@usepanacea/client 0.1.0

package/dist/index.cjs

@@ -0,0 +1,192 @@
+'use strict';
+
+// src/token.ts
+var TokenManager = class {
+  constructor(tenantId, apiBase) {
+    this.tenantId = tenantId;
+    this.apiBase = apiBase;
+  }
+  tenantId;
+  apiBase;
+  state = null;
+  refreshPromise = null;
+  async getToken() {
+    if (!this.state || Date.now() >= this.state.expiresAt - 6e4) {
+      if (!this.refreshPromise) {
+        this.refreshPromise = this.refresh().finally(() => {
+          this.refreshPromise = null;
+        });
+      }
+      return this.refreshPromise;
+    }
+    return this.state.token;
+  }
+  async refresh() {
+    const res = await fetch(`${this.apiBase}/api/v1/auth/widget-token`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ tenantId: this.tenantId })
+    });
+    if (!res.ok) {
+      throw new Error(`Panacea: token refresh failed (${res.status})`);
+    }
+    const data = await res.json();
+    this.state = {
+      token: data.token,
+      expiresAt: new Date(data.expiresAt).getTime()
+    };
+    return this.state.token;
+  }
+};
+
+// src/api.ts
+async function queryRest(opts) {
+  const res = await fetch(`${opts.apiBase}/api/v1/query`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${opts.token}`,
+      ...opts.extraHeaders
+    },
+    body: JSON.stringify({ question: opts.question, sessionId: opts.sessionId })
+  });
+  if (!res.ok) {
+    const err = await res.json().catch(() => null);
+    throw new Error(
+      err?.error?.message ?? `Panacea: query failed (${res.status})`
+    );
+  }
+  return res.json();
+}
+async function querySSE(opts, onToken) {
+  const res = await fetch(`${opts.apiBase}/api/v1/query`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${opts.token}`,
+      Accept: "text/event-stream",
+      ...opts.extraHeaders
+    },
+    body: JSON.stringify({ question: opts.question, sessionId: opts.sessionId })
+  });
+  if (!res.ok || !res.body) {
+    throw new Error(`Panacea: SSE query failed (${res.status})`);
+  }
+  const reader = res.body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  let finalResponse = null;
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    buffer += decoder.decode(value, { stream: true });
+    const lines = buffer.split("\n");
+    buffer = lines.pop() ?? "";
+    for (const line of lines) {
+      if (!line.startsWith("data: ")) continue;
+      const raw = line.slice(6).trim();
+      if (!raw || raw === "[DONE]") continue;
+      try {
+        const frame = JSON.parse(raw);
+        if (frame.type === "token" && frame.delta) {
+          onToken(frame.delta);
+        } else if (frame.type === "done") {
+          finalResponse = {
+            answer: frame.answer ?? "",
+            sources: frame.sources ?? [],
+            confidence: frame.confidence ?? 0,
+            flaggedForReview: frame.flaggedForReview ?? false,
+            sessionId: frame.sessionId ?? "",
+            escalated: frame.escalated
+          };
+        } else if (frame.type === "error") {
+          throw new Error(frame.message ?? "SSE stream error");
+        }
+      } catch {
+      }
+    }
+  }
+  if (!finalResponse) throw new Error("Panacea: SSE stream ended without done frame");
+  return finalResponse;
+}
+async function fetchRecentSessionId(customerToken, widgetToken, apiBase) {
+  const url = new URL(`${apiBase}/api/v1/sessions/resume`);
+  url.searchParams.set("customerToken", customerToken);
+  const res = await fetch(url.toString(), {
+    headers: { Authorization: `Bearer ${widgetToken}` }
+  });
+  if (!res.ok) return null;
+  const data = await res.json();
+  return data?.session?.sessionId ?? null;
+}
+async function fetchSessionTurns(sessionId, widgetToken, apiBase) {
+  const res = await fetch(`${apiBase}/api/v1/sessions/${sessionId}/turns`, {
+    headers: { Authorization: `Bearer ${widgetToken}` }
+  });
+  if (!res.ok) return [];
+  const data = await res.json();
+  return data?.data?.turns ?? data?.turns ?? [];
+}
+async function postReaction(sessionId, reaction, citedPaths, token, apiBase) {
+  await fetch(`${apiBase}/api/v1/sessions/${sessionId}/reaction`, {
+    method: "PATCH",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({ reaction, citedPaths })
+  });
+}
+async function postCustomerMessage(escalationId, content, token, apiBase) {
+  await fetch(`${apiBase}/api/v1/inbox/${escalationId}/customer-message`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({ content })
+  });
+}
+async function fetchLiveMessages(escalationId, token, apiBase) {
+  const res = await fetch(`${apiBase}/api/v1/inbox/${escalationId}/messages`, {
+    headers: { Authorization: `Bearer ${token}` }
+  });
+  if (!res.ok) return [];
+  const data = await res.json();
+  return data?.data?.messages ?? data?.messages ?? [];
+}
+async function patchPageContext(sessionId, ctx, token, apiBase) {
+  await fetch(`${apiBase}/api/v1/sessions/${sessionId}`, {
+    method: "PATCH",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({ pageContext: ctx })
+  });
+}
+async function postEscalate(sessionId, reason, token, apiBase) {
+  const res = await fetch(`${apiBase}/api/v1/sessions/${sessionId}/escalate`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({ reason })
+  });
+  if (!res.ok) return null;
+  return res.json();
+}
+
+exports.TokenManager = TokenManager;
+exports.fetchLiveMessages = fetchLiveMessages;
+exports.fetchRecentSessionId = fetchRecentSessionId;
+exports.fetchSessionTurns = fetchSessionTurns;
+exports.patchPageContext = patchPageContext;
+exports.postCustomerMessage = postCustomerMessage;
+exports.postEscalate = postEscalate;
+exports.postReaction = postReaction;
+exports.queryRest = queryRest;
