@repzo/widget-react-native 1.0.0

package/lib/commonjs/api/client.js

@@ -0,0 +1,267 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.WidgetApiClient = exports.RepzoWidgetError = void 0;
+exports.isTerminalErrorCode = isTerminalErrorCode;
+var _storage = require("../storage.js");
+var _safeUrl = require("../ui/utils/safe-url.js");
+/**
+ * Fetch client for `/api/widget/*`.
+ *
+ * Ported from the web widget's `client/src/widget/lib/api.ts`, with
+ * localStorage swapped for the storage adapter and EventSource moved to
+ * `api/realtime.ts`. Visitor tokens live up to 14 days with no refresh, so a
+ * 401 triggers one silent re-init + retry (single-flight, owned by the store).
+ * The token itself lives in `SecureStorage`.
+ */
+
+/** Server `code`s that no retry or re-init can fix. */
+const TERMINAL_CODES = new Set(['messenger_api_disabled', 'identity_verification_failed']);
+function isTerminalErrorCode(code) {
+  return !!code && TERMINAL_CODES.has(code);
+}
+class RepzoWidgetError extends Error {
+  constructor(message, status, code = 'http') {
+    super(message);
+    this.name = 'RepzoWidgetError';
+    this.status = status;
+    this.code = code;
+  }
+
+  /** Builds the error for a non-2xx `{ message, code }` body. */
+  static fromResponse(status, body) {
+    const payload = body && typeof body === 'object' ? body : {};
+    const message = typeof payload.message === 'string' && payload.message ? payload.message : null;
+    const code = status === 403 && typeof payload.code === 'string' && isTerminalErrorCode(payload.code) ? payload.code : 'http';
+    return new RepzoWidgetError(message || `HTTP ${status}`, status, code);
+  }
+}
+exports.RepzoWidgetError = RepzoWidgetError;
+class WidgetApiClient {
+  baseUrl = '';
+  channelAccountId = '';
+  token = null;
+  tokenLoaded = false;
+
+  /**
+   * Set by the store: given the token that just got a 401, returns a valid
+   * token (fresh, or one another caller already minted), or null.
+   */
+  reauthorize = null;
+
+  /** Set by the store: a 403 with a terminal `code` came back from any endpoint. */
+  onTerminalError = null;
+  configure(baseUrl, channelAccountId) {
+    this.baseUrl = baseUrl.replace(/\/$/, '');
+    this.channelAccountId = channelAccountId;
+  }
+  getBaseUrl() {
+    return this.baseUrl;
+  }
+  getChannelAccountId() {
+    return this.channelAccountId;
+  }
+  async getToken() {
+    if (this.token) return this.token;
+    if (!this.tokenLoaded) {
+      this.tokenLoaded = true;
+      this.token = await _storage.SecureStorage.getItem(_storage.TOKEN_KEY);
+    }
+    return this.token;
+  }
+  async setToken(token) {
+    this.token = token;
+    this.tokenLoaded = true;
+    await _storage.SecureStorage.setItem(_storage.TOKEN_KEY, token);
+  }
+  async clearToken() {
+    this.token = null;
+    this.tokenLoaded = true;
+    await _storage.SecureStorage.removeItem(_storage.TOKEN_KEY);
+  }
+
+  /**
+   * Absolute URL for a server media path (avatars, attachments). Only ever
+   * returns `http(s)` — relative paths resolve against `baseUrl`; any other
+   * scheme (`file:`, `data:`, `intent:`, host deep links…) yields null.
+   */
+  resolveUrl(url) {
+    const trimmed = url?.trim();
+    if (!trimmed) return null;
+    if ((0, _safeUrl.isHttpUrl)(trimmed)) return trimmed;
+    if ((0, _safeUrl.urlScheme)(trimmed)) return null;
+    const resolved = `${this.baseUrl}${trimmed.startsWith('/') ? '' : '/'}${trimmed}`;
+    return (0, _safeUrl.isHttpUrl)(resolved) ? resolved : null;
+  }
+  async request(path, options = {}) {
+    let sentToken = null;
+    const send = async () => {
+      const headers = {
+        'Content-Type': 'application/json'
+      };
+      const token = options.authToken !== undefined ? options.authToken : await this.getToken();
+      sentToken = token;
+      if (token) headers.Authorization = `Bearer ${token}`;
+      try {
+        return await fetch(`${this.baseUrl}${path}`, {
+          method: options.method ?? 'GET',
+          headers,
+          body: options.body === undefined ? undefined : JSON.stringify(options.body)
+        });
+      } catch (error) {
+        throw new RepzoWidgetError(error instanceof Error ? error.message : 'Network request failed', 0, 'network');
+      }
+    };
+    let response = await send();
+
+    // The token expired or was revoked: mint a new session once.
+    if (response.status === 401 && !options.skipReauth && this.reauthorize) {
+      const refreshed = await this.reauthorize(sentToken);
+      if (refreshed) response = await send();
+    }
+    if (!response.ok) {
+      const body = await response.json().catch(() => null);
+      const error = RepzoWidgetError.fromResponse(response.status, body);
+      // skipReauth calls (init, logout-time) are handled by their caller,
+      // which knows whether the result is still current.
+      if (isTerminalErrorCode(error.code) && !options.skipReauth) this.onTerminalError?.(error);
+      throw error;
+    }
+    if (response.status === 204) return undefined;
+    return await response.json();
+  }
+
+  // ─── Endpoints ────────────────────────────────────────────────────────────
+
+  /** Public config. `platform` makes the server apply the Mobile SDKs overrides. */
+  getConfig(platform) {
+    const query = platform ? `?platform=${encodeURIComponent(platform)}` : '';
+    return this.request(`/api/widget/config/${encodeURIComponent(this.channelAccountId)}${query}`);
+  }
+  getOutboundMessage() {
+    return this.request(`/api/widget/outbound/${encodeURIComponent(this.channelAccountId)}`);
+  }
+
+  /**
+   * Does NOT store the returned token — the store persists it only once it
+   * knows the identity op that asked for it is still current.
+   */
+  async init(params) {
+    const visitorToken = params.resumeToken === false ? null : await this.getToken();
+    const user = params.user ? {
+      ...(params.user.email ? {
+        email: params.user.email
+      } : {}),
+      ...(params.user.name ? {
+        name: params.user.name
+      } : {}),
+      ...(params.user.phone ? {
+        phone: params.user.phone
+      } : {}),
+      ...(params.user.userId ? {
+        user_id: params.user.userId
+      } : {}),
+      ...(params.user.userHash ? {
+        user_hash: params.user.userHash
+      } : {})
+    } : undefined;
+    return this.request('/api/widget/init', {
+      method: 'POST',
+      skipReauth: true,
+      body: {
+        channelAccountId: this.channelAccountId,
+        visitorToken,
+        trackingVisitorId: params.trackingVisitorId,
+        platform: params.platform,
+        sdkVersion: params.sdkVersion,
+        ...(user ? {
+          user
+        } : {})
+      }
+    });
+  }
+
+  /** Revokes `token` server-side. A 401 means it was already dead — fine. */
+  async logout(token) {
+    try {
+      await this.request('/api/widget/logout', {
+        method: 'POST',
+        skipReauth: true,
+        authToken: token
+      });
+    } catch (error) {
+      if (error instanceof RepzoWidgetError && error.status === 401) return;
+      throw error;
+    }
+  }
+  sendMessage(data) {
+    return this.request('/api/widget/messages', {
+      method: 'POST',
+      body: data
+    });
+  }
+  listConversations() {
+    return this.request('/api/widget/conversations');
+  }
+  listMessages(conversationId, cursor) {
+    const query = cursor ? `?cursor=${encodeURIComponent(cursor)}` : '';
+    return this.request(`/api/widget/conversations/${encodeURIComponent(conversationId)}/messages${query}`);
+  }
+
+  /**
+   * Advances the visitor's read cursor for a thread they're watching live.
+   * Best effort and `skipReauth`: a burst of live replies must never turn an
+   * expired token into a burst of re-inits.
+   */
+  markConversationRead(conversationId) {
+    return this.request(`/api/widget/conversations/${encodeURIComponent(conversationId)}/read`, {
+      method: 'POST',
+      skipReauth: true
+    });
+  }
+  identify(data) {
+    return this.request('/api/widget/identify', {
+      method: 'POST',
+      body: data
+    });
+  }
+  sendTyping(conversationId, isTyping) {
+    return this.request('/api/widget/typing', {
+      method: 'POST',
+      body: {
+        conversationId,
+        isTyping
+      }
+    });
+  }
+  trackEvent(data) {
+    return this.request('/api/widget/events', {
+      method: 'POST',
+      body: {
+        ...data,
+        channelAccountId: this.channelAccountId
+      }
+    });
+  }
+  registerPushToken(data) {
+    return this.request('/api/widget/push-token', {
+      method: 'POST',
+      body: data
+    });
+  }
+
+  /** Logout passes the session's token explicitly and `skipReauth`. */
+  removePushToken(token, auth = {}) {
+    return this.request('/api/widget/push-token', {
+      method: 'DELETE',
+      body: {
+        token
+      },
+      ...auth
+    });
+  }
+}
+exports.WidgetApiClient = WidgetApiClient;
+//# sourceMappingURL=client.js.map

