@pluno/product-agent-web 0.1.200 → 0.1.202

package/INTEGRATION.md

@@ -47,10 +47,11 @@ Pluno returns:
 import { PlunoProductAgent } from "@pluno/product-agent-web";
 
 const agent = await PlunoProductAgent.init({
-  tokenProvider: async () => {
+  tokenProvider: async ({ signal } = {}) => {
     const response = await fetch("/api/pluno-product-agent-token", {
       method: "POST",
       credentials: "include",
+      signal,
     });
     return (await response.json()).token;
   },
@@ -101,10 +102,11 @@ const { mountPlunoProductAgentWidget } = await import(
 );
 
 const widget = await mountPlunoProductAgentWidget({
-  tokenProvider: async () => {
+  tokenProvider: async ({ signal } = {}) => {
     const response = await fetch("/api/pluno-product-agent-token", {
       method: "POST",
       credentials: "include",
+      signal,
       headers: {
         Authorization: `Bearer ${customerAccessToken}`,
         "X-CSRF-Token": csrfToken,

package/README.md

@@ -16,10 +16,11 @@ Keep your Product Agent `secret_key` on your server. Browser code should only re
 import { PlunoProductAgent } from "@pluno/product-agent-web";
 
 const agent = await PlunoProductAgent.init({
-  tokenProvider: async () => {
+  tokenProvider: async ({ signal } = {}) => {
     const response = await fetch("/api/pluno-product-agent-token", {
       method: "POST",
       credentials: "include",
+      signal,
     });
     const payload = await response.json();
     return payload.token;
@@ -65,10 +66,11 @@ const { mountPlunoProductAgentWidget } = await import(
 );
 
 const widget = await mountPlunoProductAgentWidget({
-  tokenProvider: async () => {
+  tokenProvider: async ({ signal } = {}) => {
     const response = await fetch("/api/pluno-product-agent-token", {
       method: "POST",
       credentials: "include",
+      signal,
       headers: {
         Authorization: `Bearer ${customerAccessToken}`,
         "X-CSRF-Token": csrfToken,
@@ -85,6 +87,12 @@ function removeProductAgentWidget() {
 }
 ```
 
+The SDK keeps a valid JWT in memory, refreshes it shortly before expiry, and automatically retries transient provider
+failures with capped backoff. Pass the supplied abort signal to your request so destroying the widget cancels it.
+Generic provider failures are treated as transient; throw `ProductAgentTokenProviderError` with `retryable: false` for a
+known permanent host-side validation or authorization failure, for example
+`new ProductAgentTokenProviderError("Not authorized", false, 403)`.
+
 Importing the hosted module does not mount anything by itself. `mountPlunoProductAgentWidget` returns a handle containing
 the underlying `agent`, `openPanel()`, appearance/auth update methods, and `destroy()`.
 

package/dist/index.d.ts

@@ -153,9 +153,19 @@ export type ProductAgentState = {
     lastErrorCode: string | null;
     lastErrorSecuritySettingsUrl: string | null;
 };
+export type ProductAgentTokenProviderContext = {
+    signal: AbortSignal;
+    reason: "connect" | "upload" | "history";
+};
+export declare class ProductAgentTokenProviderError extends Error {
+    readonly retryable: boolean;
+    readonly status?: number | undefined;
+    readonly retryAfterMs?: number | undefined;
+    constructor(message: string, retryable: boolean, status?: number | undefined, retryAfterMs?: number | undefined);
+}
 export type ProductAgentInitOptions = {
     token?: string;
-    tokenProvider?: () => Promise<string>;
+    tokenProvider?: (context?: ProductAgentTokenProviderContext) => Promise<string>;
     backendUrl?: string;
     model?: ProductAgentModel;
     clientId?: string;
@@ -253,6 +263,9 @@ export declare class ProductAgentSessionEngine {
     private connectionAttemptId;
     private connectionInProgress;
     private token;
+    private tokenExpiresAtMs;
+    private tokenRequest;
+    private tokenAbortController;
     private authenticatedUserId;
     private authenticatedSocket;
     private networkCaptureCleanup;
@@ -339,6 +352,8 @@ export declare class ProductAgentSessionEngine {
     on<T extends EventName>(eventName: T, listener: Listener<T>): () => void;
     getState(): ProductAgentState;
     stageProactiveSuggestionQuestion(question: string): void;
+    private invalidateProviderToken;
+    private acquireToken;
     connect(): Promise<void>;
     disconnect(): void;
     destroy(): void;