+exports.querySSE = querySSE;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/token.ts","../src/api.ts"],"names":[],"mappings":";;;AAWO,IAAM,eAAN,MAAmB;AAAA,EAIxB,WAAA,CACmB,UACA,OAAA,EACjB;AAFiB,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAChB;AAAA,EAFgB,QAAA;AAAA,EACA,OAAA;AAAA,EALX,KAAA,GAA2B,IAAA;AAAA,EAC3B,cAAA,GAAyC,IAAA;AAAA,EAOjD,MAAM,QAAA,GAA4B;AAChC,IAAA,IAAI,CAAC,KAAK,KAAA,IAAS,IAAA,CAAK,KAAI,IAAK,IAAA,CAAK,KAAA,CAAM,SAAA,GAAY,GAAA,EAAQ;AAC9D,MAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AACxB,QAAA,IAAA,CAAK,cAAA,GAAiB,IAAA,CAAK,OAAA,EAAQ,CAAE,QAAQ,MAAM;AACjD,UAAA,IAAA,CAAK,cAAA,GAAiB,IAAA;AAAA,QACxB,CAAC,CAAA;AAAA,MACH;AACA,MAAA,OAAO,IAAA,CAAK,cAAA;AAAA,IACd;AACA,IAAA,OAAO,KAAK,KAAA,CAAM,KAAA;AAAA,EACpB;AAAA,EAEA,MAAc,OAAA,GAA2B;AACvC,IAAA,MAAM,MAAM,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,yBAAA,CAAA,EAA6B;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,IAAA,CAAK,UAAU;AAAA,KACjD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,GAAA,CAAI,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,IACjE;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,IAAA,CAAK,KAAA,GAAQ;AAAA,MACX,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,WAAW,IAAI,IAAA,CAAK,IAAA,CAAK,SAAS,EAAE,OAAA;AAAQ,KAC9C;AACA,IAAA,OAAO,KAAK,KAAA,CAAM,KAAA;AAAA,EACpB;AACF;;;AC/BA,eAAsB,UAAU,IAAA,EAA4C;AAC1E,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,aAAA,CAAA,EAAiB;AAAA,IACtD,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,KAAK,CAAA,CAAA;AAAA,MACnC,GAAG,IAAA,CAAK;AAAA,KACV;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,KAAK,QAAA,EAAU,SAAA,EAAW,IAAA,CAAK,SAAA,EAAW;AAAA,GAC5E,CAAA;AAED,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,MAAM,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAC7C,IAAA,MAAM,IAAI,KAAA;AAAA,MACP,GAAA,EAA0C,KAAA,EAAO,OAAA,IAChD,CAAA,uBAAA,EAA0B,IAAI,MAAM,CAAA,CAAA;AAAA,KACxC;AAAA,EACF;AAEA,EAAA,OAAO,IAAI,IAAA,EAAK;AAClB;AAMA,eAAsB,QAAA,CACpB,MACA,OAAA,EACwB;AACxB,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,aAAA,CAAA,EAAiB;AAAA,IACtD,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,KAAK,CAAA,CAAA;AAAA,MACnC,MAAA,EAAQ,mBAAA;AAAA,MACR,GAAG,IAAA,CAAK;AAAA,KACV;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,KAAK,QAAA,EAAU,SAAA,EAAW,IAAA,CAAK,SAAA,EAAW;AAAA,GAC5E,CAAA;AAED,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,IAAM,CAAC,IAAI,IAAA,EAAM;AACxB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,GAAA,CAAI,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EAC7D;AAEA,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,IAAA,CAAK,SAAA,EAAU;AAClC,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,aAAA,GAAsC,IAAA;AAG1C,EAAA,OAAO,IAAA,EAAM;AACX,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,MAAA,IAAU,QAAQ,MAAA,CAAO,KAAA,EAAO,EAAE,MAAA,EAAQ,MAAM,CAAA;AAChD,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAC/B,IAAA,MAAA,GAAS,KAAA,CAAM,KAAI,IAAK,EAAA;AAExB,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA,EAAG;AAChC,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,CAAC,EAAE,IAAA,EAAK;AAC/B,MAAA,IAAI,CAAC,GAAA,IAAO,GAAA,KAAQ,QAAA,EAAU;AAC9B,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAW5B,QAAA,IAAI,KAAA,CAAM,IAAA,KAAS,OAAA,IAAW,KAAA,CAAM,KAAA,EAAO;AACzC,UAAA,OAAA,CAAQ,MAAM,KAAK,CAAA;AAAA,QACrB,CAAA,MAAA,IAAW,KAAA,CAAM,IAAA,KAAS,MAAA,EAAQ;AAChC,UAAA,aAAA,GAAgB;AAAA,YACd,MAAA,EAAQ,MAAM,MAAA,IAAU,EAAA;AAAA,YACxB,OAAA,EAAS,KAAA,CAAM,OAAA,IAAW,EAAC;AAAA,YAC3B,UAAA,EAAY,MAAM,UAAA,IAAc,CAAA;AAAA,YAChC,gBAAA,EAAkB,MAAM,gBAAA,IAAoB,KAAA;AAAA,YAC5C,SAAA,EAAW,MAAM,SAAA,IAAa,EAAA;AAAA,YAC9B,WAAW,KAAA,CAAM;AAAA,WACnB;AAAA,QACF,CAAA,MAAA,IAAW,KAAA,CAAM,IAAA,KAAS,OAAA,EAAS;AACjC,UAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,OAAA,IAAW,kBAAkB,CAAA;AAAA,QACrD;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,aAAA,EAAe,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAClF,EAAA,OAAO,aAAA;AACT;AAUA,eAAsB,oBAAA,CACpB,aAAA,EACA,WAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,OAAO,CAAA,uBAAA,CAAyB,CAAA;AACvD,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,eAAA,EAAiB,aAAa,CAAA;AAEnD,EAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,IACtC,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,WAAW,CAAA,CAAA;AAAG,GACnD,CAAA;AAED,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,IAAA;AAEpB,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,EAAA,OAAO,IAAA,EAAM,SAAS,SAAA,IAAa,IAAA;AACrC;AAKA,eAAsB,iBAAA,CACpB,SAAA,EACA,WAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,GAAG,OAAO,CAAA,iBAAA,EAAoB,SAAS,CAAA,MAAA,CAAA,EAAU;AAAA,IACvE,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,WAAW,CAAA,CAAA;AAAG,GACnD,CAAA;AAED,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,EAAC;AAErB,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAI7B,EAAA,OAAO,IAAA,EAAM,IAAA,EAAM,KAAA,IAAS,IAAA,EAAM,SAAS,EAAC;AAC9C;AAUA,eAAsB,YAAA,CACpB,SAAA,EACA,QAAA,EACA,UAAA,EACA,OACA,OAAA,EACe;AACf,EAAA,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,iBAAA,EAAoB,SAAS,CAAA,SAAA,CAAA,EAAa;AAAA,IAC9D,MAAA,EAAQ,OAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,UAAU,KAAK,CAAA;AAAA,KAChC;AAAA,IACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,YAAY;AAAA,GAC9C,CAAA;AACH;AASA,eAAsB,mBAAA,CACpB,YAAA,EACA,OAAA,EACA,KAAA,EACA,OAAA,EACe;AACf,EAAA,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,cAAA,EAAiB,YAAY,CAAA,iBAAA,CAAA,EAAqB;AAAA,IACtE,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,UAAU,KAAK,CAAA;AAAA,KAChC;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,SAAS;AAAA,GACjC,CAAA;AACH;AAMA,eAAsB,iBAAA,CACpB,YAAA,EACA,KAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,GAAG,OAAO,CAAA,cAAA,EAAiB,YAAY,CAAA,SAAA,CAAA,EAAa;AAAA,IAC1E,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AAAG,GAC7C,CAAA;AAED,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,EAAC;AAErB,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAI7B,EAAA,OAAO,IAAA,EAAM,IAAA,EAAM,QAAA,IAAY,IAAA,EAAM,YAAY,EAAC;AACpD;AASA,eAAsB,gBAAA,CACpB,SAAA,EACA,GAAA,EACA,KAAA,EACA,OAAA,EACe;AACf,EAAA,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAA,EAAI;AAAA,IACrD,MAAA,EAAQ,OAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,UAAU,KAAK,CAAA;AAAA,KAChC;AAAA,IACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,WAAA,EAAa,KAAK;AAAA,GAC1C,CAAA;AACH;AAMA,eAAsB,YAAA,CACpB,SAAA,EACA,MAAA,EACA,KAAA,EACA,OAAA,EACkB;AAClB,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,GAAG,OAAO,CAAA,iBAAA,EAAoB,SAAS,CAAA,SAAA,CAAA,EAAa;AAAA,IAC1E,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,UAAU,KAAK,CAAA;AAAA,KAChC;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAQ;AAAA,GAChC,CAAA;AACD,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,IAAA;AACpB,EAAA,OAAO,IAAI,IAAA,EAAK;AAClB","file":"index.cjs","sourcesContent":["interface TokenState {\n  token: string;\n  /** unix ms */\n  expiresAt: number;\n}\n\n/**\n * Manages the short-lived widget JWT (15 min TTL).\n * Auto-refreshes 60 s before expiry. Concurrent callers share one in-flight\n * refresh promise so the token is only fetched once even under parallel requests.