package/lib/commonjs/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_storage","require","_safeUrl","TERMINAL_CODES","Set","isTerminalErrorCode","code","has","RepzoWidgetError","Error","constructor","message","status","name","fromResponse","body","payload","exports","WidgetApiClient","baseUrl","channelAccountId","token","tokenLoaded","reauthorize","onTerminalError","configure","replace","getBaseUrl","getChannelAccountId","getToken","SecureStorage","getItem","TOKEN_KEY","setToken","setItem","clearToken","removeItem","resolveUrl","url","trimmed","trim","isHttpUrl","urlScheme","resolved","startsWith","request","path","options","sentToken","send","headers","authToken","undefined","Authorization","fetch","method","JSON","stringify","error","response","skipReauth","refreshed","ok","json","catch","getConfig","platform","query","encodeURIComponent","getOutboundMessage","init","params","visitorToken","resumeToken","user","email","phone","userId","user_id","userHash","user_hash","trackingVisitorId","sdkVersion","logout","sendMessage","data","listConversations","listMessages","conversationId","cursor","markConversationRead","identify","sendTyping","isTyping","trackEvent","registerPushToken","removePushToken","auth"],"sourceRoot":"../../../src","sources":["api/client.ts"],"mappings":";;;;;;;AAUA,IAAAA,QAAA,GAAAC,OAAA;AAYA,IAAAC,QAAA,GAAAD,OAAA;AAtBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAgBA;AACA,MAAME,cAAc,GAAG,IAAIC,GAAG,CAAuB,CACnD,wBAAwB,EACxB,8BAA8B,CAC/B,CAAC;AAEK,SAASC,mBAAmBA,CAACC,IAA+B,EAAW;EAC5E,OAAO,CAAC,CAACA,IAAI,IAAIH,cAAc,CAACI,GAAG,CAACD,IAA4B,CAAC;AACnE;AAEO,MAAME,gBAAgB,SAASC,KAAK,CAAC;EAK1CC,WAAWA,CAACC,OAAe,EAAEC,MAAc,EAAEN,IAA0B,GAAG,MAAM,EAAE;IAChF,KAAK,CAACK,OAAO,CAAC;IACd,IAAI,CAACE,IAAI,GAAG,kBAAkB;IAC9B,IAAI,CAACD,MAAM,GAAGA,MAAM;IACpB,IAAI,CAACN,IAAI,GAAGA,IAAI;EAClB;;EAEA;EACA,OAAOQ,YAAYA,CAACF,MAAc,EAAEG,IAAa,EAAoB;IACnE,MAAMC,OAAO,GAAID,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAG,CAAC,CAG3D;IACD,MAAMJ,OAAO,GAAG,OAAOK,OAAO,CAACL,OAAO,KAAK,QAAQ,IAAIK,OAAO,CAACL,OAAO,GAAGK,OAAO,CAACL,OAAO,GAAG,IAAI;IAC/F,MAAML,IAAI,GACRM,MAAM,KAAK,GAAG,IAAI,OAAOI,OAAO,CAACV,IAAI,KAAK,QAAQ,IAAID,mBAAmB,CAACW,OAAO,CAACV,IAAI,CAAC,GAClFU,OAAO,CAACV,IAAI,GACb,MAAM;IACZ,OAAO,IAAIE,gBAAgB,CAACG,OAAO,IAAI,QAAQC,MAAM,EAAE,EAAEA,MAAM,EAAEN,IAAI,CAAC;EACxE;AACF;AAACW,OAAA,CAAAT,gBAAA,GAAAA,gBAAA;AAcM,MAAMU,eAAe,CAAC;EACnBC,OAAO,GAAG,EAAE;EAEZC,gBAAgB,GAAG,EAAE;EAErBC,KAAK,GAAkB,IAAI;EAE3BC,WAAW,GAAG,KAAK;;EAE3B;AACF;AACA;AACA;EACEC,WAAW,GAAoE,IAAI;;EAEnF;EACAC,eAAe,GAA+C,IAAI;EAElEC,SAASA,CAACN,OAAe,EAAEC,gBAAwB,EAAE;IACnD,IAAI,CAACD,OAAO,GAAGA,OAAO,CAACO,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IACzC,IAAI,CAACN,gBAAgB,GAAGA,gBAAgB;EAC1C;EAEAO,UAAUA,CAAA,EAAW;IACnB,OAAO,IAAI,CAACR,OAAO;EACrB;EAEAS,mBAAmBA,CAAA,EAAW;IAC5B,OAAO,IAAI,CAACR,gBAAgB;EAC9B;EAEA,MAAMS,QAAQA,CAAA,EAA2B;IACvC,IAAI,IAAI,CAACR,KAAK,EAAE,OAAO,IAAI,CAACA,KAAK;IACjC,IAAI,CAAC,IAAI,CAACC,WAAW,EAAE;MACrB,IAAI,CAACA,WAAW,GAAG,IAAI;MACvB,IAAI,CAACD,KAAK,GAAG,MAAMS,sBAAa,CAACC,OAAO,CAACC,kBAAS,CAAC;IACrD;IACA,OAAO,IAAI,CAACX,KAAK;EACnB;EAEA,MAAMY,QAAQA,CAACZ,KAAa,EAAiB;IAC3C,IAAI,CAACA,KAAK,GAAGA,KAAK;IAClB,IAAI,CAACC,WAAW,GAAG,IAAI;IACvB,MAAMQ,sBAAa,CAACI,OAAO,CAACF,kBAAS,EAAEX,KAAK,CAAC;EAC/C;EAEA,MAAMc,UAAUA,CAAA,EAAkB;IAChC,IAAI,CAACd,KAAK,GAAG,IAAI;IACjB,IAAI,CAACC,WAAW,GAAG,IAAI;IACvB,MAAMQ,sBAAa,CAACM,UAAU,CAACJ,kBAAS,CAAC;EAC3C;;EAEA;AACF;AACA;AACA;AACA;EACEK,UAAUA,CAACC,GAA8B,EAAiB;IACxD,MAAMC,OAAO,GAAGD,GAAG,EAAEE,IAAI,CAAC,CAAC;IAC3B,IAAI,CAACD,OAAO,EAAE,OAAO,IAAI;IACzB,IAAI,IAAAE,kBAAS,EAACF,OAAO,CAAC,EAAE,OAAOA,OAAO;IACtC,IAAI,IAAAG,kBAAS,EAACH,OAAO,CAAC,EAAE,OAAO,IAAI;IACnC,MAAMI,QAAQ,GAAG,GAAG,IAAI,CAACxB,OAAO,GAAGoB,OAAO,CAACK,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,GAAGL,OAAO,EAAE;IACjF,OAAO,IAAAE,kBAAS,EAACE,QAAQ,CAAC,GAAGA,QAAQ,GAAG,IAAI;EAC9C;EAEA,MAAcE,OAAOA,CAAIC,IAAY,EAAEC,OAAuB,GAAG,CAAC,CAAC,EAAc;IAC/E,IAAIC,SAAwB,GAAG,IAAI;IAEnC,MAAMC,IAAI,GAAG,MAAAA,CAAA,KAA+B;MAC1C,MAAMC,OAA+B,GAAG;QAAE,cAAc,EAAE;MAAmB,CAAC;MAC9E,MAAM7B,KAAK,GAAG0B,OAAO,CAACI,SAAS,KAAKC,SAAS,GAAGL,OAAO,CAACI,SAAS,GAAG,MAAM,IAAI,CAACtB,QAAQ,CAAC,CAAC;MACzFmB,SAAS,GAAG3B,KAAK;MACjB,IAAIA,KAAK,EAAE6B,OAAO,CAACG,aAAa,GAAG,UAAUhC,KAAK,EAAE;MAEpD,IAAI;QACF,OAAO,MAAMiC,KAAK,CAAC,GAAG,IAAI,CAACnC,OAAO,GAAG2B,IAAI,EAAE,EAAE;UAC3CS,MAAM,EAAER,OAAO,CAACQ,MAAM,IAAI,KAAK;UAC/BL,OAAO;UACPnC,IAAI,EAAEgC,OAAO,CAAChC,IAAI,KAAKqC,SAAS,GAAGA,SAAS,GAAGI,IAAI,CAACC,SAAS,CAACV,OAAO,CAAChC,IAAI;QAC5E,CAAC,CAAC;MACJ,CAAC,CAAC,OAAO2C,KAAK,EAAE;QACd,MAAM,IAAIlD,gBAAgB,CACxBkD,KAAK,YAAYjD,KAAK,GAAGiD,KAAK,CAAC/C,OAAO,GAAG,wBAAwB,EACjE,CAAC,EACD,SACF,CAAC;MACH;IACF,CAAC;IAED,IAAIgD,QAAQ,GAAG,MAAMV,IAAI,CAAC,CAAC;;IAE3B;IACA,IAAIU,QAAQ,CAAC/C,MAAM,KAAK,GAAG,IAAI,CAACmC,OAAO,CAACa,UAAU,IAAI,IAAI,CAACrC,WAAW,EAAE;MACtE,MAAMsC,SAAS,GAAG,MAAM,IAAI,CAACtC,WAAW,CAACyB,SAAS,CAAC;MACnD,IAAIa,SAAS,EAAEF,QAAQ,GAAG,MAAMV,IAAI,CAAC,CAAC;IACxC;IAEA,IAAI,CAACU,QAAQ,CAACG,EAAE,EAAE;MAChB,MAAM/C,IAAI,GAAG,MAAM4C,QAAQ,CAACI,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,MAAM,IAAI,CAAC;MACpD,MAAMN,KAAK,GAAGlD,gBAAgB,CAACM,YAAY,CAAC6C,QAAQ,CAAC/C,MAAM,EAAEG,IAAI,CAAC;MAClE;MACA;MACA,IAAIV,mBAAmB,CAACqD,KAAK,CAACpD,IAAI,CAAC,IAAI,CAACyC,OAAO,CAACa,UAAU,EAAE,IAAI,CAACpC,eAAe,GAAGkC,KAAK,CAAC;MACzF,MAAMA,KAAK;IACb;IAEA,IAAIC,QAAQ,CAAC/C,MAAM,KAAK,GAAG,EAAE,OAAOwC,SAAS;IAC7C,OAAQ,MAAMO,QAAQ,CAACI,IAAI,CAAC,CAAC;EAC/B;;EAEA;;EAEA;EACAE,SAASA,CAACC,QAAoC,EAAyB;IACrE,MAAMC,KAAK,GAAGD,QAAQ,GAAG,aAAaE,kBAAkB,CAACF,QAAQ,CAAC,EAAE,GAAG,EAAE;IACzE,OAAO,IAAI,CAACrB,OAAO,CAAC,sBAAsBuB,kBAAkB,CAAC,IAAI,CAAChD,gBAAgB,CAAC,GAAG+C,KAAK,EAAE,CAAC;EAChG;EAEAE,kBAAkBA,CAAA,EAAiD;IACjE,OAAO,IAAI,CAACxB,OAAO,CAAC,wBAAwBuB,kBAAkB,CAAC,IAAI,CAAChD,gBAAgB,CAAC,EAAE,CAAC;EAC1F;;EAEA;AACF;AACA;AACA;EACE,MAAMkD,IAAIA,CAACC,MAOV,EAAyB;IACxB,MAAMC,YAAY,GAAGD,MAAM,CAACE,WAAW,KAAK,KAAK,GAAG,IAAI,GAAG,MAAM,IAAI,CAAC5C,QAAQ,CAAC,CAAC;IAChF,MAAM6C,IAAI,GAAGH,MAAM,CAACG,IAAI,GACpB;MACE,IAAIH,MAAM,CAACG,IAAI,CAACC,KAAK,GAAG;QAAEA,KAAK,EAAEJ,MAAM,CAACG,IAAI,CAACC;MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;MAC1D,IAAIJ,MAAM,CAACG,IAAI,CAAC7D,IAAI,GAAG;QAAEA,IAAI,EAAE0D,MAAM,CAACG,IAAI,CAAC7D;MAAK,CAAC,GAAG,CAAC,CAAC,CAAC;MACvD,IAAI0D,MAAM,CAACG,IAAI,CAACE,KAAK,GAAG;QAAEA,KAAK,EAAEL,MAAM,CAACG,IAAI,CAACE;MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;MAC1D,IAAIL,MAAM,CAACG,IAAI,CAACG,MAAM,GAAG;QAAEC,OAAO,EAAEP,MAAM,CAACG,IAAI,CAACG;MAAO,CAAC,GAAG,CAAC,CAAC,CAAC;MAC9D,IAAIN,MAAM,CAACG,IAAI,CAACK,QAAQ,GAAG;QAAEC,SAAS,EAAET,MAAM,CAACG,IAAI,CAACK;MAAS,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC,GACD3B,SAAS;IAEb,OAAO,IAAI,CAACP,OAAO,CAAe,kBAAkB,EAAE;MACpDU,MAAM,EAAE,MAAM;MACdK,UAAU,EAAE,IAAI;MAChB7C,IAAI,EAAE;QACJK,gBAAgB,EAAE,IAAI,CAACA,gBAAgB;QACvCoD,YAAY;QACZS,iBAAiB,EAAEV,MAAM,CAACU,iBAAiB;QAC3Cf,QAAQ,EAAEK,MAAM,CAACL,QAAQ;QACzBgB,UAAU,EAAEX,MAAM,CAACW,UAAU;QAC7B,IAAIR,IAAI,GAAG;UAAEA;QAAK,CAAC,GAAG,CAAC,CAAC;MAC1B;IACF,CAAC,CAAC;EACJ;;EAEA;EACA,MAAMS,MAAMA,CAAC9D,KAAa,EAAiB;IACzC,IAAI;MACF,MAAM,IAAI,CAACwB,OAAO,CAAC,oBAAoB,EAAE;QACvCU,MAAM,EAAE,MAAM;QACdK,UAAU,EAAE,IAAI;QAChBT,SAAS,EAAE9B;MACb,CAAC,CAAC;IACJ,CAAC,CAAC,OAAOqC,KAAK,EAAE;MACd,IAAIA,KAAK,YAAYlD,gBAAgB,IAAIkD,KAAK,CAAC9C,MAAM,KAAK,GAAG,EAAE;MAC/D,MAAM8C,KAAK;IACb;EACF;EAEA0B,WAAWA,CAACC,IAQX,EAAsF;IACrF,OAAO,IAAI,CAACxC,OAAO,CAAC,sBAAsB,EAAE;MAAEU,MAAM,EAAE,MAAM;MAAExC,IAAI,EAAEsE;IAAK,CAAC,CAAC;EAC7E;EAEAC,iBAAiBA,CAAA,EAAsC;IACrD,OAAO,IAAI,CAACzC,OAAO,CAAC,2BAA2B,CAAC;EAClD;EAEA0C,YAAYA,CACVC,cAAsB,EACtBC,MAAsB,EAC+D;IACrF,MAAMtB,KAAK,GAAGsB,MAAM,GAAG,WAAWrB,kBAAkB,CAACqB,MAAM,CAAC,EAAE,GAAG,EAAE;IACnE,OAAO,IAAI,CAAC5C,OAAO,CACjB,6BAA6BuB,kBAAkB,CAACoB,cAAc,CAAC,YAAYrB,KAAK,EAClF,CAAC;EACH;;EAEA;AACF;AACA;AACA;AACA;EACEuB,oBAAoBA,CAACF,cAAsB,EAAiB;IAC1D,OAAO,IAAI,CAAC3C,OAAO,CACjB,6BAA6BuB,kBAAkB,CAACoB,cAAc,CAAC,OAAO,EACtE;MAAEjC,MAAM,EAAE,MAAM;MAAEK,UAAU,EAAE;IAAK,CACrC,CAAC;EACH;EAEA+B,QAAQA,CAACN,IAKR,EAAiB;IAChB,OAAO,IAAI,CAACxC,OAAO,CAAC,sBAAsB,EAAE;MAAEU,MAAM,EAAE,MAAM;MAAExC,IAAI,EAAEsE;IAAK,CAAC,CAAC;EAC7E;EAEAO,UAAUA,CAACJ,cAAsB,EAAEK,QAAiB,EAAiB;IACnE,OAAO,IAAI,CAAChD,OAAO,CAAC,oBAAoB,EAAE;MACxCU,MAAM,EAAE,MAAM;MACdxC,IAAI,EAAE;QAAEyE,cAAc;QAAEK;MAAS;IACnC,CAAC,CAAC;EACJ;EAEAC,UAAUA,CAACT,IAIV,EAAiB;IAChB,OAAO,IAAI,CAACxC,OAAO,CAAC,oBAAoB,EAAE;MACxCU,MAAM,EAAE,MAAM;MACdxC,IAAI,EAAE;QAAE,GAAGsE,IAAI;QAAEjE,gBAAgB,EAAE,IAAI,CAACA;MAAiB;IAC3D,CAAC,CAAC;EACJ;EAEA2E,iBAAiBA,CAACV,IAIjB,EAAiB;IAChB,OAAO,IAAI,CAACxC,OAAO,CAAC,wBAAwB,EAAE;MAAEU,MAAM,EAAE,MAAM;MAAExC,IAAI,EAAEsE;IAAK,CAAC,CAAC;EAC/E;;EAEA;EACAW,eAAeA,CACb3E,KAAa,EACb4E,IAAyD,GAAG,CAAC,CAAC,EAC/C;IACf,OAAO,IAAI,CAACpD,OAAO,CAAC,wBAAwB,EAAE;MAC5CU,MAAM,EAAE,QAAQ;MAChBxC,IAAI,EAAE;QAAEM;MAAM,CAAC;MACf,GAAG4E;IACL,CAAC,CAAC;EACJ;AACF;AAAChF,OAAA,CAAAC,eAAA,GAAAA,eAAA","ignoreList":[]}

