@omnizapi/connect 1.0.0 → 1.0.2

package/dist/omnizapi.min.js

@@ -1 +1 @@
-"use strict";(()=>{var e=class extends Error{constructor(o,i){super(i);this.code=o;this.name="OmnizapiError"}};var re={PRODUCTION:{api:"https://api.omni.z-api.io",front:"https://app.omni.z-api.io"},STAGING:{api:"https://api.staging.omni.z-api.io",front:"https://app.staging.omni.z-api.io"},SANDBOX:{api:"",front:""}},se=({environment:n="PRODUCTION",apiUrl:t,frontUrl:o}={})=>{if(!Object.prototype.hasOwnProperty.call(re,n))throw new e("INVALID_CONFIGURATION","Unknown environment.");let i=re[n],s={api:t!=null?t:i.api,front:o!=null?o:i.front};for(let c of["api","front"]){let f;try{f=new URL(s[c])}catch(l){throw new e("INVALID_CONFIGURATION",`A valid ${c}Url is required for this environment.`)}if(!["http:","https:"].includes(f.protocol)||f.username||f.password||f.href.includes("?")||f.href.includes("#"))throw new e("INVALID_CONFIGURATION",`${c}Url must be an HTTP(S) base URL without credentials, query or fragment.`);s[c]=f.href.replace(/\/+$/,"")}return s};var ae=Symbol.for("omnizapi.connect.runtime.v1");function W(n){let t=n,o=t[ae];return o||(o={nativeLoginPending:!1,failedFacebookScripts:new WeakSet},Object.defineProperty(t,ae,{configurable:!0,value:o})),o}function ce(n){return!!n&&!("__buffer"in n)&&typeof n.init=="function"&&typeof n.login=="function"}function le(n,t){if(t.aborted)return Promise.reject(new e("SDK_LOAD_FAILED","The Meta SDK load was cancelled."));if(ce(n.FB))return Promise.resolve(n.FB);let o=W(n),i=o.facebookLoading;if(i)return i;let s=Promise.resolve().then(()=>new Promise((c,f)=>{let l=!1,r,E=!1,O,w,_=(I,a)=>{if(!l){l=!0,clearTimeout(K),t.removeEventListener("abort",U),r==null||r.removeEventListener("load",M),r==null||r.removeEventListener("error",G);try{n.fbAsyncInit===L&&(O?Object.defineProperty(n,"fbAsyncInit",O):Reflect.deleteProperty(n,"fbAsyncInit"))}catch(P){}if(a&&r&&(t.aborted||o.failedFacebookScripts.add(r),E))try{r.remove()}catch(P){}o.facebookLoading===s&&delete o.facebookLoading,I?c(I):f(a)}},M=()=>{if(l)return;let I=n.FB;ce(I)&&_(I)},G=()=>_(void 0,new e("SDK_LOAD_FAILED","The Meta SDK could not be loaded.")),U=()=>_(void 0,new e("SDK_LOAD_FAILED","The Meta SDK load was cancelled.")),L=()=>{if(!l){try{w==null||w.call(n)}catch(I){}M()}},K=setTimeout(()=>_(void 0,new e("SDK_LOAD_FAILED","The Meta SDK load timed out.")),30*1e3);try{if(t.addEventListener("abort",U,{once:!0}),t.aborted){U();return}O=Object.getOwnPropertyDescriptor(n,"fbAsyncInit"),w=typeof n.fbAsyncInit=="function"?n.fbAsyncInit:void 0,Object.defineProperty(n,"fbAsyncInit",O&&!O.configurable?{value:L}:{configurable:!0,enumerable:!0,writable:!0,value:L});let I=n.document,a=I.getElementById("facebook-jssdk"),P=(a==null?void 0:a.tagName.toLowerCase())==="script"?a:void 0;r=(P&&!o.failedFacebookScripts.has(P)?P:void 0)||Array.from(I.scripts).find(y=>{if(o.failedFacebookScripts.has(y))return!1;try{let F=new URL(y.src);return F.origin==="https://connect.facebook.net"&&/^\/[^/]+\/sdk\.js$/.test(F.pathname)}catch(F){return!1}}),r||(r=I.createElement("script"),E=!0,a||(r.id="facebook-jssdk"),r.src="https://connect.facebook.net/en_US/sdk.js",r.crossOrigin="anonymous",r.async=!0,r.defer=!0),r.addEventListener("load",M),r.addEventListener("error",G),M(),!l&&E&&I.head.appendChild(r)}catch(I){G()}}));return o.facebookLoading=s,s}var ue=(n,t,o=600,i=700)=>{let s=window,c=s.document,f=s.screenLeft!==void 0?s.screenLeft:s.screenX,l=s.screenTop!==void 0?s.screenTop:s.screenY,r=s.innerWidth?s.innerWidth:c.documentElement.clientWidth?c.documentElement.clientWidth:s.screen.width,E=s.innerHeight?s.innerHeight:c.documentElement.clientHeight?c.documentElement.clientHeight:s.screen.height,O=r/2-o/2+f,w=E/2-i/2+l;return s.open(n,t,`scrollbars=yes, width=${o}, height=${i}, top=${w}, left=${O}`)};var Ie=600*1e3,we=30*1e3;function v(n){return typeof n=="object"&&n!==null&&!Array.isArray(n)}function p(n){return typeof n=="string"&&n.trim()?n:null}function de(n){if(n==="."||n==="..")throw new e("INVALID_OPTIONS","The channelId cannot be a URL path navigation segment.");try{return encodeURIComponent(n)}catch(t){throw new e("INVALID_OPTIONS","The channelId cannot be encoded as a URL path.")}}function Re(n){return["META_MESSENGER","META_INSTAGRAM","META_WHATSAPP","BOT_TELEGRAM","Z_API_WHATSAPP"].includes(n)}function pe(n){return typeof n=="string"&&["cancelled","popup_closed","not_completed","invalid_channel","origin_not_allowed","unsupported_channel"].includes(n)}function B(n,t,o){return{success:!1,reason:o,channelId:n,type:t,code:null,wabaId:null,phoneId:null}}function fe(n,t,o){return typeof fetch!="function"||typeof AbortController!="function"?Promise.reject(new e("INVALID_CONFIGURATION","Fetch and AbortController are required.")):new Promise((i,s)=>{let c=new AbortController,f=!1,l=(w,_)=>{f||(f=!0,clearTimeout(E),o==null||o.removeEventListener("abort",r),c.abort(),_?s(_):i(w))},r=()=>l(void 0,new e("NETWORK_ERROR","The API request was cancelled.")),E=setTimeout(()=>l(void 0,new e("TIMEOUT","The API request timed out.")),we);if(o==null||o.addEventListener("abort",r,{once:!0}),o!=null&&o.aborted){r();return}(async()=>{let w;try{w=await fetch(n.href,{...t,signal:c.signal})}catch(_){l(void 0,new e("NETWORK_ERROR","The API request failed."));return}if(!f){if(!w||typeof w.ok!="boolean"){l(void 0,new e("INVALID_RESPONSE","The API response is invalid."));return}if(!w.ok){l(void 0,new e("HTTP_ERROR","The API returned an unsuccessful status."));return}try{let _=await w.json();f||l(_)}catch(_){l(void 0,new e("INVALID_RESPONSE","The API did not return valid JSON."))}}})().catch(()=>l(void 0,new e("NETWORK_ERROR","The API request failed.")))})}var j=class{constructor(t){if(!v(t)||!p(t.publicKey)||Array.from(t.publicKey).some(o=>{let i=o.charCodeAt(0);return i<32||i===127})||t.logo!==void 0&&typeof t.logo!="string"||t.apiUrl!==void 0&&!p(t.apiUrl)||t.frontUrl!==void 0&&!p(t.frontUrl))throw new e("INVALID_CONFIGURATION","Valid client properties and a publicKey are required.");this.publicKey=t.publicKey,this.logo=t.logo,this.constants=se({environment:t.environment,apiUrl:t.apiUrl,frontUrl:t.frontUrl})}async getListMessengerPages(t,o){if(!p(t)||!p(o))throw new e("INVALID_OPTIONS","A channelId and authorization code are required.");return fe(new URL(`${this.constants.api}/v1/channels/${de(t)}/list-messenger-pages`),{method:"POST",body:JSON.stringify({redirectUri:new URL(`${this.constants.front}/oauth/proxy-messenger`).href,code:o}),headers:{"Content-Type":"application/json",Authorization:this.publicKey}})}async connect(t){var o;try{if(typeof window=="undefined"||!window.document||!window.location)throw new e("BROWSER_REQUIRED","Connecting requires a browser window.");let i=window,s=W(i);if(s.activeConnection)throw new e("CONNECTION_IN_PROGRESS","A connection is already in progress in this window.");if(!v(t))throw new e("INVALID_OPTIONS","Connection options are required.");let{channelId:c,direct:f,getQRCode:l,timeoutMs:r=Ie}=t;if(typeof c!