\n */\nexport class TokenManager {\n  private state: TokenState | null = null;\n  private refreshPromise: Promise<string> | null = null;\n\n  constructor(\n    private readonly tenantId: string,\n    private readonly apiBase: string,\n  ) {}\n\n  async getToken(): Promise<string> {\n    if (!this.state || Date.now() >= this.state.expiresAt - 60_000) {\n      if (!this.refreshPromise) {\n        this.refreshPromise = this.refresh().finally(() => {\n          this.refreshPromise = null;\n        });\n      }\n      return this.refreshPromise;\n    }\n    return this.state.token;\n  }\n\n  private async refresh(): Promise<string> {\n    const res = await fetch(`${this.apiBase}/api/v1/auth/widget-token`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ tenantId: this.tenantId }),\n    });\n\n    if (!res.ok) {\n      throw new Error(`Panacea: token refresh failed (${res.status})`);\n    }\n\n    const data = (await res.json()) as { token: string; expiresAt: string };\n    this.state = {\n      token: data.token,\n      expiresAt: new Date(data.expiresAt).getTime(),\n    };\n    return this.state.token;\n  }\n}\n","import type { QueryResponse, HistoryTurn, LiveMessage } from \"./types\";\n\n// ---------------------------------------------------------------------------\n// Query\n// ---------------------------------------------------------------------------\n\ninterface QueryOptions {\n  question: string;\n  sessionId: string | null;\n  token: string;\n  apiBase: string;\n  /** Extra headers to include (e.g. x-customer-token). */\n  extraHeaders?: Record<string, string>;\n}\n\n/**\n * Send a query via REST POST /api/v1/query.\n * Used as fallback when SSE is not available.\n */\nexport async function queryRest(opts: QueryOptions): Promise<QueryResponse> {\n  const res = await fetch(`${opts.apiBase}/api/v1/query`, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${opts.token}`,\n      ...opts.extraHeaders,\n    },\n    body: JSON.stringify({ question: opts.question, sessionId: opts.sessionId }),\n  });\n\n  if (!res.ok) {\n    const err = await res.json().catch(() => null);\n    throw new Error(\n      (err as { error?: { message?: string } })?.error?.message ??\n        `Panacea: query failed (${res.status})`,\n    );\n  }\n\n  return res.json() as Promise<QueryResponse>;\n}\n\n/**\n * Send a query via Server-Sent Events streaming.\n * Calls `onToken` with each streamed delta, then resolves with the final response.\n */\nexport async function querySSE(\n  opts: QueryOptions,\n  onToken: (delta: string) => void,\n): Promise<QueryResponse> {\n  const res = await fetch(`${opts.apiBase}/api/v1/query`, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${opts.token}`,\n      Accept: \"text/event-stream\",\n      ...opts.extraHeaders,\n    },\n    body: JSON.stringify({ question: opts.question, sessionId: opts.sessionId }),\n  });\n\n  if (!res.ok || !res.body) {\n    throw new Error(`Panacea: SSE query failed (${res.status})`);\n  }\n\n  const reader = res.body.getReader();\n  const decoder = new TextDecoder();\n  let buffer = \"\";\n  let finalResponse: QueryResponse | null = null;\n\n  // eslint-disable-next-line no-constant-condition\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    buffer += decoder.decode(value, { stream: true });\n    const lines = buffer.split(\"\\n\");\n    buffer = lines.pop() ?? \"\";\n\n    for (const line of lines) {\n      if (!line.startsWith(\"data: \")) continue;\n      const raw = line.slice(6).trim();\n      if (!raw || raw === \"[DONE]\") continue;\n      try {\n        const frame = JSON.parse(raw) as {\n          type: \"token\" | \"done\" | \"error\";\n          delta?: string;\n          answer?: string;\n          sources?: QueryResponse[\"sources\"];\n          confidence?: number;\n          sessionId?: string;\n          flaggedForReview?: boolean;\n          escalated?: boolean;\n          message?: string;\n        };\n        if (frame.type === \"token\" && frame.delta) {\n          onToken(frame.delta);\n        } else if (frame.type === \"done\") {\n          finalResponse = {\n            answer: frame.answer ?? \"\",\n            sources: frame.sources ?? [],\n            confidence: frame.confidence ?? 0,\n            flaggedForReview: frame.flaggedForReview ?? false,\n            sessionId: frame.sessionId ?? \"\",\n            escalated: frame.escalated,\n          };\n        } else if (frame.type === \"error\") {\n          throw new Error(frame.message ?? \"SSE stream error\");\n        }\n      } catch {\n        // ignore malformed frames\n      }\n    }\n  }\n\n  if (!finalResponse) throw new Error(\"Panacea: SSE stream ended without done frame\");\n  return finalResponse;\n}\n\n// ---------------------------------------------------------------------------\n// Session helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Fetch the most recent resumable session for an identified customer.\n * Returns the sessionId if found within the resume window, null otherwise.\n */\nexport async function fetchRecentSessionId(\n  customerToken: string,\n  widgetToken: string,\n  apiBase: string,\n): Promise<string | null> {\n  const url = new URL(`${apiBase}/api/v1/sessions/resume`);\n  url.searchParams.set(\"customerToken\", customerToken);\n\n  const res = await fetch(url.toString(), {\n    headers: { Authorization: `Bearer ${widgetToken}` },\n  });\n\n  if (!res.ok) return null;\n\n  const data = (await res.json()) as { session: { sessionId: string } | null };\n  return data?.session?.sessionId ?? null;\n}\n\n/**\n * Fetch all turns for a session (read-only history view).\n */\nexport async function fetchSessionTurns(\n  sessionId: string,\n  widgetToken: string,\n  apiBase: string,\n): Promise<HistoryTurn[]> {\n  const res = await fetch(`${apiBase}/api/v1/sessions/${sessionId}/turns`, {\n    headers: { Authorization: `Bearer ${widgetToken}` },\n  });\n\n  if (!res.ok) return [];\n\n  const data = (await res.json()) as {\n    data?: { turns?: HistoryTurn[] };\n    turns?: HistoryTurn[];\n  };\n  return data?.data?.turns ?? data?.turns ?? [];\n}\n\n// ---------------------------------------------------------------------------\n// Reaction\n// ---------------------------------------------------------------------------\n\n/**\n * POST a reaction (thumbs up/down) for a turn.\n * D-013: explicit reaction capture via PATCH /api/v1/sessions/:id/reaction.\n */\nexport async function postReaction(\n  sessionId: string,\n  reaction: \"helpful\" | \"unhelpful\",\n  citedPaths: string[],\n  token: string,\n  apiBase: string,\n): Promise<void> {\n  await fetch(`${apiBase}/api/v1/sessions/${sessionId}/reaction`, {\n    method: \"PATCH\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${token}`,\n    },\n    body: JSON.stringify({ reaction, citedPaths }),\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Live handover helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Send a customer message during a live handover session.\n */\nexport async function postCustomerMessage(\n  escalationId: string,\n  content: string,\n  token: string,\n  apiBase: string,\n): Promise<void> {\n  await fetch(`${apiBase}/api/v1/inbox/${escalationId}/customer-message`, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${token}`,\n    },\n    body: JSON.stringify({ content }),\n  });\n}\n\n/**\n * Fetch live messages from a claimed escalation (human agent replies).