@returningai/widget-sdk 1.8.4 → 1.8.6

package/dist/rai-widget.js

@@ -12343,6 +12343,109 @@ function isTokenExpired(expiry) {
   if (!expiry) return true;
   return Date.now() >= expiry - 6e4;
 }
+const RETRY_DELAYS_MS = [5e3, 15e3, 3e4];
+const RETRYABLE_CLIENT_STATUSES = /* @__PURE__ */ new Set([408, 425, 429]);
+function isPermanentAuthFailure(error) {
+  if (!error) return false;
+  const { status } = error;
+  return status >= 400 && status < 500 && !RETRYABLE_CLIENT_STATUSES.has(status);
+}
+function createDefaultEnvironment$1() {
+  const visibilityDocument = typeof document === "undefined" ? void 0 : document;
+  const pageWindow = typeof window === "undefined" ? void 0 : window;
+  return {
+    isHidden: () => (visibilityDocument == null ? void 0 : visibilityDocument.visibilityState) === "hidden",
+    setTimeout: (callback, delayMs) => globalThis.setTimeout(callback, delayMs),
+    clearTimeout: (timerId) => globalThis.clearTimeout(timerId),
+    addVisibilityChangeListener: (listener) => visibilityDocument == null ? void 0 : visibilityDocument.addEventListener("visibilitychange", listener),
+    removeVisibilityChangeListener: (listener) => visibilityDocument == null ? void 0 : visibilityDocument.removeEventListener("visibilitychange", listener),
+    addPageShowListener: (listener) => pageWindow == null ? void 0 : pageWindow.addEventListener("pageshow", listener),
+    removePageShowListener: (listener) => pageWindow == null ? void 0 : pageWindow.removeEventListener("pageshow", listener),
+    addOnlineListener: (listener) => pageWindow == null ? void 0 : pageWindow.addEventListener("online", listener),
+    removeOnlineListener: (listener) => pageWindow == null ? void 0 : pageWindow.removeEventListener("online", listener)
+  };
+}
+function createAuthRenewalRecoveryController(retry, environment = createDefaultEnvironment$1()) {
+  let pending = false;
+  let retryInFlight = false;
+  let rescheduleRequested = false;
+  let retryAttempt = 0;
+  let timerId = null;
+  let listening = false;
+  const clearTimer = () => {
+    if (timerId === null) return;
+    environment.clearTimeout(timerId);
+    timerId = null;
+  };
+  const disarmSignals = () => {
+    if (!listening) return;
+    listening = false;
+    environment.removeVisibilityChangeListener(handleForeground);
+    environment.removePageShowListener(handleForeground);
+    environment.removeOnlineListener(handleOnline);
+  };
+  const reset = () => {
+    pending = false;
+    retryAttempt = 0;
+    rescheduleRequested = false;
+    clearTimer();
+    disarmSignals();
+  };
+  const requestRetry = (resetBudget, allowWhileHidden) => {
+    if (!pending || retryInFlight || !allowWhileHidden && environment.isHidden()) {
+      return;
+    }
+    if (resetBudget) retryAttempt = 0;
+    clearTimer();
+    retryInFlight = true;
+    Promise.resolve().then(retry).catch((error) => {
+      console.error("[rai-widget] Session renewal retry failed:", error);
+    }).finally(() => {
+      retryInFlight = false;
+      if (rescheduleRequested) {
+        rescheduleRequested = false;
+        scheduleRetry();
+      }
+    });
+  };
+  function handleForeground() {
+    if (environment.isHidden()) return;
+    requestRetry(true, false);
+  }
+  function handleOnline() {
+    requestRetry(true, true);
+  }
+  const armSignals = () => {
+    if (listening) return;
+    listening = true;
+    environment.addVisibilityChangeListener(handleForeground);
+    environment.addPageShowListener(handleForeground);
+    environment.addOnlineListener(handleOnline);
+  };
+  const scheduleRetry = () => {
+    if (retryInFlight && !pending) return;
+    pending = true;
+    armSignals();
+    if (retryInFlight) {
+      rescheduleRequested = true;
+      return;
+    }
+    if (timerId !== null || environment.isHidden() || retryAttempt >= RETRY_DELAYS_MS.length) {
+      return;
+    }
+    const delayMs = RETRY_DELAYS_MS[retryAttempt];
+    retryAttempt += 1;
+    timerId = environment.setTimeout(() => {
+      timerId = null;
+      requestRetry(false, false);
+    }, delayMs);
+  };
+  return {
+    schedule: scheduleRetry,
+    succeeded: reset,
+    cancel: reset
+  };
+}
 function setTokens(config, state, data, onRefreshScheduled) {
   state.accessToken = data.accessToken;
   state.refreshToken = data.refreshToken;
@@ -12368,6 +12471,12 @@ function buildIdentityProof(config) {
   }
   return proof;
 }
+function calculateRefreshDelay(accessTokenExpiry, now = Date.now()) {
+  const remainingLifetime = accessTokenExpiry - now;
+  if (remainingLifetime <= 0) return 0;
+  const refreshLeadTime = Math.min(6e4, remainingLifetime / 2);