package/lib/commonjs/api/realtime.js

@@ -0,0 +1,193 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.WidgetRealtime = void 0;
+var _client = require("./client.js");
+var _sseParser = require("./sse-parser.js");
+/**
+ * SSE transport over `GET /api/widget/sse`, authenticated with an
+ * `Authorization: Bearer` header (never the query string, which ends up in
+ * proxy and server access logs).
+ *
+ * Uses React Native's streaming XMLHttpRequest and handles both network
+ * failures and successful stream EOF with exponential reconnect backoff.
+ * Auth failures never retry here: 401 hands over to the store's re-init,
+ * while 403 is terminal.
+ */
+
+/** Server event names, mapped to the shorter names the store switches on. */
+const SERVER_EVENTS = {
+  connected: 'connected',
+  'widget.message.new': 'message.new',
+  'widget.typing.start': 'typing.start',
+  'widget.typing.stop': 'typing.stop',
+  'widget.conversation.updated': 'conversation.updated',
+  'widget.conversation.event': 'conversation.event'
+};
+const BASE_RECONNECT_MS = 1_000;
+const MAX_RECONNECT_MS = 60_000;
+/** XHR readyState DONE — the error body is only complete from here. */
+const XHR_DONE = 4;
+/** If DONE never follows a 403 seen mid-body, act on what arrived. */
+const AUTH_ERROR_BODY_WAIT_MS = 3_000;
+class WidgetRealtime {
+  source = null;
+  connected = false;
+  reconnectTimer = null;
+  attempt = 0;
+  closedByUs = false;
+  url = null;
+  token = null;
+  handler = null;
+  authHooks = null;
+  authErrorTimer = null;
+  connect(baseUrl, token, handler, authHooks) {
+    this.close();
+    this.url = `${baseUrl.replace(/\/$/, '')}/api/widget/sse`;
+    this.token = token;
+    this.handler = handler;
+    this.authHooks = authHooks ?? null;
+    this.closedByUs = false;
+    this.open();
+  }
+  open() {
+    if (!this.url || !this.token || !this.handler) return;
+    const source = new XMLHttpRequest();
+    this.source = source;
+    let offset = 0;
+    const isCurrent = () => this.source === source && !this.closedByUs;
+    const parser = new _sseParser.SseParser((name, raw) => {
+      if (!isCurrent() || !Object.prototype.hasOwnProperty.call(SERVER_EVENTS, name)) return;
+      let payload = null;
+      if (raw) {
+        try {
+          payload = JSON.parse(raw);
+        } catch {
+          payload = raw;
+        }
+      }
+      this.handler?.(SERVER_EVENTS[name], payload);
+    });
+    const reconnect = () => {
+      if (!isCurrent()) return;
+      this.handler?.('error', null);
+      // A handler may synchronously close or replace this connection.
+      if (isCurrent()) this.scheduleReconnect();
+    };
+    const read = () => {
+      if (!isCurrent() || source.readyState < 3) return;
+      const complete = source.readyState === XHR_DONE;
+      const status = source.status;
+      if (status === 401 || status === 403) {
+        if (!complete && status === 403) {
+          // Wait for the structured error body, but never wait indefinitely.
+          this.authErrorTimer ??= setTimeout(() => {
+            if (isCurrent()) this.handleAuthError(status, source.responseText);
+          }, AUTH_ERROR_BODY_WAIT_MS);
+          return;
+        }
+        this.handleAuthError(status, source.responseText);
+        return;
+      }
+      if (status >= 200 && status < 300) {
+        if (!this.connected) {
+          this.connected = true;
+          this.attempt = 0;
+        }
+        const text = source.responseText || '';
+        const chunk = text.slice(offset);
+        offset = text.length;
+        parser.push(chunk);
+        // A 200 EOF is a disconnected stream too. Tear it down and notify the
+        // store so the next `connected` event also triggers history catch-up.
+        if (complete) reconnect();
+      } else if (complete) {
+        reconnect();
+      }
+    };
+    source.onreadystatechange = read;
+    source.onprogress = read;
+    source.onerror = reconnect;
+    source.ontimeout = reconnect;
+    source.onabort = reconnect;
+    try {
+      source.open('GET', this.url, true);
+      source.timeout = 0;
+      source.setRequestHeader('Accept', 'text/event-stream');
+      source.setRequestHeader('Cache-Control', 'no-cache');
+      source.setRequestHeader('Authorization', `Bearer ${this.token}`);
+      source.send();
+    } catch {
+      reconnect();
+    }
+  }
+  handleAuthError(status, rawBody) {
+    const token = this.token;
+    const hooks = this.authHooks;
+    // Backoff cannot fix an auth failure — stop and let the store decide.
+    this.close();
+    if (!hooks || !token) return;
+    if (status === 401) {
+      hooks.onUnauthorized(token);
+      return;
+    }
+    let body = null;
+    try {
+      body = rawBody ? JSON.parse(rawBody) : null;
+    } catch {
+      body = null;
+    }
+    hooks.onForbidden(_client.RepzoWidgetError.fromResponse(403, body));
+  }
+  scheduleReconnect() {
+    if (this.closedByUs || this.reconnectTimer) return;
+    this.teardownSource();
+    const delay = Math.min(BASE_RECONNECT_MS * 2 ** this.attempt, MAX_RECONNECT_MS);
+    // Jitter keeps a fleet of devices from reconnecting in lockstep.
+    const jittered = delay * (0.7 + Math.random() * 0.6);
+    this.attempt += 1;
+    this.reconnectTimer = setTimeout(() => {
+      this.reconnectTimer = null;
+      if (this.closedByUs) return;
+      this.open();
+    }, jittered);
+  }
+  teardownSource() {
+    const source = this.source;
+    this.source = null;
+    this.connected = false;
+    if (this.authErrorTimer) {
+      clearTimeout(this.authErrorTimer);
+      this.authErrorTimer = null;
+    }
+    if (!source) return;
+    source.onreadystatechange = null;
+    source.onprogress = null;
+    source.onerror = null;
+    source.ontimeout = null;
+    source.onabort = null;
+    source.abort();
+  }
+  get isConnected() {
+    // Includes a handshake in progress so the store does not replace the
+    // connection that a successful re-init just started. EOF clears source.
+    return this.source !== null;
+  }
+  close() {
+    this.closedByUs = true;
+    this.attempt = 0;
+    if (this.reconnectTimer) {
+      clearTimeout(this.reconnectTimer);
+      this.reconnectTimer = null;
+    }
+    if (this.authErrorTimer) {
+      clearTimeout(this.authErrorTimer);
+      this.authErrorTimer = null;
+    }
+    this.teardownSource();
+  }
+}
+exports.WidgetRealtime = WidgetRealtime;
+//# sourceMappingURL=realtime.js.map