="string"||f!==void 0&&typeof f!="boolean"||l!==void 0&&typeof l!="function"||typeof r!="number"||!Number.isFinite(r)||r<=0||r>2147483647)throw new e("INVALID_OPTIONS","Invalid channelId, direct, getQRCode or timeoutMs option.");if(!c.trim())return B(c,null,"invalid_channel");let E=de(c);if(typeof i.open!="function"||typeof i.addEventListener!="function"||typeof i.removeEventListener!="function"||typeof i.location.origin!="string"||typeof i.location.href!="string"||typeof((o=i.crypto)==null?void 0:o.getRandomValues)!="function"||typeof AbortController!="function"||typeof fetch!="function")throw new e("INVALID_CONFIGURATION","Required browser APIs are unavailable.");let O=i.location.origin;if(O==="null")return B(c,null,"origin_not_allowed");let w=i.location.href,_=new URL(this.constants.front).origin;return await new Promise((M,G)=>{let U=Symbol("omnizapi-connection"),L=new AbortController,K=Date.now()+r,I=!1,a=null,P=null,y=null,F,q,z,Q=!1,J=[],S=h=>{if(I)return;if(I=!0,clearTimeout(F),clearInterval(q),z)try{i.removeEventListener("message",z)}catch(D){}try{L.abort()}catch(D){}let k=y;y=null;try{k==null||k.close()}catch(D){}for(let{name:D,previous:m,value:N}of J)try{let T=Object.getOwnPropertyDescriptor(i,D);if(!T||!("value"in T)||T.value!==N)continue;m?Object.defineProperty(i,D,m):Reflect.deleteProperty(i,D)}catch(T){}s.activeConnection===U&&delete s.activeConnection,Q&&!(h instanceof e)&&h.success&&(s.nativeLoginPending=!1),h instanceof e?G(h):M(h)},b=()=>(!I&&Date.now()>=K&&S(new e("TIMEOUT","The connection timed out.")),!I),C=h=>S(B(c,a,h)),X=h=>{!b()||!a||S({success:!0,channelId:c,type:a,code:p(h.code),wabaId:p(h.wabaId),phoneId:p(h.phoneId),coexistence:h.coexistence===!0,redirectUri:P,botToken:p(h.botToken),pageId:p(h.pageId),accessToken:p(h.accessToken)})};try{s.activeConnection=U;let h=i.crypto.getRandomValues(new Uint8Array(16)),k=Array.from(h,m=>m.toString(16).padStart(2,"0")).join("");for(let[m,N]of[["__omnizapiPublicKey",this.publicKey],["__omnizapiCurrentChannel",c],["__omnizapiGetQrCode",l]]){let T=Object.getOwnPropertyDescriptor(i,m);Object.defineProperty(i,m,T&&!T.configurable?{value:N}:{configurable:!0,enumerable:!0,writable:!0,value:N}),J.push({name:m,previous:T,value:N})}F=setTimeout(()=>S(new e("TIMEOUT","The connection timed out.")),r),(async()=>{var Z,Y,ee;let m=await fe(new URL(`${this.constants.api}/instances/${E}/sdk-info`),{headers:{Authorization:this.publicKey,"Content-Type":"application/json"}},L.signal);if(!b())return;if(!v(m)||!p(m.middleware))throw new e("INVALID_RESPONSE","The channel configuration is invalid.");let N=(Z=m.allowOrigins)!=null?Z:[];if(!Array.isArray(N)||!N.every(u=>typeof u=="string"))throw new e("INVALID_RESPONSE","The channel origins are invalid.");let T=m.middleware;if(a=Re(T)?T:null,O!==_&&!N.some(u=>O===u.replace(/\/$/,""))){C("origin_not_allowed");return}if(!a){C("unsupported_channel");return}let V=(Y=p(a==="META_INSTAGRAM"?m.appInstagramId:m.appId))!=null?Y:"",H=(ee=p(m.appConfig))!=null?ee:"";if(a.startsWith("META_")&&!V||a==="META_WHATSAPP"&&!H)throw new e("INVALID_RESPONSE","The channel provider configuration is invalid.");if(a==="META_WHATSAPP"&&(f||m.appCustom||O===_)){if(s.nativeLoginPending)throw new e("CONNECTION_IN_PROGRESS","A previous Meta login is incomplete. Reload this window before retrying a native login.");let u=await le(i,L.signal);if(!b())return;try{u.init({appId:V,version:"v25.0",autoLogAppEvents:!0,xfbml:!0})}catch(A){throw new e("PROVIDER_ERROR","The Meta SDK could not be initialized.")}if(!b())return;let d=null,x=null,ne=null,te=!1,oe=!1,ie=()=>{!b()||!d||!x||X({code:d,wabaId:x,phoneId:ne,coexistence:te})};z=A=>{if(!b()||!["https://www.facebook.com","https://web.facebook.com"].includes(A.origin))return;let R=A.data;if(typeof R=="string")try{R=JSON.parse(R)}catch(_e){return}if(!(!v(R)||R.type!=="WA_EMBEDDED_SIGNUP")){if(R.event==="CANCEL")C("cancelled");else if(R.event==="ERROR")S(new e("PROVIDER_ERROR","Meta could not complete the connection."));else if(R.event==="FINISH"||R.event==="FINISH_WHATSAPP_BUSINESS_APP_ONBOARDING"){if(!v(R.data)||!p(R.data.waba_id)||R.data.phone_number_id!=null&&typeof R.data.phone_number_id!="string")return;x=p(R.data.waba_id),ne=p(R.data.phone_number_id),te=R.event==="FINISH_WHATSAPP_BUSINESS_APP_ONBOARDING",ie()}}},i.addEventListener("message",z),s.nativeLoginPending=!0,Q=!0;try{u.login(A=>{if(!(!b()||oe)){if(oe=!0,!v(A)||A.error){S(new e("PROVIDER_ERROR","Meta returned an invalid login response."));return}if(A.authResponse==null){C("not_completed");return}if(!v(A.authResponse)||!p(A.authResponse.code)){C("not_completed");return}d=p(A.authResponse.code),ie()}},{config_id:H,response_type:"code",override_default_response_type:!0,extras:{setup:{},featureType:"whatsapp_business_app_onboarding",sessionInfoVersion:"3"}})}catch(A){throw new e("PROVIDER_ERROR","The Meta login could not be started.")}return}let g;if(a==="META_MESSENGER"||a==="META_INSTAGRAM"){let u=a==="META_MESSENGER";P=new URL(`${this.constants.front}/oauth/proxy-${u?"messenger":"instagram"}`).href,g=new URL(u?"https://www.facebook.com/dialog/oauth":"https://www.instagram.com/oauth/authorize"),g.searchParams.set("client_id",V),u&&g.searchParams.set("display","popup"),g.searchParams.set("redirect_uri",P),g.searchParams.set("response_type","code"),g.searchParams.set("scope",u?"public_profile,business_management,pages_messaging,pages_show_list,pages_manage_metadata,pages_read_engagement":"instagram_business_basic,instagram_business_manage_messages"),g.searchParams.set("state",JSON.stringify({currentUrl:w,attemptId:k,channelId:c}))}else a==="META_WHATSAPP"?(g=new URL(`${this.constants.front}/oauth/proxy-cloud-api`),g.searchParams.set("configId",H),g.searchParams.set("appId",V),g.searchParams.set("channelId",c),g.searchParams.set("channelType",a),g.searchParams.set("logo",this.logo||new URL(`${this.constants.front}/logos/SVG/Ativo%2016.svg`).href),g.searchParams.set("pk",this.publicKey)):(g=new URL(`${this.constants.front}/connect/${a==="BOT_TELEGRAM"?"telegram":"whatsapp-web"}`),g.searchParams.set("channelId",c));if(a!=="META_MESSENGER"&&a!=="META_INSTAGRAM"&&g.searchParams.set("attemptId",k),z=u=>{if(!b()||!y||u.origin!==_||u.source!==y)return;let d=u.data;!v(d)||d.type!=="after-connect"||d.attemptId!==k||d.channelId!==c||typeof d.success!="boolean"||d.reason!==void 0&&!pe(d.reason)||d.coexistence!==void 0&&typeof d.coexistence!="boolean"||["code","wabaId","phoneId","botToken","pageId","accessToken","redirectUri"].some(x=>d[x]!=null&&typeof d[x]!="string")||(d.success?a!=null&&a.startsWith("META_")&&!p(d.code)||a==="BOT_TELEGRAM"&&!p(d.botToken)?C("not_completed"):X(d):C(pe(d.reason)?d.reason:"not_completed"))},i.addEventListener("message",z),!!b()){try{let u=ue(g.href,"_blank",600,740);if(!u||u===i)throw new e("POPUP_BLOCKED","The connection popup was blocked.");y=u}catch(u){throw new e("POPUP_BLOCKED","The connection popup could not be opened.")}q=setInterval(()=>{if(b())try{y!=null&&y.closed&&C("popup_closed")}catch(u){S(new e("PROVIDER_ERROR","The connection popup could not be monitored."))}},500)}})().catch(m=>{b()&&S(m instanceof e?m:new e("PROVIDER_ERROR","The connection could not be completed."))})}catch(h){S(new e("INVALID_CONFIGURATION","The connection could not be initialized."))}})}catch(i){throw i instanceof e?i:new e("INVALID_OPTIONS","The connection could not be started with these options.")}}},me=j;var $=class{static newClient(t){return new me(t)}};var he=$;Object.assign(window,{Omnizapi:he});})();