+  return Math.max(0, Math.floor(remainingLifetime - refreshLeadTime));
+}
 async function authenticateServerless(config, state, onRefreshScheduled) {
   const nonce = crypto.randomUUID();
   const timestamp = Date.now();
@@ -12380,6 +12489,7 @@ async function authenticateServerless(config, state, onRefreshScheduled) {
       );
     }
     let is4xx = false;
+    let responseStatus = 0;
     try {
       const body = {
         nonce,
@@ -12393,6 +12503,7 @@ async function authenticateServerless(config, state, onRefreshScheduled) {
         body: JSON.stringify(body),
         credentials: "include"
       });
+      responseStatus = response.status;
       if (!response.ok) {
         is4xx = response.status >= 400 && response.status < 500;
         const errorBody = await response.json().catch(() => ({ error: "Authentication failed" }));
@@ -12421,7 +12532,7 @@ async function authenticateServerless(config, state, onRefreshScheduled) {
     } catch (err) {
       if (is4xx || attempt === maxRetries) {
         state.lastAuthError ?? (state.lastAuthError = {
-          status: 0,
+          status: responseStatus,
           error: err instanceof Error ? err.message : "Authentication failed"
         });
         state.isAuthenticated = false;
@@ -12435,6 +12546,15 @@ async function authenticateServerless(config, state, onRefreshScheduled) {
 async function authenticateViaProxy(config, state, onRefreshScheduled) {
   const maxRetries = config.maxRetries ?? 3;
   const retryDelay = config.retryDelay ?? 500;
+  const previousAuthentication = {
+    accessToken: state.accessToken,
+    refreshToken: state.refreshToken,
+    tokenFamily: state.tokenFamily,
+    accessTokenExpiry: state.accessTokenExpiry,
+    refreshTokenExpiry: state.refreshTokenExpiry,
+    isAuthenticated: state.isAuthenticated,
+    widgetData: state.widgetData
+  };
   for (let attempt = 0; attempt <= maxRetries; attempt++) {
     if (attempt > 0) {
       await new Promise(
@@ -12476,7 +12596,13 @@ async function authenticateViaProxy(config, state, onRefreshScheduled) {
           status,
           error: err instanceof Error ? err.message : "Authentication failed"
         };
-        state.isAuthenticated = false;
+        if (isPermanentAuthFailure(state.lastAuthError)) {
+          const permanentError = state.lastAuthError;
+          clearAuthenticationData(state);
+          state.lastAuthError = permanentError;
+        } else {
+          Object.assign(state, previousAuthentication);
+        }
         return false;
       }
     }
@@ -12488,10 +12614,16 @@ async function refreshAccessToken(config, state, onRefreshScheduled, sendToken)
   if (state.isRefreshing) {
     return state.refreshPromise;
   }
-  if (!state.refreshToken) {
-    return false;
-  }
   const presentedRefreshToken = state.refreshToken;
+  const previousAuthentication = {
+    accessToken: state.accessToken,
+    refreshToken: state.refreshToken,
+    tokenFamily: state.tokenFamily,
+    accessTokenExpiry: state.accessTokenExpiry,
+    refreshTokenExpiry: state.refreshTokenExpiry,
+    isAuthenticated: state.isAuthenticated,
+    widgetData: state.widgetData
+  };
   state.isRefreshing = true;
   state.refreshPromise = (async () => {
     const reauthenticateAfterRefreshFailure = async () => {
@@ -12500,13 +12632,22 @@ async function refreshAccessToken(config, state, onRefreshScheduled, sendToken)
         if (sendToken) sendToken();
         return true;
       }
-      clearAuthenticationData(state);
-      clearStorage(config);
       const authed = await authenticateServerless(config, state, onRefreshScheduled);
       if (authed && sendToken) sendToken();
+      if (!authed && isPermanentAuthFailure(state.lastAuthError)) {
+        const permanentError = state.lastAuthError;
+        clearAuthenticationData(state);
+        state.lastAuthError = permanentError;
+        clearStorage(config);
+      } else if (!authed) {
+        Object.assign(state, previousAuthentication);
+      }
       return authed;
     };
     try {
+      if (!presentedRefreshToken) {
+        return reauthenticateAfterRefreshFailure();
+      }
       const response = await fetch(`${config.apiUrl}/${config.widgetId}/auth/refresh`, {
         method: "POST",
         headers: {
@@ -12737,11 +12878,12 @@ function captureSnapshot(state) {
     widgetData: state.widgetData
   };
 }
-function applySnapshot(subscriber, snapshot) {
+function applySnapshot(subscriber, snapshot, notify = true) {
   var _a;
   Object.assign(subscriber.state, snapshot);
   if (snapshot.refreshToken) saveToStorage(subscriber.config, subscriber.state);
