@microsoft/omnichannel-chat-widget 1.8.4-main.cbab5fc → 1.8.4-main.cd79f08

package/lib/types/common/facades/FacadeChatSDK.d.ts

@@ -34,6 +34,7 @@ export declare class FacadeChatSDK {
     private getAuthToken?;
     private sdkMocked;
     private disableReauthentication;
+    private pendingMidAuthUnauthenticatedState;
     isSDKMocked(): boolean;
     getChatSDK(): OmnichannelChatSDK;
     destroy(): void;
@@ -46,6 +47,34 @@ export declare class FacadeChatSDK {
     private setToken;
     private corroborateTokenIsSet;
     private tokenRing;
+    /**
+     * Sets unauthenticated state for mid-auth flow.
+     * Clears SDK internal state to prevent reconnection to previous authenticated session.
+     */
+    private setMidAuthUnauthenticatedState;
+    /** Clears authentication state in both FacadeChatSDK and underlying SDK */
+    private clearAuthState;
+    /**
+     * Migrates conversation from unauthenticated to authenticated via authenticateChat.
+     * Called after startChat() when user has a valid token but the backend conversation
+     * was started as unauthenticated.
+     */
+    private migrateConversationToAuthenticated;
+    /**
+     * Configures SDK auth state before startChat.
+     * CASE 1: Pending unauthenticated (no token) - sets deferInitialAuth=true
+     * CASE 2: Authenticated with valid token - sets SDK token and deferInitialAuth based on scenario
+     */
+    private configureMidAuthState;
+    /**
+     * CASE 1 handler: Returns true if reconnect params should be cleared (Auth -> Unauth transition)
+     */
+    private handlePendingUnauthenticatedState;
+    /**
+     * CASE 2 handler: Sets deferInitialAuth only for reconnects to unauthenticated sessions (need migration).
+     * For new chats or reconnects to authenticated sessions, SDK handles auth internally.
+     */
+    private handleAuthenticatedState;
     private validateAndExecuteCall;
     initialize(optionalParams?: InitializeOptionalParams): Promise<ChatConfig>;
     getChatReconnectContext(optionalParams?: ChatReconnectOptionalParams): Promise<ChatReconnectContext>;

package/lib/types/common/facades/types/IFacadeChatSDKInput.d.ts

@@ -5,7 +5,9 @@ export interface IFacadeChatSDKInput {
     chatConfig: ChatConfig;
     isAuthenticated: boolean;
     isSDKMocked: boolean;
-    getAuthToken?: (authClientFunction?: string) => Promise<string | null>;
+    getAuthToken?: (authClientFunction?: string, options?: {
+        isMidAuthEnabled: boolean;
+    }) => Promise<string | null>;
 }
 export interface PingResponse {
     result: boolean;