package/lib/commonjs/api/realtime.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_client","require","_sseParser","SERVER_EVENTS","connected","BASE_RECONNECT_MS","MAX_RECONNECT_MS","XHR_DONE","AUTH_ERROR_BODY_WAIT_MS","WidgetRealtime","source","reconnectTimer","attempt","closedByUs","url","token","handler","authHooks","authErrorTimer","connect","baseUrl","close","replace","open","XMLHttpRequest","offset","isCurrent","parser","SseParser","name","raw","Object","prototype","hasOwnProperty","call","payload","JSON","parse","reconnect","scheduleReconnect","read","readyState","complete","status","setTimeout","handleAuthError","responseText","text","chunk","slice","length","push","onreadystatechange","onprogress","onerror","ontimeout","onabort","timeout","setRequestHeader","send","rawBody","hooks","onUnauthorized","body","onForbidden","RepzoWidgetError","fromResponse","teardownSource","delay","Math","min","jittered","random","clearTimeout","abort","isConnected","exports"],"sourceRoot":"../../../src","sources":["api/realtime.ts"],"mappings":";;;;;;AAYA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;AACA,MAAME,aAAa,GAAG;EACpBC,SAAS,EAAE,WAAW;EACtB,oBAAoB,EAAE,aAAa;EACnC,qBAAqB,EAAE,cAAc;EACrC,oBAAoB,EAAE,aAAa;EACnC,6BAA6B,EAAE,sBAAsB;EACrD,2BAA2B,EAAE;AAC/B,CAAU;AAIV,MAAMC,iBAAiB,GAAG,KAAK;AAC/B,MAAMC,gBAAgB,GAAG,MAAM;AAC/B;AACA,MAAMC,QAAQ,GAAG,CAAC;AAClB;AACA,MAAMC,uBAAuB,GAAG,KAAK;AAW9B,MAAMC,cAAc,CAAC;EAClBC,MAAM,GAA0B,IAAI;EAEpCN,SAAS,GAAG,KAAK;EAEjBO,cAAc,GAAyC,IAAI;EAE3DC,OAAO,GAAG,CAAC;EAEXC,UAAU,GAAG,KAAK;EAElBC,GAAG,GAAkB,IAAI;EAEzBC,KAAK,GAAkB,IAAI;EAE3BC,OAAO,GAA2B,IAAI;EAEtCC,SAAS,GAA6B,IAAI;EAE1CC,cAAc,GAAyC,IAAI;EAEnEC,OAAOA,CACLC,OAAe,EACfL,KAAa,EACbC,OAAwB,EACxBC,SAA6B,EACvB;IACN,IAAI,CAACI,KAAK,CAAC,CAAC;IACZ,IAAI,CAACP,GAAG,GAAG,GAAGM,OAAO,CAACE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB;IACzD,IAAI,CAACP,KAAK,GAAGA,KAAK;IAClB,IAAI,CAACC,OAAO,GAAGA,OAAO;IACtB,IAAI,CAACC,SAAS,GAAGA,SAAS,IAAI,IAAI;IAClC,IAAI,CAACJ,UAAU,GAAG,KAAK;IACvB,IAAI,CAACU,IAAI,CAAC,CAAC;EACb;EAEQA,IAAIA,CAAA,EAAS;IACnB,IAAI,CAAC,IAAI,CAACT,GAAG,IAAI,CAAC,IAAI,CAACC,KAAK,IAAI,CAAC,IAAI,CAACC,OAAO,EAAE;IAE/C,MAAMN,MAAM,GAAG,IAAIc,cAAc,CAAC,CAAC;IACnC,IAAI,CAACd,MAAM,GAAGA,MAAM;IACpB,IAAIe,MAAM,GAAG,CAAC;IACd,MAAMC,SAAS,GAAGA,CAAA,KAAM,IAAI,CAAChB,MAAM,KAAKA,MAAM,IAAI,CAAC,IAAI,CAACG,UAAU;IAClE,MAAMc,MAAM,GAAG,IAAIC,oBAAS,CAAC,CAACC,IAAI,EAAEC,GAAG,KAAK;MAC1C,IAAI,CAACJ,SAAS,CAAC,CAAC,IAAI,CAACK,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAAC/B,aAAa,EAAE0B,IAAI,CAAC,EAAE;MAChF,IAAIM,OAAgB,GAAG,IAAI;MAC3B,IAAIL,GAAG,EAAE;QACP,IAAI;UACFK,OAAO,GAAGC,IAAI,CAACC,KAAK,CAACP,GAAG,CAAC;QAC3B,CAAC,CAAC,MAAM;UACNK,OAAO,GAAGL,GAAG;QACf;MACF;MACA,IAAI,CAACd,OAAO,GAAGb,aAAa,CAAC0B,IAAI,CAAoB,EAAEM,OAAO,CAAC;IACjE,CAAC,CAAC;IACF,MAAMG,SAAS,GAAGA,CAAA,KAAM;MACtB,IAAI,CAACZ,SAAS,CAAC,CAAC,EAAE;MAClB,IAAI,CAACV,OAAO,GAAG,OAAO,EAAE,IAAI,CAAC;MAC7B;MACA,IAAIU,SAAS,CAAC,CAAC,EAAE,IAAI,CAACa,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAMC,IAAI,GAAGA,CAAA,KAAM;MACjB,IAAI,CAACd,SAAS,CAAC,CAAC,IAAIhB,MAAM,CAAC+B,UAAU,GAAG,CAAC,EAAE;MAC3C,MAAMC,QAAQ,GAAGhC,MAAM,CAAC+B,UAAU,KAAKlC,QAAQ;MAC/C,MAAMoC,MAAM,GAAGjC,MAAM,CAACiC,MAAM;MAC5B,IAAIA,MAAM,KAAK,GAAG,IAAIA,MAAM,KAAK,GAAG,EAAE;QACpC,IAAI,CAACD,QAAQ,IAAIC,MAAM,KAAK,GAAG,EAAE;UAC/B;UACA,IAAI,CAACzB,cAAc,KAAK0B,UAAU,CAAC,MAAM