settings };
+  const script = document.createElement("script");
+  script.id = "chatwoot-sdk";
+  script.src = `${baseUrl}/packs/js/sdk.js`;
+  script.async = true;
+  script.onload = () => window.chatwootSDK?.run({ websiteToken: opts.websiteToken, baseUrl });
+  document.body.appendChild(script);
+};
+var onChatwootReady = (callback) => {
+  if (!isBrowser()) return () => {
+  };
+  if (window.$chatwoot?.hasLoaded) {
+    callback();
+    return () => {
+    };
+  }
+  window.addEventListener("chatwoot:ready", callback);
+  return () => window.removeEventListener("chatwoot:ready", callback);
+};
+var identifyChatwoot = (identifier, user, attributes) => {
+  const cw = getChatwoot();
+  if (!cw || !identifier) return;
+  cw.setUser(identifier, user);
+  if (attributes && Object.keys(attributes).length) cw.setCustomAttributes(attributes);
+};
+var openChat = () => getChatwoot()?.toggle("open");
+var closeChat = () => getChatwoot()?.toggle("close");
+var toggleChat = () => {
+  const cw = getChatwoot();
+  if (cw) cw.toggle(cw.isOpen ? "close" : "open");
+};
+var setChatVisible = (visible) => getChatwoot()?.toggleBubbleVisibility(visible ? "show" : "hide");
+var setChatAttributes = (attrs) => getChatwoot()?.setCustomAttributes(attrs);
+var resetChatwoot = () => getChatwoot()?.reset();
+
+// src/react.ts
+import { useEffect, useRef } from "react";
+function useChatwoot({
+  boot,
+  user,
+  attributes,
+  sessionEndpoint = "/api/chatwoot-session",
+  settings,
+  disabled
+}) {
+  const loaded = useRef(false);
+  useEffect(() => {
+    if (disabled || !boot || loaded.current) return;
+    loaded.current = true;
+    loadChatwoot({
+      baseUrl: boot.baseUrl,
+      websiteToken: boot.websiteToken,
+      sessionToken: boot.initSession,
+      sessionEndpoint: sessionEndpoint || void 0,
+      settings
+    });
+  }, [disabled, boot?.baseUrl, boot?.websiteToken]);
+  const userKey = JSON.stringify(user ?? {});
+  const attrKey = JSON.stringify(attributes ?? {});
+  useEffect(() => {
+    if (disabled || !boot?.identifier) return;
+    return onChatwootReady(
+      () => identifyChatwoot(boot.identifier, { ...user, identifier_hash: boot.identifierHash || void 0 }, attributes)
+    );
+  }, [disabled, boot?.identifier, boot?.identifierHash, userKey, attrKey]);
+}
+function ChatwootWidget(props) {
+  useChatwoot(props);
+  return null;
+}
+
+// src/server.ts
+var decodeJwt = (token) => {
+  try {
+    const b64 = token.split(".")[1].replace(/-/g, "+").replace(/_/g, "/");
+    const json = decodeURIComponent(
+      atob(b64.padEnd(b64.length + (4 - b64.length % 4) % 4, "=")).split("").map((c) => "%" + c.charCodeAt(0).toString(16).padStart(2, "0")).join("")
+    );
+    return JSON.parse(json);
+  } catch {
+    return null;
+  }
+};
+var hmacSha256Hex = async (key, message) => {
+  const enc = new TextEncoder();
+  const k = await globalThis.crypto.subtle.importKey("raw", enc.encode(key), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  const sig = await globalThis.crypto.subtle.sign("HMAC", k, enc.encode(message));
+  return Array.from(new Uint8Array(sig), (b) => b.toString(16).padStart(2, "0")).join("");
+};
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+function createChatwootServer(config) {
+  const base = config.baseUrl.replace(/\/$/, "");
+  const account = config.accountId ?? 1;
+  const attr = config.sessionAttribute ?? "init_session";
+  const timeout = config.timeoutMs ?? 5e3;
+  const log = config.logger ?? console;
+  const ttl = config.cacheTtlMs ?? 10 * 6e4;
+  const cache = /* @__PURE__ */ new Map();
+  const cacheSet = (id, token) => {
+    if (!ttl) return;
+    if (cache.size > 5e3) cache.clear();
+    cache.set(id, { token, until: Date.now() + ttl });
+  };
+  const api = async (path, init = {}) => {
+    try {
+      const res = await fetch(`${base}/api/v1/accounts/${account}${path}`, {
+        ...init,