package/lib/types/common/telemetry/TelemetryConstants.d.ts

@@ -57,7 +57,9 @@ export declare enum BroadcastEvent {
     OnWidgetError = "OnWidgetError",
     FMLTrackingCompletedAck = "FMLTrackingCompletedAck",
     FMLTrackingCompleted = "FMLTrackingCompleted",
-    PersistentConversationReset = "PersistentConversationReset"
+    PersistentConversationReset = "PersistentConversationReset",
+    MidConversationAuthSucceeded = "MidConversationAuthSucceeded",// Emitted when mid-conversation auth succeeds (for reconnect support)
+    MidConversationAuthReset = "MidConversationAuthReset"
 }
 export declare enum TelemetryEvent {
     FetchPersistentChatHistoryFailed = "FetchPersistentChatHistoryFailed",
@@ -90,6 +92,9 @@ export declare enum TelemetryEvent {
     CallingSDKInitFailed = "CallingSDKInitFailed",
     CallingSDKLoadSuccess = "CallingSDKLoadSuccess",
     CallingSDKLoadFailed = "CallingSDKLoadFailed",
+    MidConversationAuthSucceeded = "MidConversationAuthSucceeded",
+    MidConversationAuthFailed = "MidConversationAuthFailed",
+    MidConversationAuthReset = "MidConversationAuthReset",
     GetConversationDetailsCallStarted = "GetConversationDetailsCallStarted",
     GetConversationDetailsCallFailed = "GetConversationDetailsCallFailed",
     EndChatSDKCallFailed = "EndChatSDKCallFailed",
@@ -300,10 +305,16 @@ export declare enum TelemetryEvent {
     LCWLazyLoadNoMoreHistory = "LCWLazyLoadNoMoreHistory",
     LCWLazyLoadHistoryError = "LCWLazyLoadHistoryError",
     LCWLazyLoadDestroyed = "LCWLazyLoadDestroyed",
+    LCWLazyLoadTriggerFired = "LCWLazyLoadTriggerFired",
+    LCWLazyLoadBatchReceived = "LCWLazyLoadBatchReceived",
+    LCWLazyLoadInitialLoadComplete = "LCWLazyLoadInitialLoadComplete",
+    LCWLazyLoadScrollAnchorApplied = "LCWLazyLoadScrollAnchorApplied",
     SecureEventBusUnauthorizedDispatch = "SecureEventBusUnauthorizedDispatch",
     SecureEventBusListenerError = "SecureEventBusListenerError",
     SecureEventBusDispatchError = "SecureEventBusDispatchError",
-    StartChatComplete = "StartChatComplete"
+    StartChatComplete = "StartChatComplete",
+    AgentJoinedConversation = "AgentJoinedConversation",
+    BrowserTabHidden = "BrowserTabHidden"
 }
 export interface TelemetryInput {
     scenarioType: ScenarioType;

package/lib/types/common/utils/xssUtils.d.ts

@@ -1,27 +1,11 @@
 /**
- * Detects potential Cross-Site Scripting (XSS) attacks in text input and sanitizes the content.
+ * Sanitizes text input and detects XSS attack patterns.
  *
- * This function performs comprehensive XSS detection using pattern matching for common attack vectors
- * and then sanitizes the input using DOMPurify with strict configuration. It's designed to protect
- * against various XSS techniques including script injection, event handler injection, style-based
- * attacks, and encoded payloads.
+ * Sanitizes first with DOMPurify, then checks for malicious patterns in both
+ * the original and sanitized text to catch mutation XSS attacks.
  *
- * Security patterns detected:
- * - JavaScript protocol URLs (javascript:)
- * - HTML event handlers (onmouseover, onclick, etc.)
- * - Script tags (<script>)
- * - CSS expression() functions
- * - CSS url() functions
- * - Position-based CSS attacks (position: fixed/absolute)
- * - VBScript protocol URLs
- * - Data URLs with HTML content
- * - Fragment identifiers with escaped quotes
- * - HTML entity-encoded angle brackets
- *
- * @param text - The input text to be analyzed and sanitized
- * @returns An object containing:
- *   - cleanText: The sanitized version of the input text with all HTML tags and attributes removed
- *   - isXSSDetected: Boolean flag indicating whether potential XSS patterns were found in the original text
+ * @param text - Input text to sanitize
+ * @returns Object with cleanText (sanitized) and isXSSDetected flag
  */
 export declare const detectAndCleanXSS: (text: string) => {
     cleanText: string;

package/lib/types/common/utils.d.ts

@@ -1,6 +1,6 @@
+import * as CustomEventType from "../contexts/common/CustomEventType";
 import { FacadeChatSDK } from "./facades/FacadeChatSDK";
 import { ITimer } from "./interfaces/ITimer";
-import * as CustomEventType from "../contexts/common/CustomEventType";
 export declare const setTabIndices: (elements: HTMLElement[] | null, tabIndexMap: Map<string, number>, shouldBeFocusable: boolean) => void;
 export declare const findParentFocusableElementsWithoutChildContainer: (elementId: string) => HTMLElement[] | null;
 export declare const findAllFocusableElement: (parent: string | HTMLElement) => any[] | null;
@@ -55,3 +55,11 @@ export declare function isEndConversationDueToOverflowActivity(activity: {
         tags?: string[];
     };
 }): boolean | undefined;
+/**
+ * Parses a value that can be boolean or string ("true"/"false") into a boolean.
+ * Handles null/undefined by returning false.
+ *
+ * @param value - The value to parse (can be boolean, string, null, or undefined)
+ * @returns true if value is true or "true" (case-insensitive), false otherwise
+ */
+export declare function parseBooleanFromConfig(value: boolean | string | null | undefined): boolean;

