@qualified-salesforce/web 0.0.1-oidc-bootstrap → 0.1.0

package/src/graphql-types.js

@@ -391,6 +391,19 @@ const CampaignJoinFailedReasonTypeEnum = (/* unused pure expression or super */
     /** Salesforce record not found */ SalesforceRecordNotFound: 'salesforce_record_not_found',
     /** Salesforce sender not found */ SalesforceSenderNotFound: 'salesforce_sender_not_found'
 }));
+const CampaignNotEnrolledReasonTypeEnum = (/* unused pure expression or super */ null && ({
+    ActiveCampaignEnrollment: 'ACTIVE_CAMPAIGN_ENROLLMENT',
+    AudienceFilterFailed: 'AUDIENCE_FILTER_FAILED',
+    EmailHardBounced: 'EMAIL_HARD_BOUNCED',
+    EnrollmentLimitReached: 'ENROLLMENT_LIMIT_REACHED',
+    InactiveCampaign: 'INACTIVE_CAMPAIGN',
+    InvalidEmail: 'INVALID_EMAIL',
+    MeetingAlreadyBooked: 'MEETING_ALREADY_BOOKED',
+    SalesforceRecordNotFound: 'SALESFORCE_RECORD_NOT_FOUND',
+    SalesforceSenderNotFound: 'SALESFORCE_SENDER_NOT_FOUND',
+    UnableToEnroll: 'UNABLE_TO_ENROLL',
+    Unsubscribed: 'UNSUBSCRIBED'
+}));
 const CampaignPausedReasonTypeEnum = (/* unused pure expression or super */ null && ({
     /** Campaign paused */ CampaignPaused: 'campaign_paused',
     /** Inactive sender */ InactiveSender: 'inactive_sender',
@@ -484,6 +497,42 @@ const ContentJobStatusEnum = (/* unused pure expression or super */ null && ({
     /** Processing */ Processing: 'PROCESSING',
     /** Skipped */ Skipped: 'SKIPPED'
 }));
+/** An action that can be applied to matching content library items */ const ContentLibraryActionEnum = (/* unused pure expression or super */ null && ({
+    /** Enable cobrowse */ Cobrowse: 'COBROWSE',
+    /** Delete */ Delete: 'DELETE',
+    /** Disable */ Disable: 'DISABLE',
+    /** Enable */ Enable: 'ENABLE',
+    /** Gate */ Gate: 'GATE',
+    /** Promote */ Promote: 'PROMOTE',
+    /** Disable cobrowse */ Uncobrowse: 'UNCOBROWSE',
+    /** Ungate */ Ungate: 'UNGATE',
+    /** Unpromote */ Unpromote: 'UNPROMOTE'
+}));
+const ContentLibraryItemKindEnum = (/* unused pure expression or super */ null && ({
+    Demo: 'DEMO',
+    Pdf: 'PDF',
+    Presentation: 'PRESENTATION',
+    Slide: 'SLIDE',
+    Snippet: 'SNIPPET',
+    WebsitePage: 'WEBSITE_PAGE'
+}));
+const ContentLibraryItemOrderEnum = (/* unused pure expression or super */ null && ({
+    AddedByAsc: 'ADDED_BY_ASC',
+    AddedByDesc: 'ADDED_BY_DESC',
+    DateAddedAsc: 'DATE_ADDED_ASC',
+    DateAddedDesc: 'DATE_ADDED_DESC',
+    DateModifiedAsc: 'DATE_MODIFIED_ASC',
+    DateModifiedDesc: 'DATE_MODIFIED_DESC',
+    NameAsc: 'NAME_ASC',
+    NameDesc: 'NAME_DESC'
+}));
+const ContentLibraryItemStatusFilterEnum = (/* unused pure expression or super */ null && ({
+    Cobrowse: 'COBROWSE',
+    Disabled: 'DISABLED',
+    Enabled: 'ENABLED',
+    New: 'NEW',
+    Offers: 'OFFERS'
+}));
 const ContentSourceFileTypeEnum = (/* unused pure expression or super */ null && ({
     Pdf: 'PDF'
 }));
@@ -529,6 +578,11 @@ const CtaTypeEnum = {
     Form: 'FORM',
     Link: 'LINK'
 };
+const CustomVoiceStatusEnum = (/* unused pure expression or super */ null && ({
+    /** Creating */ Creating: 'CREATING',
+    /** Failed */ Failed: 'FAILED',
+    /** Ready */ Ready: 'READY'
+}));
 const DashboardTileDefinitionNameEnum = (/* unused pure expression or super */ null && ({
     /** Sessions where visitor accepted voice permissions */ AiSdrAcceptedMediaPermissions: 'AI_SDR_ACCEPTED_MEDIA_PERMISSIONS',
     /** AI SDR asked for email */ AiSdrAskedEmail: 'AI_SDR_ASKED_EMAIL',
@@ -537,14 +591,18 @@ const DashboardTileDefinitionNameEnum = (/* unused pure expression or super */ n
     /** Total AI SDR call duration (seconds) */ AiSdrCallDuration: 'AI_SDR_CALL_DURATION',
     /** AI SDR captured email */ AiSdrCapturedEmail: 'AI_SDR_CAPTURED_EMAIL',
     /** AI SDR captured email during voice call */ AiSdrCapturedEmailDuringVoiceCall: 'AI_SDR_CAPTURED_EMAIL_DURING_VOICE_CALL',
+    /** Total deck slides shown */ AiSdrDeckSlidesShown: 'AI_SDR_DECK_SLIDES_SHOWN',
     /** Sessions with AI SDR voice call */ AiSdrHasVoiceCall: 'AI_SDR_HAS_VOICE_CALL',
     /** Meetings booked during voice call */ AiSdrMeetingBookedDuringVoiceCall: 'AI_SDR_MEETING_BOOKED_DURING_VOICE_CALL',
     /** Meetings offered during voice call */ AiSdrMeetingOfferedDuringVoiceCall: 'AI_SDR_MEETING_OFFERED_DURING_VOICE_CALL',
     /** Sessions where AI SDR navigated site */ AiSdrNavigatedSite: 'AI_SDR_NAVIGATED_SITE',
+    /** Total assets presented */ AiSdrPresentationCount: 'AI_SDR_PRESENTATION_COUNT',
     /** Sessions where AI SDR presented a product demo */ AiSdrPresentedProductDemo: 'AI_SDR_PRESENTED_PRODUCT_DEMO',
     /** Sessions where AI SDR presented a slide deck */ AiSdrPresentedSlideDeck: 'AI_SDR_PRESENTED_SLIDE_DECK',
+    /** Total product demo seconds watched */ AiSdrProductDemoSecondsWatched: 'AI_SDR_PRODUCT_DEMO_SECONDS_WATCHED',
     /** Sessions where AI SDR shared presentation content */ AiSdrSharedPresentationContent: 'AI_SDR_SHARED_PRESENTATION_CONTENT',
     /** Sessions where AI SDR shared slides */ AiSdrSharedSlides: 'AI_SDR_SHARED_SLIDES',
+    /** Total slide deck seconds watched */ AiSdrSlideDeckSecondsWatched: 'AI_SDR_SLIDE_DECK_SECONDS_WATCHED',
     /** Total visitor messages */ AiSdrVisitorMessagesCount: 'AI_SDR_VISITOR_MESSAGES_COUNT',
     /** Sessions where visitor spoke during voice call */ AiSdrVisitorSpokeDuringVoiceCall: 'AI_SDR_VISITOR_SPOKE_DURING_VOICE_CALL',
     /** Sessions where AI goals were activated */ AutopilotActivatedStrategiesTotal: 'AUTOPILOT_ACTIVATED_STRATEGIES_TOTAL',
@@ -950,6 +1008,13 @@ const IncludeExcludeTypeEnum = (/* unused pure expression or super */ null && ({
     Contains: 'CONTAINS',
     Equals: 'EQUALS'
 }));
+const IntegrationDirectoryIntegrationEnum = (/* unused pure expression or super */ null && ({
+    Slack: 'SLACK'
+}));
+const IntegrationDirectoryResourceEnum = (/* unused pure expression or super */ null && ({
+    Channels: 'CHANNELS',
+    Users: 'USERS'
+}));