+        headers: { "Content-Type": "application/json", api_access_token: config.apiToken, ...init.headers ?? {} },
+        signal: AbortSignal.timeout(timeout)
+      });
+      if (!res.ok) {
+        log.error(`[chatwoot] ${init.method ?? "GET"} ${path} -> ${res.status}`);
+        return null;
+      }
+      return await res.json();
+    } catch (e) {
+      log.error(`[chatwoot] ${path}: ${e.message}`);
+      return null;
+    }
+  };
+  const identifierHash = async (identifier) => config.hmacToken && identifier ? hmacSha256Hex(config.hmacToken, identifier) : "";
+  const isUsableToken = (token) => {
+    const p = decodeJwt(token);
+    return !!p?.source_id && (!p.exp || p.exp * 1e3 > Date.now() + 864e5);
+  };
+  const findContact = async (identifier) => {
+    const data = await api(`/contacts/search?q=${encodeURIComponent(identifier)}`);
+    return data?.payload?.find((c) => c.identifier === identifier) ?? null;
+  };
+  const getInitSession = async (identifier) => {
+    const hit = cache.get(identifier);
+    if (hit && hit.until > Date.now() && (!hit.token || isUsableToken(hit.token))) return hit.token;
+    const raw = (await findContact(identifier))?.custom_attributes?.[attr];
+    const token = typeof raw === "string" && isUsableToken(raw) ? raw : null;
+    if (token) cacheSet(identifier, token);
+    return token;
+  };
+  const saveInitSession = async (identifier, token) => {
+    const payload = decodeJwt(token);
+    if (!payload?.source_id) return { ok: false, reason: "invalid_token" };
+    let contact = null;
+    for (let i = 0; i < 6 && !contact; i++) {
+      if (i) await sleep(1e3);
+      contact = await findContact(identifier);
+    }
+    if (!contact) return { ok: false, reason: "contact_not_found" };
+    const full = await api(`/contacts/${contact.id}`);
+    const sources = full?.payload?.contact_inboxes?.map((ci) => ci.source_id);
+    if (sources && !sources.includes(payload.source_id)) return { ok: false, reason: "token_not_owned" };
+    if (contact.custom_attributes?.[attr] === token) {
+      cacheSet(identifier, token);
+      return { ok: true, reason: "unchanged" };
+    }
+    const updated = await api(`/contacts/${contact.id}`, {
+      method: "PUT",
+      body: JSON.stringify({ custom_attributes: { ...contact.custom_attributes ?? {}, [attr]: token } })
+    });
+    if (updated) cacheSet(identifier, token);
+    return updated ? { ok: true, reason: "saved" } : { ok: false, reason: "update_failed" };
+  };
+  const getBootData = async (identifier) => ({
+    baseUrl: base,
+    websiteToken: config.websiteToken,
+    identifier,
+    identifierHash: await identifierHash(identifier),
+    initSession: await getInitSession(identifier)
+  });
+  const handleSessionRequest = async (request, identifier) => {
+    const body = await request.json().catch(() => ({}));
+    if (typeof body.token !== "string" || body.token.split(".").length !== 3) {
+      return Response.json({ ok: false, reason: "invalid_token" }, { status: 400 });
+    }
+    const result = await saveInitSession(identifier, body.token);
+    return Response.json(result, { status: result.ok ? 200 : 422 });
+  };
+  const clearCache = (identifier) => identifier ? cache.delete(identifier) : cache.clear();
+  return { identifierHash, findContact, clearCache, getInitSession, saveInitSession, getBootData, handleSessionRequest };
+}
+export {
+  ChatwootWidget,
+  closeChat,
+  createChatwootServer,
+  getChatwoot,
+  identifyChatwoot,
+  installCookieShim,
+  isInIframe,
+  loadChatwoot,
+  onChatwootReady,
+  openChat,
+  resetChatwoot,
+  setChatAttributes,
+  setChatVisible,
+  toggleChat,
+  useChatwoot
