@smess/networking 2.0.0 → 2.1.0

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to `@smess/networking`. Versions follow [semver](https://semver.org).
 
+## 2.1.0 (2026-11-07)
+
+### Added
+
+- `@smess/networking/messenger`: `send` (website contact forms and leads, `POST /v1/messenger/send`), `get`
+  and `trackWebsiteEvent` (`POST /v1/messenger/website_events`). Anonymous; the tenant goes in the body's
+  `client_id` (defaults to the client's `clientId`), so one build can serve domains whose CORS origins are
+  bound to different tenants.
+- `messenger` host key in `PRODUCTION_HOSTS` (`api.smess.vn`).
+
 ## 2.0.0 (2026-11-07)
 
 A rewrite: one typed client for core-services, built on `fetch`. Not compatible with 1.x.

package/README.md

@@ -6,7 +6,8 @@ React Native.
 
 - Built on `fetch`, no runtime dependencies, ESM, typed.
 - One client per app: it knows core's hosts, the tenant header, the session and its refresh.
-- One module per core-services Microservice: `authentication`, `sso`, `campaign`, `smeup-file`, `danara`.
+- One module per core-services Microservice: `authentication`, `sso`, `campaign`, `smeup-file`, `danara`,
+  `messenger`.
 - One error type, `SmessApiError`, for every error format core emits.
 
 Layers and the backend facts behind them: [docs/architecture.md](docs/architecture.md).
@@ -38,6 +39,20 @@ await auth.otp.verify({ identifier: email, code }); // saves the session
 const templates = await campaign(smess).email.templates.list(); // ApiList<Template>
 ```
 
+### Public website form (smess.vn)
+
+```ts
+import { createSmessClient, PRODUCTION_HOSTS } from '@smess/networking';
+import { messenger } from '@smess/networking/messenger';
+
+const forms = messenger(createSmessClient({ hosts: PRODUCTION_HOSTS }));
+await forms.send({
+  client_id: TENANT_ID, // the tenant that owns the site's leads
+  type: 'contact_form', // never lead_capture on a contact form: that starts a Rebuild job
+  from_name, from_email, subject, message,
+});
+```
+
 ### Tenant-scoped app, Next.js server component (Danara)
 
 ```ts
@@ -120,6 +135,7 @@ never sends one. smeup.email sends none (the tenant comes from the JWT); Danara
 | `@smess/networking/campaign` | Campaign (email) | `campaignApi` | the whole smeup.email API: sender, templates, campaigns, audiences, domains, addresses, short links, segments, automations, A/B tests, developers, SSO settings |
 | `@smess/networking/smeup-file` | SMEUpFile | `smeupFile` | base64 upload |
 | `@smess/networking/danara` | Danara | `danara` | identity, listings, sales, fit-out, leasing, owner portal, transit |
+| `@smess/networking/messenger` | Messenger | `messenger` | website contact forms and leads (`send`), visitor events (`trackWebsiteEvent`) |
 | `@smess/networking/rx` | – | – | `fromSmess(signal => call)` → cancellable Observable (peer dep `rxjs`) |
 
 Each module also exports its endpoint table (`campaignEmailEndpoints`, `danaraEndpoints`, …) and its

package/dist/core/hosts.d.ts

@@ -10,6 +10,8 @@ export declare const PRODUCTION_HOSTS: {
     readonly campaignApi: "https://api.smess.vn";
     /** `app.smeup_file_host`: file uploads (`/v1/smeup-files/*`). */
     readonly smeupFile: "https://api.smess.vn";
+    /** `app.messenger_host`: public website forms and visitor events (`/v1/messenger/*`). */
+    readonly messenger: "https://api.smess.vn";
     /** `app.sso_host`: company single sign-on (`/v1/sso/*`). */
     readonly sso: "https://sso.smess.vn";
     /** `app.danara_host`: the Danara rentals API. */