+"use strict";(()=>{var o=class extends Error{constructor(n,e){super(e);this.code=n;this.name="OmnizapiError"}};var ue={PRODUCTION:{api:"https://api.omni.z-api.io",front:"https://app.omni.z-api.io"},STAGING:{api:"https://api.staging.omni.z-api.io",front:"https://app.staging.omni.z-api.io"},SANDBOX:{api:"",front:""}},fe=({environment:r="PRODUCTION",apiUrl:t,frontUrl:n}={})=>{if(!Object.prototype.hasOwnProperty.call(ue,r))throw new o("INVALID_CONFIGURATION","Unknown environment.");let e=ue[r],a={api:t!=null?t:e.api,front:n!=null?n:e.front};for(let s of["api","front"]){let c;try{c=new URL(a[s])}catch(f){throw new o("INVALID_CONFIGURATION",`A valid ${s}Url is required for this environment.`)}if(!["http:","https:"].includes(c.protocol)||c.username||c.password||c.href.includes("?")||c.href.includes("#"))throw new o("INVALID_CONFIGURATION",`${s}Url must be an HTTP(S) base URL without credentials, query or fragment.`);a[s]=c.href.replace(/\/+$/,"")}return a};var pe=Symbol.for("omnizapi.connect.runtime.v1");function j(r){var e,a,s;let t=r,n=t[pe];return n||(n={nativeLoginPending:!1,failedFacebookScripts:new WeakSet,erroredFacebookScripts:new WeakSet,facebookAppIds:new WeakMap,facebookInitObservers:new WeakMap},Object.defineProperty(t,pe,{configurable:!0,value:n})),(e=n.facebookAppIds)!=null||(n.facebookAppIds=new WeakMap),(a=n.facebookInitObservers)!=null||(n.facebookInitObservers=new WeakMap),(s=n.erroredFacebookScripts)!=null||(n.erroredFacebookScripts=new WeakSet),n}function he(r){return!!r&&!("__buffer"in r)&&typeof r.init=="function"&&typeof r.login=="function"}function be(r,t){var n;try{let e=Object.getOwnPropertyDescriptor(t,"init"),a=r.facebookInitObservers.get(t);if(a){if((e==null?void 0:e.value)!==a.init)throw new Error("FB.init was replaced.");return a}if(!e||typeof e.value!="function"||!e.writable&&!e.configurable)throw new Error("FB.init cannot be observed.");let s=e.value,c={calls:0,init:function(...f){return c.calls++,r.facebookAppIds.delete(t),Reflect.apply(s,this,f)}};if(Object.defineProperty(t,"init",{...e,value:c.init}),((n=Object.getOwnPropertyDescriptor(t,"init"))==null?void 0:n.value)!==c.init)throw new Error("FB.init was not replaced.");return r.facebookInitObservers.set(t,c),c}catch(e){throw r.facebookAppIds.delete(t),new o("INVALID_CONFIGURATION","The Meta SDK initialization cannot be observed safely. Use the popup flow or reload a fresh page.")}}function Ie(r,t,n){var f;if(r.FB!==t||!t||"__buffer"in t||typeof t.login!="function")throw new o("INVALID_CONFIGURATION","The Meta SDK is not ready or was replaced before initialization.");if(typeof n!="string"||!/^[0-9]+$/.test(n))throw new o("INVALID_CONFIGURATION","A numeric Meta appId is required for native login.");let e=j(r);e.facebookAppIds.get(t)===null&&(e.facebookLoadUncertain||e.facebookLoading||typeof r.fbAsyncInit=="function")&&e.facebookAppIds.delete(t);let a=e.facebookAppIds.get(t);if(a===void 0||a!==null&&!e.facebookInitObservers.has(t))throw e.facebookAppIds.delete(t),new o("INVALID_CONFIGURATION","The host Meta SDK configuration is unknown. Use the popup flow or a fresh page without a host-initialized SDK for native login.");let s=be(e,t);if(a!==null){if(a!==n)throw new o("INVALID_CONFIGURATION","The Meta SDK is already initialized for another app. Use the popup flow or reload a fresh page before changing apps.");return}let c=s.calls;e.facebookAppIds.delete(t);try{t.init({appId:n,version:"v25.0",autoLogAppEvents:!0,xfbml:!0})}catch(p){throw new o("PROVIDER_ERROR","The Meta SDK could not be initialized.")}if(s.calls!==c+1||r.FB!==t||((f=Object.getOwnPropertyDescriptor(t,"init"))==null?void 0:f.value)!==s.init)throw new o("INVALID_CONFIGURATION","The Meta SDK changed during initialization. Use the popup flow or reload a fresh page.");e.facebookAppIds.set(t,n)}function me(r,t){if(t.aborted)return Promise.reject(new o("SDK_LOAD_FAILED","The Meta SDK load was cancelled."));let n=j(r),e=n.facebookLoadObserver;if(!e&&he(r.FB)&&(e={promise:Promise.resolve(r.FB),consumers:0}),!e){let s={consumers:0,promise:Promise.resolve().then(()=>new Promise((c,f)=>{var h;let p=!1,i,_=!1,g=!1,I,P,M,z=(u,l,y=!1)=>{if(!p){p=!0,clearTimeout(F),i==null||i.removeEventListener("load",L),i==null||i.removeEventListener("error",V);try{r.fbAsyncInit===K&&(P?Object.defineProperty(r,"fbAsyncInit",P):Reflect.deleteProperty(r,"fbAsyncInit"))}catch(N){}if(l&&i&&(n.failedFacebookScripts.add(i),y?n.erroredFacebookScripts.add(i):_||(n.facebookLoadUncertain=!0),_))try{i.remove()}catch(N){}n.facebookLoadObserver===s&&delete n.facebookLoadObserver,u?c(u):f(l)}},L=()=>{var y;if(p)return;let u=r.FB;if(!u)return;"__buffer"in u&&(I=u),(((y=I==null?void 0:I.__buffer)==null?void 0:y.opts)!=null||r.fbAsyncInit!==K||i!=null&&i.onload||n.facebookLoading||n.facebookLoadUncertain)&&(g=!1,n.facebookAppIds.get(u)===null&&n.facebookAppIds.delete(u),I&&n.facebookAppIds.get(I)===null&&n.facebookAppIds.delete(I));let l=he(u);if(g&&n.facebookAppIds.get(u)==null){if(!l)n.facebookAppIds.set(u,null);else if(!n.facebookInitObservers.has(u))try{be(n,u),n.facebookAppIds.set(u,null)}catch(N){}}l&&z(u)},V=()=>z(void 0,new o("SDK_LOAD_FAILED","The Meta SDK could not be loaded."),!0),K=()=>{if(!p){try{M==null||M.call(r)}catch(u){}L()}},F=setTimeout(()=>z(void 0,new o("SDK_LOAD_FAILED","The Meta SDK load timed out.")),30*1e3);s.cancelIfUnused=()=>{_&&s.consumers===0&&z(void 0,new o("SDK_LOAD_FAILED","The Meta SDK load was cancelled."))};try{P=Object.getOwnPropertyDescriptor(r,"fbAsyncInit"),M=typeof r.fbAsyncInit=="function"?r.fbAsyncInit:void 0;let u=r.document,l=u.getElementById("facebook-jssdk");if(i=Array.from(u.scripts).find(y=>{try{let N=new URL(y.src);return N.origin!=="https://connect.facebook.net"||!/^\/[^/]+\/sdk\.js$/.test(N.pathname)?!1:n.failedFacebookScripts.has(y)?