 const LauncherBackgroundShapeEnum = (/* unused pure expression or super */ null && ({
     Circle: 'CIRCLE',
     Square: 'SQUARE'
@@ -1572,6 +1637,7 @@ var graphql_types_CampaignExitTriggerTypeEnum = /* unused export */ undefined;
 var graphql_types_CampaignGoalTypeEnum = /* unused export */ undefined;
 var graphql_types_CampaignHandoffRoutingRuleTypeEnum = /* unused export */ undefined;
 var graphql_types_CampaignJoinFailedReasonTypeEnum = /* unused export */ undefined;
+var graphql_types_CampaignNotEnrolledReasonTypeEnum = /* unused export */ undefined;
 var graphql_types_CampaignPausedReasonTypeEnum = /* unused export */ undefined;
 var graphql_types_CampaignReplyHandlingEnum = /* unused export */ undefined;
 var graphql_types_CampaignRoutingRuleTypeEnum = /* unused export */ undefined;
@@ -1582,12 +1648,17 @@ var graphql_types_CampaignTemplateEnum = /* unused export */ undefined;
 var graphql_types_CampaignTransitionEnum = /* unused export */ undefined;
 var graphql_types_CampaignTriggerTypeEnum = /* unused export */ undefined;
 var graphql_types_ContentJobStatusEnum = /* unused export */ undefined;
+var graphql_types_ContentLibraryActionEnum = /* unused export */ undefined;
+var graphql_types_ContentLibraryItemKindEnum = /* unused export */ undefined;
+var graphql_types_ContentLibraryItemOrderEnum = /* unused export */ undefined;
+var graphql_types_ContentLibraryItemStatusFilterEnum = /* unused export */ undefined;
 var graphql_types_ContentSourceFileTypeEnum = /* unused export */ undefined;
 var graphql_types_ContentSourceTypeEnum = /* unused export */ undefined;
 var graphql_types_ConversationIgnoredTypeEnum = /* unused export */ undefined;
 var graphql_types_ConversationTypeEnum = /* unused export */ undefined;
 var graphql_types_ConversionFilterEnum = /* unused export */ undefined;
 var graphql_types_CookieConsentDisplayModeEnum = /* unused export */ undefined;
+var graphql_types_CustomVoiceStatusEnum = /* unused export */ undefined;
 var graphql_types_DashboardTileDefinitionNameEnum = /* unused export */ undefined;
 var graphql_types_DashboardTileFunnelTypeEnum = /* unused export */ undefined;
 var graphql_types_DashboardTileGraphTypeEnum = /* unused export */ undefined;
@@ -1623,6 +1694,8 @@ var graphql_types_HeaderBackgroundTypeEnum = /* unused export */ undefined;
 var graphql_types_IdentityProviderEnum = /* unused export */ undefined;
 var graphql_types_ImageConfigTypeEnum = /* unused export */ undefined;
 var graphql_types_IncludeExcludeTypeEnum = /* unused export */ undefined;
+var graphql_types_IntegrationDirectoryIntegrationEnum = /* unused export */ undefined;
+var graphql_types_IntegrationDirectoryResourceEnum = /* unused export */ undefined;
 var graphql_types_LauncherBackgroundShapeEnum = /* unused export */ undefined;
 var graphql_types_LauncherBackgroundTypeEnum = /* unused export */ undefined;
 var graphql_types_LauncherIconEnum = /* unused export */ undefined;
@@ -1683,4 +1756,4 @@ var graphql_types_VariableCategoryEnum = /* unused export */ undefined;
 var graphql_types_VariableRequireEnum = /* unused export */ undefined;
 var graphql_types_WorkflowTimingEnum = /* unused export */ undefined;
 var graphql_types_WorkflowTriggerTypeEnum = /* unused export */ undefined;
-export { AssetDeliveryTypeEnum, BackgroundTypeEnum, ContentAnimationTypeEnum, ContentVariationTypeEnum, CtaTypeEnum, ImagePlacementTypeEnum, ImagePositionTypeEnum, LocationEnum, TargetTriggerTypeEnum, graphql_types_AdAccountExternalEnum as AdAccountExternalEnum, graphql_types_AiActivationRuleTriggerTypeEnum as AiActivationRuleTriggerTypeEnum, graphql_types_AiEngagementRuleTypeEnum as AiEngagementRuleTypeEnum, graphql_types_AiInteractionFeedbackRatingCategoryEnum as AiInteractionFeedbackRatingCategoryEnum, graphql_types_AiInteractionFeedbackRatingEnum as AiInteractionFeedbackRatingEnum, graphql_types_AiInteractionMessageComposerEnum as AiInteractionMessageComposerEnum, graphql_types_AiInteractionMessageToneEnum as AiInteractionMessageToneEnum, graphql_types_AiInteractionReportRatingCategoryEnum as AiInteractionReportRatingCategoryEnum, graphql_types_AiInteractionSourceEnum as AiInteractionSourceEnum, graphql_types_AiLocaleEnum as AiLocaleEnum, graphql_types_AiStrategyFallbackTypeEnum as AiStrategyFallbackTypeEnum, graphql_types_AiStrategySelectionMethodTypeEnum as AiStrategySelectionMethodTypeEnum, graphql_types_AnnouncementEventTypeEnum as AnnouncementEventTypeEnum, graphql_types_AnnouncementTypeEnum as AnnouncementTypeEnum, graphql_types_AuthenticationStateEnum as AuthenticationStateEnum, graphql_types_AutoIndexFrequencyTypeEnum as AutoIndexFrequencyTypeEnum, graphql_types_BotTypeEnum as BotTypeEnum, graphql_types_BusinessHoursDaysEnum as BusinessHoursDaysEnum, graphql_types_ButtonShapeEnum as ButtonShapeEnum, graphql_types_ButtonStyleEnum as ButtonStyleEnum, graphql_types_CalendarEventTypeRestrictionTypeEnum as CalendarEventTypeRestrictionTypeEnum, graphql_types_CalendarEventTypeRoutingTypeEnum as CalendarEventTypeRoutingTypeEnum, graphql_types_CalendarEventTypeTimeUnitEnum as CalendarEventTypeTimeUnitEnum, graphql_types_CallboxBackgroundTypeEnum as CallboxBackgroundTypeEnum, graphql_types_CampaignAudienceEstimateJobStatusEnum as CampaignAudienceEstimateJobStatusEnum, graphql_types_CampaignDurationTypeEnum as CampaignDurationTypeEnum, graphql_types_CampaignEmailPersistenceEnum as CampaignEmailPersistenceEnum, graphql_types_CampaignExitReasonTypeEnum as CampaignExitReasonTypeEnum, graphql_types_CampaignExitTriggerTypeEnum as CampaignExitTriggerTypeEnum, graphql_types_CampaignGoalTypeEnum as CampaignGoalTypeEnum, graphql_types_CampaignHandoffRoutingRuleTypeEnum as CampaignHandoffRoutingRuleTypeEnum, graphql_types_CampaignJoinFailedReasonTypeEnum as CampaignJoinFailedReasonTypeEnum, graphql_types_CampaignPausedReasonTypeEnum as CampaignPausedReasonTypeEnum, graphql_types_CampaignReplyHandlingEnum as CampaignReplyHandlingEnum, graphql_types_CampaignRoutingRuleTypeEnum as