   else clearStorage(subscriber.config);
+  if (!notify) return;
   try {
     (_a = subscriber.onSnapshot) == null ? void 0 : _a.call(subscriber);
   } catch (error) {
@@ -12786,7 +12928,7 @@ function subscribeAuthSession(config, state, onSnapshot) {
         return Promise.resolve(true);
       }
       if (session.inFlight) return session.inFlight;
-      if (session.snapshot) applySnapshot(subscriber, session.snapshot);
+      if (session.snapshot) applySnapshot(subscriber, session.snapshot, false);
       const startingGeneration = session.generation;
       const inFlight = (async () => {
         const succeeded = await execute();
@@ -12823,6 +12965,31 @@ function subscribeAuthSession(config, state, onSnapshot) {
   };
 }
 const BUNDLE_READY_TIMEOUT_MS = 3e4;
+class BundleReadinessTimeoutError extends Error {
+  constructor(phase, message) {
+    super(message);
+    __publicField(this, "phase");
+    this.name = "BundleReadinessTimeoutError";
+    this.phase = phase;
+  }
+}
+function isBundleReadinessTimeoutError(error) {
+  return error instanceof BundleReadinessTimeoutError;
+}
+function createDefaultEnvironment() {
+  const visibilityDocument = typeof document === "undefined" ? void 0 : document;
+  const pageWindow = typeof window === "undefined" ? void 0 : window;
+  return {
+    isHidden: () => (visibilityDocument == null ? void 0 : visibilityDocument.visibilityState) === "hidden",
+    now: () => Date.now(),
+    setTimeout: (callback, delayMs) => globalThis.setTimeout(callback, delayMs),
+    clearTimeout: (timerId) => globalThis.clearTimeout(timerId),
+    addVisibilityChangeListener: (listener) => visibilityDocument == null ? void 0 : visibilityDocument.addEventListener("visibilitychange", listener),
+    removeVisibilityChangeListener: (listener) => visibilityDocument == null ? void 0 : visibilityDocument.removeEventListener("visibilitychange", listener),
+    addPageShowListener: (listener) => pageWindow == null ? void 0 : pageWindow.addEventListener("pageshow", listener),
+    removePageShowListener: (listener) => pageWindow == null ? void 0 : pageWindow.removeEventListener("pageshow", listener)
+  };
+}
 function isPromiseLike(value) {
   return (typeof value === "object" || typeof value === "function") && value !== null && typeof value.then === "function";
 }
@@ -12832,28 +12999,101 @@ function isReadyHandle(value) {
   }
   return isPromiseLike(value.ready);
 }
-function waitWithTimeout(promise, timeoutMs, timeoutMessage) {
+function waitWithActiveTimeTimeout(promise, timeoutMs, timeoutError, environment) {
   return new Promise((resolve, reject) => {
-    const timeoutId = setTimeout(() => {
-      reject(new Error(timeoutMessage));
-    }, timeoutMs);
+    let settled = false;
+    let remainingMs = Math.max(0, timeoutMs);
+    let visibleStartedAt = null;
+    let timeoutId = null;
+    const clearActiveTimer = () => {
+      if (timeoutId !== null) {
+        environment.clearTimeout(timeoutId);
+        timeoutId = null;
+      }
+    };
+    const cleanup = () => {
+      clearActiveTimer();
+      environment.removeVisibilityChangeListener(handleVisibilityChange);
+    };
+    const finish = (callback) => {
+      if (settled) return;
+      settled = true;
+      cleanup();
+      callback();
+    };
+    const pauseDeadline = () => {
+      clearActiveTimer();
+      if (visibleStartedAt === null) return;
+      remainingMs = Math.max(
+        0,
+        remainingMs - Math.max(0, environment.now() - visibleStartedAt)
+      );
+      visibleStartedAt = null;
+    };
+    const startDeadline = () => {
+      if (settled || environment.isHidden() || timeoutId !== null) return;
+      if (remainingMs <= 0) {
+        finish(() => reject(timeoutError()));
+        return;
+      }
+      visibleStartedAt = environment.now();
+      timeoutId = environment.setTimeout(() => {
+        timeoutId = null;
+        if (environment.isHidden()) {
+          visibleStartedAt = null;
+          return;
+        }
+        visibleStartedAt = null;
+        finish(() => reject(timeoutError()));
+      }, remainingMs);
+    };
+    function handleVisibilityChange() {
+      if (environment.isHidden()) {
+        pauseDeadline();
+      } else {
+        startDeadline();
+      }
+    }
+    environment.addVisibilityChangeListener(handleVisibilityChange);
+    startDeadline();
     Promise.resolve(promise).then(
       (value) => {
-        clearTimeout(timeoutId);
-        resolve(value);
+        finish(() => resolve(value));
       },
       (error) => {
-        clearTimeout(timeoutId);
-        reject(error);