(n.erroredFacebookScripts.has(y)||(n.facebookLoadUncertain=!0),!1):!0}catch(N){return!1}}),!i){i=u.createElement("script"),_=!0;let y=r.FB;y&&"__buffer"in y&&(I=y),g=!n.facebookLoadUncertain&&!n.facebookLoading&&!M&&(!y||!!I&&n.facebookAppIds.get(y)===null&&((h=I.__buffer)==null?void 0:h.opts)==null),l||(i.id="facebook-jssdk"),i.src="https://connect.facebook.net/en_US/sdk.js",i.crossOrigin="anonymous",i.async=!0,i.defer=!0}if(s.cancelIfUnused(),p)return;Object.defineProperty(r,"fbAsyncInit",P&&!P.configurable?{value:K}:{configurable:!0,enumerable:!0,writable:!0,value:K}),i.addEventListener("load",L),i.addEventListener("error",V),L(),!p&&_&&u.head.appendChild(i)}catch(u){z(void 0,new o("SDK_LOAD_FAILED","The Meta SDK could not be loaded."))}}))};n.facebookLoadObserver=e=s}let a=e;return new Promise((s,c)=>{let f=!1;a.consumers++;let p=(_,g)=>{var I;f||(f=!0,t.removeEventListener("abort",i),a.consumers--,_?s(_):c(g),(I=a.cancelIfUnused)==null||I.call(a))},i=()=>p(void 0,new o("SDK_LOAD_FAILED","The Meta SDK load was cancelled."));a.promise.then(_=>t.aborted?i():p(_),_=>p(void 0,new o("SDK_LOAD_FAILED",_.message))),t.addEventListener("abort",i,{once:!0}),t.aborted&&i()})}var we=(r,t,n=600,e=700)=>{let a=window,s=a.document,c=a.screenLeft!==void 0?a.screenLeft:a.screenX,f=a.screenTop!==void 0?a.screenTop:a.screenY,p=a.innerWidth?a.innerWidth:s.documentElement.clientWidth?s.documentElement.clientWidth:a.screen.width,i=a.innerHeight?a.innerHeight:s.documentElement.clientHeight?s.documentElement.clientHeight:a.screen.height,_=p/2-n/2+c,g=i/2-e/2+f;return a.open(r,t,`scrollbars=yes, width=${n}, height=${e}, top=${g}, left=${_}`)};var Se=600*1e3,ve=30*1e3;function v(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}function O(r){return typeof r=="string"&&r.trim()?r:null}function Oe(r){if(r==="."||r==="..")throw new o("INVALID_OPTIONS","The channelId cannot be a URL path navigation segment.");try{return encodeURIComponent(r)}catch(t){throw new o("INVALID_OPTIONS","The channelId cannot be encoded as a URL path.")}}function Pe(r){return["META_MESSENGER","META_INSTAGRAM","META_WHATSAPP","BOT_TELEGRAM","Z_API_WHATSAPP"].includes(r)}function ge(r){return typeof r=="string"&&["cancelled","popup_closed","not_completed","invalid_channel","origin_not_allowed","unsupported_channel"].includes(r)}function Y(r,t,n){return{success:!1,reason:n,channelId:r,type:t,code:null,wabaId:null,phoneId:null}}function Ae(r,t,n){return typeof fetch!="function"||typeof AbortController!="function"?Promise.reject(new o("INVALID_CONFIGURATION","Fetch and AbortController are required.")):new Promise((e,a)=>{let s=new AbortController,c=!1,f=(g,I)=>{c||(c=!0,clearTimeout(i),n==null||n.removeEventListener("abort",p),s.abort(),I?a(I):e(g))},p=()=>f(void 0,new o("ABORTED","The API request was aborted.")),i=setTimeout(()=>f(void 0,new o("TIMEOUT","The API request timed out.")),ve);if(n==null||n.addEventListener("abort",p,{once:!0}),n!=null&&n.aborted){p();return}(async()=>{let g;try{g=await fetch(r.href,{...t,signal:s.signal})}catch(I){f(void 0,new o("NETWORK_ERROR","The API request failed."));return}if(!c){if(!g||typeof g.ok!="boolean"){f(void 0,new o("INVALID_RESPONSE","The API response is invalid."));return}if(!g.ok){f(void 0,new o("HTTP_ERROR","The API returned an unsuccessful status."));return}try{let I=await g.json();c||f(I)}catch(I){f(void 0,new o("INVALID_RESPONSE","The API did not return valid JSON."))}}})().catch(()=>f(void 0,new o("NETWORK_ERROR","The API request failed.")))})}var ee=class{constructor(t){if(!v(t)||!O(t.publicKey)||Array.from(t.publicKey).some(n=>{let e=n.charCodeAt(0);return e<32||e===127})||t.logo!==void 0&&typeof t.logo!="string"||t.apiUrl!==void 0&&!O(t.apiUrl)||t.frontUrl!==void 0&&!O(t.frontUrl))throw new o("INVALID_CONFIGURATION","Valid client properties and a publicKey are required.");this.publicKey=t.publicKey,this.logo=t.logo,this.constants=fe({environment:t.environment,apiUrl:t.apiUrl,frontUrl:t.frontUrl})}async getListMessengerPages(t,n,e){if(!O(t)||!O(n))throw new o("INVALID_OPTIONS","A channelId and authorization code are required.");if(e!==void 0&&(!v(e)||typeof e.aborted!="boolean"||typeof e.addEventListener!="function"||typeof e.removeEventListener!="function"))throw new o("INVALID_OPTIONS","The abort signal is invalid.");if(e!=null&&e.aborted)throw new o("ABORTED","The API request was aborted.");return Ae(new URL(`${this.constants.api}/v1/channels/${Oe(t)}/list-messenger-pages`),{method:"POST",body:JSON.stringify({redirectUri:new URL(`${this.constants.front}/oauth/proxy-messenger`).href,code:n}),headers:{"Content-Type":"application/json",Authorization:this.publicKey}},e)}async connect(t){var n;try{if(typeof window=="undefined"||!window.document||!window.location)throw new o("BROWSER_REQUIRED","Connecting requires a browser window.");let e=window,a=j(e);if(a.activeConnection)throw new o("CONNECTION_IN_PROGRESS","A connection is already in progress in this window.");if(!v(t))throw new o("INVALID_OPTIONS","Connection options are required.");let{channelId:s,direct:c,getQRCode:f,timeoutMs:p=Se,signal:i}=t;if(typeof s!="string"||c!==void 0&&typeof c!="boolean"||f!==void 0&&typeof f!="function"||typeof p!="number"||!Number.isFinite(p)||p<=0||p>2147483647||i!==void 0&&(!v(i)||typeof i.aborted!="boolean"||typeof i.addEventListener!="function"||typeof i.removeEventListener!="function"))throw new o("INVALID_OPTIONS","Invalid channelId, direct, getQRCode, timeoutMs or signal option.");if(i!=null&&i.aborted)throw new o("ABORTED","The connection was aborted.");if(!s.trim())return Y(s,null,"invalid_channel");let _=Oe(s);if(typeof e.open!="function"||typeof e.addEventListener!="function"||typeof e.removeEventListener!="function"||typeof e.location.origin!="string"||typeof e.location.href!="string"||typeof((n=e.crypto)==null?void 0:n.getRandomValues)!="function"||typeof AbortController!="function"||typeof fetch!="function")throw new o("INVALID_CONFIGURATION","Required browser APIs are unavailable.");let g=e.location.origin;if(g==="null")return Y(s,null,"origin_not_allowed");let I=e.location.href,P=new URL(this.constants.front).origin;return await new Promise((M,z)=>{let L=Symbol("omnizapi-connection"),V=new AbortController,K=Date.now()+p,F=!1,h=null,u=null,l=null,y,N,x,W,q=!1,Q=!1,J=()=>{a.nativeLoginOwner===L&&(a.nativeLoginPending=!1,delete a.nativeLoginOwner)},te=[],E=d=>{if(F)return;F=!0,clearTimeout(N),clearInterval(x);try{i==null||i.removeEventListener("abort",X)}catch(U){}if(W)try{e.removeEventListener("message",W)}catch(U){}try{V.abort()}catch(U){}let G=l;l=null;try{G==null||G.close()}catch(U){}for(let{name:U,previous:b,value:D}of te)try{let k=Object.getOwnPropertyDescriptor(e,U);if(!k||!("value"in k)||k.value!==D)continue;b?Object.defineProperty(e,U,b):Reflect.deleteProperty(e,U)}catch(k){}a.activeConnection===L&&delete a.activeConnection,q&&(Q||!