CampaignRoutingRuleTypeEnum, graphql_types_CampaignSampleMailingEmailTypeEnum as CampaignSampleMailingEmailTypeEnum, graphql_types_CampaignSenderIssueReasonEnum as CampaignSenderIssueReasonEnum, graphql_types_CampaignStatusEnum as CampaignStatusEnum, graphql_types_CampaignTemplateEnum as CampaignTemplateEnum, graphql_types_CampaignTransitionEnum as CampaignTransitionEnum, graphql_types_CampaignTriggerTypeEnum as CampaignTriggerTypeEnum, graphql_types_ContentJobStatusEnum as ContentJobStatusEnum, graphql_types_ContentSourceFileTypeEnum as ContentSourceFileTypeEnum, graphql_types_ContentSourceTypeEnum as ContentSourceTypeEnum, graphql_types_ConversationIgnoredTypeEnum as ConversationIgnoredTypeEnum, graphql_types_ConversationTypeEnum as ConversationTypeEnum, graphql_types_ConversionFilterEnum as ConversionFilterEnum, graphql_types_CookieConsentDisplayModeEnum as CookieConsentDisplayModeEnum, graphql_types_DashboardTileDefinitionNameEnum as DashboardTileDefinitionNameEnum, graphql_types_DashboardTileFunnelTypeEnum as DashboardTileFunnelTypeEnum, graphql_types_DashboardTileGraphTypeEnum as DashboardTileGraphTypeEnum, graphql_types_DashboardTilePercentageBasisEnum as DashboardTilePercentageBasisEnum, graphql_types_DashboardTileTimescaleEnum as DashboardTileTimescaleEnum, graphql_types_DashboardTileWidthEnum as DashboardTileWidthEnum, graphql_types_DefaultSyncActionTypeEnum as DefaultSyncActionTypeEnum, graphql_types_DemandbaseVersion as DemandbaseVersion, graphql_types_DevicesEnum as DevicesEnum, graphql_types_EmailFeedbackEmailSourceEnum as EmailFeedbackEmailSourceEnum, graphql_types_EmailHandoffModeEnum as EmailHandoffModeEnum, graphql_types_ExportStatusEnum as ExportStatusEnum, graphql_types_ExportTypeEnum as ExportTypeEnum, graphql_types_ExternalListTypeEnum as ExternalListTypeEnum, graphql_types_ExternalMailingTypeEnum as ExternalMailingTypeEnum, graphql_types_ExternalObjectMatchingFilterObjectTypeEnum as ExternalObjectMatchingFilterObjectTypeEnum, graphql_types_ExternalPushDiagnosisCauseEnum as ExternalPushDiagnosisCauseEnum, graphql_types_ExternalPushDiagnosisCodeEnum as ExternalPushDiagnosisCodeEnum, graphql_types_ExternalPushDiagnosisStatusEnum as ExternalPushDiagnosisStatusEnum, graphql_types_ExternalPushDiagnosisUndeterminedReasonEnum as ExternalPushDiagnosisUndeterminedReasonEnum, graphql_types_ExternalPushIdentityTypeEnum as ExternalPushIdentityTypeEnum, graphql_types_ExternalPushRemediationEnum as ExternalPushRemediationEnum, graphql_types_ExternalPushSortEnum as ExternalPushSortEnum, graphql_types_ExternalPushSourceEnum as ExternalPushSourceEnum, graphql_types_ExternalSourceEnum as ExternalSourceEnum, graphql_types_FieldCategoryEnum as FieldCategoryEnum, graphql_types_FrequencyEnum as FrequencyEnum, graphql_types_GreetingHeaderImageSizeEnum as GreetingHeaderImageSizeEnum, graphql_types_GreetingHeaderStyleEnum as GreetingHeaderStyleEnum, graphql_types_GuardrailSubCollectionEnum as GuardrailSubCollectionEnum, graphql_types_GuideVersion as GuideVersion, graphql_types_HeaderBackgroundTypeEnum as HeaderBackgroundTypeEnum, graphql_types_IdentityProviderEnum as IdentityProviderEnum, graphql_types_ImageConfigTypeEnum as ImageConfigTypeEnum, graphql_types_IncludeExcludeTypeEnum as IncludeExcludeTypeEnum, graphql_types_LauncherBackgroundShapeEnum as LauncherBackgroundShapeEnum, graphql_types_LauncherBackgroundTypeEnum as LauncherBackgroundTypeEnum, graphql_types_LauncherIconEnum as LauncherIconEnum, graphql_types_LeadMetricTypeEnum as LeadMetricTypeEnum, graphql_types_LeadSortTypeEnum as LeadSortTypeEnum, graphql_types_LeadSpotlightStatusEnum as LeadSpotlightStatusEnum, graphql_types_LeadTimelineEventSourceTypeEnum as LeadTimelineEventSourceTypeEnum, graphql_types_LeadsCampaignEventTypeEnum as LeadsCampaignEventTypeEnum, graphql_types_LeadsCampaignStatusTypeEnum as LeadsCampaignStatusTypeEnum, graphql_types_MailingReasonTypeEnum as MailingReasonTypeEnum, graphql_types_MailingStatusEnum as MailingStatusEnum, graphql_types_MailingTypeEnum as MailingTypeEnum, graphql_types_MarketingDataTypeEnum as MarketingDataTypeEnum, graphql_types_MeetingLinkTypeEnum as MeetingLinkTypeEnum, graphql_types_MeetingOfferChannelTypeEnum as MeetingOfferChannelTypeEnum, graphql_types_MessageEventTypeEnum as MessageEventTypeEnum, graphql_types_MessageSourceEnum as MessageSourceEnum, graphql_types_MessageTransformationSourceEnum as MessageTransformationSourceEnum, graphql_types_MessageTransformationToneEnum as MessageTransformationToneEnum, graphql_types_MessageTransformationTypeEnum as MessageTransformationTypeEnum, graphql_types_MultimodalModalityEnum as MultimodalModalityEnum, graphql_types_MultimodalOpenedPositionEnum as MultimodalOpenedPositionEnum, graphql_types_MultimodalStartingPositionEnum as MultimodalStartingPositionEnum, graphql_types_OpportunityAttributionModelEnum as OpportunityAttributionModelEnum, graphql_types_OpportunityInfluenceTypeEnum as OpportunityInfluenceTypeEnum, graphql_types_OpportunityMatchTypeEnum as OpportunityMatchTypeEnum, graphql_types_PageFilter as PageFilter, graphql_types_PreMeetingQuestionTypeEnum as PreMeetingQuestionTypeEnum, graphql_types_PreferredLanguageInferenceSourceEnum as PreferredLanguageInferenceSourceEnum, graphql_types_PreferredLanguageSourceEnum as PreferredLanguageSourceEnum, graphql_types_PrivacyDisclosureDisplayModeEnum as PrivacyDisclosureDisplayModeEnum, graphql_types_PrivacyDisclosureTargetEnum as PrivacyDisclosureTargetEnum, graphql_types_RoutingLogEntryTypeEnum as RoutingLogEntryTypeEnum, graphql_types_SalesforceFieldPermissionEnum as SalesforceFieldPermissionEnum, graphql_types_SalesforcePersonTypeEnum as SalesforcePersonTypeEnum, graphql_types_SalesforceUserInvitedStateEnum as SalesforceUserInvitedStateEnum, graphql_types_SegmentTypeEnum as SegmentTypeEnum, graphql_types_SessionStatusEnum as SessionStatusEnum, graphql_types_SignalsFilterEnum as SignalsFilterEnum, graphql_types_SignalsHighIntentActionEnum as SignalsHighIntentActionEnum, graphql_types_SignalsListTypeEnum