@syntrologie/adapt-chatbot 2.8.0-canary.256 → 2.8.0-canary.258

package/dist/ChatAssistantLit.d.ts

@@ -11,20 +11,22 @@
  *    `window.__SYNTRO_CONFIG__.token` (set by runtime-config.js) — we read
  *    it at mount time and forward it via `Authorization: Bearer` header.
  *
- * 2. Cloudflare Turnstile bot-check token (two-phase). When
- *    `TURNSTILE_SITEKEY` is set:
- *      a. Try invisible first — passive fingerprints, no UI. Clean
- *         traffic resolves in milliseconds. Token forwarded via
- *         `CF-Turnstile-Token`.
- *      b. If CF declines to grant silently (datacenter IP, automation
- *         signals, strict-privacy browser), render a visible managed
- *         widget inside the chat container so CF can present the
- *         "I am human" checkbox. On solve, swap to the chat UI.
- *      c. If both phases fail, fall through with no token; backend
- *         enforcement returns 403 and the existing fallback card
- *         renders. The widget mode must be `managed` on the CF side
- *         for the visible escalation to work — see
- *         cloudflare/turnstile/main.tf in syntro-infra.
+ * 2. Cloudflare Turnstile bot-check token. When `TURNSTILE_SITEKEY` is
+ *    set, render a single `size: 'flexible'` widget with
+ *    `appearance: 'interaction-only'` against a `managed`-mode sitekey:
+ *      • Clean traffic: CF passive-grades silently, token resolves in
+ *        ~100ms, no UI is ever shown.
+ *      • Flagged traffic (datacenter IP, automation, strict-privacy):
+ *        CF renders an "I am human" checkbox inside the in-chat verify
+ *        panel; on solve, swap to the chat UI.
+ *      • Total failure (CSP blocks CF, network error, user dismisses):
+ *        fall through with no token; backend enforcement 403s and the
+ *        existing fallback card renders.
+ *    The widget mode MUST be `managed` on the CF side — see
+ *    cloudflare/turnstile/main.tf in syntro-infra. (`mode = 'invisible'`
+ *    rejects any `size` other than `invisible`, and `size: 'invisible'`
+ *    against `mode = 'managed'` fails with a synchronous TurnstileError —
+ *    don't mix.)
  *    If sitekey is empty, this step is skipped entirely.
  *
  * 3. Fallback card. If the first agent run fails (Cloudflare Turnstile
@@ -47,18 +49,37 @@ export interface ChatAssistantLitProps {
 }
 export interface AcquireTurnstileOptions {
     /**
-     * Widget size. `invisible` for the silent first attempt; `flexible`
-     * (or `normal`) for the visible managed checkbox after silent failure.
+     * Widget size. `flexible` (default for managed-mode sitekeys) lets CF
+     * render a responsive checkbox when interaction is needed. `invisible`
+     * is only valid against an `invisible`-mode sitekey — pairing
+     * `invisible` with our `managed` sitekey produces a synchronous
+     * TurnstileError.
      */
-    size: 'invisible' | 'flexible' | 'normal' | 'compact';
+    size?: 'flexible' | 'normal' | 'compact' | 'invisible';
     /**
-     * Where to mount the widget. For `invisible` this is an off-screen
-     * host; for the visible sizes it must be a container that's actually
-     * in the layout so CF can render the challenge UI. When omitted, an
-     * off-screen div is created and removed automatically (suitable for
-     * `invisible` only — visible sizes need a real host).
+     * `interaction-only` keeps the widget fully invisible during passive
+     * grading and only reveals UI if CF needs an interactive challenge.
+     * `always` (CF default) shows a small "verifying" indicator during
+     * grading. We default to `interaction-only` so clean traffic sees no
+     * flash before the chat appears.
+     */
+    appearance?: 'always' | 'execute' | 'interaction-only';
+    /**
+     * Where to mount the widget. For visible sizes (the default), this
+     * must be a host that's actually in the layout so CF has somewhere to
+     * draw the challenge UI if it needs to. When omitted, an off-screen
+     * div is created and removed automatically — only suitable for
+     * `size: 'invisible'` (which is only valid against an `invisible`-mode
+     * sitekey, which we don't ship).
      */
     host?: HTMLElement;
+    /**
+     * Fires when CF decides a challenge is needed and is about to reveal
+     * the checkbox. Caller uses it to surface accompanying copy
+     * ("Quick check before we start chatting") only when the challenge
+     * actually appears.
+     */
+    onBeforeInteractive?: () => void;
     /**
      * Cancels an in-flight acquisition. On abort, the promise resolves to
      * `null`, the CF widget is removed from the registry, and any owned

package/dist/ChatAssistantLit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ChatAssistantLit.d.ts","sourceRoot":"","sources":["../src/ChatAssistantLit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,mBAAmB,CAAC;AAK3B,OAAO,KAAK,EAAE,aAAa,EAAmB,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvF,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAqGD,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,IAAI,EAAE,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;IACtD;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,GAAE,uBAA+C,GACpD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkFxB;AAqGD,eAAO,MAAM,yBAAyB;qBACnB,WAAW,gBAAgB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAwPpE,CAAC"}
+{"version":3,"file":"ChatAssistantLit.d.ts","sourceRoot":"","sources":["../src/ChatAssistantLit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,mBAAmB,CAAC;AAK3B,OAAO,KAAK,EAAE,aAAa,EAAmB,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvF,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAuGD,MAAM,WAAW,uBAAuB;IACtC;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IACvD;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,kBAAkB,CAAC;IACvD;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,IAAI,CAAC;IACjC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyFxB;AAqGD,eAAO,MAAM,yBAAyB;qBACnB,WAAW,gBAAgB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAyPpE,CAAC"}