package/lib/types/components/errorboundary/ErrorBoundary.d.ts

@@ -1,4 +1,4 @@
-import React, { Component } from 'react';
+import React, { Component } from "react";
 interface ErrorBoundaryProps {
     children: React.ReactNode | (() => React.ReactNode);
     onError?: (error: Error) => void;

package/lib/types/components/livechatwidget/common/ActivitySubscriber/BotAuthActivitySubscriber.d.ts

@@ -5,6 +5,7 @@ export declare class BotAuthActivitySubscriber implements IActivitySubscriber {
     private signInCardSeen;
     private fetchBotAuthConfigRetries;
     private fetchBotAuthConfigRetryInterval;
+    private fallbackShowSignInCard?;
     constructor(optionalParams?: IBotAuthActivitySubscriberOptionalParams);
     applicable(activity: any): boolean;
     apply(activity: any): Promise<any>;

package/lib/types/components/livechatwidget/common/ChatWidgetEvents.d.ts

@@ -2,6 +2,7 @@ declare enum ChatWidgetEvents {
     ADD_ACTIVITY = "CHAT_WIDGET/ADD_ACTIVITY",
     FETCH_PERSISTENT_CHAT_HISTORY = "CHAT_WIDGET/FETCH_PERSISTENT_CHAT_HISTORY",
     NO_MORE_HISTORY_AVAILABLE = "CHAT_WIDGET/NO_MORE_HISTORY_AVAILABLE",
-    HISTORY_LOAD_ERROR = "CHAT_WIDGET/HISTORY_LOAD_ERROR"
+    HISTORY_LOAD_ERROR = "CHAT_WIDGET/HISTORY_LOAD_ERROR",
+    HISTORY_BATCH_LOADED = "CHAT_WIDGET/HISTORY_BATCH_LOADED"
 }
 export default ChatWidgetEvents;

package/lib/types/components/livechatwidget/common/authHelper.d.ts

@@ -1,7 +1,14 @@
 import ChatConfig from "@microsoft/omnichannel-chat-sdk/lib/core/ChatConfig";
 import { OmnichannelChatSDK } from "@microsoft/omnichannel-chat-sdk";
+/**
+ * Check if mid-auth is enabled based on chatConfig.
+ * Mid-auth flag lives under LiveWSAndLiveChatEngJoin.msdyn_authenticatedsigninoptional.
+ */
+declare const isMidAuthEnabled: (chatConfig: ChatConfig | undefined) => boolean;
 declare const getAuthClientFunction: (chatConfig: ChatConfig | undefined) => string | undefined;
-declare const handleAuthentication: (chatSDK: OmnichannelChatSDK, chatConfig: ChatConfig | undefined, getAuthToken: ((authClientFunction?: string) => Promise<string | null>) | undefined) => Promise<{
+declare const handleAuthentication: (chatSDK: OmnichannelChatSDK, chatConfig: ChatConfig | undefined, getAuthToken: ((authClientFunction?: string, options?: {
+    isMidAuthEnabled: boolean;
+}) => Promise<string | null>) | undefined) => Promise<{
     result: boolean;
     token: string | null;
     error?: undefined;
@@ -15,4 +22,4 @@ declare const handleAuthentication: (chatSDK: OmnichannelChatSDK, chatConfig: Ch
     };
 }>;
 declare const removeAuthTokenProvider: (chatSDK: any) => void;
-export { getAuthClientFunction, handleAuthentication, removeAuthTokenProvider };
+export { getAuthClientFunction, handleAuthentication, removeAuthTokenProvider, isMidAuthEnabled };