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts","../src/react.ts","../src/server.ts"],"sourcesContent":["// Client: chạy trên trình duyệt\nimport type { ChatwootInstance, ChatwootSettings, ChatwootUser } from './types';\n\n\nconst STORE_PREFIX = 'cwcookie:';\nconst CW_COOKIE_RE = /^\\s*(cw_conversation|cw_user_[A-Za-z0-9]+)=([^;]*)/;\n\nlet shimInstalled = false;\nlet tokenListener: ((token: string) => void) | undefined;\n\nconst isBrowser = () => typeof window !== 'undefined' && typeof document !== 'undefined';\n\nconst storage = {\n\tget(k: string) {\n\t\ttry { return localStorage.getItem(k); } catch { return null; }\n\t},\n\tset(k: string, v: string) {\n\t\ttry { localStorage.setItem(k, v); } catch { /* blocked */ }\n\t},\n\tremove(k: string) {\n\t\ttry { localStorage.removeItem(k); } catch { /* blocked */ }\n\t},\n\tkeys(prefix: string) {\n\t\tconst out: string[] = [];\n\t\ttry {\n\t\t\tfor (let i = 0; i < localStorage.length; i++) {\n\t\t\t\tconst k = localStorage.key(i);\n\t\t\t\tif (k?.startsWith(prefix)) out.push(k.slice(prefix.length));\n\t\t\t}\n\t\t} catch { /* blocked */ }\n\t\treturn out;\n\t},\n};\n\nexport const isInIframe = () => {\n\tif (!isBrowser()) return false;\n\ttry {\n\t\treturn window.self !== window.top;\n\t} catch {\n\t\treturn true;\n\t}\n};\n\n/**\n * Trong iframe khác site (Shopify admin), cookie SameSite=Lax của SDK bị chặn -> mỗi lần F5 là phiên mới.\n * Shim document.cookie cho key cw_*: ghi -> localStorage, đọc -> từ localStorage.\n */\nexport const installCookieShim = () => {\n\tif (!isBrowser() || shimInstalled || !isInIframe()) return;\n\tconst native = Object.getOwnPropertyDescriptor(Document.prototype, 'cookie');\n\tif (!native?.get || !native?.set) return;\n\tconst nGet = native.get;\n\tconst nSet = native.set;\n\n\tObject.defineProperty(document, 'cookie', {\n\t\tconfigurable: true,\n\t\tget() {\n\t\t\tlet value: string = nGet.call(document);\n\t\t\tfor (const name of storage.keys(STORE_PREFIX)) {\n\t\t\t\tif (new RegExp(`(^|;\\\\s*)${name}=`).test(value)) continue;\n\t\t\t\tconst v = storage.get(STORE_PREFIX + name);\n\t\t\t\tif (v) value = value ? `${value}; ${name}=${v}` : `${name}=${v}`;\n\t\t\t}\n\t\t\treturn value;\n\t\t},\n\t\tset(raw: string) {\n\t\t\tconst m = CW_COOKIE_RE.exec(raw);\n\t\t\tif (m) {\n\t\t\t\tconst [, name, val] = m;\n\t\t\t\tconst expired = !val || /expires=Thu, 01 Jan 1970/i.test(raw) || /max-age=(0|-)/i.test(raw);\n\t\t\t\tif (expired) {\n\t\t\t\t\tstorage.remove(STORE_PREFIX + name);\n\t\t\t\t} else {\n\t\t\t\t\tconst changed = storage.get(STORE_PREFIX + name) !== val;\n\t\t\t\t\tstorage.set(STORE_PREFIX + name, val);\n\t\t\t\t\tif (changed && name === 'cw_conversation') tokenListener?.(val);\n\t\t\t\t}\n\t\t\t}\n\t\t\tnSet.call(document, raw);\n\t\t},\n\t});\n\tshimInstalled = true;\n};\n\nconst seedSession = (token: string) => {\n\tif (isInIframe()) storage.set(`${STORE_PREFIX}cw_conversation`, token);\n\telse document.cookie = `cw_conversation=${token}; path=/; max-age=31536000; SameSite=Lax`;\n};\n\nexport type LoadChatwootOptions = {\n\tbaseUrl: string;\n\twebsiteToken: string;\n\t/** Token phiên đã lưu (init_session) -> mở lại đúng phiên/cuộc chat cũ */\n\tsessionToken?: string | null;\n\t/** Gọi khi Chatwoot cấp token phiên mới */\n\tonSessionToken?: (token: string) => void;\n\t/** Nếu set, tự POST { token } tới endpoint này khi có token mới (vd: /api/chatwoot-session) */\n\tsessionEndpoint?: string;\n\tsettings?: ChatwootSettings;\n};\n\nexport const getChatwoot = (): ChatwootInstance | undefined => (isBrowser() ? window.$chatwoot : undefined);\n\nexport const loadChatwoot = (opts: LoadChatwootOptions) => {\n\tif (!isBrowser() || !opts.baseUrl || !opts.websiteToken) return;\n\tif (window.chatwootSDK || document.getElementById('chatwoot-sdk')) return;\n\n\tconst baseUrl = opts.baseUrl.replace(/\\/$/, '');\n\ttokenListener = (token) => {\n\t\topts.onSessionToken?.