+        finish(() => reject(error));
       }
     );
   });
 }
-function resolveBundleMountResult(mountResult, timeoutMs = BUNDLE_READY_TIMEOUT_MS) {
-  return isPromiseLike(mountResult) ? waitWithTimeout(
+function scheduleForegroundRecovery(recover, environment = createDefaultEnvironment()) {
+  if (!environment.isHidden()) return () => {
+  };
+  let active = true;
+  const cleanup = () => {
+    if (!active) return;
+    active = false;
+    environment.removeVisibilityChangeListener(handleForeground);
+    environment.removePageShowListener(handleForeground);
+  };
+  const handleForeground = () => {
+    if (!active || environment.isHidden()) return;
+    cleanup();
+    recover();
+  };
+  environment.addVisibilityChangeListener(handleForeground);
+  environment.addPageShowListener(handleForeground);
+  return cleanup;
+}
+function resolveBundleMountResult(mountResult, timeoutMs = BUNDLE_READY_TIMEOUT_MS, environment = createDefaultEnvironment()) {
+  return isPromiseLike(mountResult) ? waitWithActiveTimeTimeout(
     mountResult,
     timeoutMs,
-    `Widget bundle mount did not resolve within ${timeoutMs}ms`
+    () => new BundleReadinessTimeoutError(
+      "mount",
+      `Widget bundle mount did not resolve within ${timeoutMs}ms`
+    ),
+    environment
   ) : Promise.resolve(mountResult);
 }
 function createBundleMountCleanup(mountResult) {
@@ -12869,19 +13109,24 @@ function createBundleMountCleanup(mountResult) {
     unmount.call(mountResult);
   };
 }
-async function waitForBundleMountReadiness(mountResult, firstPaint, timeoutMs = BUNDLE_READY_TIMEOUT_MS) {
+async function waitForBundleMountReadiness(mountResult, firstPaint, timeoutMs = BUNDLE_READY_TIMEOUT_MS, environment = createDefaultEnvironment()) {
   const resolvedMountResult = await resolveBundleMountResult(
     mountResult,
-    timeoutMs
+    timeoutMs,
+    environment
   );
   if (!isReadyHandle(resolvedMountResult)) {
     await firstPaint;
     return "first-paint";
   }
-  await waitWithTimeout(
+  await waitWithActiveTimeTimeout(
     resolvedMountResult.ready,
     timeoutMs,
-    `Widget bundle did not report deep readiness within ${timeoutMs}ms`
+    () => new BundleReadinessTimeoutError(
+      "deep-ready",
+      `Widget bundle did not report deep readiness within ${timeoutMs}ms`
+    ),
+    environment
   );
   return "deep-ready";
 }
@@ -13610,6 +13855,45 @@ function ensureWidgetPreconnects(origins, targetDocument) {
     documentTarget.head.appendChild(link);
   }
 }
+const USER_LOOKUP_ERRORS = /* @__PURE__ */ new Set([
+  "User not found",
+  "Missing required user identifier fields",
+  "Missing user identifier fields"
+]);
+function selectWidgetErrorPresentation({
+  failureKind,
+  customMessage,
+  lastAuthError
+}) {
+  if (failureKind === "bundle") {
+    const message = "Widget failed to load. Please try again.";
+    return {
+      useCustomMessage: false,
+      displayMessage: message,
+      emittedMessage: message
+    };
+  }
+  const useCustomMessage = Boolean(
+    customMessage && (lastAuthError === null || (lastAuthError.error ? USER_LOOKUP_ERRORS.has(lastAuthError.error) : false))
+  );
+  if (useCustomMessage) {
+    return {
+      useCustomMessage: true,
+      displayMessage: customMessage,
+      emittedMessage: customMessage,
+      hint: lastAuthError == null ? void 0 : lastAuthError.hint,
+      status: lastAuthError == null ? void 0 : lastAuthError.status
+    };
+  }
+  const emittedMessage = (lastAuthError == null ? void 0 : lastAuthError.error) || "Authentication failed";
+  return {
+    useCustomMessage: false,
+    displayMessage: (lastAuthError == null ? void 0 : lastAuthError.hint) ? `${emittedMessage}: ${lastAuthError.hint}` : (lastAuthError == null ? void 0 : lastAuthError.error) ? emittedMessage : "Authentication failed. Please try again later.",
+    emittedMessage,
+    hint: lastAuthError == null ? void 0 : lastAuthError.hint,
+    status: lastAuthError == null ? void 0 : lastAuthError.status
+  };
+}
