@ikonai/sdk 1.0.58 → 1.0.60

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ikonai/sdk",
-  "version": "1.0.58",
+  "version": "1.0.60",
   "type": "module",
   "main": "./index.js",
   "types": "./index.d.ts",

package/storage.d.ts

@@ -3,7 +3,7 @@
  */
 /**
  * Get or create a persistent device ID.
- * Uses crypto.randomUUID() and stores in localStorage for persistence across sessions.
+ * Uses randomUuid() and stores in localStorage for persistence across sessions.
  * Falls back to generating a new UUID if localStorage is unavailable.
  */
 export declare function getOrCreateDeviceId(): string;

package/utils/abort-signal.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `AbortSignal.timeout()` / `AbortSignal.any()` with fallbacks for older browsers.
+ *
+ * `AbortSignal.timeout()` only shipped in Chromium 103 and `AbortSignal.any()` in Chromium 116,
+ * so both are missing on older smart-TV browsers (e.g. Samsung Tizen Chromium 76/85). They sit on
+ * the connection path (fetch timeouts), where calling them throws
+ * `AbortSignal.timeout is not a function` and silently aborts the connect, hanging the app on
+ * "Connecting…" / showing it offline.
+ *
+ * `AbortController` (Chromium 66) is available far more widely, so we rebuild the same behaviour
+ * from it when the static helpers are absent.
+ */
+/**
+ * Returns an `AbortSignal` that aborts after `ms` milliseconds.
+ */
+export declare function abortSignalTimeout(ms: number): AbortSignal;
+/**
+ * Returns an `AbortSignal` that aborts as soon as any of `signals` aborts.
+ */
+export declare function abortSignalAny(signals: AbortSignal[]): AbortSignal;

package/utils/browser-support.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Runtime feature detection for the SDK's hard requirements.
+ *
+ * These are the features the SDK genuinely cannot run without: the transport needs `WebSocket`,
+ * the connect path needs `fetch`, the Teleport protocol codec needs `BigInt` for every 64-bit
+ * field, and core code references `globalThis` and `Promise.allSettled`. All of them shipped by
+ * Chromium 76 / Firefox 71 / Safari 13 (2019), so a missing one means a genuinely outdated browser
+ * (e.g. a legacy smart-TV) — this never trips on a current browser.
+ *
+ * It deliberately does NOT check features the SDK already feature-detects and falls back for
+ * (`crypto.randomUUID`, `AbortSignal.timeout`), gates server-side (`DecompressionStream` via
+ * `SupportsCompression`), or loads lazily (`WebAssembly`, only when audio starts).
+ *
+ * NOTE: `BigInt` here is mostly belt-and-suspenders — the protocol modules use BigInt *literals*
+ * (`0n`), which are parse-time syntax, so a BigInt-less browser fails to parse the bundle before
+ * this check ever runs. The bundle's HTML bootstrap performs the same check pre-import to cover
+ * that case; keep the two feature lists in sync.
+ */
+export interface BrowserSupportResult {
+    readonly supported: boolean;
+    readonly missingFeatures: string[];
+}
+/**
+ * Check whether the current runtime has every feature the SDK requires.
+ */
+export declare function checkBrowserSupport(): BrowserSupportResult;

package/utils/query-params.d.ts

@@ -33,6 +33,8 @@ export declare const IKON_PARAM_AUDIO = "ikon-audio";
 export declare const IKON_PARAM_VIDEO = "ikon-video";
 export declare const IKON_PARAM_WEBRTC = "ikon-webrtc";
 export declare const IKON_PARAM_INSPECT = "ikon-inspect";
+export declare const IKON_PARAM_DEBUG_OVERLAY = "ikon-debug-overlay";
+export declare const IKON_PARAM_AUTH = "ikon-auth";
 export declare const IKON_PARAM_RETRY = "ikon-retry";
 export declare const IKON_PARAM_API = "ikon-api";
 /**
@@ -49,5 +51,19 @@ export declare function getAudioParam(): boolean | null;
 export declare function getVideoParam(): boolean | null;
 export declare function getWebRtcParam(): boolean | null;
 export declare function getInspectParam(): boolean;
+/**
+ * On-screen debug overlay toggle. Distinct from `ikon-debug` (verbose logging / devtools):
+ * debug mode does NOT force the visual overlay, since you usually want a console, not a panel
+ * over the UI. Enable explicitly with `?ikon-debug-overlay=true`.
+ */
+export declare function getDebugOverlayParam(): boolean;
+/**
+ * Route auth (anonymous / OAuth / email / passkey) through the app's own origin at /ikon/auth
+ * instead of the cross-origin auth host. Opt-in (`?ikon-auth=same` or `=true`) until the app LB
+ * exposes the `/ikon/auth/*` → auth-backend route. Once that route is live this can become the
+ * default (mirroring how `ikon-api` defaults to same-origin) — which also fixes old devices
+ * (e.g. smart-TV browsers) that don't trust the standalone auth host's TLS certificate.
+ */
+export declare function getAuthSameOriginParam(): boolean;
 export declare function getRetryParam(): boolean;
 export declare function getApiParam(): boolean | null;

package/utils/uuid.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `crypto.randomUUID()` with a fallback for older browsers.
+ *
+ * `crypto.randomUUID()` only shipped in Chromium 92 / Safari 15.4 and requires a secure
+ * context, so it is missing on older smart-TV browsers (e.g. Samsung Tizen Chromium 85).
+ * Calling it there throws `crypto.randomUUID is not a function`, which on the connection path
+ * (anonymous device id) silently aborts the connect and hangs the app on "Connecting…".
+ *
+ * Falls back to a UUID v4 built from `crypto.getRandomValues` (supported far more widely), then
+ * to `Math.random` as a last resort.
+ */
+export declare function randomUuid(): string;