(token);\n\t\tif (opts.sessionEndpoint) {\n\t\t\tfetch(opts.sessionEndpoint, {\n\t\t\t\tmethod: 'POST',\n\t\t\t\theaders: { 'Content-Type': 'application/json' },\n\t\t\t\tbody: JSON.stringify({ token }),\n\t\t\t}).catch(() => {});\n\t\t}\n\t};\n\n\tinstallCookieShim(); // phải trước khi inject sdk.js\n\tif (opts.sessionToken) seedSession(opts.sessionToken);\n\n\twindow.chatwootSettings = { position: 'right', type: 'standard', ...opts.settings };\n\tconst script = document.createElement('script');\n\tscript.id = 'chatwoot-sdk';\n\tscript.src = `${baseUrl}/packs/js/sdk.js`;\n\tscript.async = true;\n\tscript.onload = () => window.chatwootSDK?.run({ websiteToken: opts.websiteToken, baseUrl });\n\tdocument.body.appendChild(script);\n};\n\n/** Chạy callback khi widget sẵn sàng. Trả về hàm huỷ đăng ký. */\nexport const onChatwootReady = (callback: () => void) => {\n\tif (!isBrowser()) return () => {};\n\tif (window.$chatwoot?.hasLoaded) {\n\t\tcallback();\n\t\treturn () => {};\n\t}\n\twindow.addEventListener('chatwoot:ready', callback);\n\treturn () => window.removeEventListener('chatwoot:ready', callback);\n};\n\nexport const identifyChatwoot = (\n\tidentifier: string,\n\tuser: ChatwootUser,\n\tattributes?: Record<string, unknown>\n) => {\n\tconst cw = getChatwoot();\n\tif (!cw || !identifier) return;\n\tcw.setUser(identifier, user);\n\tif (attributes && Object.keys(attributes).length) cw.setCustomAttributes(attributes);\n};\n\nexport const openChat = () => getChatwoot()?.toggle('open');\nexport const closeChat = () => getChatwoot()?.toggle('close');\nexport const toggleChat = () => {\n\tconst cw = getChatwoot();\n\tif (cw) cw.toggle(cw.isOpen ? 'close' : 'open');\n};\nexport const setChatVisible = (visible: boolean) => getChatwoot()?.toggleBubbleVisibility(visible ? 'show' : 'hide');\nexport const setChatAttributes = (attrs: Record<string, unknown>) => getChatwoot()?.setCustomAttributes(attrs);\nexport const resetChatwoot = () => getChatwoot()?.reset();\n","import { useEffect, useRef } from 'react';\nimport { identifyChatwoot, loadChatwoot, onChatwootReady } from './client';\nimport type { ChatwootBootData, ChatwootSettings, ChatwootUser } from './types';\n\n\n\nexport type UseChatwootOptions = {\n\t/** Từ server: createChatwootServer(...).getBootData(shop) */\n\tboot: ChatwootBootData | null | undefined;\n\tuser?: Omit<ChatwootUser, 'identifier_hash'>;\n\tattributes?: Record<string, unknown>;\n\t/** Endpoint lưu init_session. Mặc định /api/chatwoot-session. false = tắt */\n\tsessionEndpoint?: string | false;\n\tsettings?: ChatwootSettings;\n\t/** true = không load widget (vd: support agent) */\n\tdisabled?: boolean;\n};\n\nexport function useChatwoot({\n\tboot,\n\tuser,\n\tattributes,\n\tsessionEndpoint = '/api/chatwoot-session',\n\tsettings,\n\tdisabled,\n}: UseChatwootOptions) {\n\tconst loaded = useRef(false);\n\n\tuseEffect(() => {\n\t\tif (disabled || !boot || loaded.current) return;\n\t\tloaded.current = true;\n\t\tloadChatwoot({\n\t\t\tbaseUrl: boot.baseUrl,\n\t\t\twebsiteToken: boot.websiteToken,\n\t\t\tsessionToken: boot.initSession,\n\t\t\tsessionEndpoint: sessionEndpoint || undefined,\n\t\t\tsettings,\n\t\t});\n\t\t// eslint-disable-next-line react-hooks/exhaustive-deps\n\t}, [disabled, boot?.baseUrl, boot?.websiteToken]);\n\n\tconst userKey = JSON.stringify(user ?? {});\n\tconst attrKey = JSON.stringify(attributes ?? {});\n\n\tuseEffect(() => {\n\t\tif (disabled || !boot?.identifier) return;\n\t\treturn onChatwootReady(() =>\n\t\t\tidentifyChatwoot(boot.identifier, { ...user, identifier_hash: boot.identifierHash || undefined }, attributes)\n\t\t);\n\t\t// eslint-disable-next-line react-hooks/exhaustive-deps\n\t}, [disabled, boot?.identifier, boot?.identifierHash, userKey, attrKey]);\n}\n\n/** Component tiện dụng: <ChatwootWidget boot={...} user={...} /> */\nexport function ChatwootWidget(props: UseChatwootOptions) {\n\tuseChatwoot(props);\n\treturn null;\n}\n","// Server-side helpers (gọi trong loader/action). Dùng Web Crypto -> không phụ thuộc node:crypto,\n// nên package chỉ cần 1 entry. apiToken/hmacToken chỉ được truyền ở code server (.server.ts).