@origonai/web-sdk 0.1.4 → 0.1.5

package/docs/contract.md

@@ -150,3 +150,54 @@ waits for a generation-correlated worklet acknowledgement, awaits
 stops every microphone track, and nulls the stream. Permission, worklet, mute,
 transport, terminal-event, and teardown races fail closed: late generations and
 stale transport acknowledgements cannot reopen capture or resolve new requests.
+
+## Explicit customer End wire
+
+The generated `chat.v1.Session/End` request and response follow the canonical
+`platform/cx/protos/chat.proto` via `web/kit/scripts/ship-orpc.sh`. CX authorizes
+only the current external participant-purpose token and installation; monitors,
+agents and replaced installations are refused. Success requires the durable
+existing ended divider. Ambiguous persistence retains the same-session reopen
+fence until identical-row reconciliation. Visitor Leave remains a detach operation.
+
+
+## Customer End
+
+`SessionManager.endChat(sessionId): Promise<void>` invokes the canonical
+`chat.v1.Session/End` descriptor with the captured chat JWT and client routing
+metadata. Unlike `endSession`/Leave cleanup, it terminates the conversation.
+Only a successful End response or matching Attach terminal proves success.
+A control-plane ended/absent verdict may retire presentation, but cannot confirm
+an End command.
+Repeated calls coalesce, pending calls block messages/typing/reopen/rename, and a timeout
+is `ClientError` kind `chatEndUnconfirmed`, permitting explicit retry with the
+original authority. End never refreshes credentials, takes over or starts a chat.
+An absent room remains a typed refusal while retiring that local incarnation.
+
+Attach remains open to receive the server's real ended divider. A response-first
+End allows a bounded drain; history paging reconciles presentation without
+manufacturing system messages or changing a refusal into success. Missing ended
+rows/read failures surface as errors even if terminal authority is known. The
+manager retains End ownership after actor expiry; explicit reopening or client
+replacement invalidates the prior owner before new authority is acquired. Old
+results and history reads cannot publish into the replacement owner.
+
+Implementation/validation is tracked with the monorepo SDK's reviewed customer
+End plan; no release compatibility is implied until matching artifacts and CX
+are published. Existing provisioned monitor recovery and ordinary Leave contracts
+remain in force; CX denies End to monitors and non-owner participants.
+
+
+End attempts pass an AbortSignal through the shipped canonical kit unary client.
+Timeout, authority invalidation, or a matching terminal event cancels the local
+attempt; it prevents a request still waiting for connection/stream creation from
+being sent later. Cancellation after transmission cannot undo server work and
+is not evidence of success. A fresh explicit retry retains the original room
+authority, and callbacks from an aborted attempt cannot settle that retry.
+
+
+The shipped canonical kit constructs native WebTransport stream errors using
+the browser's supported standard-revision constructor form (message/options,
+or dictionary when the former throws TypeError). Both retain the cancellation
+code and message; no alternate transport or synthesized End success is involved.
+The canonical mapping and standards references are in web/kit CONTRACT.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@origonai/web-sdk",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Origon Web SDK - chat and voice session client",
   "type": "module",
   "packageManager": "pnpm@11.5.1",