(d instanceof o)&&d.success)&&J(),d instanceof o?z(d):M(d)},X=()=>E(new o("ABORTED","The connection was aborted.")),T=()=>(!F&&(i!=null&&i.aborted)&&X(),!F&&Date.now()>=K&&E(new o("TIMEOUT","The connection timed out.")),!F),C=d=>E(Y(s,h,d)),oe=()=>{try{let d=we("about:blank","_blank",600,740);if(!d||d===e)throw new Error("Popup unavailable");if(!T()){d.close();return}l=d}catch(d){throw new o("POPUP_BLOCKED","The connection popup could not be opened.")}},Re=()=>{x||(x=setInterval(()=>{if(T())try{l!=null&&l.closed&&C("popup_closed")}catch(d){E(new o("PROVIDER_ERROR","The connection popup could not be monitored."))}},500))},Te=()=>{clearInterval(x),x=void 0},re=d=>{!T()||!h||E({success:!0,channelId:s,type:h,code:O(d.code),wabaId:O(d.wabaId),phoneId:O(d.phoneId),coexistence:d.coexistence===!0,redirectUri:u,botToken:O(d.botToken),pageId:O(d.pageId),accessToken:O(d.accessToken)})};try{if(a.activeConnection=L,i==null||i.addEventListener("abort",X,{once:!0}),!T())return;let d=e.crypto.getRandomValues(new Uint8Array(16)),G=Array.from(d,b=>b.toString(16).padStart(2,"0")).join("");for(let[b,D]of[["__omnizapiPublicKey",this.publicKey],["__omnizapiCurrentChannel",s],["__omnizapiGetQrCode",f]]){let k=Object.getOwnPropertyDescriptor(e,b);Object.defineProperty(e,b,k&&!k.configurable?{value:D}:{configurable:!0,enumerable:!0,writable:!0,value:D}),te.push({name:b,previous:k,value:D})}N=setTimeout(()=>E(new o("TIMEOUT","The connection timed out.")),p);try{oe()}catch(b){y=b instanceof o?b:new o("POPUP_BLOCKED","The connection popup could not be opened.")}if(!T())return;(async()=>{var ae,se,ce;let b=await Ae(new URL(`${this.constants.api}/instances/${_}/sdk-info`),{headers:{Authorization:this.publicKey,"Content-Type":"application/json"}},V.signal);if(!T())return;if(!v(b)||!O(b.middleware))throw new o("INVALID_RESPONSE","The channel configuration is invalid.");let D=(ae=b.allowOrigins)!=null?ae:[];if(!Array.isArray(D)||!D.every(w=>typeof w=="string"))throw new o("INVALID_RESPONSE","The channel origins are invalid.");let k=b.middleware;if(h=Pe(k)?k:null,g!==P&&!D.some(w=>{try{return g===new URL(w).origin}catch(m){return!1}})){C("origin_not_allowed");return}if(!h){C("unsupported_channel");return}let H=(se=O(h==="META_INSTAGRAM"?b.appInstagramId:b.appId))!=null?se:"",Z=(ce=O(b.appConfig))!=null?ce:"";if(h.startsWith("META_")&&!H||h==="META_WHATSAPP"&&!Z)throw new o("INVALID_RESPONSE","The channel provider configuration is invalid.");let ke=h==="META_WHATSAPP"&&(c||!!b.appCustom||g===P),ie=!1,$;if(ke){if(Te(),a.nativeLoginPending)throw new o("CONNECTION_IN_PROGRESS","A previous Meta login is incomplete. Reload this window before retrying a native login.");if($=await me(e,V.signal),!T())return;try{Ie(e,$,H),ie=!0}catch(w){if(!(w instanceof o&&w.code==="INVALID_CONFIGURATION"))throw w}if(!T())return}if(ie&&$){l==null||l.close(),l=null;let w=null,m=null,B=null,le=!1,de=()=>{!T()||!w||!m||re({code:w,wabaId:m,phoneId:B,coexistence:le})};W=S=>{if(!T()||!["https://www.facebook.com","https://web.facebook.com"].includes(S.origin))return;let R=S.data;if(typeof R=="string")try{R=JSON.parse(R)}catch(Le){return}if(!(!v(R)||R.type!=="WA_EMBEDDED_SIGNUP")){if(R.event==="CANCEL")C("cancelled");else if(R.event==="ERROR")E(new o("PROVIDER_ERROR","Meta could not complete the connection."));else if(R.event==="FINISH"||R.event==="FINISH_WHATSAPP_BUSINESS_APP_ONBOARDING"){if(!v(R.data)||!O(R.data.waba_id)||R.data.phone_number_id!=null&&typeof R.data.phone_number_id!="string")return;m=O(R.data.waba_id),B=O(R.data.phone_number_id),le=R.event==="FINISH_WHATSAPP_BUSINESS_APP_ONBOARDING",de()}}},e.addEventListener("message",W),a.nativeLoginPending=!0,a.nativeLoginOwner=L,q=!0;try{$.login(S=>{if(!Q){if(Q=!0,F){J();return}if(T()){if(!v(S)||S.error){E(new o("PROVIDER_ERROR","Meta returned an invalid login response."));return}if(S.authResponse==null){C("not_completed");return}if(!v(S.authResponse)||!O(S.authResponse.code)){C("not_completed");return}w=O(S.authResponse.code),de()}}},{config_id:Z,response_type:"code",override_default_response_type:!0,extras:{setup:{},featureType:"whatsapp_business_app_onboarding",sessionInfoVersion:"3"}})}catch(S){throw J(),q=!1,new o("PROVIDER_ERROR","The Meta login could not be started.")}return}let A;if(h==="META_MESSENGER"||h==="META_INSTAGRAM"){let w=h==="META_MESSENGER";u=new URL(`${this.constants.front}/oauth/proxy-${w?"messenger":"instagram"}`).href,A=new URL(w?"https://www.facebook.com/dialog/oauth":"https://www.instagram.com/oauth/authorize"),A.searchParams.set("client_id",H),w&&A.searchParams.set("display","popup"),A.searchParams.set("redirect_uri",u),A.searchParams.set("response_type","code"),A.searchParams.set("scope",w?"public_profile,business_management,pages_messaging,pages_show_list,pages_manage_metadata,pages_read_engagement":"instagram_business_basic,instagram_business_manage_messages"),A.searchParams.set("state",JSON.stringify({currentUrl:I,attemptId:G,channelId:s}))}else h==="META_WHATSAPP"?(A=new URL(`${this.constants.front}/oauth/proxy-cloud-api`),A.searchParams.set("configId",Z),A.searchParams.set("appId",H),A.searchParams.set("channelId",s),A.searchParams.set("channelType",h),A.searchParams.set("logo",this.logo||new URL(`${this.constants.front}/logos/SVG/Ativo%2016.svg`).href),A.searchParams.set("pk",this.publicKey)):(A=new URL(`${this.constants.front}/connect/${h==="BOT_TELEGRAM"?"telegram":"whatsapp-web"}`),A.searchParams.set("channelId",s),A.searchParams.set("pk",this.publicKey));if(h!=="META_MESSENGER"&&h!=="META_INSTAGRAM"&&A.searchParams.set("attemptId",G),W=w=>{if(!T()||!l||w.origin!==P||w.source!==l)return;let m=w.data;!v(m)||m.type!=="after-connect"||m.attemptId!==G||m.channelId!==s||typeof m.success!="boolean"||m.reason!==void 0&&!ge(m.reason)||m.coexistence!==void 0&&typeof m.coexistence!="boolean"||["code","wabaId","phoneId","botToken","pageId","accessToken","redirectUri"].some(B=>m[B]!=null&&typeof m[B]!="string")||(m.success?h!=null&&h.startsWith("META_")&&!O(m.code)||h==="BOT_TELEGRAM"&&!O(m.botToken)?C("not_completed"):re(m):C(ge(m.reason)?m.reason:"not_completed"))},e.addEventListener("message",W),!!T()){if(y)throw y;if(l||oe(),l!=null&&l.closed){C("popup_closed");return}Re();try{l==null||l.location.replace(A.href)}catch(w){throw new o("PROVIDER_ERROR","The connection popup could not be navigated.")}}})().catch(b=>{T()&&E(b instanceof o?b:new o("PROVIDER_ERROR","The connection could not be completed."))})}catch(d){E(d instanceof o?d:new o("INVALID_CONFIGURATION","The connection could not be initialized."))}})}catch(e){throw e instanceof o?e:new o("INVALID_OPTIONS","The connection could not be started with these options.")}}},ye=ee;var ne=class{static newClient(t){return new ye(t)}};var _e=ne;Object.assign(window,{Omnizapi:_e});})();