as SignalsListTypeEnum, graphql_types_SimulationLeadActivitySourceEnum as SimulationLeadActivitySourceEnum, graphql_types_SimulatorNotReadyReason as SimulatorNotReadyReason, graphql_types_TargetDurationTypeEnum as TargetDurationTypeEnum, graphql_types_TargetLocationTypeEnum as TargetLocationTypeEnum, graphql_types_TopicMappingImportanceEnum as TopicMappingImportanceEnum, graphql_types_TurnFeedbackSentiment as TurnFeedbackSentiment, graphql_types_TurnstileVersion as TurnstileVersion, graphql_types_UnsubscribeFieldSourceEnum as UnsubscribeFieldSourceEnum, graphql_types_UnsubscribeFieldValueOperatorEnum as UnsubscribeFieldValueOperatorEnum, graphql_types_UserActionRequiredReasonEnum as UserActionRequiredReasonEnum, graphql_types_UserPermissionTypeEnum as UserPermissionTypeEnum, graphql_types_UserProfileFeaturePermissionEnum as UserProfileFeaturePermissionEnum, graphql_types_UserProfilePermissionActionEnum as UserProfilePermissionActionEnum, graphql_types_UserProfileTypeEnum as UserProfileTypeEnum, graphql_types_ValueSourceEnum as ValueSourceEnum, graphql_types_VariableCategoryEnum as VariableCategoryEnum, graphql_types_VariableRequireEnum as VariableRequireEnum, graphql_types_WorkflowTimingEnum as WorkflowTimingEnum, graphql_types_WorkflowTriggerTypeEnum as WorkflowTriggerTypeEnum };
+export { AssetDeliveryTypeEnum, BackgroundTypeEnum, ContentAnimationTypeEnum, ContentVariationTypeEnum, CtaTypeEnum, ImagePlacementTypeEnum, ImagePositionTypeEnum, LocationEnum, TargetTriggerTypeEnum, graphql_types_AdAccountExternalEnum as AdAccountExternalEnum, graphql_types_AiActivationRuleTriggerTypeEnum as AiActivationRuleTriggerTypeEnum, graphql_types_AiEngagementRuleTypeEnum as AiEngagementRuleTypeEnum, graphql_types_AiInteractionFeedbackRatingCategoryEnum as AiInteractionFeedbackRatingCategoryEnum, graphql_types_AiInteractionFeedbackRatingEnum as AiInteractionFeedbackRatingEnum, graphql_types_AiInteractionMessageComposerEnum as AiInteractionMessageComposerEnum, graphql_types_AiInteractionMessageToneEnum as AiInteractionMessageToneEnum, graphql_types_AiInteractionReportRatingCategoryEnum as AiInteractionReportRatingCategoryEnum, graphql_types_AiInteractionSourceEnum as AiInteractionSourceEnum, graphql_types_AiLocaleEnum as AiLocaleEnum, graphql_types_AiStrategyFallbackTypeEnum as AiStrategyFallbackTypeEnum, graphql_types_AiStrategySelectionMethodTypeEnum as AiStrategySelectionMethodTypeEnum, graphql_types_AnnouncementEventTypeEnum as AnnouncementEventTypeEnum, graphql_types_AnnouncementTypeEnum as AnnouncementTypeEnum, graphql_types_AuthenticationStateEnum as AuthenticationStateEnum, graphql_types_AutoIndexFrequencyTypeEnum as AutoIndexFrequencyTypeEnum, graphql_types_BotTypeEnum as BotTypeEnum, graphql_types_BusinessHoursDaysEnum as BusinessHoursDaysEnum, graphql_types_ButtonShapeEnum as ButtonShapeEnum, graphql_types_ButtonStyleEnum as ButtonStyleEnum, graphql_types_CalendarEventTypeRestrictionTypeEnum as CalendarEventTypeRestrictionTypeEnum, graphql_types_CalendarEventTypeRoutingTypeEnum as CalendarEventTypeRoutingTypeEnum, graphql_types_CalendarEventTypeTimeUnitEnum as CalendarEventTypeTimeUnitEnum, graphql_types_CallboxBackgroundTypeEnum as CallboxBackgroundTypeEnum, graphql_types_CampaignAudienceEstimateJobStatusEnum as CampaignAudienceEstimateJobStatusEnum, graphql_types_CampaignDurationTypeEnum as CampaignDurationTypeEnum, graphql_types_CampaignEmailPersistenceEnum as CampaignEmailPersistenceEnum, graphql_types_CampaignExitReasonTypeEnum as CampaignExitReasonTypeEnum, graphql_types_CampaignExitTriggerTypeEnum as CampaignExitTriggerTypeEnum, graphql_types_CampaignGoalTypeEnum as CampaignGoalTypeEnum, graphql_types_CampaignHandoffRoutingRuleTypeEnum as CampaignHandoffRoutingRuleTypeEnum, graphql_types_CampaignJoinFailedReasonTypeEnum as CampaignJoinFailedReasonTypeEnum, graphql_types_CampaignNotEnrolledReasonTypeEnum as CampaignNotEnrolledReasonTypeEnum, graphql_types_CampaignPausedReasonTypeEnum as CampaignPausedReasonTypeEnum, graphql_types_CampaignReplyHandlingEnum as CampaignReplyHandlingEnum, graphql_types_CampaignRoutingRuleTypeEnum as CampaignRoutingRuleTypeEnum, graphql_types_CampaignSampleMailingEmailTypeEnum as CampaignSampleMailingEmailTypeEnum, graphql_types_CampaignSenderIssueReasonEnum as CampaignSenderIssueReasonEnum, graphql_types_CampaignStatusEnum as CampaignStatusEnum, graphql_types_CampaignTemplateEnum as CampaignTemplateEnum, graphql_types_CampaignTransitionEnum as CampaignTransitionEnum, graphql_types_CampaignTriggerTypeEnum as CampaignTriggerTypeEnum, graphql_types_ContentJobStatusEnum as ContentJobStatusEnum, graphql_types_ContentLibraryActionEnum as ContentLibraryActionEnum, graphql_types_ContentLibraryItemKindEnum as ContentLibraryItemKindEnum, graphql_types_ContentLibraryItemOrderEnum as ContentLibraryItemOrderEnum, graphql_types_ContentLibraryItemStatusFilterEnum as ContentLibraryItemStatusFilterEnum, graphql_types_ContentSourceFileTypeEnum as ContentSourceFileTypeEnum, graphql_types_ContentSourceTypeEnum as ContentSourceTypeEnum, graphql_types_ConversationIgnoredTypeEnum as ConversationIgnoredTypeEnum, graphql_types_ConversationTypeEnum as ConversationTypeEnum, graphql_types_ConversionFilterEnum as ConversionFilterEnum, graphql_types_CookieConsentDisplayModeEnum as CookieConsentDisplayModeEnum, graphql_types_CustomVoiceStatusEnum as CustomVoiceStatusEnum, graphql_types_DashboardTileDefinitionNameEnum as DashboardTileDefinitionNameEnum, graphql_types_DashboardTileFunnelTypeEnum as DashboardTileFunnelTypeEnum, graphql_types_DashboardTileGraphTypeEnum as DashboardTileGraphTypeEnum, graphql_types_DashboardTilePercentageBasisEnum as DashboardTilePercentageBasisEnum, graphql_types_DashboardTileTimescaleEnum as DashboardTileTimescaleEnum, graphql_types_DashboardTileWidthEnum as DashboardTileWidthEnum, graphql_types_DefaultSyncActionTypeEnum as DefaultSyncActionTypeEnum, graphql_types_DemandbaseVersion as DemandbaseVersion, graphql_types_DevicesEnum as