package/dist/core/hosts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosts.d.ts","sourceRoot":"","sources":["../../src/core/hosts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;IAC3B,sEAAsE;;IAEtE,iFAAiF;;IAEjF,iEAAiE;;IAEjE,4DAA4D;;IAE5D,iDAAiD;;IAEjD,+CAA+C;;IAE/C,sEAAsE;;CAE9D,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAEvD,qHAAqH;AACrH,MAAM,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"hosts.d.ts","sourceRoot":"","sources":["../../src/core/hosts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;IAC3B,sEAAsE;;IAEtE,iFAAiF;;IAEjF,iEAAiE;;IAEjE,yFAAyF;;IAEzF,4DAA4D;;IAE5D,iDAAiD;;IAEjD,+CAA+C;;IAE/C,sEAAsE;;CAE9D,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAEvD,qHAAqH;AACrH,MAAM,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC"}

package/dist/core/hosts.js

@@ -10,6 +10,8 @@ export const PRODUCTION_HOSTS = {
     campaignApi: 'https://api.smess.vn',
     /** `app.smeup_file_host`: file uploads (`/v1/smeup-files/*`). */
     smeupFile: 'https://api.smess.vn',
+    /** `app.messenger_host`: public website forms and visitor events (`/v1/messenger/*`). */
+    messenger: 'https://api.smess.vn',
     /** `app.sso_host`: company single sign-on (`/v1/sso/*`). */
     sso: 'https://sso.smess.vn',
     /** `app.danara_host`: the Danara rentals API. */

package/dist/core/hosts.js.map

@@ -1 +1 @@
-{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../../src/core/hosts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,sEAAsE;IACtE,cAAc,EAAE,uBAAuB;IACvC,iFAAiF;IACjF,WAAW,EAAE,sBAAsB;IACnC,iEAAiE;IACjE,SAAS,EAAE,sBAAsB;IACjC,4DAA4D;IAC5D,GAAG,EAAE,sBAAsB;IAC3B,iDAAiD;IACjD,MAAM,EAAE,uBAAuB;IAC/B,+CAA+C;IAC/C,MAAM,EAAE,yBAAyB;IACjC,sEAAsE;IACtE,SAAS,EAAE,uBAAuB;CAC1B,CAAC"}
+{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../../src/core/hosts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,sEAAsE;IACtE,cAAc,EAAE,uBAAuB;IACvC,iFAAiF;IACjF,WAAW,EAAE,sBAAsB;IACnC,iEAAiE;IACjE,SAAS,EAAE,sBAAsB;IACjC,yFAAyF;IACzF,SAAS,EAAE,sBAAsB;IACjC,4DAA4D;IAC5D,GAAG,EAAE,sBAAsB;IAC3B,iDAAiD;IACjD,MAAM,EAAE,uBAAuB;IAC/B,+CAA+C;IAC/C,MAAM,EAAE,yBAAyB;IACjC,sEAAsE;IACtE,SAAS,EAAE,uBAAuB;CAC1B,CAAC"}

