@paramms/chat-widget 1.0.21 → 1.0.22

package/dist/connection.d.ts

@@ -14,9 +14,7 @@ export type SocketFactory = (url: string) => SocketLike;
 export interface ConnectionOptions {
     url: string;
     token: string;
-    open: Extract<ClientFrame, {
-        type: 'open';
-    }>;
+    open: ClientFrame;
     onFrame: (frame: ServerFrame) => void;
     getCursor: () => number;
     onStatusChange?: (status: 'connecting' | 'open' | 'reconnecting') => void;

package/dist/index.d.ts

@@ -21,7 +21,20 @@ export interface MountOptions {
     apiUrl?: string;
     profileId: string;
     subjectId?: string;
+    /** IDENTITY (tiered — the host owns identity, the widget never has to persist it):
+     *  1. `token` — a signed identity token. Either a capability token, or (recommended
+     *     for embedders) an ES256 JWT `{sub,iat,exp}` signed by your backend with the
+     *     private key whose public half is set as the chatroom's `guestPublicKey`.
+     *     The server cryptographically verifies it. Works in ANY language/environment,
+     *     no cookies or storage required. This is the production path.
+     *  2. `userId` — a stable id you already have for the visitor (e.g. your logged-in
+     *     user id). Unauthenticated ("you vouch for it") but works everywhere. Used
+     *     only when `token` is absent.
+     *  3. Neither — the widget falls back to best-effort local identity on the host
+     *     origin (first-party cookie + localStorage). A returning visitor on the same
+     *     browser keeps their history; if storage is blocked they get a fresh chat. */
     token?: string;
+    userId?: string;
     subject?: WidgetConfig['subject'];
     quickReplies?: string[];
     accent?: string;

package/dist/index.js

@@ -2169,7 +2169,7 @@ function Ot(s) {
 function Nt(s) {
   var ce, de, le, he;
   H.has(s.el) && (H.get(s.el).close(), H.delete(s.el));
-  const e = s.token ?? Ae(), { wsUrl: t, httpBase: i } = ze(s.url, s.apiUrl);
+  const e = s.token ?? s.userId ?? Ae(), { wsUrl: t, httpBase: i } = ze(s.url, s.apiUrl);
   let n = new bt(e);
   const o = s.subjectId ? `${e}::${s.subjectId}` : e, a = new St(o);
   let d, w = !1, x = null, m = null;