DevicesEnum, graphql_types_EmailFeedbackEmailSourceEnum as EmailFeedbackEmailSourceEnum, graphql_types_EmailHandoffModeEnum as EmailHandoffModeEnum, graphql_types_ExportStatusEnum as ExportStatusEnum, graphql_types_ExportTypeEnum as ExportTypeEnum, graphql_types_ExternalListTypeEnum as ExternalListTypeEnum, graphql_types_ExternalMailingTypeEnum as ExternalMailingTypeEnum, graphql_types_ExternalObjectMatchingFilterObjectTypeEnum as ExternalObjectMatchingFilterObjectTypeEnum, graphql_types_ExternalPushDiagnosisCauseEnum as ExternalPushDiagnosisCauseEnum, graphql_types_ExternalPushDiagnosisCodeEnum as ExternalPushDiagnosisCodeEnum, graphql_types_ExternalPushDiagnosisStatusEnum as ExternalPushDiagnosisStatusEnum, graphql_types_ExternalPushDiagnosisUndeterminedReasonEnum as ExternalPushDiagnosisUndeterminedReasonEnum, graphql_types_ExternalPushIdentityTypeEnum as ExternalPushIdentityTypeEnum, graphql_types_ExternalPushRemediationEnum as ExternalPushRemediationEnum, graphql_types_ExternalPushSortEnum as ExternalPushSortEnum, graphql_types_ExternalPushSourceEnum as ExternalPushSourceEnum, graphql_types_ExternalSourceEnum as ExternalSourceEnum, graphql_types_FieldCategoryEnum as FieldCategoryEnum, graphql_types_FrequencyEnum as FrequencyEnum, graphql_types_GreetingHeaderImageSizeEnum as GreetingHeaderImageSizeEnum, graphql_types_GreetingHeaderStyleEnum as GreetingHeaderStyleEnum, graphql_types_GuardrailSubCollectionEnum as GuardrailSubCollectionEnum, graphql_types_GuideVersion as GuideVersion, graphql_types_HeaderBackgroundTypeEnum as HeaderBackgroundTypeEnum, graphql_types_IdentityProviderEnum as IdentityProviderEnum, graphql_types_ImageConfigTypeEnum as ImageConfigTypeEnum, graphql_types_IncludeExcludeTypeEnum as IncludeExcludeTypeEnum, graphql_types_IntegrationDirectoryIntegrationEnum as IntegrationDirectoryIntegrationEnum, graphql_types_IntegrationDirectoryResourceEnum as IntegrationDirectoryResourceEnum, graphql_types_LauncherBackgroundShapeEnum as LauncherBackgroundShapeEnum, graphql_types_LauncherBackgroundTypeEnum as LauncherBackgroundTypeEnum, graphql_types_LauncherIconEnum as LauncherIconEnum, graphql_types_LeadMetricTypeEnum as LeadMetricTypeEnum, graphql_types_LeadSortTypeEnum as LeadSortTypeEnum, graphql_types_LeadSpotlightStatusEnum as LeadSpotlightStatusEnum, graphql_types_LeadTimelineEventSourceTypeEnum as LeadTimelineEventSourceTypeEnum, graphql_types_LeadsCampaignEventTypeEnum as LeadsCampaignEventTypeEnum, graphql_types_LeadsCampaignStatusTypeEnum as LeadsCampaignStatusTypeEnum, graphql_types_MailingReasonTypeEnum as MailingReasonTypeEnum, graphql_types_MailingStatusEnum as MailingStatusEnum, graphql_types_MailingTypeEnum as MailingTypeEnum, graphql_types_MarketingDataTypeEnum as MarketingDataTypeEnum, graphql_types_MeetingLinkTypeEnum as MeetingLinkTypeEnum, graphql_types_MeetingOfferChannelTypeEnum as MeetingOfferChannelTypeEnum, graphql_types_MessageEventTypeEnum as MessageEventTypeEnum, graphql_types_MessageSourceEnum as MessageSourceEnum, graphql_types_MessageTransformationSourceEnum as MessageTransformationSourceEnum, graphql_types_MessageTransformationToneEnum as MessageTransformationToneEnum, graphql_types_MessageTransformationTypeEnum as MessageTransformationTypeEnum, graphql_types_MultimodalModalityEnum as MultimodalModalityEnum, graphql_types_MultimodalOpenedPositionEnum as MultimodalOpenedPositionEnum, graphql_types_MultimodalStartingPositionEnum as MultimodalStartingPositionEnum, graphql_types_OpportunityAttributionModelEnum as OpportunityAttributionModelEnum, graphql_types_OpportunityInfluenceTypeEnum as OpportunityInfluenceTypeEnum, graphql_types_OpportunityMatchTypeEnum as OpportunityMatchTypeEnum, graphql_types_PageFilter as PageFilter, graphql_types_PreMeetingQuestionTypeEnum as PreMeetingQuestionTypeEnum, graphql_types_PreferredLanguageInferenceSourceEnum as PreferredLanguageInferenceSourceEnum, graphql_types_PreferredLanguageSourceEnum as PreferredLanguageSourceEnum, graphql_types_PrivacyDisclosureDisplayModeEnum as PrivacyDisclosureDisplayModeEnum, graphql_types_PrivacyDisclosureTargetEnum as PrivacyDisclosureTargetEnum, graphql_types_RoutingLogEntryTypeEnum as RoutingLogEntryTypeEnum, graphql_types_SalesforceFieldPermissionEnum as SalesforceFieldPermissionEnum, graphql_types_SalesforcePersonTypeEnum as SalesforcePersonTypeEnum, graphql_types_SalesforceUserInvitedStateEnum as SalesforceUserInvitedStateEnum, graphql_types_SegmentTypeEnum as SegmentTypeEnum, graphql_types_SessionStatusEnum as SessionStatusEnum, graphql_types_SignalsFilterEnum as SignalsFilterEnum, graphql_types_SignalsHighIntentActionEnum as SignalsHighIntentActionEnum, graphql_types_SignalsListTypeEnum as SignalsListTypeEnum, graphql_types_SimulationLeadActivitySourceEnum as SimulationLeadActivitySourceEnum, graphql_types_SimulatorNotReadyReason as SimulatorNotReadyReason, graphql_types_TargetDurationTypeEnum as TargetDurationTypeEnum, graphql_types_TargetLocationTypeEnum as TargetLocationTypeEnum, graphql_types_TopicMappingImportanceEnum as TopicMappingImportanceEnum, graphql_types_TurnFeedbackSentiment as TurnFeedbackSentiment, graphql_types_TurnstileVersion as TurnstileVersion, graphql_types_UnsubscribeFieldSourceEnum as UnsubscribeFieldSourceEnum, graphql_types_UnsubscribeFieldValueOperatorEnum as UnsubscribeFieldValueOperatorEnum, graphql_types_UserActionRequiredReasonEnum as UserActionRequiredReasonEnum, graphql_types_UserPermissionTypeEnum as UserPermissionTypeEnum, graphql_types_UserProfileFeaturePermissionEnum as UserProfileFeaturePermissionEnum, graphql_types_UserProfilePermissionActionEnum as UserProfilePermissionActionEnum, graphql_types_UserProfileTypeEnum as UserProfileTypeEnum, graphql_types_ValueSourceEnum as ValueSourceEnum, graphql_types_VariableCategoryEnum as VariableCategoryEnum, graphql_types_VariableRequireEnum as VariableRequireEnum, graphql_types_WorkflowTimingEnum as WorkflowTimingEnum, graphql_types_WorkflowTriggerTypeEnum as WorkflowTriggerTypeEnum };