package/lib/types/components/livechatwidget/common/liveChatConfigUtils.d.ts

@@ -1,4 +1,15 @@
+import { ExtendedChatConfig } from "../../webchatcontainerstateful/interfaces/IExtendedChatConffig";
 import { FacadeChatSDK } from "../../../common/facades/FacadeChatSDK";
 export declare const isPostChatSurveyEnabled: (facadeChatSDK: FacadeChatSDK) => Promise<boolean>;
 export declare const getPostChatSurveyConfig: (facadeChatSDK: FacadeChatSDK) => Promise<any>;
 export declare const isPersistentChatEnabled: (conversationMode: string | undefined) => boolean;
+/**
+ * Determines if persistent chat history should be loaded based on all required conditions.
+ *
+ * @param extendedChatConfig - The extended chat configuration object
+ * @returns true if ALL conditions are met:
+ *   1. Conversation mode must be Persistent ("192350001")
+ *   2. History is enabled in admin config (msdyn_enablepersistentchatpreviousconversations)
+ *   3. History is enabled via feature flag (lcwPersistentChatHistoryEnabled)
+ */
+export declare const shouldLoadPersistentChatHistory: (extendedChatConfig: ExtendedChatConfig | undefined) => boolean;

package/lib/types/components/livechatwidget/interfaces/IBotAuthActivitySubscriberOptionalParams.d.ts

@@ -1,4 +1,5 @@
 export interface IBotAuthActivitySubscriberOptionalParams {
     fetchBotAuthConfigRetries?: number;
     fetchBotAuthConfigRetryInterval?: number;
+    fallbackShowSignInCard?: boolean;
 }

package/lib/types/components/webchatcontainerstateful/interfaces/IAdaptiveCardStyles.d.ts

@@ -5,4 +5,6 @@ export interface IAdaptiveCardStyles {
     buttonWhiteSpace?: string;
     textWhiteSpace?: string;
     choiceInputPadding?: string;
+    buttonFlexWrap?: string;
+    buttonGap?: string;
 }

package/lib/types/components/webchatcontainerstateful/interfaces/IBotAuthConfig.d.ts

@@ -1,4 +1,11 @@
 export interface IBotAuthConfig {
     fetchBotAuthConfigRetries?: number;
     fetchBotAuthConfigRetryInterval?: number;
+    /**
+     * Fallback value to determine whether to show the sign-in card when the bot auth config fetch fails after all retries.
+     * - `true`: Show the sign-in card to the user
+     * - `false`: Hide the sign-in card
+     * - `undefined`: Throw an error if the fetch fails (default behavior)
+     */
+    fallbackShowSignInCard?: boolean;
 }

package/lib/types/components/webchatcontainerstateful/interfaces/IExtendedChatConffig.d.ts

@@ -3,7 +3,7 @@ export interface ExtendedChatConfig {
     LiveChatConfigAuthSettings?: LiveChatConfigAuthSettings;
     LiveWSAndLiveChatEngJoin?: {
         msdyn_conversationmode?: string;
-        msdyn_enablepersistentchatpreviousconversations?: boolean;
+        msdyn_enablepersistentchatpreviousconversations?: string;
     };
 }
 interface LcwFcbConfiguration {

package/lib/types/components/webchatcontainerstateful/webchatcontroller/middlewares/renderingmiddlewares/activities/LazyLoadActivity.d.ts