package/dist/modules/messenger/index.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Messenger module (`src/Microservice/Messenger`, host `app.messenger_host` → api.smess.vn): public
+ * website forms and visitor events.
+ *
+ * - Every route is anonymous (`auth: 'none'`). There is no `security: false` firewall on these paths, so
+ *   a stale Bearer would 401 them: the module never sends one.
+ * - The owning tenant is the body's `client_id`; `X-Client-Id` is optional. Leave `clientId` off the
+ *   client when one build serves several domains whose CORS origins are bound to different tenants
+ *   (core answers 403 when the header disagrees with the origin's tenant). The module fills `client_id`
+ *   from the client's `clientId` when the input has none.
+ * - `send` does not validate the body (the DTO constraints are not run): keep fields short;
+ *   `from_phone_number` is a 20-character column.
+ * - Saved messages are forwarded to the tenant's Livechat inbox when contact-form forwarding is on for that
+ *   client (Admin → client → Livechat).
+ */
+import type { SmessClient } from '../../core/client.js';
+import type { CallOptions } from '../../core/endpoint.js';
+/**
+ * `contact_form` for website contact forms. `lead_capture` also creates a CRM prospect and starts a Rebuild
+ * pipeline job (rebuild.vn only). `demo_*` are the Rebuild demo-site CTAs and need `site_id`.
+ */
+export type MessengerType = 'contact_form' | 'lead_capture' | 'order' | 'default' | 'monitoring' | 'demo_contract_request' | 'demo_cooperation_request' | (string & Record<never, never>);
+export interface MessengerSendInput {
+    /** The owning tenant (Authentication Client UUID). Defaults to the client's `clientId`. */
+    client_id?: string;
+    /** Default `default`. */
+    type?: MessengerType;
+    from_name?: string;
+    from_email?: string;
+    /** ≤ 20 characters (database column). */
+    from_phone_number?: string;
+    subject?: string;
+    message?: string;
+    /** `[a-z0-9][a-z0-9-]{0,63}`; required for `demo_*` types. */
+    site_id?: string;
+    /** Your own reference for the message. */
+    external_id?: string;
+}
+/** `MessengerGetDto`, plain `json_encode` (camelCase, nulls kept). */
+export interface MessengerMessage {
+    id: string;
+    type: MessengerType;
+    fromIpAddress: string | null;
+    fromName: string | null;
+    fromEmail: string | null;
+    fromPhoneNumber: string | null;
+    subject: string | null;
+    message: string | null;
+    siteId: string | null;
+}
+export type WebsiteEventName = 'website_viewed' | 'contact_form_opened' | 'contact_form_submitted' | 'contact_form_failed' | 'livechat_opened' | 'livechat_started' | 'livechat_message_sent' | 'lead_created' | 'demo_cta_clicked' | 'contract_booking_started' | 'cooperation_requested';
+export interface WebsiteEventInput {
+    /** Defaults to the client's `clientId`; the client must exist. */
+    client_id?: string;
+    /** `[a-z0-9][a-z0-9-]{0,63}`. */
+    site_id: string;
+    event: WebsiteEventName;
+    /** Per-tab visitor session, ≤ 64. */
+    session_id?: string;
+    page_url?: string;
+    referrer?: string;
+    /** ATOM date-time, e.g. `2026-11-07T10:00:00+07:00`. */
+    occurred_at?: string;
+    /** A Rebuild demo site. */
+    demo?: boolean;
+    /** ≤ 20 snake_case keys with scalar values (strings ≤ 500). */
+    properties?: Record<string, string | number | boolean | null>;
+}
+export interface WebsiteEventAccepted {
+    object: 'website_event';
+    event: WebsiteEventName;
+    accepted: true;
+}
+export declare const messengerEndpoints: {
+    readonly send: import("../../core/endpoint.js").Endpoint<"/v1/messenger/send", MessengerSendInput & {
+        client_id: string;
+    }, never, MessengerMessage>;
+    readonly get: import("../../core/endpoint.js").Endpoint<"/v1/messenger/{id}/information", never, never, MessengerMessage>;
+    readonly websiteEvent: import("../../core/endpoint.js").Endpoint<"/v1/messenger/website_events", WebsiteEventInput & {
+        client_id: string;
+    }, never, WebsiteEventAccepted>;
+};
+export declare function messenger(client: SmessClient): {
+    /** Saves a website message (contact form, lead, ...) for the tenant. */
+    send: (input: MessengerSendInput, o?: CallOptions) => Promise<MessengerMessage>;
+    /** A saved message by id. */
+    get: (id: string, o?: CallOptions) => Promise<MessengerMessage>;
+    /** Records a visitor event (202); 60 per minute per IP and site. */
+    trackWebsiteEvent: (input: WebsiteEventInput, o?: CallOptions) => Promise<WebsiteEventAccepted>;
+};
+export type MessengerModule = ReturnType<typeof messenger>;
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/messenger/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/messenger/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAG1D;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,cAAc,GACd,OAAO,GACP,SAAS,GACT,YAAY,GACZ,uBAAuB,GACvB,0BAA0B,GAC1B,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpC,MAAM,WAAW,kBAAkB;IACjC,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB,qBAAqB,GACrB,wBAAwB,GACxB,qBAAqB,GACrB,iBAAiB,GACjB,kBAAkB,GAClB,uBAAuB,GACvB,cAAc,GACd,kBAAkB,GAClB,0BAA0B,GAC1B,uBAAuB,CAAC;AAE5B,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,gBAAgB,CAAC;IACxB,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,gBAAgB,CAAC;IACxB,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED,eAAO,MAAM,kBAAkB;;mBAC4C,MAAM;;;;mBAcK,MAAM;;CAMlF,CAAC;AAEX,wBAAgB,SAAS,CAAC,MAAM,EAAE,WAAW;IAWzC,wEAAwE;kBACpD,kBAAkB,MAAM,WAAW;IAEvD,6BAA6B;cACnB,MAAM,MAAM,WAAW;IACjC,oEAAoE;+BACnC,iBAAiB,MAAM,WAAW;EAGtE;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC"}

