@invergent/website-widget 2.10.5 → 2.11.1

package/dist/ui.cjs

@@ -81,6 +81,14 @@ var SurogatesNetworkError = class extends SurogatesError {
     this.name = "SurogatesNetworkError";
   }
 };
+var SurogatesPaywallError = class extends SurogatesError {
+  constructor(message, opts) {
+    super(message, { status: 402, ...opts.detail !== void 0 && { detail: opts.detail } });
+    this.name = "SurogatesPaywallError";
+    this.code = opts.code;
+    if (opts.buyUrl !== void 0) this.buyUrl = opts.buyUrl;
+  }
+};
 
 // src/protocol.ts
 async function resolvePairing(pairingBase, publishableKey, doFetchImpl = fetch) {
@@ -132,16 +140,27 @@ async function doFetch(url, init) {
   }
   return response;
 }
-async function extractDetail(response) {
+async function extractDetailValue(response) {
   try {
     const body = await response.json();
-    return typeof body.detail === "string" ? body.detail : void 0;
+    return body?.detail;
   } catch {
     return void 0;
   }
 }
 async function raiseForStatus(response, action) {
-  const detail = await extractDetail(response);
+  const detailValue = await extractDetailValue(response);
+  const detail = typeof detailValue === "string" ? detailValue : void 0;
+  if (response.status === 402) {
+    const structured = detailValue && typeof detailValue === "object" ? detailValue : {};
+    const code = typeof structured.code === "string" ? structured.code : detail || "payment_required";
+    const buyUrl = typeof structured.buy_url === "string" ? structured.buy_url : void 0;
+    throw new SurogatesPaywallError(`${action} requires access (402)`, {
+      code,
+      ...buyUrl !== void 0 && { buyUrl },
+      ...detail !== void 0 && { detail }
+    });
+  }
   if (response.status === 401 || response.status === 403) {
     throw new SurogatesAuthError(`${action} rejected (${response.status})`, {
       status: response.status,
@@ -167,13 +186,18 @@ async function raiseForStatus(response, action) {
     ...detail !== void 0 && { detail }
   });
 }
-async function bootstrap(apiUrl, publishableKey, agentId) {
+async function bootstrap(apiUrl, publishableKey, agentId, firebaseIdToken) {
   const response = await doFetch(apiUrl + withAgentId(PATH_BOOTSTRAP, agentId), {
     method: "POST",
     headers: {
       Authorization: `Bearer ${publishableKey}`,
       "Content-Type": "application/json"
-    }
+    },
+    // Binds a signed-in end user to the visitor session — required
+    // before a monetized agent accepts messages.  Anonymous
+    // bootstraps send no body at all, preserving the historical wire
+    // shape byte-for-byte.
+    ...firebaseIdToken ? { body: JSON.stringify({ firebase_id_token: firebaseIdToken }) } : {}
   });
   if (!response.ok) {
     await raiseForStatus(response, "Bootstrap");
@@ -477,6 +501,7 @@ var WebsiteAgent = class extends client.AbstractAgent {
     }
     this.apiUrl = config.apiUrl.replace(/\/+$/, "");
     this.publishableKey = config.publishableKey;
+    this.getFirebaseIdToken = config.getFirebaseIdToken;
   }
   /**
    * Ensure we have a live session cookie + CSRF token.
@@ -489,10 +514,12 @@ var WebsiteAgent = class extends client.AbstractAgent {
    */
   async ensureBootstrapped() {
     if (this.bootstrapResult) return this.bootstrapResult;
+    const firebaseIdToken = this.getFirebaseIdToken ? await this.getFirebaseIdToken() : void 0;
     this.bootstrapResult = await bootstrap(
       this.apiUrl,
       this.publishableKey,
-      this.agentId
+      this.agentId,
+      firebaseIdToken ?? void 0
     );
     return this.bootstrapResult;
   }
@@ -586,7 +613,20 @@ var WebsiteAgent = class extends client.AbstractAgent {
       if (ctx.terminated) return;
       ctx.terminated = true;
       const message = err instanceof Error ? err.message : String(err);
-      const code = err instanceof SurogatesAuthError ? "auth" : "error";
+      let code = "error";
+      if (err instanceof SurogatesAuthError) {
+        code = "auth";
+      } else if (err instanceof SurogatesPaywallError) {
+        code = "paywall";
+        this.lastPaywall = {
+          code: err.code,
+          ...err.buyUrl !== void 0 && { buyUrl: err.buyUrl }
+        };
+        if (err.code === "sign_in_required") {
+          this.bootstrapResult = void 0;
+          this.cursor = 0;
+        }
+      }
       subscriber.next({
         type: client.EventType.RUN_ERROR,
         message,
@@ -901,6 +941,31 @@ var WIDGET_STYLES = `
   flex-shrink: 0;
 }
 