@@ -52,7 +52,9 @@ declare class LazyLoadHandler {
     static initialized: boolean;
     static paused: boolean;
     static observer: IntersectionObserver | null;
-    private static scrollState;
+    static preLoadScrollHeight: number;
+    private static preLoadScrollTop;
+    static initialLoadComplete: boolean;
     static pendingScrollAction: boolean;
     private static retryTimeouts;
     static resetPending: boolean;
@@ -151,40 +153,21 @@ declare class LazyLoadHandler {
      * It coordinates the entire lazy loading process:
      *
      * 1. Sets flags to prevent concurrent operations
-     * 2. Dispatches event to fetch more chat history
-     * 3. Waits for content to load
-     * 4. Executes scroll adjustment to maintain user position
+     * 2. Captures scroll state BEFORE content loads (for height-delta anchoring)
+     * 3. Dispatches event to fetch more chat history
      *
-     * Timing: Uses 300ms delay to allow content loading before scroll adjustment
+     * Scroll anchoring is triggered by HISTORY_BATCH_LOADED event (not a blind timeout).
      */
     private static handleLazyLoadTrigger;
     /**
-     * Executes reliable scroll with validation and retry logic
+     * Applies height-delta scroll anchoring after new history content is prepended.
      *
-     * This method implements a robust scroll system that:
-     * 1. Finds and validates the scroll container
-     * 2. Calculates target scroll position (current + 35px)
-     * 3. Sets up scroll state for tracking and retries
-     * 4. Initiates the scroll attempt process
-     *
-     * If no suitable container is found, schedules a retry.
+     * When content is added above the viewport, the browser keeps scrollTop constant
+     * but the content shifts down — making the viewport drift upward.
+     * Fix: scrollTop = savedScrollTop + (newScrollHeight - savedScrollHeight)
+     * This keeps the user looking at the same content they had before.
      */
-    private static executeReliableScroll;
-    /**
-     * Attempts to perform scroll with verification and retry logic
-     *
-     * This method implements a sophisticated scroll system:
-     *
-     * 1. Uses requestAnimationFrame for smooth execution
-     * 2. Performs the scroll operation
-     * 3. Verifies scroll actually occurred (5px tolerance)
-     * 4. Retries with exponential backoff if failed
-     * 5. Continues operation after max attempts
-     *
-     * The two-frame approach ensures scroll is applied and then verified
-     * after the browser has had time to process the scroll change.
-     */
-    private static attemptScroll;
+    static applyScrollAnchor(): void;
     /**
      * Finishes scroll action and prepares for next cycle
      *
@@ -192,21 +175,14 @@ declare class LazyLoadHandler {
      * Uses delays to allow content stabilization before re-enabling
      * the intersection observer for the next lazy load cycle.
      */
-    private static finishScrollAction;
-    /**
-     * Schedules retry for failed scroll operations
-     *
-     * Used when scroll container is not available or scrollable.
-     * Provides a longer delay to allow container to become ready.
-     */
-    private static scheduleScrollRetry;
+    static finishScrollAction(): void;
     /**
      * Schedules observer reset for next lazy load cycle
      *
      * After a lazy load operation completes, the observer needs to be reset
      * to detect the next time the user scrolls to the top.
      */
-    private static scheduleReset;
+    static scheduleReset(): void;
     /**
      * Finds the appropriate scroll container using multiple strategies
      *

package/lib/types/contexts/common/ILiveChatWidgetContext.d.ts

@@ -52,6 +52,7 @@ export interface ILiveChatWidgetContext {
         postChatParticipantType: undefined | ParticipantType;
         isConversationalSurvey: boolean;
         isConversationalSurveyEnabled: boolean;
+        isUserAuthenticated: boolean;
     };
     uiStates: {
         showConfirmationPane: boolean;