package/dist/modules/messenger/index.js

@@ -0,0 +1,44 @@
+import { unwrapData } from '../../core/decoders.js';
+import { defineEndpoint } from '../../core/endpoint.js';
+import { SmessApiError } from '../../errors/smess-api-error.js';
+export const messengerEndpoints = {
+    send: defineEndpoint()({
+        service: 'messenger',
+        method: 'POST',
+        path: '/v1/messenger/send',
+        auth: 'none',
+        decode: unwrapData,
+    }),
+    get: defineEndpoint()({
+        service: 'messenger',
+        method: 'GET',
+        path: '/v1/messenger/{id}/information',
+        auth: 'none',
+        decode: unwrapData,
+    }),
+    websiteEvent: defineEndpoint()({
+        service: 'messenger',
+        method: 'POST',
+        path: '/v1/messenger/website_events',
+        auth: 'none',
+    }),
+};
+export function messenger(client) {
+    const e = messengerEndpoints;
+    const tenantOf = (clientId) => {
+        const value = clientId ?? client.config.clientId;
+        if (!value) {
+            throw new SmessApiError({ kind: 'config', code: 'missing_client_id', message: 'Messenger needs a client_id (input or client clientId).' });
+        }
+        return value;
+    };
+    return {
+        /** Saves a website message (contact form, lead, ...) for the tenant. */
+        send: async (input, o) => client.call(e.send, { ...o, body: { ...input, client_id: tenantOf(input.client_id) } }),
+        /** A saved message by id. */
+        get: (id, o) => client.call(e.get, { ...o, path: { id } }),
+        /** Records a visitor event (202); 60 per minute per IP and site. */
+        trackWebsiteEvent: async (input, o) => client.call(e.websiteEvent, { ...o, body: { ...input, client_id: tenantOf(input.client_id) } }),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/modules/messenger/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/messenger/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAmFhE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,cAAc,EAAgE,CAAC;QACnF,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,GAAG,EAAE,cAAc,EAAoB,CAAC;QACtC,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gCAAgC;QACtC,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,YAAY,EAAE,cAAc,EAAmE,CAAC;QAC9F,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,8BAA8B;QACpC,IAAI,EAAE,MAAM;KACb,CAAC;CACM,CAAC;AAEX,MAAM,UAAU,SAAS,CAAC,MAAmB;IAC3C,MAAM,CAAC,GAAG,kBAAkB,CAAC;IAC7B,MAAM,QAAQ,GAAG,CAAC,QAA4B,EAAU,EAAE;QACxD,MAAM,KAAK,GAAG,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC,CAAC;QAC7I,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO;QACL,wEAAwE;QACxE,IAAI,EAAE,KAAK,EAAE,KAAyB,EAAE,CAAe,EAAE,EAAE,CACzD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QACzF,6BAA6B;QAC7B,GAAG,EAAE,CAAC,EAAU,EAAE,CAAe,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QAChF,oEAAoE;QACpE,iBAAiB,EAAE,KAAK,EAAE,KAAwB,EAAE,CAAe,EAAE,EAAE,CACrE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;KAClG,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smess/networking",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Typed client for the SMESS core-services API (auth, campaigns, Danara, SSO, files), built on fetch.",
   "keywords": [
     "smess",
@@ -40,6 +40,10 @@
       "types": "./dist/modules/danara/index.d.ts",
       "default": "./dist/modules/danara/index.js"
     },
+    "./messenger": {
+      "types": "./dist/modules/messenger/index.d.ts",
+      "default": "./dist/modules/messenger/index.js"
+    },
     "./rx": {
       "types": "./dist/rx/index.d.ts",
       "default": "./dist/rx/index.js"