package/dist/types/src/core/client.d.ts

@@ -4,7 +4,7 @@ declare class OmnizapiClientImpl implements OmnizapiClient {
     private readonly logo?;
     private readonly constants;
     constructor(props: OmnizapiClientProps);
-    getListMessengerPages(channelId: string, code: string): Promise<unknown>;
+    getListMessengerPages(channelId: string, code: string, signal?: AbortSignal): Promise<unknown>;
     connect(options: ConnectionOptions): Promise<ConnectionResult>;
 }
 export default OmnizapiClientImpl;

package/dist/types/src/core/facebook-sdk.d.ts

@@ -20,5 +20,16 @@ type FacebookWindow = Window & {
     FB?: FacebookSdk;
     fbAsyncInit?: () => void;
 };
+/**
+ * Call only from a live attempt, before FB.login. Reuses this helper's known app;
+ * never switches apps or assumes an untracked host SDK is uninitialized.
+ * The public Meta bundle has no FB.getAppId (checked 2026-09-10). We deliberately
+ * avoid its private module runtime. Only owned SDKs have init observed: external
+ * calls are forwarded unchanged but invalidate the app, as does replacing init.
+ * Unknown host configurations and inconclusive external loads require the popup
+ * flow or a fresh, SDK-free page. Calls through a saved, pre-wrapper init reference
+ * cannot be observed; hosts must use the current FB.init method.
+ */
+export declare function initializeFacebookSdk(host: FacebookWindow, fb: FacebookSdk, appId: string): void;
 export declare function loadFacebookSdk(host: FacebookWindow, signal: AbortSignal): Promise<FacebookSdk>;
 export {};

package/dist/types/src/core/runtime.d.ts

@@ -2,8 +2,26 @@ import type { FacebookSdk } from "./facebook-sdk";
 interface SharedRuntime {
     activeConnection?: symbol;
     nativeLoginPending: boolean;
+    /** Attempt that set nativeLoginPending; only it may release the lock. */
+    nativeLoginOwner?: symbol;
+    /** Promise owned by the published v1 loader; newer copies must leave it alone. */
     facebookLoading?: Promise<FacebookSdk>;
+    facebookLoadObserver?: {
+        promise: Promise<FacebookSdk>;
+        consumers: number;
+        cancelIfUnused?: () => void;
+    };
     failedFacebookScripts: WeakSet<HTMLScriptElement>;
+    /** Unlike the legacy failure set, these scripts emitted a conclusive error. */
+    erroredFacebookScripts: WeakSet<HTMLScriptElement>;
+    /** null means a known fresh SDK; absent means its configuration is unknown. */
+    facebookAppIds: WeakMap<FacebookSdk, string | null>;
+    facebookInitObservers: WeakMap<FacebookSdk, {
+        init: FacebookSdk["init"];
+        calls: number;
+    }>;
+    /** An expired external script may still execute; only a reload clears this. */
+    facebookLoadUncertain?: boolean;
 }
 export declare function getRuntime(host: Window): SharedRuntime;
 export {};

package/dist/types/src/types/index.d.ts

@@ -6,6 +6,7 @@ export interface ConnectionOptions {
         value?: string;
     }>;
     timeoutMs?: number;
+    signal?: AbortSignal;
 }
 export type ChannelType = "META_MESSENGER" | "META_INSTAGRAM" | "META_WHATSAPP" | "BOT_TELEGRAM" | "Z_API_WHATSAPP";
 export type ConnectionFailureReason = "cancelled" | "popup_closed" | "not_completed" | "invalid_channel" | "origin_not_allowed" | "unsupported_channel";
@@ -32,14 +33,14 @@ export interface ConnectionFailure {
     phoneId: null;
 }
 export type ConnectionResult = ConnectionSuccess | ConnectionFailure;
-export type OmnizapiErrorCode = "BROWSER_REQUIRED" | "CONNECTION_IN_PROGRESS" | "INVALID_CONFIGURATION" | "INVALID_OPTIONS" | "NETWORK_ERROR" | "HTTP_ERROR" | "INVALID_RESPONSE" | "POPUP_BLOCKED" | "TIMEOUT" | "SDK_LOAD_FAILED" | "PROVIDER_ERROR";
+export type OmnizapiErrorCode = "ABORTED" | "BROWSER_REQUIRED" | "CONNECTION_IN_PROGRESS" | "INVALID_CONFIGURATION" | "INVALID_OPTIONS" | "NETWORK_ERROR" | "HTTP_ERROR" | "INVALID_RESPONSE" | "POPUP_BLOCKED" | "TIMEOUT" | "SDK_LOAD_FAILED" | "PROVIDER_ERROR";
 export declare class OmnizapiError extends Error {
     readonly code: OmnizapiErrorCode;
     constructor(code: OmnizapiErrorCode, message: string);
 }
 export interface OmnizapiClient {
     connect(options: ConnectionOptions): Promise<ConnectionResult>;
-    getListMessengerPages(channelId: string, code: string): Promise<unknown>;
+    getListMessengerPages(channelId: string, code: string, signal?: AbortSignal): Promise<unknown>;
 }
 export declare enum Environment {
     PRODUCTION = "PRODUCTION",