\n * Used to poll for new messages during live handover.\n */\nexport async function fetchLiveMessages(\n  escalationId: string,\n  token: string,\n  apiBase: string,\n): Promise<LiveMessage[]> {\n  const res = await fetch(`${apiBase}/api/v1/inbox/${escalationId}/messages`, {\n    headers: { Authorization: `Bearer ${token}` },\n  });\n\n  if (!res.ok) return [];\n\n  const data = (await res.json()) as {\n    data?: { messages?: LiveMessage[] };\n    messages?: LiveMessage[];\n  };\n  return data?.data?.messages ?? data?.messages ?? [];\n}\n\n// ---------------------------------------------------------------------------\n// Page context\n// ---------------------------------------------------------------------------\n\n/**\n * Update the pageContext for a session (SPA navigation support).\n */\nexport async function patchPageContext(\n  sessionId: string,\n  ctx: Record<string, unknown>,\n  token: string,\n  apiBase: string,\n): Promise<void> {\n  await fetch(`${apiBase}/api/v1/sessions/${sessionId}`, {\n    method: \"PATCH\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${token}`,\n    },\n    body: JSON.stringify({ pageContext: ctx }),\n  });\n}\n\n/**\n * Trigger escalation to a human agent.\n * Returns the raw JSON response or null on failure.\n */\nexport async function postEscalate(\n  sessionId: string,\n  reason: string,\n  token: string,\n  apiBase: string,\n): Promise<unknown> {\n  const res = await fetch(`${apiBase}/api/v1/sessions/${sessionId}/escalate`, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${token}`,\n    },\n    body: JSON.stringify({ reason }),\n  });\n  if (!res.ok) return null;\n  return res.json();\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,127 @@
+/**
+ * Manages the short-lived widget JWT (15 min TTL).
+ * Auto-refreshes 60 s before expiry. Concurrent callers share one in-flight
+ * refresh promise so the token is only fetched once even under parallel requests.
+ */
+declare class TokenManager {
+    private readonly tenantId;
+    private readonly apiBase;
+    private state;
+    private refreshPromise;
+    constructor(tenantId: string, apiBase: string);
+    getToken(): Promise<string>;
+    private refresh;
+}
+
+interface Source {
+    path: string;
+    title: string;
+    confidence: number;
+    excerpt?: string;
+    /** Original public URL from wiki entry frontmatter (sourceUrl). Present only for URL-ingested entries. */
+    url?: string;
+}
+interface Turn {
+    role: "user" | "assistant";
+    content: string;
+    confidence?: number;
+    sources?: Source[];
+    flaggedForReview?: boolean;
+    reaction?: "helpful" | "unhelpful" | null;
+    /** True when this answer triggered an auto-escalation */
+    escalated?: boolean;
+    /** True when this message came from a live human agent */
+    isLiveAgent?: boolean;
+}
+interface QueryResponse {
+    answer: string;
+    sources: Source[];
+    confidence: number;
+    flaggedForReview: boolean;
+    sessionId: string;
+    escalated?: boolean;
+    escalationReason?: string;
+}
+interface EscalateResponse {
+    data?: {
+        escalationId?: string;
+        handoverMode?: string;
+        handoverUrl?: string;
+    };
+    escalationId?: string;
+    handoverMode?: string;
+    handoverUrl?: string;
+}
+interface HistoryTurn {
+    id: string;
+    query: string;
+    response: string;
+    createdAt: string;
+}
+interface HistorySession {
+    sessionId: string;
+    createdAt: string;
+    updatedAt?: string;
+    /** Preview of the first message in the session */
+    preview?: string;
+    turnCount?: number;
+}
+interface LiveMessage {
+    id: string;
+    senderRole?: "agent" | "customer";
+    content: string;
+    createdAt: string;
+}
+
+interface QueryOptions {
+    question: string;
+    sessionId: string | null;
+    token: string;
+    apiBase: string;
+    /** Extra headers to include (e.g. x-customer-token). */
+    extraHeaders?: Record<string, string>;
+}
+/**
+ * Send a query via REST POST /api/v1/query.
+ * Used as fallback when SSE is not available.
+ */
+declare function queryRest(opts: QueryOptions): Promise<QueryResponse>;
+/**
+ * Send a query via Server-Sent Events streaming.
+ * Calls `onToken` with each streamed delta, then resolves with the final response.
+ */
+declare function querySSE(opts: QueryOptions, onToken: (delta: string) => void): Promise<QueryResponse>;
+/**
+ * Fetch the most recent resumable session for an identified customer.
+ * Returns the sessionId if found within the resume window, null otherwise.
+ */
+declare function fetchRecentSessionId(customerToken: string, widgetToken: string, apiBase: string): Promise<string | null>;
+/**
+ * Fetch all turns for a session (read-only history view).
+ */
+declare function fetchSessionTurns(sessionId: string, widgetToken: string, apiBase: string): Promise<HistoryTurn[]>;
+/**
+ * POST a reaction (thumbs up/down) for a turn.
+ * D-013: explicit reaction capture via PATCH /api/v1/sessions/:id/reaction.
+ */
+declare function postReaction(sessionId: string, reaction: "helpful" | "unhelpful", citedPaths: string[], token: string, apiBase: string): Promise<void>;
+/**
+ * Send a customer message during a live handover session.
+ */
+declare function postCustomerMessage(escalationId: string, content: string, token: string, apiBase: string): Promise<void>;
+/**
+ * Fetch live messages from a claimed escalation (human agent replies).
+ * Used to poll for new messages during live handover.
+ */
+declare function fetchLiveMessages(escalationId: string, token: string, apiBase: string): Promise<LiveMessage[]>;
+/**
+ * Update the pageContext for a session (SPA navigation support).
+ */
+declare function patchPageContext(sessionId: string, ctx: Record<string, unknown>, token: string, apiBase: string): Promise<void>;
+/**
+ * Trigger escalation to a human agent.
+ * Returns the raw JSON response or null on failure.
+ */
+declare function postEscalate(sessionId: string, reason: string, token: string, apiBase: string): Promise<unknown>;
+
+export { type EscalateResponse, type HistorySession, type HistoryTurn, type LiveMessage, type QueryResponse, type Source, TokenManager, type Turn, fetchLiveMessages, fetchRecentSessionId, fetchSessionTurns, patchPageContext, postCustomerMessage, postEscalate, postReaction, queryRest, querySSE };

package/dist/index.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Manages the short-lived widget JWT (15 min TTL).