;YACvC,IAAIlB,SAAS,CAAC,CAAC,EAAE,IAAI,CAACmB,eAAe,CAACF,MAAM,EAAEjC,MAAM,CAACoC,YAAY,CAAC;UACpE,CAAC,EAAEtC,uBAAuB,CAAC;UAC3B;QACF;QACA,IAAI,CAACqC,eAAe,CAACF,MAAM,EAAEjC,MAAM,CAACoC,YAAY,CAAC;QACjD;MACF;MACA,IAAIH,MAAM,IAAI,GAAG,IAAIA,MAAM,GAAG,GAAG,EAAE;QACjC,IAAI,CAAC,IAAI,CAACvC,SAAS,EAAE;UACnB,IAAI,CAACA,SAAS,GAAG,IAAI;UACrB,IAAI,CAACQ,OAAO,GAAG,CAAC;QAClB;QACA,MAAMmC,IAAI,GAAGrC,MAAM,CAACoC,YAAY,IAAI,EAAE;QACtC,MAAME,KAAK,GAAGD,IAAI,CAACE,KAAK,CAACxB,MAAM,CAAC;QAChCA,MAAM,GAAGsB,IAAI,CAACG,MAAM;QACpBvB,MAAM,CAACwB,IAAI,CAACH,KAAK,CAAC;QAClB;QACA;QACA,IAAIN,QAAQ,EAAEJ,SAAS,CAAC,CAAC;MAC3B,CAAC,MAAM,IAAII,QAAQ,EAAE;QACnBJ,SAAS,CAAC,CAAC;MACb;IACF,CAAC;IACD5B,MAAM,CAAC0C,kBAAkB,GAAGZ,IAAI;IAChC9B,MAAM,CAAC2C,UAAU,GAAGb,IAAI;IACxB9B,MAAM,CAAC4C,OAAO,GAAGhB,SAAS;IAC1B5B,MAAM,CAAC6C,SAAS,GAAGjB,SAAS;IAC5B5B,MAAM,CAAC8C,OAAO,GAAGlB,SAAS;IAC1B,IAAI;MACF5B,MAAM,CAACa,IAAI,CAAC,KAAK,EAAE,IAAI,CAACT,GAAG,EAAE,IAAI,CAAC;MAClCJ,MAAM,CAAC+C,OAAO,GAAG,CAAC;MAClB/C,MAAM,CAACgD,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,CAAC;MACtDhD,MAAM,CAACgD,gBAAgB,CAAC,eAAe,EAAE,UAAU,CAAC;MACpDhD,MAAM,CAACgD,gBAAgB,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC3C,KAAK,EAAE,CAAC;MAChEL,MAAM,CAACiD,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,MAAM;MACNrB,SAAS,CAAC,CAAC;IACb;EACF;EAEQO,eAAeA,CAACF,MAAc,EAAEiB,OAAkC,EAAQ;IAChF,MAAM7C,KAAK,GAAG,IAAI,CAACA,KAAK;IACxB,MAAM8C,KAAK,GAAG,IAAI,CAAC5C,SAAS;IAC5B;IACA,IAAI,CAACI,KAAK,CAAC,CAAC;IACZ,IAAI,CAACwC,KAAK,IAAI,CAAC9C,KAAK,EAAE;IACtB,IAAI4B,MAAM,KAAK,GAAG,EAAE;MAClBkB,KAAK,CAACC,cAAc,CAAC/C,KAAK,CAAC;MAC3B;IACF;IACA,IAAIgD,IAAa,GAAG,IAAI;IACxB,IAAI;MACFA,IAAI,GAAGH,OAAO,GAAGxB,IAAI,CAACC,KAAK,CAACuB,OAAO,CAAC,GAAG,IAAI;IAC7C,CAAC,CAAC,MAAM;MACNG,IAAI,GAAG,IAAI;IACb;IACAF,KAAK,CAACG,WAAW,CAACC,wBAAgB,CAACC,YAAY,CAAC,GAAG,EAAEH,IAAI,CAAC,CAAC;EAC7D;EAEQxB,iBAAiBA,CAAA,EAAS;IAChC,IAAI,IAAI,CAAC1B,UAAU,IAAI,IAAI,CAACF,cAAc,EAAE;IAE5C,IAAI,CAACwD,cAAc,CAAC,CAAC;IAErB,MAAMC,KAAK,GAAGC,IAAI,CAACC,GAAG,CAACjE,iBAAiB,GAAG,CAAC,IAAI,IAAI,CAACO,OAAO,EAAEN,gBAAgB,CAAC;IAC/E;IACA,MAAMiE,QAAQ,GAAGH,KAAK,IAAI,GAAG,GAAGC,IAAI,CAACG,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC;IACpD,IAAI,CAAC5D,OAAO,IAAI,CAAC;IAEjB,IAAI,CAACD,cAAc,GAAGiC,UAAU,CAAC,MAAM;MACrC,IAAI,CAACjC,cAAc,GAAG,IAAI;MAC1B,IAAI,IAAI,CAACE,UAAU,EAAE;MACrB,IAAI,CAACU,IAAI,CAAC,CAAC;IACb,CAAC,EAAEgD,QAAQ,CAAC;EACd;EAEQJ,cAAcA,CAAA,EAAS;IAC7B,MAAMzD,MAAM,GAAG,IAAI,CAACA,MAAM;IAC1B,IAAI,CAACA,MAAM,GAAG,IAAI;IAClB,IAAI,CAACN,SAAS,GAAG,KAAK;IACtB,IAAI,IAAI,CAACc,cAAc,EAAE;MACvBuD,YAAY,CAAC,IAAI,CAACvD,cAAc,CAAC;MACjC,IAAI,CAACA,cAAc,GAAG,IAAI;IAC5B;IACA,IAAI,CAACR,MAAM,EAAE;IACbA,MAAM,CAAC0C,kBAAkB,GAAG,IAAI;IAChC1C,MAAM,CAAC2C,UAAU,GAAG,IAAI;IACxB3C,MAAM,CAAC4C,OAAO,GAAG,IAAI;IACrB5C,MAAM,CAAC6C,SAAS,GAAG,IAAI;IACvB7C,MAAM,CAAC8C,OAAO,GAAG,IAAI;IACrB9C,MAAM,CAACgE,KAAK,CAAC,CAAC;EAChB;EAEA,IAAIC,WAAWA,CAAA,EAAY;IACzB;IACA;IACA,OAAO,IAAI,CAACjE,MAAM,KAAK,IAAI;EAC7B;EAEAW,KAAKA,CAAA,EAAS;IACZ,IAAI,CAACR,UAAU,GAAG,IAAI;IACtB,IAAI,CAACD,OAAO,GAAG,CAAC;IAChB,IAAI,IAAI,CAACD,cAAc,EAAE;MACvB8D,YAAY,CAAC,IAAI,CAAC9D,cAAc,CAAC;MACjC,IAAI,CAACA,cAAc,GAAG,IAAI;IAC5B;IACA,IAAI,IAAI,CAACO,cAAc,EAAE;MACvBuD,YAAY,CAAC,IAAI,CAACvD,cAAc,CAAC;MACjC,IAAI,CAACA,cAAc,GAAG,IAAI;IAC5B;IACA,IAAI,CAACiD,cAAc,CAAC,CAAC;EACvB;AACF;AAACS,OAAA,CAAAnE,cAAA,GAAAA,cAAA","ignoreList":[]}