+.surg-paywall {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  margin: 0 16px;
+  padding: 12px;
+  background: #fffbeb;
+  border: 1px solid #fde68a;
+  color: #92400e;
+  border-radius: 10px;
+  font-size: 13px;
+  flex-shrink: 0;
+}
+.surg-paywall-cta {
+  align-self: flex-start;
+  padding: 6px 14px;
+  background: var(--surg-accent, #0f172a);
+  color: #ffffff;
+  border-radius: 8px;
+  font-size: 13px;
+  font-weight: 600;
+  text-decoration: none;
+}
+.surg-paywall-cta:hover { opacity: 0.9; }
+
 .surg-composer {
   display: flex;
   gap: 8px;
@@ -1029,6 +1094,21 @@ function snapshot(messages) {
   }
   return out;
 }
+function safeBuyUrl(url) {
+  return url && /^https?:\/\//i.test(url) ? url : void 0;
+}
+function paywallCopy(code) {
+  if (code === "sign_in_required") {
+    return "This assistant requires an account. Get access, sign in on this site, then send your message again.";
+  }
+  if (code === "subscription_required") {
+    return "This assistant requires an active subscription.";
+  }
+  if (code === "insufficient_tokens") {
+    return "You\u2019re out of tokens for this assistant.";
+  }
+  return "This assistant requires paid access.";
+}
 function friendlyError(err) {
   if (err instanceof SurogatesAuthError) {
     return "This chat isn\u2019t accepting messages from this site yet. The site owner needs to allow this origin.";
@@ -1062,6 +1142,7 @@ function Widget({ agent, config, registerOpenControl, onOpenChange }) {
   const [messages, setMessages] = hooks.useState(() => snapshot(agent.messages));
   const [running, setRunning] = hooks.useState(false);
   const [error, setError] = hooks.useState(null);
+  const [paywall, setPaywall] = hooks.useState(null);
   const [input, setInput] = hooks.useState("");
   const [agentName, setAgentName] = hooks.useState("");
   const title = config.title || agentName || "Assistant";
@@ -1075,10 +1156,16 @@ function Widget({ agent, config, registerOpenControl, onOpenChange }) {
       onRunStartedEvent: () => {
         setRunning(true);
         setError(null);
+        setPaywall(null);
       },
       onRunFinishedEvent: () => setRunning(false),
       onRunErrorEvent: ({ event }) => {
         setRunning(false);
+        const code = event.code;
+        if (code === "paywall") {
+          setPaywall(agent.lastPaywall ?? { code: "payment_required" });
+          return;
+        }
         setError(friendlyError(event));
       }
     });
@@ -1167,6 +1254,19 @@ function Widget({ agent, config, registerOpenControl, onOpenChange }) {
       ] })
     ] }),
     error && /* @__PURE__ */ jsxRuntime.jsx("div", { class: "surg-error", children: error }),
+    paywall && /* @__PURE__ */ jsxRuntime.jsxs("div", { class: "surg-paywall", children: [
+      /* @__PURE__ */ jsxRuntime.jsx("span", { children: paywallCopy(paywall.code) }),
+      safeBuyUrl(paywall.buyUrl) && /* @__PURE__ */ jsxRuntime.jsx(
+        "a",
+        {
+          class: "surg-paywall-cta",
+          href: safeBuyUrl(paywall.buyUrl),
+          target: "_blank",
+          rel: "noopener noreferrer",
+          children: "Get access"
+        }
+      )
+    ] }),
     /* @__PURE__ */ jsxRuntime.jsxs("div", { class: "surg-composer", children: [
       /* @__PURE__ */ jsxRuntime.jsx(
         "textarea",