\nimport type { ChatwootBootData } from './types';\n\nexport type ChatwootServerConfig = {\n\tbaseUrl: string;\n\twebsiteToken: string;\n\t/** Access Token của agent dùng cho API (nên tạo agent riêng) */\n\tapiToken: string;\n\taccountId?: number | string;\n\t/** Inbox → Configuration → Identity Validation */\n\thmacToken?: string;\n\t/** Tên custom attribute lưu phiên. Mặc định: init_session */\n\tsessionAttribute?: string;\n\ttimeoutMs?: number;\n\t/** Cache init_session trong RAM theo identifier. Mặc định 10 phút. 0 = tắt */\n\tcacheTtlMs?: number;\n\tlogger?: Pick<Console, 'error'>;\n};\n\ntype CwContact = {\n\tid: number;\n\tidentifier: string | null;\n\tcustom_attributes?: Record<string, unknown>;\n\tcontact_inboxes?: { source_id: string }[];\n};\n\ntype JwtPayload = { source_id?: string; inbox_id?: number; exp?: number };\n\nexport type SaveResult = {\n\tok: boolean;\n\treason: 'saved' | 'unchanged' | 'invalid_token' | 'contact_not_found' | 'token_not_owned' | 'update_failed';\n};\n\nconst decodeJwt = (token: string): JwtPayload | null => {\n\ttry {\n\t\tconst b64 = token.split('.')[1].replace(/-/g, '+').replace(/_/g, '/');\n\t\tconst json = decodeURIComponent(\n\t\t\tatob(b64.padEnd(b64.length + ((4 - (b64.length % 4)) % 4), '='))\n\t\t\t\t.split('')\n\t\t\t\t.map((c) => '%' + c.charCodeAt(0).toString(16).padStart(2, '0'))\n\t\t\t\t.join('')\n\t\t);\n\t\treturn JSON.parse(json);\n\t} catch {\n\t\treturn null;\n\t}\n};\n\nconst hmacSha256Hex = async (key: string, message: string) => {\n\tconst enc = new TextEncoder();\n\tconst k = await globalThis.crypto.subtle.importKey('raw', enc.encode(key), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);\n\tconst sig = await globalThis.crypto.subtle.sign('HMAC', k, enc.encode(message));\n\treturn Array.from(new Uint8Array(sig), (b) => b.toString(16).padStart(2, '0')).join('');\n};\n\nconst sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\nexport function createChatwootServer(config: ChatwootServerConfig) {\n\tconst base = config.baseUrl.replace(/\\/$/, '');\n\tconst account = config.accountId ?? 1;\n\tconst attr = config.sessionAttribute ?? 'init_session';\n\tconst timeout = config.timeoutMs ?? 5000;\n\tconst log = config.logger ?? console;\n\tconst ttl = config.cacheTtlMs ?? 10 * 60_000;\n\tconst cache = new Map<string, { token: string | null; until: number }>();\n\tconst cacheSet = (id: string, token: string | null) => {\n\t\tif (!ttl) return;\n\t\tif (cache.size > 5000) cache.clear(); // chặn phình RAM\n\t\tcache.set(id, { token, until: Date.now() + ttl });\n\t};\n\n\tconst api = async <T>(path: string, init: RequestInit = {}): Promise<T | null> => {\n\t\ttry {\n\t\t\tconst res = await fetch(`${base}/api/v1/accounts/${account}${path}`, {\n\t\t\t\t...init,\n\t\t\t\theaders: { 'Content-Type': 'application/json', api_access_token: config.apiToken, ...(init.headers ?? {}) },\n\t\t\t\tsignal: AbortSignal.timeout(timeout),\n\t\t\t});\n\t\t\tif (!res.ok) {\n\t\t\t\tlog.error(`[chatwoot] ${init.method ?? 'GET'} ${path} -> ${res.status}`);\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\treturn (await res.json()) as T;\n\t\t} catch (e) {\n\t\t\tlog.error(`[chatwoot] ${path}: ${(e as Error).message}`);\n\t\t\treturn null;\n\t\t}\n\t};\n\n\tconst identifierHash = async (identifier: string) =>\n\t\tconfig.hmacToken && identifier ? hmacSha256Hex(config.hmacToken, identifier) : '';\n\n\tconst isUsableToken = (token: string) => {\n\t\tconst p = decodeJwt(token);\n\t\treturn !!p?.source_id && (!p.exp || p.exp * 1000 > Date.now() + 86_400_000);\n\t};\n\n\tconst findContact = async (identifier: string) => {\n\t\tconst data = await api<{ payload: CwContact[] }>(`/contacts/search?q=${encodeURIComponent(identifier)}`);\n\t\treturn data?.payload?.find((c) => c.identifier === identifier) ?? null;\n\t};\n\n\tconst getInitSession = async (identifier: string) => {\n\t\tconst hit = cache.get(identifier);\n\t\tif (hit && hit.until > Date.now() && (!hit.token || isUsableToken(hit.token))) return hit.token;\n\n\t\tconst raw = (await findContact(identifier))?.custom_attributes?.