package/lib/commonjs/api/sse-parser.js

@@ -0,0 +1,58 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SseParser = void 0;
+/** Incremental SSE framing. A blank line dispatches an event; EOF alone does not. */
+class SseParser {
+  line = '';
+  event = '';
+  data = [];
+  afterCR = false;
+  atStart = true;
+  constructor(dispatch) {
+    this.dispatch = dispatch;
+  }
+  push(chunk) {
+    for (const char of chunk) {
+      if (this.atStart) {
+        this.atStart = false;
+        if (char === '\uFEFF') continue;
+      }
+      if (this.afterCR) {
+        this.afterCR = false;
+        if (char === '\n') continue;
+      }
+      if (char === '\r' || char === '\n') {
+        const line = this.line;
+        this.line = '';
+        this.afterCR = char === '\r';
+        this.readLine(line);
+      } else {
+        this.line += char;
+      }
+    }
+  }
+  readLine(line) {
+    if (!line) {
+      const event = this.event || 'message';
+      const data = this.data;
+      this.event = '';
+      this.data = [];
+      if (data.length) this.dispatch(event, data.join('\n'));
+      return;
+    }
+    if (line.startsWith(':')) return; // heartbeat/comment
+    const colon = line.indexOf(':');
+    const field = colon < 0 ? line : line.slice(0, colon);
+    let value = colon < 0 ? '' : line.slice(colon + 1);
+    if (value.startsWith(' ')) value = value.slice(1);
+    if (field === 'event') this.event = value;
+    if (field === 'data') this.data.push(value);
+    // Reconnect timing belongs to the transport. The store catches up from
+    // history on reconnect, so no server retry/id fields are needed here.
+  }
+}
+exports.SseParser = SseParser;
+//# sourceMappingURL=sse-parser.js.map

package/lib/commonjs/api/sse-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["SseParser","line","event","data","afterCR","atStart","constructor","dispatch","push","chunk","char","readLine","length","join","startsWith","colon","indexOf","field","slice","value","exports"],"sourceRoot":"../../../src","sources":["api/sse-parser.ts"],"mappings":";;;;;;AAAA;AACO,MAAMA,SAAS,CAAC;EACbC,IAAI,GAAG,EAAE;EACTC,KAAK,GAAG,EAAE;EACVC,IAAI,GAAa,EAAE;EACnBC,OAAO,GAAG,KAAK;EACfC,OAAO,GAAG,IAAI;EAEtBC,WAAWA,CAAkBC,QAA+C,EAAE;IAAA,KAAjDA,QAA+C,GAA/CA,QAA+C;EAAG;EAE/EC,IAAIA,CAACC,KAAa,EAAQ;IACxB,KAAK,MAAMC,IAAI,IAAID,KAAK,EAAE;MACxB,IAAI,IAAI,CAACJ,OAAO,EAAE;QAChB,IAAI,CAACA,OAAO,GAAG,KAAK;QACpB,IAAIK,IAAI,KAAK,QAAQ,EAAE;MACzB;MACA,IAAI,IAAI,CAACN,OAAO,EAAE;QAChB,IAAI,CAACA,OAAO,GAAG,KAAK;QACpB,IAAIM,IAAI,KAAK,IAAI,EAAE;MACrB;MACA,IAAIA,IAAI,KAAK,IAAI,IAAIA,IAAI,KAAK,IAAI,EAAE;QAClC,MAAMT,IAAI,GAAG,IAAI,CAACA,IAAI;QACtB,IAAI,CAACA,IAAI,GAAG,EAAE;QACd,IAAI,CAACG,OAAO,GAAGM,IAAI,KAAK,IAAI;QAC5B,IAAI,CAACC,QAAQ,CAACV,IAAI,CAAC;MACrB,CAAC,MAAM;QACL,IAAI,CAACA,IAAI,IAAIS,IAAI;MACnB;IACF;EACF;EAEQC,QAAQA,CAACV,IAAY,EAAQ;IACnC,IAAI,CAACA,IAAI,EAAE;MACT,MAAMC,KAAK,GAAG,IAAI,CAACA,KAAK,IAAI,SAAS;MACrC,MAAMC,IAAI,GAAG,IAAI,CAACA,IAAI;MACtB,IAAI,CAACD,KAAK,GAAG,EAAE;MACf,IAAI,CAACC,IAAI,GAAG,EAAE;MACd,IAAIA,IAAI,CAACS,MAAM,EAAE,IAAI,CAACL,QAAQ,CAACL,KAAK,EAAEC,IAAI,CAACU,IAAI,CAAC,IAAI,CAAC,CAAC;MACtD;IACF;IACA,IAAIZ,IAAI,CAACa,UAAU,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAClC,MAAMC,KAAK,GAAGd,IAAI,CAACe,OAAO,CAAC,GAAG,CAAC;IAC/B,MAAMC,KAAK,GAAGF,KAAK,GAAG,CAAC,GAAGd,IAAI,GAAGA,IAAI,CAACiB,KAAK,CAAC,CAAC,EAAEH,KAAK,CAAC;IACrD,IAAII,KAAK,GAAGJ,KAAK,GAAG,CAAC,GAAG,EAAE,GAAGd,IAAI,CAACiB,KAAK,CAACH,KAAK,GAAG,CAAC,CAAC;IAClD,IAAII,KAAK,CAACL,UAAU,CAAC,GAAG,CAAC,EAAEK,KAAK,GAAGA,KAAK,CAACD,KAAK,CAAC,CAAC,CAAC;IACjD,IAAID,KAAK,KAAK,OAAO,EAAE,IAAI,CAACf,KAAK,GAAGiB,KAAK;IACzC,IAAIF,KAAK,KAAK,MAAM,EAAE,IAAI,CAACd,IAAI,CAACK,IAAI,CAACW,KAAK,CAAC;IAC3C;IACA;EACF;AACF;AAACC,OAAA,CAAApB,SAAA,GAAAA,SAAA","ignoreList":[]}