 const widgetCSS = ':host{display:block;position:relative;width:100%;height:100%}.rai-loader{position:absolute;top:0;left:0;display:flex;flex-direction:column;align-items:center;justify-content:center;gap:.75rem;width:100%;height:100%;background:var(--rai-loading-background, var(--background-5, var(--rai-loader-bg, #ffffff)));border-radius:8px;z-index:10;transition:opacity .3s ease-out;font-family:var(--rai-loader-font, "Roboto", system-ui, -apple-system, sans-serif)}.rai-loader.fade-out{opacity:0;pointer-events:none}.rai-loader-pending-settings{visibility:hidden}.rai-loader-text{margin:.5rem 0 0;font-family:var(--rai-loading-text-font, var(--rai-loader-font, "Roboto", system-ui, -apple-system, sans-serif));font-size:var(--rai-loading-text-size, 1.125rem);line-height:1.75rem;font-weight:var(--rai-loading-text-weight, 400);font-style:var(--rai-loading-text-style, normal);text-decoration:var(--rai-loading-text-decoration, none);letter-spacing:normal;color:var(--rai-loading-text-color, var(--accent-1, var(--rai-accent, #000000)));text-align:center}@media (min-width: 768px){.rai-loader-text{font-size:var(--rai-loading-text-size, 1.5rem);line-height:2rem}}.rai-error{display:none;position:absolute;top:0;left:0;width:100%;height:100%;align-items:center;justify-content:center;flex-direction:column;gap:12px;background:var(--rai-error-bg, #1a1a1a);border-radius:8px;padding:24px;box-sizing:border-box;text-align:center;color:var(--rai-error-text, #9ca3af);font-family:system-ui,-apple-system,sans-serif;z-index:10}.rai-error.visible{display:flex}iframe{display:block;border:none;opacity:0;transition:opacity .3s ease-in}iframe.loaded{opacity:1}.rai-lottie-loader{width:100px;height:100px}.rai-lottie-loader svg{width:100%!important;height:100%!important}.rai-lottie-spinner{width:32px;height:32px;margin:34px auto;border:3px solid var(--rai-text4, #6b7280);border-top-color:var(--rai-accent, #000000);border-radius:50%;animation:rai-spin .7s linear infinite}@keyframes rai-spin{to{transform:rotate(360deg)}}.rai-sdk-loader{position:relative;width:75px;height:100px}.rai-sdk-loader__bar{position:absolute;bottom:0;width:10px;height:50%;background:var(--rai-accent, #000000);transform-origin:center bottom;box-shadow:1px 1px #0003}.rai-sdk-loader__bar:nth-child(1){left:0;transform:scaleY(.2);animation:rai-sdk-barUp1 4s infinite}.rai-sdk-loader__bar:nth-child(2){left:15px;transform:scaleY(.4);animation:rai-sdk-barUp2 4s infinite}.rai-sdk-loader__bar:nth-child(3){left:30px;transform:scaleY(.6);animation:rai-sdk-barUp3 4s infinite}.rai-sdk-loader__bar:nth-child(4){left:45px;transform:scaleY(.8);animation:rai-sdk-barUp4 4s infinite}.rai-sdk-loader__bar:nth-child(5){left:60px;transform:scale(1);animation:rai-sdk-barUp5 4s infinite}.rai-sdk-loader__ball{position:absolute;bottom:10px;left:0;width:10px;height:10px;background:var(--rai-accent, #000000);border-radius:50%;animation:rai-sdk-ball 4s infinite}@keyframes rai-sdk-ball{0%{transform:translate(0)}5%{transform:translate(8px,-14px)}10%{transform:translate(15px,-10px)}17%{transform:translate(23px,-24px)}20%{transform:translate(30px,-20px)}27%{transform:translate(38px,-34px)}30%{transform:translate(45px,-30px)}37%{transform:translate(53px,-44px)}40%{transform:translate(60px,-40px)}50%{transform:translate(60px)}57%{transform:translate(53px,-14px)}60%{transform:translate(45px,-10px)}67%{transform:translate(37px,-24px)}70%{transform:translate(30px,-20px)}77%{transform:translate(22px,-34px)}80%{transform:translate(15px,-30px)}87%{transform:translate(7px,-44px)}90%{transform:translateY(-40px)}to{transform:translate(0)}}@keyframes rai-sdk-barUp1{0%{transform:scaleY(.2)}40%{transform:scaleY(.2)}50%{transform:scale(1)}90%{transform:scale(1)}to{transform:scaleY(.2)}}@keyframes rai-sdk-barUp2{0%{transform:scaleY(.4)}40%{transform:scaleY(.4)}50%{transform:scaleY(.8)}90%{transform:scaleY(.8)}to{transform:scaleY(.4)}}@keyframes rai-sdk-barUp3{0%{transform:scaleY(.6)}to{transform:scaleY(.6)}}@keyframes rai-sdk-barUp4{0%{transform:scaleY(.8)}40%{transform:scaleY(.8)}50%{transform:scaleY(.4)}90%{transform:scaleY(.4)}to{transform:scaleY(.8)}}@keyframes rai-sdk-barUp5{0%{transform:scale(1)}40%{transform:scale(1)}50%{transform:scaleY(.2)}90%{transform:scaleY(.2)}to{transform:scale(1)}}#loading-square{width:75px;aspect-ratio:1;display:flex;color:var(--rai-accent, #000000);background:linear-gradient(currentColor 0 0) right / 51% 100%,linear-gradient(currentColor 0 0) bottom / 100% 51%;background-repeat:no-repeat;animation:l16-0 2s infinite linear .25s}#loading-square>div{width:50%;height:50%;background:currentColor;animation:l16-1 .5s infinite linear}@keyframes l16-0{0%,12.49%{transform:rotate(0)}12.5%,37.49%{transform:rotate(90deg)}37.5%,62.49%{transform:rotate(180deg)}62.5%,87.49%{transform:rotate(270deg)}87.5%,to{transform:rotate(360deg)}}@keyframes l16-1{0%{transform:perspective(80px) rotate3d(-1,-1,0,0)}80%,to{transform:perspective(80px) rotate3d(-1,-1,0,-180deg)}}#loading-circle{width:75px;aspect-ratio:1;display:grid;grid:50%/50%;color:var(--rai-accent, #000000);border-radius:50%;--_g: no-repeat linear-gradient(currentColor 0 0);background:var(--_g),var(--_g),var(--_g);background-size:50.1% 50.1%;animation:l9-0 1.5s infinite steps(1) alternate,l9-0-0 3s infinite