[attr];\n\t\tconst token = typeof raw === 'string' && isUsableToken(raw) ? raw : null;\n\t\tif (token) cacheSet(identifier, token); // không cache null: shop mới sẽ có token ngay sau lần chat đầu\n\t\treturn token;\n\t};\n\n\tconst saveInitSession = async (identifier: string, token: string): Promise<SaveResult> => {\n\t\tconst payload = decodeJwt(token);\n\t\tif (!payload?.source_id) return { ok: false, reason: 'invalid_token' };\n\n\t\tlet contact: CwContact | null = null;\n\t\tfor (let i = 0; i < 6 && !contact; i++) {\n\t\t\tif (i) await sleep(1000);\n\t\t\tcontact = await findContact(identifier);\n\t\t}\n\t\tif (!contact) return { ok: false, reason: 'contact_not_found' };\n\n\t\tconst full = await api<{ payload: CwContact }>(`/contacts/${contact.id}`);\n\t\tconst sources = full?.payload?.contact_inboxes?.map((ci) => ci.source_id);\n\t\tif (sources && !sources.includes(payload.source_id)) return { ok: false, reason: 'token_not_owned' };\n\t\tif (contact.custom_attributes?.[attr] === token) {\n\t\t\tcacheSet(identifier, token);\n\t\t\treturn { ok: true, reason: 'unchanged' };\n\t\t}\n\n\t\tconst updated = await api(`/contacts/${contact.id}`, {\n\t\t\tmethod: 'PUT',\n\t\t\tbody: JSON.stringify({ custom_attributes: { ...(contact.custom_attributes ?? {}), [attr]: token } }),\n\t\t});\n\t\tif (updated) cacheSet(identifier, token);\n\t\treturn updated ? { ok: true, reason: 'saved' } : { ok: false, reason: 'update_failed' };\n\t};\n\n\t/** Gọi trong loader, trả về cho client */\n\tconst getBootData = async (identifier: string): Promise<ChatwootBootData> => ({\n\t\tbaseUrl: base,\n\t\twebsiteToken: config.websiteToken,\n\t\tidentifier,\n\t\tidentifierHash: await identifierHash(identifier),\n\t\tinitSession: await getInitSession(identifier),\n\t});\n\n\t/** Dùng trong route action: return chatwoot.handleSessionRequest(request, session.shop) */\n\tconst handleSessionRequest = async (request: Request, identifier: string) => {\n\t\tconst body = (await request.json().catch(() => ({}))) as { token?: unknown };\n\t\tif (typeof body.token !== 'string' || body.token.split('.').length !== 3) {\n\t\t\treturn Response.json({ ok: false, reason: 'invalid_token' }, { status: 400 });\n\t\t}\n\t\tconst result = await saveInitSession(identifier, body.token);\n\t\treturn Response.json(result, { status: result.ok ? 200 : 422 });\n\t};\n\n\tconst clearCache = (identifier?: string) => (identifier ? cache.delete(identifier) : cache.clear());\n\n\treturn { identifierHash, findContact, clearCache, getInitSession, saveInitSession, getBootData, handleSessionRequest };\n}\n\nexport type ChatwootServer = ReturnType<typeof createChatwootServer>;\n"],"mappings":";AAIA,IAAM,eAAe;AACrB,IAAM,eAAe;AAErB,IAAI,gBAAgB;AACpB,IAAI;AAEJ,IAAM,YAAY,MAAM,OAAO,WAAW,eAAe,OAAO,aAAa;AAE7E,IAAM,UAAU;AAAA,EACf,IAAI,GAAW;AACd,QAAI;AAAE,aAAO,aAAa,QAAQ,CAAC;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAM;AAAA,EAC9D;AAAA,EACA,IAAI,GAAW,GAAW;AACzB,QAAI;AAAE,mBAAa,QAAQ,GAAG,CAAC;AAAA,IAAG,QAAQ;AAAA,IAAgB;AAAA,EAC3D;AAAA,EACA,OAAO,GAAW;AACjB,QAAI;AAAE,mBAAa,WAAW,CAAC;AAAA,IAAG,QAAQ;AAAA,IAAgB;AAAA,EAC3D;AAAA,EACA,KAAK,QAAgB;AACpB,UAAM,MAAgB,CAAC;AACvB,QAAI;AACH,eAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC7C,cAAM,IAAI,aAAa,IAAI,CAAC;AAC5B,YAAI,GAAG,WAAW,MAAM,EAAG,KAAI,KAAK,EAAE,MAAM,OAAO,MAAM,CAAC;AAAA,MAC3D;AAAA,IACD,QAAQ;AAAA,IAAgB;AACxB,WAAO;AAAA,EACR;AACD;AAEO,IAAM,aAAa,MAAM;AAC/B,MAAI,CAAC,UAAU,EAAG,QAAO;AACzB,MAAI;AACH,WAAO,OAAO,SAAS,OAAO;AAAA,EAC/B,QAAQ;AACP,WAAO;AAAA,EACR;AACD;AAMO,IAAM,oBAAoB,MAAM;AACtC,MAAI,CAAC,UAAU,KAAK,iBAAiB,CAAC,WAAW,EAAG;AACpD,QAAM,SAAS,OAAO,yBAAyB,SAAS,WAAW,QAAQ;AAC3E,MAAI,CAAC,QAAQ,OAAO,CAAC,QAAQ,IAAK;AAClC,QAAM,OAAO,OAAO;AACpB,QAAM,OAAO,OAAO;AAEpB,SAAO,eAAe,UAAU,UAAU;AAAA,IACzC,