+ * Auto-refreshes 60 s before expiry. Concurrent callers share one in-flight
+ * refresh promise so the token is only fetched once even under parallel requests.
+ */
+declare class TokenManager {
+    private readonly tenantId;
+    private readonly apiBase;
+    private state;
+    private refreshPromise;
+    constructor(tenantId: string, apiBase: string);
+    getToken(): Promise<string>;
+    private refresh;
+}
+
+interface Source {
+    path: string;
+    title: string;
+    confidence: number;
+    excerpt?: string;
+    /** Original public URL from wiki entry frontmatter (sourceUrl). Present only for URL-ingested entries. */
+    url?: string;
+}
+interface Turn {
+    role: "user" | "assistant";
+    content: string;
+    confidence?: number;
+    sources?: Source[];
+    flaggedForReview?: boolean;
+    reaction?: "helpful" | "unhelpful" | null;
+    /** True when this answer triggered an auto-escalation */
+    escalated?: boolean;
+    /** True when this message came from a live human agent */
+    isLiveAgent?: boolean;
+}
+interface QueryResponse {
+    answer: string;
+    sources: Source[];
+    confidence: number;
+    flaggedForReview: boolean;
+    sessionId: string;
+    escalated?: boolean;
+    escalationReason?: string;
+}
+interface EscalateResponse {
+    data?: {
+        escalationId?: string;
+        handoverMode?: string;
+        handoverUrl?: string;
+    };
+    escalationId?: string;
+    handoverMode?: string;
+    handoverUrl?: string;
+}
+interface HistoryTurn {
+    id: string;
+    query: string;
+    response: string;
+    createdAt: string;
+}
+interface HistorySession {
+    sessionId: string;
+    createdAt: string;
+    updatedAt?: string;
+    /** Preview of the first message in the session */
+    preview?: string;
+    turnCount?: number;
+}
+interface LiveMessage {
+    id: string;
+    senderRole?: "agent" | "customer";
+    content: string;
+    createdAt: string;
+}
+
+interface QueryOptions {
+    question: string;
+    sessionId: string | null;
+    token: string;
+    apiBase: string;
+    /** Extra headers to include (e.g. x-customer-token). */
+    extraHeaders?: Record<string, string>;
+}
+/**
+ * Send a query via REST POST /api/v1/query.
+ * Used as fallback when SSE is not available.
+ */
+declare function queryRest(opts: QueryOptions): Promise<QueryResponse>;
+/**
+ * Send a query via Server-Sent Events streaming.
+ * Calls `onToken` with each streamed delta, then resolves with the final response.
+ */
+declare function querySSE(opts: QueryOptions, onToken: (delta: string) => void): Promise<QueryResponse>;
+/**
+ * Fetch the most recent resumable session for an identified customer.
+ * Returns the sessionId if found within the resume window, null otherwise.
+ */
+declare function fetchRecentSessionId(customerToken: string, widgetToken: string, apiBase: string): Promise<string | null>;
+/**
+ * Fetch all turns for a session (read-only history view).
+ */
+declare function fetchSessionTurns(sessionId: string, widgetToken: string, apiBase: string): Promise<HistoryTurn[]>;
+/**
+ * POST a reaction (thumbs up/down) for a turn.
+ * D-013: explicit reaction capture via PATCH /api/v1/sessions/:id/reaction.
+ */
+declare function postReaction(sessionId: string, reaction: "helpful" | "unhelpful", citedPaths: string[], token: string, apiBase: string): Promise<void>;
+/**
+ * Send a customer message during a live handover session.
+ */
+declare function postCustomerMessage(escalationId: string, content: string, token: string, apiBase: string): Promise<void>;
+/**
+ * Fetch live messages from a claimed escalation (human agent replies).
+ * Used to poll for new messages during live handover.
+ */
+declare function fetchLiveMessages(escalationId: string, token: string, apiBase: string): Promise<LiveMessage[]>;
+/**
+ * Update the pageContext for a session (SPA navigation support).
+ */
+declare function patchPageContext(sessionId: string, ctx: Record<string, unknown>, token: string, apiBase: string): Promise<void>;
+/**
+ * Trigger escalation to a human agent.
+ * Returns the raw JSON response or null on failure.
+ */
+declare function postEscalate(sessionId: string, reason: string, token: string, apiBase: string): Promise<unknown>;
+
+export { type EscalateResponse, type HistorySession, type HistoryTurn, type LiveMessage, type QueryResponse, type Source, TokenManager, type Turn, fetchLiveMessages, fetchRecentSessionId, fetchSessionTurns, patchPageContext, postCustomerMessage, postEscalate, postReaction, queryRest, querySSE };

package/dist/index.js

@@ -0,0 +1,181 @@
+// src/token.ts
+var TokenManager = class {
+  constructor(tenantId, apiBase) {
+    this.tenantId = tenantId;
+    this.apiBase = apiBase;
+  }
+  tenantId;
+  apiBase;
+  state = null;
+  refreshPromise = null;
+  async getToken() {
+    if (!this.state || Date.now() >= this.state.expiresAt - 6e4) {
+      if (!this.refreshPromise) {
+        this.refreshPromise = this.refresh().finally(() => {
+          this.refreshPromise = null;
+        });
+      }
+      return this.refreshPromise;
+    }
+    return this.state.token;
+  }
+  async refresh() {
+    const res = await fetch(`${this.apiBase}/api/v1/auth/widget-token`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ tenantId: this.tenantId })
+    });
+    if (!res.ok) {
+      throw new Error(`Panacea: token refresh failed (${res.status})`);
+    }
+    const data = await res.json();
+    this.state = {
+      token: data.token,
+      expiresAt: new Date(data.expiresAt).getTime()
+    };
+    return this.state.token;
+  }
+};
+
+// src/api.ts
+async function queryRest(opts) {
+  const res = await fetch(`${opts.apiBase}/api/v1/query`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${opts.token}`,
+      ...opts.extraHeaders
+    },
+    body: JSON.stringify({ question: opts.question, sessionId: opts.sessionId })
+  });
+  if (!res.ok) {
+    const err = await res.json().catch(() => null);
+    throw new Error(
+      err?.error?.message ?? `Panacea: query failed (${res.status})`
+    );
+  }
+  return res.json();
+}
+async function querySSE(opts, onToken) {
+  const res = await fetch(`${opts.apiBase}/api/v1/query`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${opts.token}`,
+      Accept: "text/event-stream",
+      ...opts.extraHeaders
+    },
+    body: JSON.stringify({ question: opts.question, sessionId: opts.sessionId })
+  });
+  if (!res.ok || !res.body) {
+    throw new Error(`Panacea: SSE query failed (${res.status})`);
+  }
+  const reader = res.body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  let finalResponse = null;