package/examples/angular.ts

@@ -0,0 +1,58 @@
+import { isPlatformBrowser } from "@angular/common";
+import { Component, inject, Input, PLATFORM_ID } from "@angular/core";
+import Omnizapi, { OmnizapiError } from "@omnizapi/connect";
+import type { OmnizapiClient } from "@omnizapi/connect";
+
+@Component({
+  selector: "app-connect",
+  standalone: true,
+  template: `
+    <button type="button" (click)="handleConnect()" [disabled]="loading">
+      {{ loading ? "Connecting..." : "Connect channel" }}
+    </button>
+    <p role="status">{{ message }}</p>
+  `,
+})
+export class ConnectComponent {
+  @Input() channelId = "";
+
+  loading = false;
+  message = "";
+
+  private readonly platformId = inject(PLATFORM_ID);
+  private client: OmnizapiClient | undefined;
+
+  async handleConnect() {
+    if (!isPlatformBrowser(this.platformId) || this.loading) return;
+    this.loading = true;
+    this.message = "Connecting...";
+
+    try {
+      this.client ??= Omnizapi.newClient({ publicKey: "your-public-key" });
+      const result = await this.client.connect({ channelId: this.channelId });
+
+      if (!result.success) {
+        this.message = `Connection not completed (${result.reason}).`;
+        return;
+      }
+
+      const response = await fetch("/api/connect-channel", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(result),
+      });
+      if (!response.ok) {
+        this.message = "The backend could not finalize the connection.";
+        return;
+      }
+
+      this.message = "Channel connected!";
+    } catch (error) {
+      this.message = error instanceof OmnizapiError
+        ? `Connection error (${error.code}). Check the integration before retrying.`
+        : "Could not confirm the connection. Check its backend status before retrying.";
+    } finally {
+      this.loading = false;
+    }
+  }
+}

package/examples/basic.ts

@@ -0,0 +1,52 @@
+/**
+ * Load as a browser module after these elements:
+ * <button id="connect-btn" type="button">Connect channel</button>
+ * <p id="status" role="status"></p>
+ * /api/connect-channel is your authenticated backend, not an SDK route.
+ */
+import Omnizapi, { OmnizapiError } from "@omnizapi/connect";
+import type { OmnizapiClient } from "@omnizapi/connect";
+
+let client: OmnizapiClient | undefined;
+
+if (typeof document !== "undefined") {
+  const button = document.querySelector<HTMLButtonElement>("#connect-btn");
+  const statusElement = document.querySelector<HTMLElement>("#status");
+
+  if (button && statusElement) {
+    button.addEventListener("click", async () => {
+      if (button.disabled) return;
+      button.disabled = true;
+      statusElement.textContent = "Connecting...";
+
+      try {
+        client ??= Omnizapi.newClient({ publicKey: "your-public-key" });
+        const result = await client.connect({ channelId: "your-channel-id" });
+
+        if (!result.success) {
+          statusElement.textContent = `Connection not completed (${result.reason}).`;
+          return;
+        }
+
+        // Includes channelId. Never log credentials; validate them on the server.
+        const response = await fetch("/api/connect-channel", {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify(result),
+        });
+        if (!response.ok) {
+          statusElement.textContent = "The backend could not finalize the connection.";
+          return;
+        }
+
+        statusElement.textContent = "Channel connected!";
+      } catch (error) {
+        statusElement.textContent = error instanceof OmnizapiError
+          ? `Connection error (${error.code}). Check the integration before retrying.`
+          : "Could not confirm the connection. Check its backend status before retrying.";
+      } finally {
+        button.disabled = false;
+      }
+    });
+  }
+}

package/examples/error-handling.ts

@@ -0,0 +1,92 @@
+/**
+ * Load after <button id="connect-btn" type="button">Connect channel</button>
+ * and <button id="cancel-btn" type="button" disabled>Cancel authorization</button>
+ * and <p id="status" role="status"></p>.
+ * Negative results resolve; technical SDK errors reject. Neither is logged.
+ * AbortSignal support is an Unreleased change; see the repository changelog.
+ */
+import Omnizapi, { OmnizapiError } from "@omnizapi/connect";
+import type { ConnectionFailureReason, OmnizapiClient, OmnizapiErrorCode } from "@omnizapi/connect";
+
+const failureMessages: Record<ConnectionFailureReason, string> = {
+  cancelled: "Authorization was cancelled.",
+  popup_closed: "The popup was closed before authorization finished.",
+  not_completed: "Authorization was not completed.",
+  invalid_channel: "This channel is invalid or unavailable.",
+  origin_not_allowed: "This application origin is not authorized for the channel.",
+  unsupported_channel: "This channel type is not supported.",
+};
+
+const errorMessages: Record<OmnizapiErrorCode, string> = {
+  BROWSER_REQUIRED: "Open this page in a browser to connect.",
+  CONNECTION_IN_PROGRESS: "Finish the active attempt. If native Meta login is still awaiting its callback, wait for it or reload before another native attempt.",
+  INVALID_CONFIGURATION: "Check the public key, environment, base URLs and any conflicting Meta app ID.",
+  INVALID_OPTIONS: "Check the channel ID, timeout and AbortSignal options.",
+  NETWORK_ERROR: "The connection service could not be reached. Please try again.",
+  HTTP_ERROR: "The connection service rejected the request.",
+  INVALID_RESPONSE: "The connection service returned an invalid response.",
+  POPUP_BLOCKED: "Allow popups for this application, then click Connect again.",
+  TIMEOUT: "The operation timed out. Only native Meta login still awaiting its callback blocks a native retry: wait for it or reload.",
+  ABORTED: "Authorization was stopped by this application. If native Meta login is still awaiting its callback, wait for it or reload before another native attempt.",
+  SDK_LOAD_FAILED: "The provider SDK could not load. Check browser restrictions.",
+  PROVIDER_ERROR: "The provider reported an error. Check the provider configuration before retrying.",
+};
+
+let client: OmnizapiClient | undefined;
+
+if (typeof document !== "undefined") {
+  const button = document.querySelector<HTMLButtonElement>("#connect-btn");
+  const cancelButton = document.querySelector<HTMLButtonElement>("#cancel-btn");
+  const statusElement = document.querySelector<HTMLElement>("#status");
+
+  if (button && cancelButton && statusElement) {
+    let controller: AbortController | undefined;
+    cancelButton.addEventListener("click", () => { controller?.abort(); });
+
+    button.addEventListener("click", async () => {
+      if (button.disabled) return;
+      button.disabled = true;
+      statusElement.textContent = "Connecting...";
+
+      try {
+        client ??= Omnizapi.newClient({ publicKey: "your-public-key" });
+        controller = new AbortController();
+        cancelButton.disabled = false;
+        const result = await client.connect({
+          channelId: "your-channel-id",
+          signal: controller.signal,
+        });
+        // Cancel only the SDK authorization, never imply a backend rollback.
+        controller = undefined;
+        cancelButton.disabled = true;
+
+        if (!result.success) {
+          statusElement.textContent = failureMessages[result.reason];
+          return;
+        }
+
+        // Your backend must authorize result.channelId for the session/tenant.
+        const response = await fetch("/api/connect-channel", {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify(result),
+        });
+        if (!response.ok) {
+          statusElement.textContent = "The backend could not finalize the connection.";
+          return;
+        }
+
+        statusElement.textContent = "Channel connected!";
+      } catch (error) {
+        // Do not display/log raw errors: messages may contain sensitive URLs.
+        statusElement.textContent = error instanceof OmnizapiError
+          ? errorMessages[error.code]
+          : "Could not confirm the connection. Check its backend status before retrying.";
+      } finally {
+        controller = undefined;
+        cancelButton.disabled = true;
+        button.disabled = false;
+      }
+    });
+  }
+}