package/src/url.js

@@ -20,8 +20,11 @@ const isSafeUrl = (url)=>{
 // Strips scheme and www subdomain from a url
 //
 function prettyUrl(url, short) {
+    var _url_split_;
     if (!url) return "";
-    url = url.split("?")[0];
+    // split always yields at least one element, so the fallback is only to satisfy
+    // noUncheckedIndexedAccess in the projects that consume this file.
+    url = (_url_split_ = url.split("?")[0]) != null ? _url_split_ : url;
     if (short) {
         const pretty = url.replace(/^(https?:\/\/[^/]+)/i, "");
         if (pretty && pretty !== "/") {

package/vendor/actioncable/connection.js

@@ -2,6 +2,7 @@ import { __webpack_require__ } from "../../js/runtime.js";
 import { default as adapters } from "./adapters.js";
 import { default as connection_monitor } from "./connection_monitor.js";
 import { logger } from "./logger.js";
+import { default as SseSocket } from "./sse_socket.js";
 import { INTERNAL as internal } from "./internal.js";
 import "../../widget/utils/native_globals.js";
 
@@ -10,6 +11,7 @@ import "../../widget/utils/native_globals.js";
 
 
 
+ // PATCH: local module, not part of the upstream bundle
 // Encapsulate the cable connection held by the consumer. This is an internal class not intended for direct user manipulation.
 const { message_types: message_types, protocols: protocols } = internal;
 const supportedProtocols = protocols.slice(0, protocols.length - 1);
@@ -32,7 +34,10 @@ class Connection {
             if (this.webSocket) {
                 this.uninstallEventHandlers();
             }
-            this.webSocket = new adapters.WebSocket(this.consumer.url, protocols);
+            // START PATCH: the consumer may swap in a non-WebSocket transport. @see SseSocket
+            const Transport = this.consumer.transport || this.defaultTransport();
+            this.webSocket = new Transport(this.consumer.url, protocols, this.consumer.fallback);
+            // END PATCH
             this.installEventHandlers();
             this.monitor.start();
             // START PATCH
@@ -84,6 +89,32 @@ class Connection {
         return !!this._connectedBefore;
     }
     // END PATCH
+    // START PATCH
+    // Whether it is worth giving up on WebSockets. Only while no socket has ever opened: a blocked
+    // upgrade never reaches onopen, but one merely waiting on a slow connect RPC does. Gating on the
+    // welcome instead would escalate those too, in bulk, exactly when RPC is already congested.
+    canFallback() {
+        return !!this.consumer.fallback && !this.consumer.transport && !this.opened;
+    }
+    // A page can remove WebSocket outright (`window.WebSocket = null`). There is nothing to escalate
+    // from then, since constructing the socket throws before the monitor is started to notice it, so
+    // the fallback is chosen up front. With none configured this throws as upstream does.
+    defaultTransport() {
+        if (typeof adapters.WebSocket === "function" || !this.consumer.fallback) {
+            return adapters.WebSocket;
+        }
+        logger.log("WebSocket is unavailable, opening the SSE + HTTP transport instead");
+        this.consumer.transport = SseSocket;
+        return SseSocket;
+    }
+    // Swap the transport and reconnect over it. Nothing else has to move: the transport reports a
+    // welcome, and this class answers a welcome by resubscribing every channel. @see SseSocket
+    fallback() {
+        logger.log("Falling back to the SSE + HTTP transport");
+        this.consumer.transport = SseSocket;
+        return this.reopen();
+    }
+    // END PATCH
     // Private
     isProtocolSupported() {
         return indexOf.call(supportedProtocols, this.getProtocol()) >= 0;
@@ -94,16 +125,21 @@ class Connection {
         }
         return indexOf.call(states, this.getState()) >= 0;
     }
+    // START PATCH: read the ready states off the transport in use rather than adapters.WebSocket.
+    // A page that removed WebSocket leaves that with no constants to enumerate, which would strand
+    // every lookup at null and quietly make isOpen(), and so send(), always false.
     getState() {
         if (this.webSocket) {
-            for(let state in adapters.WebSocket){
-                if (adapters.WebSocket[state] === this.webSocket.readyState) {
+            const transport = this.webSocket.constructor || adapters.WebSocket;
+            for(let state in transport){
+                if (transport[state] === this.webSocket.readyState) {
                     return state.toLowerCase();
                 }
             }
         }
         return null;
     }
+    // END PATCH
     installEventHandlers() {
         for(let eventName in this.events){
             const handler = this.events[eventName].bind(this);
@@ -177,6 +213,7 @@ Connection.prototype.events = {
     open () {
         logger.log("WebSocket onopen event, using '" + this.getProtocol() + "' subprotocol");
         this.disconnected = false;
+        this.opened = true; // PATCH: gates the transport fallback. @see canFallback
         if (!this.isProtocolSupported()) {
             logger.log("Protocol is unsupported. Stopping monitor and disconnecting.");
             return this.close({