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    buffer += decoder.decode(value, { stream: true });
+    const lines = buffer.split("\n");
+    buffer = lines.pop() ?? "";
+    for (const line of lines) {
+      if (!line.startsWith("data: ")) continue;
+      const raw = line.slice(6).trim();
+      if (!raw || raw === "[DONE]") continue;
+      try {
+        const frame = JSON.parse(raw);
+        if (frame.type === "token" && frame.delta) {
+          onToken(frame.delta);
+        } else if (frame.type === "done") {
+          finalResponse = {
+            answer: frame.answer ?? "",
+            sources: frame.sources ?? [],
+            confidence: frame.confidence ?? 0,
+            flaggedForReview: frame.flaggedForReview ?? false,
+            sessionId: frame.sessionId ?? "",
+            escalated: frame.escalated
+          };
+        } else if (frame.type === "error") {
+          throw new Error(frame.message ?? "SSE stream error");
+        }
+      } catch {
+      }
+    }
+  }
+  if (!finalResponse) throw new Error("Panacea: SSE stream ended without done frame");
+  return finalResponse;
+}
+async function fetchRecentSessionId(customerToken, widgetToken, apiBase) {
+  const url = new URL(`${apiBase}/api/v1/sessions/resume`);
+  url.searchParams.set("customerToken", customerToken);
+  const res = await fetch(url.toString(), {
+    headers: { Authorization: `Bearer ${widgetToken}` }
+  });
+  if (!res.ok) return null;
+  const data = await res.json();
+  return data?.session?.sessionId ?? null;
+}
+async function fetchSessionTurns(sessionId, widgetToken, apiBase) {
+  const res = await fetch(`${apiBase}/api/v1/sessions/${sessionId}/turns`, {
+    headers: { Authorization: `Bearer ${widgetToken}` }
+  });
+  if (!res.ok) return [];
+  const data = await res.json();
+  return data?.data?.turns ?? data?.turns ?? [];
+}
+async function postReaction(sessionId, reaction, citedPaths, token, apiBase) {
+  await fetch(`${apiBase}/api/v1/sessions/${sessionId}/reaction`, {
+    method: "PATCH",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({ reaction, citedPaths })
+  });
+}
+async function postCustomerMessage(escalationId, content, token, apiBase) {
+  await fetch(`${apiBase}/api/v1/inbox/${escalationId}/customer-message`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({ content })
+  });
+}
+async function fetchLiveMessages(escalationId, token, apiBase) {
+  const res = await fetch(`${apiBase}/api/v1/inbox/${escalationId}/messages`, {
+    headers: { Authorization: `Bearer ${token}` }
+  });
+  if (!res.ok) return [];
+  const data = await res.json();
+  return data?.data?.messages ?? data?.messages ?? [];
+}
+async function patchPageContext(sessionId, ctx, token, apiBase) {
+  await fetch(`${apiBase}/api/v1/sessions/${sessionId}`, {
+    method: "PATCH",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({ pageContext: ctx })
+  });
+}
+async function postEscalate(sessionId, reason, token, apiBase) {
+  const res = await fetch(`${apiBase}/api/v1/sessions/${sessionId}/escalate`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({ reason })
+  });
+  if (!res.ok) return null;
+  return res.json();
+}
+
+export { TokenManager, fetchLiveMessages, fetchRecentSessionId, fetchSessionTurns, patchPageContext, postCustomerMessage, postEscalate, postReaction, queryRest, querySSE };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/token.ts","../src/api.ts"],"names":[],"mappings":";AAWO,IAAM,eAAN,MAAmB;AAAA,EAIxB,WAAA,CACmB,UACA,OAAA,EACjB;AAFiB,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAChB;AAAA,EAFgB,QAAA;AAAA,EACA,OAAA;AAAA,EALX,KAAA,GAA2B,IAAA;AAAA,EAC3B,cAAA,GAAyC,IAAA;AAAA,EAOjD,MAAM,QAAA,GAA4B;AAChC,IAAA,IAAI,CAAC,KAAK,KAAA,IAAS,IAAA,CAAK,KAAI,IAAK,IAAA,CAAK,KAAA,CAAM,SAAA,GAAY,GAAA,EAAQ;AAC9D,MAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AACxB,QAAA,IAAA,CAAK,cAAA,GAAiB,IAAA,CAAK,OAAA,EAAQ,CAAE,QAAQ,MAAM;AACjD,UAAA,IAAA,CAAK,cAAA,GAAiB,IAAA;AAAA,QACxB,CAAC,CAAA;AAAA,MACH;AACA,MAAA,OAAO,IAAA,CAAK,cAAA;AAAA,IACd;AACA,IAAA,OAAO,KAAK,KAAA,CAAM,KAAA;AAAA,EACpB;AAAA,EAEA,MAAc,OAAA,GAA2B;AACvC,IAAA,MAAM,MAAM,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,yBAAA,CAAA,EAA6B;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,IAAA,CAAK,UAAU;AAAA,KACjD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,GAAA,CAAI,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,IACjE;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,IAAA,CAAK,KAAA,GAAQ;AAAA,MACX,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,WAAW,IAAI,IAAA,CAAK,IAAA,CAAK,SAAS,EAAE,OAAA;AAAQ,KAC9C;AACA,IAAA,OAAO,KAAK,KAAA,CAAM,KAAA;AAAA,EACpB;AACF;;;AC/BA,eAAsB,UAAU,IAAA,EAA4C;AAC1E,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,aAAA,CAAA,EAAiB;AAAA,IACtD,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,KAAK,CAAA,CAAA;AAAA,MACnC,GAAG,IAAA,CAAK;AAAA,KACV;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,KAAK,QAAA,EAAU,SAAA,EAAW,IAAA,CAAK,SAAA,EAAW;AAAA,GAC5E,CAAA;AAED,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,MAAM,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAC7C,IAAA,MAAM,IAAI,KAAA;AAAA,MACP,GAAA,EAA0C,KAAA,EAAO,OAAA,IAChD,CAAA,uBAAA,EAA0B,IAAI,MAAM,CAAA,CAAA;AAAA,KACxC;AAAA,EACF;AAEA,EAAA,OAAO,IAAI,IAAA,EAAK;AAClB;AAMA,eAAsB,QAAA,CACpB,MACA,OAAA,EACwB;AACxB,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,aAAA,CAAA,EAAiB;AAAA,IACtD,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,KAAK,CAAA,CAAA;AAAA,MACnC,MAAA,EAAQ,mBAAA;AAAA,MACR,GAAG,IAAA,CAAK;AAAA,KACV;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,KAAK,QAAA,EAAU,SAAA,EAAW,IAAA,CAAK,SAAA,EAAW;AAAA,GAC5E,CAAA;AAED,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,IAAM,CAAC,IAAI,IAAA,EAAM;AACxB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,GAAA,CAAI,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EAC7D;AAEA,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,IAAA,CAAK,SAAA,EAAU;AAClC,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,aAAA,GAAsC,IAAA;AAG1C,EAAA,OAAO,IAAA,EAAM;AACX,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,MAAA,IAAU,QAAQ,MAAA,CAAO,KAAA,EAAO,EAAE,MAAA,EAAQ,MAAM,CAAA;AAChD,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAC/B,IAAA,MAAA,GAAS,KAAA,CAAM,KAAI,IAAK,EAAA;AAExB,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA,EAAG;AAChC,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,CAAC,EAAE,IAAA,EAAK;AAC/B,MAAA,IAAI,CAAC,GAAA,IAAO,GAAA,KAAQ,QAAA,EAAU;AAC9B,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAW5B,QAAA,IAAI,KAAA,CAAM,IAAA,KAAS,OAAA,IAAW,KAAA,CAAM,KAAA,EAAO;AACzC,UAAA,OAAA,CAAQ,MAAM,KAAK,CAAA;AAAA,QACrB,CAAA,MAAA,IAAW,KAAA,CAAM,IAAA,KAAS,MAAA,EAAQ;AAChC,UAAA,aAAA,GAAgB;AAAA,YACd,MAAA,EAAQ,MAAM,MAAA,IAAU,EAAA;AAAA,YACxB,OAAA,EAAS,KAAA,CAAM,OAAA,IAAW,EAAC;AAAA,YAC3B,UAAA,EAAY,MAAM,UAAA,IAAc,CAAA;AAAA,YAChC,gBAAA,EAAkB,MAAM,gBAAA,IAAoB,KAAA;AAAA,YAC5C,SAAA,EAAW,MAAM,SAAA,IAAa,EAAA;AAAA,YAC9B,WAAW,KAAA,CAAM;AAAA,WACnB;AAAA,QACF,CAAA,MAAA,IAAW,KAAA,CAAM,IAAA,KAAS,OAAA,EAAS;AACjC,UAAA,MAAM,IAAI,KAAA,CAAM,KAAA,CAAM,OAAA,IAAW,kBAAkB,CAAA;AAAA,QACrD;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,aAAA,EAAe,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAClF,EAAA,OAAO,aAAA;AACT;AAUA,eAAsB,oBAAA,CACpB,aAAA,EACA,WAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,OAAO,CAAA,uBAAA,CAAyB,CAAA;AACvD,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,eAAA,EAAiB,aAAa,CAAA;AAEnD,EAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,IACtC,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,WAAW,CAAA,CAAA;AAAG,GACnD,CAAA;AAED,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,IAAA;AAEpB,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,EAAA,OAAO,IAAA,EAAM,SAAS,SAAA,IAAa,IAAA;AACrC;AAKA,eAAsB,iBAAA,CACpB,SAAA,EACA,WAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,GAAG,OAAO,CAAA,iBAAA,EAAoB,SAAS,CAAA,MAAA,CAAA,EAAU;AAAA,IACvE,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,WAAW,CAAA,CAAA;AAAG,GACnD,CAAA;AAED,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,EAAC;AAErB,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAI7B,EAAA,OAAO,IAAA,EAAM,IAAA,EAAM,KAAA,IAAS,IAAA,EAAM,SAAS,EAAC;AAC9C;AAUA,eAAsB,YAAA,CACpB,SAAA,EACA,QAAA,EACA,UAAA,EACA,OACA,OAAA,EACe;AACf,EAAA,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,iBAAA,EAAoB,SAAS,CAAA,SAAA,CAAA,EAAa;AAAA,IAC9D,MAAA,EAAQ,OAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,UAAU,KAAK,CAAA;AAAA,KAChC;AAAA,IACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,YAAY;AAAA,GAC9C,CAAA;AACH;AASA,eAAsB,mBAAA,CACpB,YAAA,EACA,OAAA,EACA,KAAA,EACA,OAAA,EACe;AACf,EAAA,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,cAAA,EAAiB,YAAY,CAAA,iBAAA,CAAA,EAAqB;AAAA,IACtE,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,UAAU,KAAK,CAAA;AAAA,KAChC;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,SAAS;AAAA,GACjC,CAAA;AACH;AAMA,eAAsB,iBAAA,CACpB,YAAA,EACA,KAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,GAAG,OAAO,CAAA,cAAA,EAAiB,YAAY,CAAA,SAAA,CAAA,EAAa;AAAA,IAC1E,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AAAG,GAC7C,CAAA;AAED,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,EAAC;AAErB,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAI7B,EAAA,OAAO,IAAA,EAAM,IAAA,EAAM,QAAA,IAAY,IAAA,EAAM,YAAY,EAAC;AACpD;AASA,eAAsB,gBAAA,CACpB,SAAA,EACA,GAAA,EACA,KAAA,EACA,OAAA,EACe;AACf,EAAA,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAA,EAAI;AAAA,IACrD,MAAA,EAAQ,OAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,UAAU,KAAK,CAAA;AAAA,KAChC;AAAA,IACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,WAAA,EAAa,KAAK;AAAA,GAC1C,CAAA;AACH;AAMA,eAAsB,YAAA,CACpB,SAAA,EACA,MAAA,EACA,KAAA,EACA,OAAA,EACkB;AAClB,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,GAAG,OAAO,CAAA,iBAAA,EAAoB,SAAS,CAAA,SAAA,CAAA,EAAa;AAAA,IAC1E,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,UAAU,KAAK,CAAA;AAAA,KAChC;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAQ;AAAA,GAChC,CAAA;AACD,EAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,IAAA;AACpB,EAAA,OAAO,IAAI,IAAA,EAAK;AAClB","file":"index.js","sourcesContent":["interface TokenState {\n  token: string;\n  /** unix ms */\n  expiresAt: number;\n}\n\n/**\n * Manages the short-lived widget JWT (15 min TTL).\n * Auto-refreshes 60 s before expiry. Concurrent callers share one in-flight\n * refresh promise so the token is only fetched once even under parallel requests.\n */\nexport class TokenManager {\n  private state: TokenState | null = null;\n  private refreshPromise: Promise<string> | null = null;\n\n  constructor(\n    private readonly tenantId: string,\n    private readonly apiBase: string,\n  ) {}\n\n  async getToken(): Promise<string> {\n    if (!this.state || Date.now() >= this.state.expiresAt - 60_000) {\n      if (!this.refreshPromise) {\n        this.refreshPromise = this.refresh().finally(() => {\n          this.refreshPromise = null;\n        });\n      }\n      return this.refreshPromise;\n    }\n    return this.state.token;\n  }\n\n  private async refresh(): Promise<string> {\n    const res = await fetch(`${this.apiBase}/api/v1/auth/widget-token`, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ tenantId: this.tenantId }),\n    });\n\n    if (!res.ok) {\n      throw new Error(`Panacea: token refresh failed (${res.status})`);\n    }\n\n    const data = (await res.json()) as { token: string; expiresAt: string };\n    this.state = {\n      token: data.token,\n      expiresAt: new Date(data.expiresAt).getTime(),\n    };\n    return this.state.token;\n  }\n}\n","import type { QueryResponse, HistoryTurn, LiveMessage } from \"./types\";\n\n// ---------------------------------------------------------------------------\n// Query\n// ---------------------------------------------------------------------------\n\ninterface QueryOptions {\n  question: string;\n  sessionId: string | null;\n  token: string;\n  apiBase: string;\n  /** Extra headers to include (e.g. x-customer-token). */\n  extraHeaders?: Record<string, string>;\n}\n\n/**\n * Send a query via REST POST /api/v1/query.\n * Used as fallback when SSE is not available.\n */\nexport async function queryRest(opts: QueryOptions): Promise<QueryResponse> {\n  const res = await fetch(`${opts.apiBase}/api/v1/query`, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${opts.token}`,\n      ...opts.extraHeaders,\n    },\n    body: JSON.stringify({ question: opts.question, sessionId: opts.sessionId }),\n  });\n\n  if (!res.ok) {\n    const err = await res.json().catch(() => null);\n    throw new Error(\n      (err as { error?: { message?: string } })?.error?.message ??\n        `Panacea: query failed (${res.status})`,\n    );\n  }\n\n  return res.json() as Promise<QueryResponse>;\n}\n\n/**\n * Send a query via Server-Sent Events streaming.\n * Calls `onToken` with each streamed delta, then resolves with the final response.