@paramms/chat-widget 1.0.36 → 1.0.37

package/dist/hooks.js

@@ -1,6 +1,6 @@
 import { useState as d, useEffect as R, useRef as $, useSyncExternalStore as w, useMemo as h } from "react";
 import { RelayClient as C } from "./core.js";
-import { r as b, p as U } from "./uid.js";
+import { r as b, p as U } from "./codec.js";
 function T(e) {
   var c;
   const l = `${e.url}|${e.token ?? ""}|${e.profileId}|${e.subjectId ?? ""}|${e.kind ?? ""}|${e.peerId ?? ""}`, o = $(null);

package/dist/index.js

@@ -1,8 +1,8 @@
 var pe = Object.defineProperty;
 var he = (o, e, i) => e in o ? pe(o, e, { enumerable: !0, configurable: !0, writable: !0, value: i }) : o[e] = i;
 var y = (o, e, i) => he(o, typeof e != "symbol" ? e + "" : e, i);
-import { p as fe, r as ue, a as we } from "./uid.js";
-import { h as Me } from "./uid.js";
+import { p as fe, r as ue, a as we } from "./codec.js";
+import { h as Me } from "./codec.js";
 import { P as be, C as xe, b as ge } from "./outbox.js";
 import { e as He } from "./outbox.js";
 import { E2ESession as me, extractX3DHInit as ye } from "./e2e.js";
@@ -908,7 +908,12 @@ function Be(o) {
       try {
         const E = await fetch(p, {
           method: "POST",
-          headers: { "content-type": n.type, ...o.token ? { authorization: `Bearer ${o.token}` } : {} },
+          // Use the resolved connection token (a signed JWT, an explicit userId,
+          // or the anonymous persistent uid) — NOT just opts.token. The server
+          // requires an Authorization header, and the verifier accepts an
+          // anonymous id as a guest; keying off opts.token alone meant anonymous
+          // visitors (the common case) sent no auth and every upload 401'd.
+          headers: { "content-type": n.type, authorization: `Bearer ${a}` },
           body: n
         });
         if (!E.ok) throw new Error(`Upload failed: ${E.status}`);