steps(1) alternate}#loading-circle>div{background:var(--rai-text4, #6b7280);border-top-left-radius:100px;transform:perspective(150px) rotateY(0) rotateX(0);transform-origin:bottom right;animation:l9-1 1.5s infinite linear alternate}@keyframes l9-0{0%{background-position:0 100%,100% 100%,100% 0}33%{background-position:100% 100%,100% 100%,100% 0}66%{background-position:100% 0,100% 0,100% 0}}@keyframes l9-0-0{0%{transform:scaleX(1) rotate(0)}50%{transform:scaleX(-1) rotate(-90deg)}}@keyframes l9-1{16.5%{transform:perspective(150px) rotateX(-90deg) rotateY(0) rotateX(0);filter:grayscale(.8)}33%{transform:perspective(150px) rotateX(-180deg) rotateY(0) rotateX(0)}66%{transform:perspective(150px) rotateX(-180deg) rotateY(-180deg) rotateX(0)}to{transform:perspective(150px) rotateX(-180deg) rotateY(-180deg) rotateX(-180deg);filter:grayscale(.8)}}.rai-custom-error{position:absolute;top:0;left:0;width:100%;height:100%;z-index:10}.tiptap strong.tw-font-bold,.tiptap b.tw-font-bold{font-weight:700}.tiptap em.tw-font-italic,.tiptap i.tw-font-italic{font-style:italic}.tiptap a.tiptap-rich-text-link{color:#3b82f6;text-decoration:underline;position:relative;display:inline-block;width:fit-content}.tiptap a.tiptap-rich-text-link:hover{color:#3b82f6cc;text-decoration:none}.tiptap a.tiptap-rich-text-link:not([title=""]):before{content:attr(title);position:absolute;top:-2rem;left:50%;transform:translate(-50%);white-space:nowrap;border-radius:.25rem;background-color:#000;padding:.25rem .5rem;color:#fff;opacity:0;transition:opacity .2s;pointer-events:none}.tiptap a.tiptap-rich-text-link:not([title=""]):hover:before{opacity:1}.tiptap p[style*="text-align: left"]{text-align:left}.tiptap p[style*="text-align: center"]{text-align:center}.tiptap p[style*="text-align: right"]{text-align:right}.tiptap p[style*="text-align: justify"]{text-align:justify}.tiptap u{text-decoration:underline}.tiptap.ProseMirror{background-color:transparent;height:fit-content!important;word-wrap:break-word;white-space:pre-wrap;white-space:break-spaces;-webkit-font-variant-ligatures:none;font-variant-ligatures:none;font-feature-settings:"liga" 0;padding:0;width:100%;overflow-y:auto}.tiptap{line-height:1.6;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,sans-serif}.tiptap p{margin:.5em 0}.tiptap p:first-child{margin-top:0}.tiptap p:last-child{margin-bottom:0}.tiptap img{max-width:100%;height:auto;display:block}.tiptap p[style*="text-align: left"] img{margin-left:0;margin-right:auto}.tiptap p[style*="text-align: center"] img{margin-left:auto;margin-right:auto}.tiptap p[style*="text-align: right"] img{margin-left:auto;margin-right:0}.rai-retry-btn{padding:8px 20px;border:none;border-radius:6px;background:var(--rai-accent, #000000);color:var(--rai-error-bg, #ffffff);font-size:14px;font-family:system-ui,-apple-system,sans-serif;cursor:pointer}.rai-retry-btn:hover{opacity:.85}';
 const DEFINED_ATTRS = /* @__PURE__ */ new Set([
   "community-id",
@@ -14007,8 +14291,13 @@ class BaseWidget extends HTMLElement {
     __publicField(this, "bannerNode", null);
     __publicField(this, "releaseAutoThemeDisableLease");
     __publicField(this, "bundleUnmount");
+    __publicField(this, "cancelBundleForegroundRecovery");
     __publicField(this, "authSession");
+    __publicField(this, "authRenewalRecovery");
     this.shadow = this.attachShadow({ mode: "closed" });
+    this.authRenewalRecovery = createAuthRenewalRecoveryController(
+      () => this.performScheduledRefresh()
+    );
   }
   static get observedAttributes() {
     return [
@@ -14062,15 +14351,18 @@ class BaseWidget extends HTMLElement {
     }
   }
   disconnectedCallback() {
-    var _a, _b, _c, _d;
+    var _a, _b, _c, _d, _e;
     (_a = this.intersectionObserver) == null ? void 0 : _a.disconnect();
     (_b = this.themeObserver) == null ? void 0 : _b.disconnect();
     (_c = this.identityAttributeObserver) == null ? void 0 : _c.disconnect();
+    (_d = this.cancelBundleForegroundRecovery) == null ? void 0 : _d.call(this);
+    this.cancelBundleForegroundRecovery = void 0;
+    this.authRenewalRecovery.cancel();
     this.teardownMountedWidget();
     this.clearLottieInstances();
     this.restoreLoaderHeight();
     this.removeBanner();
-    (_d = this.authSession) == null ? void 0 : _d.release();
+    (_e = this.authSession) == null ? void 0 : _e.release();
     this.authSession = void 0;
     clearState(this.state);
   }
@@ -14498,25 +14790,24 @@ class BaseWidget extends HTMLElement {
       if (container.children.length > 0) finish();
     });
   }
-  showError() {
+  showError(failureKind = "authentication") {
     this.hideLoader();