package/lib/commonjs/controller.js

@@ -0,0 +1,23 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.controller = void 0;
+var _widgetStore = require("./state/widget-store.js");
+/**
+ * Process-wide singleton that owns the store (and therefore the session, the
+ * SSE stream and the unread count). Imperative API calls land here whether or
+ * not `<RepzoWidgetProvider>` is mounted; the provider is a pure subscriber, so
+ * commands issued before boot finishes simply land in state and render once the
+ * provider mounts.
+ */
+
+class RepzoWidgetController {
+  store = new _widgetStore.WidgetStore();
+  get events() {
+    return this.store.events;
+  }
+}
+const controller = exports.controller = new RepzoWidgetController();
+//# sourceMappingURL=controller.js.map

package/lib/commonjs/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_widgetStore","require","RepzoWidgetController","store","WidgetStore","events","controller","exports"],"sourceRoot":"../../src","sources":["controller.ts"],"mappings":";;;;;;AAQA,IAAAA,YAAA,GAAAC,OAAA;AARA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA,MAAMC,qBAAqB,CAAC;EACjBC,KAAK,GAAG,IAAIC,wBAAW,CAAC,CAAC;EAElC,IAAIC,MAAMA,CAAA,EAAG;IACX,OAAO,IAAI,CAACF,KAAK,CAACE,MAAM;EAC1B;AACF;AAEO,MAAMC,UAAU,GAAAC,OAAA,CAAAD,UAAA,GAAG,IAAIJ,qBAAqB,CAAC,CAAC","ignoreList":[]}

package/lib/commonjs/device-id.js

@@ -0,0 +1,75 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getDeviceId = getDeviceId;
+exports.resetDeviceIdCache = resetDeviceIdCache;
+exports.rotateDeviceId = rotateDeviceId;
+var _storage = require("./storage.js");
+/**
+ * Per-install id sent as `trackingVisitorId`. This is the mobile equivalent of
+ * the web widget's `repzo_vid` cookie: it lets the CRM stitch an anonymous
+ * visitor back together if the session token is ever lost. Stable until
+ * `logout()`, which rotates it.
+ */
+
+let cached = null;
+
+/**
+ * 16 random bytes from `crypto.getRandomValues` when the runtime has it (RN
+ * with a polyfill, newer Hermes); otherwise Math.random, which is fine for a
+ * correlation id but guessable.
+ */
+function randomBytes() {
+  const bytes = new Uint8Array(16);
+  const cryptoApi = globalThis.crypto;
+  if (typeof cryptoApi?.getRandomValues === 'function') {
+    try {
+      cryptoApi.getRandomValues(bytes);
+      return bytes;
+    } catch {
+      // Present but unusable (some polyfills throw) — fall through.
+    }
+  }
+  for (let index = 0; index < bytes.length; index += 1) {
+    bytes[index] = Math.random() * 256 | 0;
+  }
+  return bytes;
+}
+
+/** RFC-4122 v4. */
+function uuidv4() {
+  const bytes = randomBytes();
+  bytes[6] = bytes[6] & 0x0f | 0x40; // version 4
+  bytes[8] = bytes[8] & 0x3f | 0x80; // RFC-4122 variant
+  const hex = Array.from(bytes, byte => byte.toString(16).padStart(2, '0')).join('');
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+async function getDeviceId() {
+  if (cached) return cached;
+  const stored = await _storage.Storage.getItem(_storage.DEVICE_ID_KEY);
+  if (stored) {
+    cached = stored;
+    return stored;
+  }
+  const created = uuidv4();
+  cached = created;
+  await _storage.Storage.setItem(_storage.DEVICE_ID_KEY, created);
+  return created;
+}
+
+/** Only used by tests and `rotateDeviceId()`. */
+function resetDeviceIdCache() {
+  cached = null;
+}
+
+/**
+ * Called by `logout()`: the id stitches anonymous sessions together, so on a
+ * shared device the next visitor must not inherit the previous user's.
+ */
+async function rotateDeviceId() {
+  cached = null;
+  await _storage.Storage.removeItem(_storage.DEVICE_ID_KEY);
+}
+//# sourceMappingURL=device-id.js.map

package/lib/commonjs/device-id.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_storage","require","cached","randomBytes","bytes","Uint8Array","cryptoApi","globalThis","crypto","getRandomValues","index","length","Math","random","uuidv4","hex","Array","from","byte","toString","padStart","join","slice","getDeviceId","stored","Storage","getItem","DEVICE_ID_KEY","created","setItem","resetDeviceIdCache","rotateDeviceId","removeItem"],"sourceRoot":"../../src","sources":["device-id.ts"],"mappings":";;;;;;;;AAOA,IAAAA,QAAA,GAAAC,OAAA;AAPA;AACA;AACA;AACA;AACA;AACA;;AAIA,IAAIC,MAAqB,GAAG,IAAI;;AAEhC;AACA;AACA;AACA;AACA;AACA,SAASC,WAAWA,CAAA,EAAe;EACjC,MAAMC,KAAK,GAAG,IAAIC,UAAU,CAAC,EAAE,CAAC;EAChC,MAAMC,SAAS,GAAIC,UAAU,CAC1BC,MAAM;EACT,IAAI,OAAOF,SAAS,EAAEG,eAAe,KAAK,UAAU,EAAE;IACpD,IAAI;MACFH,SAAS,CAACG,eAAe,CAACL,KAAK,CAAC;MAChC,OAAOA,KAAK;IACd,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;EACA,KAAK,IAAIM,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGN,KAAK,CAACO,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACpDN,KAAK,CAACM,KAAK,CAAC,GAAIE,IAAI,CAACC,MAAM,CAAC,CAAC,GAAG,GAAG,GAAI,CAAC;EAC1C;EACA,OAAOT,KAAK;AACd;;AAEA;AACA,SAASU,MAAMA,CAAA,EAAW;EACxB,MAAMV,KAAK,GAAGD,WAAW,CAAC,CAAC;EAC3BC,KAAK,CAAC,CAAC,CAAC,GAAIA,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,GAAI,IAAI,CAAC,CAAC;EACrCA,KAAK,CAAC,CAAC,CAAC,GAAIA,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,GAAI,IAAI,CAAC,CAAC;EACrC,MAAMW,GAAG,GAAGC,KAAK,CAACC,IAAI,CAACb,KAAK,EAAGc,IAAI,IAAKA,IAAI,CAACC,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAACC,IAAI,CAAC,EAAE,CAAC;EACpF,OAAO,GAAGN,GAAG,CAACO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAIP,GAAG,CAACO,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAIP,GAAG,CAACO,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIP,GAAG,CAACO,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIP,GAAG,CAACO,KAAK,CAAC,EAAE,CAAC,EAAE;AAC5G;AAEO,eAAeC,WAAWA,CAAA,EAAoB;EACnD,IAAIrB,MAAM,EAAE,OAAOA,MAAM;EAEzB,MAAMsB,MAAM,GAAG,MAAMC,gBAAO,CAACC,OAAO,CAACC,sBAAa,CAAC;EACnD,IAAIH,MAAM,EAAE;IACVtB,MAAM,GAAGsB,MAAM;IACf,OAAOA,MAAM;EACf;EAEA,MAAMI,OAAO,GAAGd,MAAM,CAAC,CAAC;EACxBZ,MAAM,GAAG0B,OAAO;EAChB,MAAMH,gBAAO,CAACI,OAAO,CAACF,sBAAa,EAAEC,OAAO,CAAC;EAC7C,OAAOA,OAAO;AAChB;;AAEA;AACO,SAASE,kBAAkBA,CAAA,EAAS;EACzC5B,MAAM,GAAG,IAAI;AACf;;AAEA;AACA;AACA;AACA;AACO,eAAe6B,cAAcA,CAAA,EAAkB;EACpD7B,MAAM,GAAG,IAAI;EACb,MAAMuB,gBAAO,CAACO,UAAU,CAACL,sBAAa,CAAC;AACzC","ignoreList":[]}