@syntrologie/adapt-chatbot 2.29.0 → 2.30.0

package/dist/editorToken.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Editor-session token for draft template verification.
+ *
+ * In editor mode the backend can verify submitted uiTemplates against the
+ * SERVER-SIDE draft of the plan an editor token is bound to (runtime-backend
+ * `config_verify/draft.py`) instead of requiring a released GrowthBook
+ * config. The chat surfaces attach the token as `X-Syntro-Editor-Token` on
+ * the /templates boot publish and every /stream turn; outside editor mode
+ * no header is sent and the release-only contract stands.
+ *
+ * Token source, in order:
+ *  1. The page's `editor_source` URL param — the same base64url payload the
+ *     editor-sdk boots from ({token, api_base}). Read lazily per request so
+ *     there is no load-order dependency on the editor bundle.
+ *  2. `window.__SYNTRO_EDITOR_PARAMS__` — the editor-sdk's injected params,
+ *     which survive SPA navigations that drop the query string.
+ *
+ * This is deliberately NOT a workspace-auth channel (that is `runtime.token`,
+ * BUG-1785360157). The editor token is an ADDITIVE capability the server
+ * validates independently; sending a stale/invalid one is harmless.
+ */
+export declare function readEditorToken(): string | undefined;
+//# sourceMappingURL=editorToken.d.ts.map

package/dist/editorToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editorToken.d.ts","sourceRoot":"","sources":["../src/editorToken.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,IAAI,MAAM,GAAG,SAAS,CAoBpD"}

package/dist/elements/fetcher.d.ts

@@ -5,10 +5,11 @@
  * `packages/runtime-sdk/src/overlays/fetcher.ts` for the sibling pattern
  * — no shared HTTP client, no axios, no fetch wrapper).
  *
- * Auth: forwards the SDK token from `window.__SYNTRO_CONFIG__.token`
- * as a Bearer header, plus the runtime's visitor ids (`X-Distinct-Id` /
- * `X-Syntro-Session`) so the backend rehydrates mounts under the same
- * session-keyed Redis state the chat persisted to.
+ * Auth: forwards the caller-supplied SDK token (from the runtime handle,
+ * the single source `Syntro.init` populates — BUG-1785360157: never a
+ * window global) as a Bearer header, plus the runtime's visitor ids
+ * (`X-Distinct-Id` / `X-Syntro-Session`) so the backend rehydrates
+ * mounts under the same session-keyed Redis state the chat persisted to.
  *
  * 404 contract: the backend returns 404 only when the workspace's SDK
  * token doesn't resolve to a workspace. The SDK treats 404 as
@@ -22,7 +23,9 @@ export interface FetchMountedElementsOptions {
      *  `/api/adaptive/mounted_elements`). Tests + multi-environment
      *  deploys use this. */
     endpoint?: string;
-    /** SDK token. Defaults to `window.__SYNTRO_CONFIG__.token`. */
+    /** SDK token from the runtime handle (`runtime.token`). Absent →
+     *  unauthenticated request; the backend 401s and the caller's null
+     *  contract kicks in. No window-global fallback (BUG-1785360157). */
     token?: string;
     /** Custom fetch implementation — used by tests to mock the network. */
     fetchImpl?: typeof fetch;

package/dist/elements/fetcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetcher.d.ts","sourceRoot":"","sources":["../../src/elements/fetcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAIvD,MAAM,WAAW,2BAA2B;IAC1C;;4BAEwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,oDAAoD;IACpD,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CA2DzC"}
+{"version":3,"file":"fetcher.d.ts","sourceRoot":"","sources":["../../src/elements/fetcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAIvD,MAAM,WAAW,2BAA2B;IAC1C;;4BAEwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;yEAEqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,oDAAoD;IACpD,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CA2DzC"}

package/dist/runtime.js

@@ -9,7 +9,7 @@ import {
   decodeMutationEnvelope,
   fetchMountedElements,
   renderFallbackHtml
-} from "./chunk-ZXV4GXMO.js";
+} from "./chunk-A3TIGA4G.js";
 import {
   pickPersona
 } from "./chunk-FXHYE6FY.js";
@@ -361,13 +361,31 @@ var ChatSession = class {
 };
 var chatSession = new ChatSession();
 