package/vendor/actioncable/connection_monitor.js

@@ -84,6 +84,14 @@ class ConnectionMonitor {
             } else if (this.waitingForConnect()) {
                 logger.log("ConnectionMonitor skipping reopening recent connect waiting. time waiting = " + secondsSince(this.connectWaitingStartedAt) + " s");
             // END PATCH
+            // START PATCH
+            } else if (this.connection.canFallback()) {
+                // A socket that has never once opened is more likely blocked than flaky -- a proxy that
+                // refuses WebSocket upgrades will keep refusing them -- so reopening it forever is futile.
+                // Retrying over a transport that only needs plain HTTP is the better next attempt.
+                logger.log("ConnectionMonitor falling back to another transport");
+                this.connection.fallback();
+            // END PATCH
             } else {
                 logger.log("ConnectionMonitor reopening");
                 this.connection.reopen();

package/vendor/actioncable/consumer.js

@@ -26,8 +26,14 @@ class Consumer {
             return this.connection.open();
         }
     }
-    constructor(url){
+    constructor(url, options){
         this._url = url;
+        // START PATCH: config for the optional SSE + HTTP transport, used for networks that block
+        // WebSocket upgrades. Supplying `{ upstreamUrl }` is what permits Connection to escalate to it.
+        // The `options` constructor argument is part of this patch too. @see SseSocket
+        this.fallback = options && options.fallback || null;
+        this.transport = null;
+        // END PATCH
         this.subscriptions = new Subscriptions(this);
         this.connection = new connection(this);
     }

package/vendor/actioncable/index.js

@@ -10,10 +10,13 @@ import { INTERNAL as internal } from "./internal.js";
 
 
 
-function createConsumer(url) {
+// START PATCH: pass options through to the Consumer, for the fallback transport config.
+// @see SseSocket
+function createConsumer(url, options) {
     if (url === void 0) url = getConfig("url") || internal.default_mount_path;
-    return new Consumer(url);
+    return new Consumer(url, options);
 }
+// END PATCH
 function getConfig(name) {
     const element = document.head.querySelector("meta[name='action-cable-" + name + "']");
     if (element) {