package/dist/ChatAssistantLit.js

@@ -1,7 +1,7 @@
 import {
   ChatAssistantLitMountable,
   acquireTurnstileToken
-} from "./chunk-W457NMGD.js";
+} from "./chunk-AMI4XIT5.js";
 import "./chunk-UVKRO5ER.js";
 export {
   ChatAssistantLitMountable,

package/dist/{chunk-W457NMGD.js → chunk-AMI4XIT5.js}

@@ -10741,7 +10741,9 @@ function loadTurnstileScript() {
     document.head.appendChild(script);
   });
 }
-async function acquireTurnstileToken(opts = { size: "invisible" }) {
+async function acquireTurnstileToken(opts = {}) {
+  const size = opts.size ?? "flexible";
+  const appearance = opts.appearance ?? "interaction-only";
   if (!TURNSTILE_SITEKEY) return null;
   if (typeof window === "undefined" || typeof document === "undefined") return null;
   let turnstile;
@@ -10792,11 +10794,13 @@ async function acquireTurnstileToken(opts = { size: "invisible" }) {
     try {
       widgetId = turnstile.render(host, {
         sitekey: TURNSTILE_SITEKEY,
-        size: opts.size,
+        size,
+        appearance,
         callback: (token) => settle(token),
         "error-callback": () => settle(null),
         "timeout-callback": () => settle(null),
-        "expired-callback": () => settle(null)
+        "expired-callback": () => settle(null),
+        "before-interactive-callback": () => opts.onBeforeInteractive?.()
       });
     } catch {
       settle(null);
@@ -10970,43 +10974,38 @@ var ChatAssistantLitMountable = {
       });
       container.appendChild(el);
     };
-    let visiblePanel = null;
+    let verifyPanel = null;
     const acquireAbort = new AbortController();
-    const acquireWithEscalation = async () => {
-      const silent = await acquireTurnstileToken({
-        size: "invisible",
-        signal: acquireAbort.signal
-      });
-      if (isUnmounted) return null;
-      if (silent !== null) {
-        botCheckOutcome = "invisible_succeeded";
-        return silent;
-      }
-      visiblePanel = renderVerifyPanel(container);
-      const widgetHost = visiblePanel.querySelector(
+    const acquireWithManagedChallenge = async () => {
+      verifyPanel = renderVerifyPanel(container);
+      const widgetHost = verifyPanel.querySelector(
         '[data-adaptive-chatbot-turnstile-host="true"]'
       );
       if (!widgetHost) return null;
-      const interactive = await acquireTurnstileToken({
-        size: "flexible",
+      let isInteractive = false;
+      const token2 = await acquireTurnstileToken({
         host: widgetHost,
-        signal: acquireAbort.signal
+        signal: acquireAbort.signal,
+        onBeforeInteractive: () => {
+          isInteractive = true;
+          revealVerifyPanelHeading(verifyPanel);
+        }
       });
       if (isUnmounted) return null;
-      visiblePanel.remove();
-      visiblePanel = null;
-      if (interactive !== null) {
-        botCheckOutcome = "visible_succeeded";
-        return interactive;
+      verifyPanel.remove();
+      verifyPanel = null;
+      if (token2 !== null) {
+        botCheckOutcome = isInteractive ? "interactive_succeeded" : "silent_succeeded";
+        return token2;
       }
-      botCheckOutcome = "visible_failed";
+      botCheckOutcome = "acquisition_failed";
       console.warn(
-        "[adaptive-chatbot] turnstile token acquisition failed (visible challenge also rejected) \u2014 connecting without a bot-check token; backend may 403"
+        "[adaptive-chatbot] turnstile token acquisition failed \u2014 connecting without a bot-check token; backend may 403"
       );
       return null;
     };
     if (TURNSTILE_SITEKEY) {
-      void acquireWithEscalation().then((cft) => {
+      void acquireWithManagedChallenge().then((cft) => {
         if (isUnmounted) return;
         hadTurnstileToken = cft !== null;
         setupTransport(cft);
@@ -11022,9 +11021,9 @@ var ChatAssistantLitMountable = {
         unsubscribe();
         unsubscribe = null;
       }
-      if (visiblePanel) {
-        visiblePanel.remove();
-        visiblePanel = null;
+      if (verifyPanel) {
+        verifyPanel.remove();
+        verifyPanel = null;
       }
       if (!fallbackRendered) {
         transport?.disconnect();
@@ -11051,7 +11050,8 @@ function renderVerifyPanel(container) {
     "text-align:center"
   ].join(";");
   const heading = document.createElement("div");
-  heading.style.cssText = "font-size:14px;font-weight:500;line-height:1.4;";
+  heading.setAttribute("data-adaptive-chatbot-turnstile-heading", "true");
+  heading.style.cssText = "font-size:14px;font-weight:500;line-height:1.4;display:none;";
   heading.textContent = "Quick check before we start chatting";
   const widgetHost = document.createElement("div");
   widgetHost.setAttribute("data-adaptive-chatbot-turnstile-host", "true");
@@ -11060,6 +11060,13 @@ function renderVerifyPanel(container) {
   container.appendChild(panel);
   return panel;
 }
+function revealVerifyPanelHeading(panel) {
+  if (!panel) return;
+  const heading = panel.querySelector(
+    '[data-adaptive-chatbot-turnstile-heading="true"]'
+  );
+  if (heading) heading.style.display = "";
+}
 
 export {
   acquireTurnstileToken,
@@ -11084,4 +11091,4 @@ fast-json-patch/module/duplex.mjs:
    * MIT license
    *)
 */
-//# sourceMappingURL=chunk-W457NMGD.js.map
+//# sourceMappingURL=chunk-AMI4XIT5.js.map