package/lib/types/contexts/common/LiveChatWidgetActionType.d.ts

@@ -48,5 +48,6 @@ export declare enum LiveChatWidgetActionType {
     SET_CONVERSATIONAL_SURVEY_ENABLED = 46,
     SET_CONVERSATIONAL_SURVEY_DISPLAY = 47,
     GET_IN_MEMORY_STATE = 48,
-    SET_BOT_AVATAR_INITIALS = 49
+    SET_BOT_AVATAR_INITIALS = 49,
+    SET_USER_AUTHENTICATED = 50
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/omnichannel-chat-widget",
-  "version": "1.8.4-main.cbab5fc",
+  "version": "1.8.4-main.cd79f08",
   "description": "Microsoft Omnichannel Chat Widget",
   "main": "lib/cjs/index.js",
   "types": "lib/types/index.d.ts",
@@ -47,6 +47,7 @@
     "@typescript-eslint/parser": "^5.2.0",
     "babel-jest": "^27.3.1",
     "babel-loader": "^8.2.3",
+    "babel-plugin-react-native-web": "^0.21.2",
     "botframework-directlinejs": "^0.15.0",
     "concurrently": "^9.1.2",
     "copyfiles": "^2.4.1",
@@ -64,14 +65,17 @@
     "jest": "^27.3.1",
     "jest-dom": "^4.0.0",
     "jest-image-snapshot": "^4.5.1",
+    "jest-transform-stub": "^2.0.0",
     "json": "^11.0.0",
     "lint-staged": "^16.0.0",
+    "metro-react-native-babel-preset": "^0.77.0",
     "p-defer": "^4.0.1",
     "playwright": "^1.20.0",
     "postcss": "^8.3.9",
     "react": "^18.3.1",
     "react-docgen-typescript-plugin": "^1.0.8",
     "react-dom": "^18.3.1",
+    "react-native-web": "^0.21.2",
     "react-test-renderer": "^18.3.1",
     "rimraf": "^6.0.1",
     "storybook-addon-playwright": "^4.9.2",
@@ -86,11 +90,12 @@
   "dependencies": {
     "@azure/core-tracing": "^1.2.0",
     "@microsoft/applicationinsights-web": "^3.3.6",
-    "@microsoft/omnichannel-chat-components": "1.1.16",
-    "@microsoft/omnichannel-chat-sdk": "^1.11.7-main.3418dc3",
+    "@microsoft/omnichannel-chat-components": "1.1.17-main.940d996",
+    "@microsoft/omnichannel-chat-sdk": "1.11.9-main.39f9d5b",
     "@opentelemetry/api": "^1.9.0",
     "abort-controller": "^3",
     "abort-controller-es5": "^2.0.1",
+    "botframework-webchat": "4.18.1-hotfix.20260308.b15b405",
     "core-js-pure": "^3.42.0",
     "dompurify": "^3.2.4",
     "markdown-it": "^12.3.2",
@@ -106,9 +111,9 @@
   "scripts": {
     "storybook": "start-storybook -p 6006",
     "compose-storybook": "start-storybook -c stories/.storybook -p 9009",
-    "build-composite-storybook": "build-storybook -c stories/.storybook -o storybook-build",
+    "build-composite-storybook": "cross-env NODE_OPTIONS=--openssl-legacy-provider build-storybook -c stories/.storybook -o storybook-build",
     "build-storybook": "cross-env NODE_OPTIONS=--openssl-legacy-provider build-storybook",
-    "build": "yarn clean yarn lint && yarn build:esm && yarn build:cjs && tsc",
+    "build": "yarn clean && yarn lint && yarn build:esm && yarn build:cjs && tsc",
     "test:unit": "jest -c jest.config.unit.cjs --env=jsdom --runInBand --force-exit",
     "test:e2e": "cd automation_tests && yarn test",
     "test:e2e:build": "yarn build-sample && cd automation_tests && yarn test",
@@ -145,7 +150,11 @@
     "**/minimist": "1.2.6",
     "**/sanitize-html": "2.14.0",
     "@storybook/react-docgen-typescript-plugin": "1.0.6--canary.9.cd77847.0",
-    "**/semver": "7.5.4"
+    "**/semver": "7.5.4",
+    "**/lodash": "4.17.23",
+    "**/@babel/runtime-corejs3": "^7.29.0",
+    "**/brace-expansion": "2.0.2",
+    "**/swiper": "9.4.1"
   },
   "jest": {
     "verbose": true,