\n */\nexport async function querySSE(\n  opts: QueryOptions,\n  onToken: (delta: string) => void,\n): Promise<QueryResponse> {\n  const res = await fetch(`${opts.apiBase}/api/v1/query`, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${opts.token}`,\n      Accept: \"text/event-stream\",\n      ...opts.extraHeaders,\n    },\n    body: JSON.stringify({ question: opts.question, sessionId: opts.sessionId }),\n  });\n\n  if (!res.ok || !res.body) {\n    throw new Error(`Panacea: SSE query failed (${res.status})`);\n  }\n\n  const reader = res.body.getReader();\n  const decoder = new TextDecoder();\n  let buffer = \"\";\n  let finalResponse: QueryResponse | null = null;\n\n  // eslint-disable-next-line no-constant-condition\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    buffer += decoder.decode(value, { stream: true });\n    const lines = buffer.split(\"\\n\");\n    buffer = lines.pop() ?? \"\";\n\n    for (const line of lines) {\n      if (!line.startsWith(\"data: \")) continue;\n      const raw = line.slice(6).trim();\n      if (!raw || raw === \"[DONE]\") continue;\n      try {\n        const frame = JSON.parse(raw) as {\n          type: \"token\" | \"done\" | \"error\";\n          delta?: string;\n          answer?: string;\n          sources?: QueryResponse[\"sources\"];\n          confidence?: number;\n          sessionId?: string;\n          flaggedForReview?: boolean;\n          escalated?: boolean;\n          message?: string;\n        };\n        if (frame.type === \"token\" && frame.delta) {\n          onToken(frame.delta);\n        } else if (frame.type === \"done\") {\n          finalResponse = {\n            answer: frame.answer ?? \"\",\n            sources: frame.sources ?? [],\n            confidence: frame.confidence ?? 0,\n            flaggedForReview: frame.flaggedForReview ?? false,\n            sessionId: frame.sessionId ?? \"\",\n            escalated: frame.escalated,\n          };\n        } else if (frame.type === \"error\") {\n          throw new Error(frame.message ?? \"SSE stream error\");\n        }\n      } catch {\n        // ignore malformed frames\n      }\n    }\n  }\n\n  if (!finalResponse) throw new Error(\"Panacea: SSE stream ended without done frame\");\n  return finalResponse;\n}\n\n// ---------------------------------------------------------------------------\n// Session helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Fetch the most recent resumable session for an identified customer.\n * Returns the sessionId if found within the resume window, null otherwise.\n */\nexport async function fetchRecentSessionId(\n  customerToken: string,\n  widgetToken: string,\n  apiBase: string,\n): Promise<string | null> {\n  const url = new URL(`${apiBase}/api/v1/sessions/resume`);\n  url.searchParams.set(\"customerToken\", customerToken);\n\n  const res = await fetch(url.toString(), {\n    headers: { Authorization: `Bearer ${widgetToken}` },\n  });\n\n  if (!res.ok) return null;\n\n  const data = (await res.json()) as { session: { sessionId: string } | null };\n  return data?.session?.sessionId ?? null;\n}\n\n/**\n * Fetch all turns for a session (read-only history view).\n */\nexport async function fetchSessionTurns(\n  sessionId: string,\n  widgetToken: string,\n  apiBase: string,\n): Promise<HistoryTurn[]> {\n  const res = await fetch(`${apiBase}/api/v1/sessions/${sessionId}/turns`, {\n    headers: { Authorization: `Bearer ${widgetToken}` },\n  });\n\n  if (!res.ok) return [];\n\n  const data = (await res.json()) as {\n    data?: { turns?: HistoryTurn[] };\n    turns?: HistoryTurn[];\n  };\n  return data?.data?.turns ?? data?.turns ?? [];\n}\n\n// ---------------------------------------------------------------------------\n// Reaction\n// ---------------------------------------------------------------------------\n\n/**\n * POST a reaction (thumbs up/down) for a turn.\n * D-013: explicit reaction capture via PATCH /api/v1/sessions/:id/reaction.\n */\nexport async function postReaction(\n  sessionId: string,\n  reaction: \"helpful\" | \"unhelpful\",\n  citedPaths: string[],\n  token: string,\n  apiBase: string,\n): Promise<void> {\n  await fetch(`${apiBase}/api/v1/sessions/${sessionId}/reaction`, {\n    method: \"PATCH\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${token}`,\n    },\n    body: JSON.stringify({ reaction, citedPaths }),\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Live handover helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Send a customer message during a live handover session.\n */\nexport async function postCustomerMessage(\n  escalationId: string,\n  content: string,\n  token: string,\n  apiBase: string,\n): Promise<void> {\n  await fetch(`${apiBase}/api/v1/inbox/${escalationId}/customer-message`, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${token}`,\n    },\n    body: JSON.stringify({ content }),\n  });\n}\n\n/**\n * Fetch live messages from a claimed escalation (human agent replies).\n * Used to poll for new messages during live handover.\n */\nexport async function fetchLiveMessages(\n  escalationId: string,\n  token: string,\n  apiBase: string,\n): Promise<LiveMessage[]> {\n  const res = await fetch(`${apiBase}/api/v1/inbox/${escalationId}/messages`, {\n    headers: { Authorization: `Bearer ${token}` },\n  });\n\n  if (!res.ok) return [];\n\n  const data = (await res.json()) as {\n    data?: { messages?: LiveMessage[] };\n    messages?: LiveMessage[];\n  };\n  return data?.data?.messages ?? data?.messages ?? [];\n}\n\n// ---------------------------------------------------------------------------\n// Page context\n// ---------------------------------------------------------------------------\n\n/**\n * Update the pageContext for a session (SPA navigation support).\n */\nexport async function patchPageContext(\n  sessionId: string,\n  ctx: Record<string, unknown>,\n  token: string,\n  apiBase: string,\n): Promise<void> {\n  await fetch(`${apiBase}/api/v1/sessions/${sessionId}`, {\n    method: \"PATCH\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${token}`,\n    },\n    body: JSON.stringify({ pageContext: ctx }),\n  });\n}\n\n/**\n * Trigger escalation to a human agent.\n * Returns the raw JSON response or null on failure.\n */\nexport async function postEscalate(\n  sessionId: string,\n  reason: string,\n  token: string,\n  apiBase: string,\n): Promise<unknown> {\n  const res = await fetch(`${apiBase}/api/v1/sessions/${sessionId}/escalate`, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Bearer ${token}`,\n    },\n    body: JSON.stringify({ reason }),\n  });\n  if (!res.ok) return null;\n  return res.json();\n}\n"]}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@usepanacea/client",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "Framework-agnostic API client for Panacea — shared by widget and React packages",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aevrHQ/panacea.git",
+    "directory": "packages/client"
+  },
+  "keywords": ["panacea", "client", "api", "support", "chat"],
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": ["dist"],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "devDependencies": {
+    "tsup": "^8.5.0",
+    "typescript": "^5.8.3"
+  }
+}