+// src/editorToken.ts
+function readEditorToken() {
+  if (typeof window === "undefined") return void 0;
+  try {
+    const raw = new URLSearchParams(window.location.search).get("editor_source");
+    if (raw) {
+      const b64 = raw.replace(/-/g, "+").replace(/_/g, "/");
+      const parsed = JSON.parse(atob(b64));
+      if (typeof parsed.token === "string" && parsed.token.length > 0) return parsed.token;
+    }
+  } catch {
+  }
+  try {
+    const params = window.__SYNTRO_EDITOR_PARAMS__;
+    if (typeof params?.token === "string" && params.token.length > 0) return params.token;
+  } catch {
+  }
+  return void 0;
+}
+
 // src/ChatTransport.ts
 var SESSION_READ_DEADLINE_MS = 6e4;
 var FALLBACK_DEBOUNCE_MS = 1500;
-function readSyntroToken() {
-  if (typeof window === "undefined") return void 0;
-  const cfg = window.__SYNTRO_CONFIG__;
-  const token = cfg?.token;
+function readRuntimeToken(runtime2) {
+  const token = runtime2?.token;
   return typeof token === "string" && token.length > 0 ? token : void 0;
 }
 function debug(...args) {
@@ -649,7 +667,7 @@ var ChatTransport = class {
     const baseUrl = this._config.backendUrl.replace(/\/$/, "");
     const url = `${baseUrl}/api/adaptive/session`;
     const headers = {};
-    const token = readSyntroToken();
+    const token = readRuntimeToken(this._config?.runtime);
     if (token) headers.Authorization = `Bearer ${token}`;
     const cft = await this._acquireTurnstileWithChallenge();
     if (cft) headers["CF-Turnstile-Token"] = cft;
@@ -932,11 +950,13 @@ var ChatTransport = class {
       if (this._config === null) return false;
       const baseUrl = this._config.backendUrl.replace(/\/$/, "");
       const streamUrl = `${baseUrl}/api/adaptive/stream`;
-      const token = readSyntroToken();
+      const token = readRuntimeToken(this._config?.runtime);
       const buildHeaders = () => {
         const h = {};
         if (token) h.Authorization = `Bearer ${token}`;
         if (cft) h["CF-Turnstile-Token"] = cft;
+        const editorToken = readEditorToken();
+        if (editorToken) h["X-Syntro-Editor-Token"] = editorToken;
         const lidSlot = this._pendingLidSlot ?? this._config?.activeLidSlot;
         if (typeof lidSlot === "string" && lidSlot.length > 0) {
           h["X-Active-Lid-Slot"] = lidSlot;
@@ -1814,7 +1834,7 @@ function hydrateOnce(runtime2, backendUrl) {
   const store = getOrCreateElementStore(runtime2);
   const trimmed = backendUrl.replace(/\/$/, "");
   const endpoint = trimmed ? `${trimmed}/api/adaptive/mounted_elements` : "/api/adaptive/mounted_elements";
-  fetchMountedElements({ endpoint }).then((response) => {
+  fetchMountedElements({ endpoint, token: runtime2.token }).then((response) => {
     if (!response) return;
     void store.hydrate(response.mounted_elements);
   });
@@ -1866,7 +1886,7 @@ function wireNudgeSurface(runtime2, backendUrl) {
         const store = getOrCreateElementStore(runtime2);
         const trimmed = backendUrl.replace(/\/$/, "");
         const endpoint = trimmed ? `${trimmed}/api/adaptive/mounted_elements` : "/api/adaptive/mounted_elements";
-        void fetchMountedElements({ endpoint }).then((response) => {
+        void fetchMountedElements({ endpoint, token: runtime2.token }).then((response) => {
           if (!response) return;
           void store.hydrate(response.mounted_elements);
         });
@@ -1905,7 +1925,7 @@ function configureTransportIfPossible(cfg) {
   const elementsActive = cfg.elementsEnabled === true && cfg.uiTemplates != null;
   refreshTemplateWidgetMap(elementsActive ? cfg.uiTemplates : void 0);
   const forwardedProps = elementsActive ? { elementsEnabled: true, uiTemplates: cfg.uiTemplates } : void 0;
-  if (elementsActive) publishTemplatesIfPossible(backendUrl, cfg.uiTemplates);
+  if (elementsActive) publishTemplatesIfPossible(backendUrl, cfg.uiTemplates, cfg.runtime?.token);
   const runtime2 = cfg.runtime;
   const onElementMutation = elementsActive ? (mutations) => {
     void getOrCreateElementStore(runtime2).apply(mutations);
@@ -1929,14 +1949,14 @@ function configureTransportIfPossible(cfg) {
   startObserverIfPossible(cfg);
 }
 var _templatesPublished = false;
-function publishTemplatesIfPossible(backendUrl, uiTemplates) {
+function publishTemplatesIfPossible(backendUrl, uiTemplates, token) {
   if (_templatesPublished || typeof window === "undefined") return;
   if (!uiTemplates || typeof uiTemplates !== "object") return;
   _templatesPublished = true;
-  const cfg = window.__SYNTRO_CONFIG__;
-  const token = typeof cfg?.token === "string" && cfg.token.length > 0 ? cfg.token : void 0;
   const headers = { "Content-Type": "application/json" };
   if (token) headers.Authorization = `Bearer ${token}`;
+  const editorToken = readEditorToken();
+  if (editorToken) headers["X-Syntro-Editor-Token"] = editorToken;
   const trimmed = backendUrl.replace(/\/$/, "");
   void fetch(`${trimmed}/api/adaptive/templates`, {
     method: "POST",
@@ -1992,8 +2012,8 @@ function startObserverIfPossible(cfg) {
   const getDistinctId = () => runtimeId("getDistinctId");
   const getSessionId = () => runtimeId("getSessionId");
   const token = () => {
-    const c = window.__SYNTRO_CONFIG__;
-    return typeof c?.token === "string" ? c.token : "";
+    const t = runtimeRef.token;
+    return typeof t === "string" ? t : "";
   };
   const enrich = buildObserverEnrich(runtimeRef);
   const handle = startObserver({ url, token, getDistinctId, getSessionId, enrich });