package/vendor/actioncable/sse_socket.js

@@ -0,0 +1,262 @@
+import { __webpack_require__ } from "../../js/runtime.js";
+import { logger } from "./logger.js";
+import { INTERNAL as internal } from "./internal.js";
+import "../../widget/utils/native_globals.js";
+
+/* provided dependency */ var sse_socket_setTimeout = __webpack_require__(68034).pS;
+
+
+// PATCH: this whole file is local, with no upstream Action Cable equivalent. Nothing here needs
+// reconciling on an upgrade; the hooks that reach it are marked in connection.js and consumer.js.
+//
+// A WebSocket-shaped transport backed by SSE downstream and HTTP POST upstream, for visitors whose
+// network blocks WebSocket upgrades. Connection only touches `protocol`, `readyState`, the four
+// `on*` handlers, `send` and `close`, so implementing those runs the whole Action Cable protocol
+// layer unchanged.
+//
+// Downstream is anycable-go's SSE endpoint (requires `--sse`, anycable-go >= 1.4.4), which serves
+// one channel per request, so a stream is opened per `subscribe`. Upstream is
+// WidgetAPI::V1::CableFallbackController: anycable-go cannot take commands directly, since its SSE
+// endpoint reads the whole request body before it starts streaming.
+const { message_types: message_types, protocols: protocols } = internal;
+const READY_STATE = {
+    CONNECTING: 0,
+    OPEN: 1,
+    CLOSING: 2,
+    CLOSED: 3
+};
+// Browsers reject a `keepalive` request whose body is larger than this outright.
+const KEEPALIVE_MAX_BYTES = 64 * 1024;
+// The credential travels beside the command rather than inside it. Not `Authorization`, which this
+// app already reads as a BearerToken. @see CableFallbackController::CONNECTION_TOKEN_HEADER
+const CONNECTION_TOKEN_HEADER = "X-Cable-Connection-Token";
+// The statuses that refuse the connection rather than the command: the endpoint will not honour the
+// token, or the rows behind it are gone. @see CableFallbackController
+const CONNECTION_REFUSED = [
+    401,
+    404
+];
+// Frames anycable-go names on the stream that Connection already handles. `welcome` is absent:
+// Connection answers one by reloading subscriptions, which would reopen the streams that just sent
+// it, so the single welcome that starts the session is synthesized in `handshake` instead.
+const FORWARDED_EVENTS = [
+    message_types.confirmation,
+    message_types.rejection,
+    message_types.ping,
+    message_types.disconnect
+];
+class SseSocket {
+    send(payload) {
+        const { command, identifier, data } = JSON.parse(payload);
+        switch(command){
+            // Opening the stream is the subscribe: anycable-go builds a subscribe command out of the
+            // `identifier` query param, and answers with `confirm_subscription` on the stream.
+            case "subscribe":
+                return this.openStream(identifier);
+            // Likewise, closing the stream ends that session, which unsubscribes it server-side.
+            case "unsubscribe":
+                return this.closeStream(identifier);
+            default:
+                return this.enqueueCommand({
+                    command,
+                    identifier,
+                    data
+                });
+        }
+    }
+    close() {
+        if (this.readyState === READY_STATE.CLOSED) return;
+        this.readyState = READY_STATE.CLOSED;
+        this.sources.forEach((source)=>source.close());
+        this.sources.clear();
+        this.pending = [];
+        if (this.onclose) this.onclose({});
+    }
+    // Private
+    handshake() {
+        if (this.readyState !== READY_STATE.CONNECTING) return;
+        this.readyState = READY_STATE.OPEN;
+        if (this.onopen) this.onopen({});
+        // Optimistic: nothing has been proven reachable yet. It has to be this way round, because
+        // Connection will not send the subscribe commands that open the streams until it sees a
+        // welcome. A stream that then fails to open reports itself as a disconnect.
+        this.deliver({
+            type: message_types.welcome
+        });
+    }
+    openStream(identifier) {
+        if (this.sources.has(identifier)) return;
+        const source = new EventSource(this.streamUrl(identifier));
+        this.sources.set(identifier, source);
+        FORWARDED_EVENTS.forEach((type)=>{
+            source.addEventListener(type, (event)=>this.emit(event.data));
+        });
+        // Not forwarded either, but it carries the upstream token. One token serves every stream, so
+        // only a welcome arriving while there is none to fall back on drops the transport -- as a dead
+        // stream, for the monitor to rebuild. Under `message`: @see AnyCable::Connection#welcome_message
+        source.addEventListener(message_types.welcome, (event)=>{
+            const frame = parse(event.data);
+            const token = frame && frame.message && frame.message.connection_token;
+            if (token) {
+                this.token = token;
+                this.flush();
+            } else if (!this.token && this.readyState === READY_STATE.OPEN) {
+                this.close();
+            }
+        });
+        // Unnamed events carry channel payloads. A GET stream sends only the `message` half of the
+        // envelope, so the identifier the stream was opened for has to be put back on.
+        source.addEventListener("message", (event)=>{
+            const message = parse(event.data);
+            if (message) this.deliver({
+                identifier,
+                message
+            });
+        });
+        // A dead stream is this transport's dropped socket, so it closes rather than reporting a
+        // reason, and ConnectionMonitor retries with backoff. Closing also stops EventSource's own
+        // retry, which would otherwise race the monitor for ownership of reconnection.
+        source.addEventListener("error", ()=>{
+            if (this.readyState !== READY_STATE.OPEN) return;
+            this.close();
+        });
+    }
+    // Same host and connection params as the socket: anycable-go serves SSE from `/events` by default
+    // (--sse_path), where the cable itself is mounted at `/cable`.
+    streamUrl(identifier) {
+        const url = new URL(this.url.replace(/^ws/, "http"));
+        url.pathname = url.pathname.replace(/\/cable$/, "/events");
+        url.searchParams.set("identifier", identifier);
+        return url.toString();
+    }
+    closeStream(identifier) {
+        const source = this.sources.get(identifier);
+        if (!source) return;
+        source.close();
+        this.sources.delete(identifier);
+    }
+    // Everything queues, because a command can be unsendable for two reasons that end the same way:
+    // the welcome has not brought a token yet, or a request is already in flight. Unbounded is safe
+    // -- a transport that stops making progress goes stale, and the reopen drops the queue with it.
+    enqueueCommand(body) {
+        this.pending.push(body);
+        this.flush();
+    }
+    // One command in flight at a time, each chained behind the answer to the last: two posts on the
+    // wire can reach different workers in either order, where a socket could not. It also lets an
+    // answer stop what is behind it -- a disconnect closes the transport, and closing drops the
+    // queue. An idle queue drains immediately, so a cable that sends as it goes never waits.
+    async flush() {
+        // Every stream welcomes, so this is reached once per subscription. A second drain racing the
+        // first over the same queue is the concurrency this exists to avoid.
+        if (!this.token || this.flushing || this.readyState !== READY_STATE.OPEN) return;
+        this.flushing = true;
+        try {
+            // Anything enqueued mid-request is waiting here by the time this comes back round.
+            while(this.pending.length){
+                await this.postCommand(this.pending.shift());
+            }
+        } finally{
+            this.flushing = false;
+        }
+    }
+    // Only the connection being gone takes the transport down with it. A command that fails leaves it
+    // up, because a socket does the same: anycable-go logs a command it could not handle and the
+    // session carries on, so a bad command costs the command and nothing more.
+    async postCommand(command) {
+        const payload = JSON.stringify(command);
+        let response;
+        try {
+            response = await fetch(this.options.upstreamUrl, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json; charset=utf-8",
+                    [CONNECTION_TOKEN_HEADER]: this.token
+                },
+                credentials: "omit",
+                // `keepalive` is what lets a command issued during a navigation still land, but an
+                // oversized one is refused rather than sent without it. A command large enough to hit the
+                // cap is worth more than the navigation guarantee, so it goes as an ordinary request.
+                keepalive: new Blob([
+                    payload
+                ]).size <= KEEPALIVE_MAX_BYTES,
+                body: payload
+            });
+        } catch (unused) {
+            // Nothing came back at all, so upstream is unreachable rather than unhappy. Connection#send
+            // does not await us, so this is also what keeps the rejection from surfacing as an unhandled
+            // one. ConnectionMonitor rebuilds from here, and backs off.
+            return this.dropTransport();
+        }
+        // The reconnect that follows re-runs `connect`, the only thing that can authorize a connection.
+        if (CONNECTION_REFUSED.includes(response.status)) return this.dropTransport();
+        // An answer that came back unreadable is the same loss as one the endpoint refused: what this
+        // command was owed, and nothing the connection can be judged on.
+        const body = response.ok ? await response.json().catch(()=>null) : null;
+        if (!body) {
+            logger.log("Cable command failed: " + response.status + " " + response.statusText);
+            return;
+        }
+        // Sliding expiry: re-issued on every command the endpoint accepts, so only a cable that has
+        // been silent for the whole TTL meets an expired one. It buys no authority -- the connection is
+        // re-checked per request, so a renewal is refused the moment the old one would have been.
+        if (body.connection_token) this.token = body.connection_token;
+        // Replies the channel made with `transmit` have no stream to travel on, so the endpoint hands
+        // them back here. They are already whole Action Cable frames.
+        (body.transmissions || []).forEach((transmission)=>this.deliver(transmission));
+        if (body.disconnect) {
+            this.deliver({
+                type: message_types.disconnect,
+                reconnect: false
+            });
+        }
+    }
+    // Guarded rather than unconditional: a transport already closing or rebuilt has no stake in the
+    // answer to a command the last one sent.
+    dropTransport() {
+        if (this.readyState !== READY_STATE.OPEN) return;
+        this.close();
+    }
+    // Hand Connection a frame in the shape a socket message arrives in.
+    deliver(frame) {
+        this.emit(JSON.stringify(frame));
+    }
+    emit(data) {
+        if (this.onmessage) this.onmessage({
+            data
+        });
+    }
+    // `options` is the consumer's `fallback` config: `{ upstreamUrl }`. Only the upstream half needs
+    // an address; the stream URL is derived from the cable URL, since anycable-go serves both.
+    constructor(url, subprotocols, options = {}){
+        this.url = url;
+        this.options = options;
+        this.protocol = protocols[0];
+        this.readyState = READY_STATE.CONNECTING;
+        this.sources = new Map();
+        this.token = null;
+        this.pending = [];
+        this.onopen = null;
+        this.onmessage = null;
+        this.onclose = null;
+        this.onerror = null;
+        // Connection installs its handlers immediately after constructing us, so the handshake has to
+        // wait a tick. A real socket does not open synchronously either.
+        sse_socket_setTimeout(()=>this.handshake(), 0);
+    }
+}
+SseSocket.CONNECTING = READY_STATE.CONNECTING;
+SseSocket.OPEN = READY_STATE.OPEN;
+SseSocket.CLOSING = READY_STATE.CLOSING;
+SseSocket.CLOSED = READY_STATE.CLOSED;
+
+function parse(data) {
+    if (typeof data !== "string" || data.length === 0) return null;
+    try {
+        return JSON.parse(data);
+    } catch (unused) {
+        return null;
+    }
+}
+
+export default SseSocket;

package/widget/analytics.js

@@ -1,4 +1,5 @@
 import { default as WidgetObject } from "./widget_object.js";
+import { isCapabilityAllowed } from "./capabilities.js";
 import { default as google_analytics_tracker } from "./analytics/google_analytics_tracker.js";
 import { default as google_tag_manager_tracker } from "./analytics/google_tag_manager_tracker.js";
 import { default as facebook_tracker } from "./analytics/facebook_tracker.js";
@@ -9,8 +10,15 @@ import { _extends } from "../js/4101.js";
 
 
 
+
 class Analytics extends WidgetObject {
     init() {
+        // QAI-5864: no third-party analytics egress (GA / GTM / Facebook) unless the consumer allowed
+        // the "analytics" capability. This is the single chokepoint — skipping it both leaves every
+        // tracker uninstantiated and never registers the `received` listener that feeds them, so
+        // nothing reaches `window.gtag` / `window.dataLayer` / `window.fbq`. Allow-all for the hosted
+        // widget (no boundary installed); default-deny once an npm consumer enrols via setup().
+        if (!isCapabilityAllowed("analytics")) return;
         const trackers = [];
         if (this.config.analytics.googleAnalytics.trackEvents) {
             trackers.push(new google_analytics_tracker(this.config.analytics.googleAnalytics.propertyId));