     const settings = this.state.errorSettings;
-    const lastAuthError = this.state.lastAuthError;
-    const isUserLookupError = (lastAuthError == null ? void 0 : lastAuthError.error) === "User not found" || (lastAuthError == null ? void 0 : lastAuthError.error) === "Missing required user identifier fields" || (lastAuthError == null ? void 0 : lastAuthError.error) === "Missing user identifier fields";
-    const shouldUseCustomMessage = !!(settings == null ? void 0 : settings.errorMessage) && (isUserLookupError || !lastAuthError);
-    if (shouldUseCustomMessage) {
+    const presentation = selectWidgetErrorPresentation({
+      failureKind,
+      customMessage: settings == null ? void 0 : settings.errorMessage,
+      lastAuthError: this.state.lastAuthError
+    });
+    if (presentation.useCustomMessage) {
       this.renderCustomError(settings);
     } else if (this.errorEl) {
-      if ((lastAuthError == null ? void 0 : lastAuthError.error) && this.msgEl) {
-        this.msgEl.textContent = lastAuthError.hint ? `${lastAuthError.error}: ${lastAuthError.hint}` : lastAuthError.error;
-      }
+      if (this.msgEl) this.msgEl.textContent = presentation.displayMessage;
       this.errorEl.classList.add("visible");
     }
-    const emittedMessage = shouldUseCustomMessage ? settings.errorMessage : (lastAuthError == null ? void 0 : lastAuthError.error) || "Authentication failed";
     this.emit("rai-error", {
-      message: emittedMessage,
-      hint: lastAuthError == null ? void 0 : lastAuthError.hint,
-      status: lastAuthError == null ? void 0 : lastAuthError.status
+      message: presentation.emittedMessage,
+      hint: presentation.hint,
+      status: presentation.status
     });
   }
   renderCustomError(settings) {
@@ -14672,7 +14963,10 @@ class BaseWidget extends HTMLElement {
   }
   // ── Initialization ─────────────────────────────────────────────────────
   async init() {
-    var _a;
+    var _a, _b;
+    (_a = this.cancelBundleForegroundRecovery) == null ? void 0 : _a.call(this);
+    this.cancelBundleForegroundRecovery = void 0;
+    this.authRenewalRecovery.cancel();
     const initId = ++this.initGeneration;
     this.hasAttemptedInit = true;
     if (!this.config.communityId) {
@@ -14681,6 +14975,9 @@ class BaseWidget extends HTMLElement {
     }
     if (!this.config.authUrl && !this.authSession) {
       this.authSession = subscribeAuthSession(this.config, this.state, () => {
+        if (this.state.isAuthenticated && !this.state.lastAuthError) {
+          this.authRenewalRecovery.succeeded();
+        }
         if (this.config.autoRefresh) this.scheduleRefresh();
         if (this.state.iframe) {
           sendTokenToWidget(this.config, this.state, this.state.iframe);
@@ -14772,7 +15069,7 @@ class BaseWidget extends HTMLElement {
         launchWidget();
         return;
       }
-      (_a = this.authSession) == null ? void 0 : _a.publish();
+      (_b = this.authSession) == null ? void 0 : _b.publish();
       const refreshed = await finishStartup(
         this.authSession ? this.authSession.run(
           "refresh",
@@ -14896,7 +15193,7 @@ class BaseWidget extends HTMLElement {
     return { bundleApiUrl, colorMode };
   }
   async mountWidget(initId) {
-    var _a;
+    var _a, _b;
     let container = null;
     let cleanupBundleMount;
     try {
@@ -15017,45 +15314,68 @@ class BaseWidget extends HTMLElement {
       container == null ? void 0 : container.remove();
       (_a = this.releaseAutoThemeDisableLease) == null ? void 0 : _a.call(this);
       this.releaseAutoThemeDisableLease = void 0;
-      this.showError();
+      if (isBundleReadinessTimeoutError(err) && document.visibilityState === "hidden") {
+        (_b = this.cancelBundleForegroundRecovery) == null ? void 0 : _b.call(this);
+        let scheduledRecovery;
+        scheduledRecovery = scheduleForegroundRecovery(() => {
+          if (this.cancelBundleForegroundRecovery === scheduledRecovery) {
+            this.cancelBundleForegroundRecovery = void 0;
+          }
+          if (this.isConnected) void this.init();
+        });
+        this.cancelBundleForegroundRecovery = scheduledRecovery;
+        return;
+      }
+      this.showError("bundle");
     }
   }
   // ── Token scheduling ──────────────────────────────────────────────────
   scheduleRefresh() {
     if (this.state.refreshTimer) clearTimeout(this.state.refreshTimer);
     if (!this.state.accessTokenExpiry) return;
-    const delay = this.state.accessTokenExpiry - Date.now() - 6e4;
+    const delay = calculateRefreshDelay(this.state.accessTokenExpiry);
+    if (delay > 0) {
+      this.state.refreshTimer = setTimeout(