cAAc;AAAA,IACd,MAAM;AACL,UAAI,QAAgB,KAAK,KAAK,QAAQ;AACtC,iBAAW,QAAQ,QAAQ,KAAK,YAAY,GAAG;AAC9C,YAAI,IAAI,OAAO,YAAY,IAAI,GAAG,EAAE,KAAK,KAAK,EAAG;AACjD,cAAM,IAAI,QAAQ,IAAI,eAAe,IAAI;AACzC,YAAI,EAAG,SAAQ,QAAQ,GAAG,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC;AAAA,MAC/D;AACA,aAAO;AAAA,IACR;AAAA,IACA,IAAI,KAAa;AAChB,YAAM,IAAI,aAAa,KAAK,GAAG;AAC/B,UAAI,GAAG;AACN,cAAM,CAAC,EAAE,MAAM,GAAG,IAAI;AACtB,cAAM,UAAU,CAAC,OAAO,4BAA4B,KAAK,GAAG,KAAK,iBAAiB,KAAK,GAAG;AAC1F,YAAI,SAAS;AACZ,kBAAQ,OAAO,eAAe,IAAI;AAAA,QACnC,OAAO;AACN,gBAAM,UAAU,QAAQ,IAAI,eAAe,IAAI,MAAM;AACrD,kBAAQ,IAAI,eAAe,MAAM,GAAG;AACpC,cAAI,WAAW,SAAS,kBAAmB,iBAAgB,GAAG;AAAA,QAC/D;AAAA,MACD;AACA,WAAK,KAAK,UAAU,GAAG;AAAA,IACxB;AAAA,EACD,CAAC;AACD,kBAAgB;AACjB;AAEA,IAAM,cAAc,CAAC,UAAkB;AACtC,MAAI,WAAW,EAAG,SAAQ,IAAI,GAAG,YAAY,mBAAmB,KAAK;AAAA,MAChE,UAAS,SAAS,mBAAmB,KAAK;AAChD;AAcO,IAAM,cAAc,MAAqC,UAAU,IAAI,OAAO,YAAY;AAE1F,IAAM,eAAe,CAAC,SAA8B;AAC1D,MAAI,CAAC,UAAU,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,aAAc;AACzD,MAAI,OAAO,eAAe,SAAS,eAAe,cAAc,EAAG;AAEnE,QAAM,UAAU,KAAK,QAAQ,QAAQ,OAAO,EAAE;AAC9C,kBAAgB,CAAC,UAAU;AAC1B,SAAK,iBAAiB,KAAK;AAC3B,QAAI,KAAK,iBAAiB;AACzB,YAAM,KAAK,iBAAiB;AAAA,QAC3B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,MAC/B,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAClB;AAAA,EACD;AAEA,oBAAkB;AAClB,MAAI,KAAK,aAAc,aAAY,KAAK,YAAY;AAEpD,SAAO,mBAAmB,EAAE,UAAU,SAAS,MAAM,YAAY,GAAG,KAAK,SAAS;AAClF,QAAM,SAAS,SAAS,cAAc,QAAQ;AAC9C,SAAO,KAAK;AACZ,SAAO,MAAM,GAAG,OAAO;AACvB,SAAO,QAAQ;AACf,SAAO,SAAS,MAAM,OAAO,aAAa,IAAI,EAAE,cAAc,KAAK,cAAc,QAAQ,CAAC;AAC1F,WAAS,KAAK,YAAY,MAAM;AACjC;AAGO,IAAM,kBAAkB,CAAC,aAAyB;AACxD,MAAI,CAAC,UAAU,EAAG,QAAO,MAAM;AAAA,EAAC;AAChC,MAAI,OAAO,WAAW,WAAW;AAChC,aAAS;AACT,WAAO,MAAM;AAAA,IAAC;AAAA,EACf;AACA,SAAO,iBAAiB,kBAAkB,QAAQ;AAClD,SAAO,MAAM,OAAO,oBAAoB,kBAAkB,QAAQ;AACnE;AAEO,IAAM,mBAAmB,CAC/B,YACA,MACA,eACI;AACJ,QAAM,KAAK,YAAY;AACvB,MAAI,CAAC,MAAM,CAAC,WAAY;AACxB,KAAG,QAAQ,YAAY,IAAI;AAC3B,MAAI,cAAc,OAAO,KAAK,UAAU,EAAE,OAAQ,IAAG,oBAAoB,UAAU;AACpF;AAEO,IAAM,WAAW,MAAM,YAAY,GAAG,OAAO,MAAM;AACnD,IAAM,YAAY,MAAM,YAAY,GAAG,OAAO,OAAO;AACrD,IAAM,aAAa,MAAM;AAC/B,QAAM,KAAK,YAAY;AACvB,MAAI,GAAI,IAAG,OAAO,GAAG,SAAS,UAAU,MAAM;AAC/C;AACO,IAAM,iBAAiB,CAAC,YAAqB,YAAY,GAAG,uBAAuB,UAAU,SAAS,MAAM;AAC5G,IAAM,oBAAoB,CAAC,UAAmC,YAAY,GAAG,oBAAoB,KAAK;AACtG,IAAM,gBAAgB,MAAM,YAAY,GAAG,MAAM;;;ACjKxD,SAAS,WAAW,cAAc;AAkB3B,SAAS,YAAY;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AAAA,EAClB;AAAA,EACA;AACD,GAAuB;AACtB,QAAM,SAAS,OAAO,KAAK;AAE3B,YAAU,MAAM;AACf,QAAI,YAAY,CAAC,QAAQ,OAAO,QAAS;AACzC,WAAO,UAAU;AACjB,iBAAa;AAAA,MACZ,SAAS,KAAK;AAAA,MACd,cAAc,KAAK;AAAA,MACnB,cAAc,KAAK;AAAA,MACnB,iBAAiB,mBAAmB;AAAA,MACpC;AAAA,IACD,CAAC;AAAA,EAEF,GAAG,CAAC,UAAU,MAAM,SAAS,MAAM,YAAY,CAAC;AAEhD,QAAM,UAAU,KAAK,UAAU,QAAQ,CAAC,CAAC;AACzC,QAAM,UAAU,KAAK,UAAU,cAAc,CAAC,CAAC;AAE/C,YAAU,MAAM;AACf,QAAI,YAAY,CAAC,MAAM,WAAY;AACnC,WAAO;AAAA,MAAgB,MACtB,iBAAiB,KAAK,YAAY,EAAE,GAAG,MAAM,iBAAiB,KAAK,kBAAkB,OAAU,GAAG,UAAU;AAAA,IAC7G;AAAA,EAED,GAAG,CAAC,UAAU,MAAM,YAAY,MAAM,gBAAgB,SAAS,OAAO,CAAC;AACxE;AAGO,SAAS,eAAe,OAA2B;AACzD,cAAY,KAAK;AACjB,SAAO;AACR;;;ACvBA,IAAM,YAAY,CAAC,UAAqC;AACvD,MAAI;AACH,UAAM,MAAM,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AACpE,UAAM,OAAO;AAAA,MACZ,KAAK,IAAI,OAAO,IAAI,UAAW,IAAK,IAAI,SAAS,KAAM,GAAI,GAAG,CAAC,EAC7D,MAAM,EAAE,EACR,IAAI,CAAC,MAAM,MAAM,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC9D,KAAK,EAAE;AAAA,IACV;AACA,WAAO,KAAK,MAAM,IAAI;AAAA,EACvB,QAAQ;AACP,WAAO;AAAA,EACR;AACD;AAEA,IAAM,gBAAgB,OAAO,KAAa,YAAoB;AAC7D,QAAM,MAAM,IAAI,YAAY;AAC5B,QAAM,IAAI,MAAM,WAAW,OAAO,OAAO,UAAU,OAAO,IAAI,OAAO,GAAG,GAAG,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;AAC7H,QAAM,MAAM,MAAM,WAAW,OAAO,OAAO,KAAK,QAAQ,GAAG,IAAI,OAAO,OAAO,CAAC;AAC9E,SAAO,MAAM,KAAK,IAAI,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACvF;AAEA,IAAM,QAAQ,CAAC,OAAe,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE3D,SAAS,qBAAqB,QAA8B;AAClE,QAAM,OAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAC7C,QAAM,UAAU,OAAO,aAAa;AACpC,QAAM,OAAO,OAAO,oBAAoB;AACxC,QAAM,UAAU,OAAO,aAAa;AACpC,QAAM,MAAM,OAAO,UAAU;AAC7B,QAAM,MAAM,OAAO,cAAc,KAAK;AACtC,QAAM,QAAQ,oBAAI,IAAqD;AACvE,QAAM,WAAW,CAAC,IAAY,UAAyB;AACtD,QAAI,CAAC,IAAK;AACV,QAAI,MAAM,OAAO,IAAM,OAAM,MAAM;AACnC,UAAM,IAAI,IAAI,EAAE,OAAO,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC;AAAA,EACjD;AAEA,QAAM,MAAM,OAAU,MAAc,OAAoB,CAAC,MAAyB;AACjF,QAAI;AACH,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,oBAAoB,OAAO,GAAG,IAAI,IAAI;AAAA,QACpE,GAAG;AAAA,QACH,SAAS,EAAE,gBAAgB,oBAAoB,kBAAkB,OAAO,UAAU,GAAI,KAAK,WAAW,CAAC,EAAG;AAAA,QAC1G,QAAQ,YAAY,QAAQ,OAAO;AAAA,MACpC,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACZ,YAAI,MAAM,cAAc,KAAK,UAAU,KAAK,IAAI,IAAI,OAAO,IAAI,MAAM,EAAE;AACvE,eAAO;AAAA,MACR;AACA,aAAQ,MAAM,IAAI,KAAK;AAAA,IACxB,SAAS,GAAG;AACX,UAAI,MAAM,cAAc,IAAI,KAAM,EAAY,OAAO,EAAE;AACvD,aAAO;AAAA,IACR;AAAA,EACD;AAEA,QAAM,iBAAiB,OAAO,eAC7B,OAAO,aAAa,aAAa,cAAc,OAAO,WAAW,UAAU,IAAI;AAEhF,QAAM,gBAAgB,CAAC,UAAkB;AACxC,UAAM,IAAI,UAAU,KAAK;AACzB,WAAO,CAAC,CAAC,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,MAAO,KAAK,IAAI,IAAI;AAAA,EACjE;AAEA,QAAM,cAAc,OAAO,eAAuB;AACjD,UAAM,OAAO,MAAM,IAA8B,sBAAsB,mBAAmB,UAAU,CAAC,EAAE;AACvG,WAAO,MAAM,SAAS,KAAK,CAAC,MAAM,EAAE,eAAe,UAAU,KAAK;AAAA,EACnE;AAEA,QAAM,iBAAiB,OAAO,eAAuB;AACpD,UAAM,MAAM,MAAM,IAAI,UAAU;AAChC,QAAI,OAAO,IAAI,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI,SAAS,cAAc,IAAI,KAAK,GAAI,QAAO,IAAI;AAE1F,UAAM,OAAO,MAAM,YAAY,UAAU,IAAI,oBAAoB,IAAI;AACrE,UAAM,QAAQ,OAAO,QAAQ,YAAY,cAAc,GAAG,IAAI,MAAM;AACpE,QAAI,MAAO,UAAS,YAAY,KAAK;AACrC,WAAO;AAAA,EACR;AAEA,QAAM,kBAAkB,OAAO,YAAoB,UAAuC;AACzF,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,CAAC,SAAS,UAAW,QAAO,EAAE,IAAI,OAAO,QAAQ,gBAAgB;AAErE,QAAI,UAA4B;AAChC,aAAS,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,KAAK;AACvC,UAAI,EAAG,OAAM,MAAM,GAAI;AACvB,gBAAU,MAAM,YAAY,UAAU;AAAA,IACvC;AACA,QAAI,CAAC,QAAS,QAAO,EAAE,IAAI,OAAO,QAAQ,oBAAoB;AAE9D,UAAM,OAAO,MAAM,IAA4B,aAAa,QAAQ,EAAE,EAAE;AACxE,UAAM,UAAU,MAAM,SAAS,iBAAiB,IAAI,CAAC,OAAO,GAAG,SAAS;AACxE,QAAI,WAAW,CAAC,QAAQ,SAAS,QAAQ,SAAS,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,kBAAkB;AACnG,QAAI,QAAQ,oBAAoB,IAAI,MAAM,OAAO;AAChD,eAAS,YAAY,KAAK;AAC1B,aAAO,EAAE,IAAI,MAAM,QAAQ,YAAY;AAAA,IACxC;AAEA,UAAM,UAAU,MAAM,IAAI,aAAa,QAAQ,EAAE,IAAI;AAAA,MACpD,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,EAAE,mBAAmB,EAAE,GAAI,QAAQ,qBAAqB,CAAC,GAAI,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;AAAA,IACpG,CAAC;AACD,QAAI,QAAS,UAAS,YAAY,KAAK;AACvC,WAAO,UAAU,EAAE,IAAI,MAAM,QAAQ,QAAQ,IAAI,EAAE,IAAI,OAAO,QAAQ,gBAAgB;AAAA,EACvF;AAGA,QAAM,cAAc,OAAO,gBAAmD;AAAA,IAC7E,SAAS;AAAA,IACT,cAAc,OAAO;AAAA,IACrB;AAAA,IACA,gBAAgB,MAAM,eAAe,UAAU;AAAA,IAC/C,aAAa,MAAM,eAAe,UAAU;AAAA,EAC7C;AAGA,QAAM,uBAAuB,OAAO,SAAkB,eAAuB;AAC5E,UAAM,OAAQ,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACnD,QAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,MAAM,GAAG,EAAE,WAAW,GAAG;AACzE,aAAO,SAAS,KAAK,EAAE,IAAI,OAAO,QAAQ,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7E;AACA,UAAM,SAAS,MAAM,gBAAgB,YAAY,KAAK,KAAK;AAC3D,WAAO,SAAS,KAAK,QAAQ,EAAE,QAAQ,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,EAC/D;AAEA,QAAM,aAAa,CAAC,eAAyB,aAAa,MAAM,OAAO,UAAU,IAAI,MAAM,MAAM;AAEjG,SAAO,EAAE,gBAAgB,aAAa,YAAY,gBAAgB,iBAAiB,aAAa,qBAAqB;AACtH;","names":[]}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@fstacksoftware/chatwoot-embed",
+  "version": "1.2.0",
+  "description": "Chatwoot widget for Shopify embedded apps: persistent session in iframe, HMAC identity, 1 conversation per shop",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run typecheck && npm run build"
+  },
+  "peerDependencies": {
+    "react": ">=17"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "@types/react": "^18.0.0",
+    "react": "^18.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.4.0"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}