package/examples/react.tsx

@@ -0,0 +1,75 @@
+'use client';
+
+import { useEffect, useRef, useState } from "react";
+import Omnizapi, { OmnizapiError } from "@omnizapi/connect";
+import type { OmnizapiClient } from "@omnizapi/connect";
+
+interface ConnectButtonProps {
+  channelId: string;
+  onSuccess?: () => void;
+}
+
+export function ConnectButton({ channelId, onSuccess }: ConnectButtonProps) {
+  const client = useRef<OmnizapiClient | undefined>(undefined);
+  const activeController = useRef<AbortController | undefined>(undefined);
+  const [loading, setLoading] = useState(false);
+  const [message, setMessage] = useState("");
+
+  // AbortSignal support is Unreleased. Cleanup does not undo backend changes.
+  useEffect(() => () => { activeController.current?.abort(); }, []);
+
+  async function handleConnect() {
+    if (activeController.current) return;
+    const controller = new AbortController();
+    activeController.current = controller;
+    setLoading(true);
+    setMessage("Connecting...");
+
+    try {
+      client.current ??= Omnizapi.newClient({
+        publicKey: "your-public-key",
+        logo: "https://app.example.com/logo.png",
+      });
+      const result = await client.current.connect({ channelId, signal: controller.signal });
+      if (controller.signal.aborted) return;
+
+      if (!result.success) {
+        setMessage(`Connection not completed (${result.reason}).`);
+        return;
+      }
+
+      // Includes channelId; validate the session/tenant and credentials server-side.
+      const response = await fetch("/api/connect-channel", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(result),
+        signal: controller.signal,
+      });
+      if (controller.signal.aborted) return;
+      if (!response.ok) {
+        setMessage("The backend could not finalize the connection.");
+        return;
+      }
+
+      setMessage("Channel connected!");
+      onSuccess?.();
+    } catch (error) {
+      if (controller.signal.aborted) return;
+      setMessage(error instanceof OmnizapiError
+        ? `Connection error (${error.code}). Check the integration before retrying.`
+        : "Could not confirm the connection. Check its backend status before retrying.");
+    } finally {
+      if (activeController.current === controller) activeController.current = undefined;
+      if (!controller.signal.aborted) setLoading(false);
+    }
+  }
+
+  return (
+    <div>
+      <button type="button" onClick={handleConnect} disabled={loading}>
+        {loading ? "Connecting..." : "Connect channel"}
+      </button>
+      <p role="status">{message}</p>
+    </div>
+  );
+}

package/examples/vanilla.html

@@ -0,0 +1,60 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Omnizapi SDK - Vanilla HTML Example</title>
+  </head>
+  <body>
+    <h1>Connect your channel</h1>
+    <button id="connect-btn" type="button">Connect channel</button>
+    <p id="status" role="status"></p>
+
+    <!-- Version pinned to 1.0.2; test your integration and serve this page over HTTP(S). -->
+    <script src="https://unpkg.com/@omnizapi/connect@1.0.2/dist/omnizapi.min.js"></script>
+    <script>
+      const button = document.getElementById("connect-btn");
+      const statusElement = document.getElementById("status");
+      let client;
+
+      button.addEventListener("click", async () => {
+        if (button.disabled) return;
+        button.disabled = true;
+        button.textContent = "Connecting...";
+        statusElement.textContent = "Connecting...";
+
+        try {
+          client ??= Omnizapi.newClient({ publicKey: "your-public-key" });
+          const result = await client.connect({ channelId: "your-channel-id" });
+
+          if (!result.success) {
+            statusElement.textContent = `Connection not completed (${result.reason}).`;
+            return;
+          }
+
+          // Your authenticated backend validates credentials and result.channelId.
+          statusElement.textContent = "Finalizing on the backend...";
+          const response = await fetch("/api/connect-channel", {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(result),
+          });
+          if (!response.ok) {
+            statusElement.textContent = "The backend could not finalize the connection.";
+            return;
+          }
+
+          statusElement.textContent = "Channel connected!";
+        } catch {
+          // The browser global exposes the factory, not the named error export.
+          // Never log raw errors or credentials, including URLs in error messages.
+          statusElement.textContent =
+            "Could not confirm the connection. Check the integration and backend status before retrying.";
+        } finally {
+          button.disabled = false;
+          button.textContent = "Connect channel";
+        }
+      });
+    </script>
+  </body>
+</html>

package/examples/vue.vue

@@ -0,0 +1,61 @@
+<template>
+  <div>
+    <button type="button" @click="handleConnect" :disabled="loading">
+      {{ loading ? "Connecting..." : "Connect channel" }}
+    </button>
+    <p role="status">{{ message }}</p>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref } from "vue";
+import Omnizapi, { OmnizapiError } from "@omnizapi/connect";
+import type { OmnizapiClient } from "@omnizapi/connect";
+
+const props = defineProps<{
+  channelId: string;
+}>();
+
+const emit = defineEmits<{
+  success: [];
+}>();
+
+let client: OmnizapiClient | undefined;
+const loading = ref(false);
+const message = ref("");
+
+async function handleConnect() {
+  if (typeof window === "undefined" || loading.value) return;
+  loading.value = true;
+  message.value = "Connecting...";
+
+  try {
+    client ??= Omnizapi.newClient({ publicKey: "your-public-key" });
+    const result = await client.connect({ channelId: props.channelId });
+
+    if (!result.success) {
+      message.value = `Connection not completed (${result.reason}).`;
+      return;
+    }
+
+    const response = await fetch("/api/connect-channel", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(result),
+    });
+    if (!response.ok) {
+      message.value = "The backend could not finalize the connection.";
+      return;
+    }
+
+    message.value = "Channel connected!";
+    emit("success");
+  } catch (error) {
+    message.value = error instanceof OmnizapiError
+      ? `Connection error (${error.code}). Check the integration before retrying.`
+      : "Could not confirm the connection. Check its backend status before retrying.";
+  } finally {
+    loading.value = false;
+  }
+}
+</script>

package/examples/with-options.ts

@@ -0,0 +1,70 @@
+/**
+ * Sandbox URLs must point to your deployed API and connection frontend.
+ * Load after these elements; both buttons use the same Meta WhatsApp channel:
+ * <button type="button" data-omnizapi-connect>Connect with default flow</button>
+ * <button type="button" data-omnizapi-connect data-direct="true">Connect directly</button>
+ * <p id="status" role="status"></p>
+ * Channel config or the connection frontend origin may select native signup
+ * even with direct: false, and direct: true degrades to the proxy flow when
+ * this page cannot run the native setup (for example a conflicting or unknown
+ * host Meta SDK). Only native login still awaiting its FB.login callback
+ * blocks another native attempt: wait for that callback or reload the page.
+ * Native signup still needs real-browser testing with the Meta SDK's user gesture.
+ */
+import Omnizapi, { Environment, OmnizapiError } from "@omnizapi/connect";
+import type { OmnizapiClient } from "@omnizapi/connect";
+
+let client: OmnizapiClient | undefined;
+
+if (typeof document !== "undefined") {
+  const buttons = document.querySelectorAll<HTMLButtonElement>("[data-omnizapi-connect]");
+  const statusElement = document.querySelector<HTMLElement>("#status");
+
+  if (statusElement) {
+    buttons.forEach((button) => {
+      button.addEventListener("click", async () => {
+        if (button.disabled) return;
+        buttons.forEach((item) => { item.disabled = true; });
+        statusElement.textContent = "Connecting...";
+
+        try {
+          client ??= Omnizapi.newClient({
+            publicKey: "your-public-key",
+            logo: "https://app.example.com/logo.png",
+            environment: Environment.SANDBOX,
+            apiUrl: "https://api.example.com",
+            frontUrl: "https://connect.example.com",
+          });
+          const result = await client.connect({
+            channelId: "your-meta-whatsapp-channel-id",
+            direct: button.dataset.direct === "true",
+            timeoutMs: 5 * 60 * 1000,
+          });
+
+          if (!result.success) {
+            statusElement.textContent = `Connection not completed (${result.reason}).`;
+            return;
+          }
+
+          const response = await fetch("/api/connect-channel", {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(result),
+          });
+          if (!response.ok) {
+            statusElement.textContent = "The backend could not finalize the connection.";
+            return;
+          }
+
+          statusElement.textContent = "Channel connected!";
+        } catch (error) {
+          statusElement.textContent = error instanceof OmnizapiError
+            ? `Connection error (${error.code}). Check the integration before retrying.`
+            : "Could not confirm the connection. Check its backend status before retrying.";
+        } finally {
+          buttons.forEach((item) => { item.disabled = false; });
+        }
+      });
+    });
+  }
+}