+        () => void this.performScheduledRefresh(),
+        delay
+      );
+    } else {
+      void this.performScheduledRefresh();
+    }
+  }
+  async performScheduledRefresh() {
+    this.state.refreshTimer = null;
     const pushToken = () => {
       if (this.state.iframe)
         sendTokenToWidget(this.config, this.state, this.state.iframe);
       syncBundleAccessToken(this.config, this.state);
     };
-    const doRefresh = async () => {
-      if (this.config.authUrl) {
-        const ok = await authenticateViaProxy(
-          this.config,
-          this.state,
-          () => this.scheduleRefresh()
-        );
-        if (ok) pushToken();
-        else this.handleSessionExpired();
-      } else {
-        const ok = this.authSession ? await this.authSession.run(
-          "refresh",
-          () => refreshAccessToken(this.config, this.state)
-        ) : await refreshAccessToken(
-          this.config,
-          this.state,
-          () => this.scheduleRefresh(),
-          pushToken
-        );
-        if (!ok) this.handleSessionExpired();
-      }
-    };
-    if (delay > 0) {
-      this.state.refreshTimer = setTimeout(doRefresh, delay);
+    let ok;
+    if (this.config.authUrl) {
+      ok = await authenticateViaProxy(
+        this.config,
+        this.state,
+        () => this.scheduleRefresh()
+      );
+      if (ok) pushToken();
     } else {
-      doRefresh();
+      ok = this.authSession ? await this.authSession.run(
+        "refresh",
+        () => refreshAccessToken(this.config, this.state)
+      ) : await refreshAccessToken(
+        this.config,
+        this.state,
+        () => this.scheduleRefresh(),
+        pushToken
+      );
+    }
+    if (ok) {
+      this.authRenewalRecovery.succeeded();
+    } else if (isPermanentAuthFailure(this.state.lastAuthError)) {
+      this.authRenewalRecovery.cancel();
+      this.handleSessionExpired();
+    } else {
+      this.authRenewalRecovery.schedule();
     }
   }
   schedulePeriodicSync(iframe) {
@@ -15066,18 +15386,13 @@ class BaseWidget extends HTMLElement {
     }, 12e4);
   }
   /**
-   * A background refresh exhausted every recovery path — /auth/refresh failed
-   * and the re-auth that follows it failed too, so `state.isAuthenticated` is
-   * now false and there is no live token.
-   *
-   * Every startup auth path already calls showError() on failure; this one is
-   * reached from a timer, so without it the widget stays mounted showing stale
-   * content while isAuthenticated() reports false to the host page — which is
-   * how a signed-in user ends up looking at content meant for signed-out users.
-   * The event gives hosts a signal to re-mint credentials instead of polling.
+   * A background refresh reached a confirmed permanent authentication failure
+   * after exhausting its safe recovery paths. Transient transport, throttling,
+   * and server failures are retained by authRenewalRecovery instead.
    */
   handleSessionExpired() {
     var _a;
+    this.authRenewalRecovery.cancel();
     if (this.state.refreshTimer) {
       clearTimeout(this.state.refreshTimer);
       this.state.refreshTimer = null;
@@ -15097,6 +15412,7 @@ class BaseWidget extends HTMLElement {
   // ── Logout helper ─────────────────────────────────────────────────────
   async logoutAndClear() {
     var _a;
+    this.authRenewalRecovery.cancel();
     await logout(this.config, this.state);
     (_a = this.authSession) == null ? void 0 : _a.clear();
     this.teardownMountedWidget();
@@ -15106,6 +15422,7 @@ class BaseWidget extends HTMLElement {
   // ── Public API ────────────────────────────────────────────────────────
   async reload() {
     var _a, _b;
+    this.authRenewalRecovery.cancel();
     const previousConfig = this.config;
     (_a = this.authSession) == null ? void 0 : _a.release();
     this.authSession = void 0;
@@ -15253,7 +15570,7 @@ class CustomWidget extends BaseWidget {
     }
   }
 }
-console.log(`[rai-widget] v${"1.8.4"}`);
+console.log(`[rai-widget] v${"1.8.6"}`);
 class StoreWidgetCompat extends StoreWidget {
 }
 const WIDGET_REGISTRY = [
@@ -15317,7 +15634,7 @@ function exposePublicApi() {
   })();
   const widget = container == null ? void 0 : container.querySelector(ALL_WIDGET_SELECTOR);
   window.ReturningAIWidget = {
-    version: "1.8.4",
+    version: "1.8.6",
     reload: () => (widget == null ? void 0 : widget.reload()) ?? Promise.resolve(),
     logout: () => (widget == null ? void 0 : widget.logoutPublic()) ?? Promise.resolve(),
     isAuthenticated: () => (widget == null ? void 0 : widget.isAuthenticated()) ?? false,