@xapp/chat-widget 1.105.6 → 1.107.0

package/dist/index.js

@@ -3490,17 +3490,24 @@ var CLICK_ID_PARAMETERS = [
     "fbclid"
 ];
 var ATTRIBUTION_PARAMETERS = __spreadArray(__spreadArray([], UTM_PARAMETERS, true), CLICK_ID_PARAMETERS);
+/**
+ * Params AI surfaces put on the links they send people to: Google AI Overviews
+ * (`st_source=ai_overview`), Google's `srsltid` click id, and the generic `ref` / `source`
+ * that ChatGPT, Perplexity and others use. Read only by the widget `load` event, never stored and
+ * never sent with chat messages.
+ */
+var AI_REFERRAL_PARAMETERS = ["st_source", "srsltid", "ref", "source"];
 var STORAGE_KEY_PREFIX = "xa_tracking_";
 /** Matches the 30 day window the form widget already uses. */
 var DEFAULT_PERSISTENCE_DAYS = 30;
-var MAX_VALUE_LENGTH = 255;
+var MAX_VALUE_LENGTH$1 = 255;
 /**
  * Values land in a request body and, downstream, in a CRM. Cap the length and
  * reject anything carrying markup or control characters.
  */
-function isValidValue(value) {
+function isValidValue$1(value) {
     // eslint-disable-next-line no-control-regex
-    return value.length <= MAX_VALUE_LENGTH && !/[<>"'\x00-\x1f]/.test(value);
+    return value.length <= MAX_VALUE_LENGTH$1 && !/[<>"'\x00-\x1f]/.test(value);
 }
 /**
  * Reads the attribution parameters present on a URL. Never throws — a URL we
@@ -3517,7 +3524,7 @@ function extractAttributionFromUrl(url) {
     var attribution = {};
     ATTRIBUTION_PARAMETERS.forEach(function (parameter) {
         var value = parsed.searchParams.get(parameter);
-        if (value && isValidValue(value)) {
+        if (value && isValidValue$1(value)) {
             attribution[parameter] = value;
         }
     });
@@ -3609,6 +3616,78 @@ function stripQueryString(url) {
         return undefined;
     }
 }
+/**
+ * A minimal client for the tenant's homeowner MCP endpoint: one `tools/call` per request, no
+ * session. The endpoint is public and the server keeps no state we need, so the MCP
+ * initialize handshake would only add a round trip (and a session the next App Runner
+ * instance has never heard of).
+ */
+/** @class */ ((function () {
+    function HomeownerMcpClient(mcpUrl, fetchImpl) {
+        this.mcpUrl = mcpUrl;
+        this.nextId = 1;
+        this.fetchImpl = fetchImpl || (typeof fetch === "function" ? fetch : undefined);
+    }
+    HomeownerMcpClient.prototype.callTool = function (name, args) {
+        return __awaiter(this, void 0, void 0, function () {
+            var response, body;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (typeof this.fetchImpl !== "function") {
+                            throw new Error("fetch is not available");
+                        }
+                        return [4 /*yield*/, this.fetchImpl(this.mcpUrl, {
+                                method: "POST",
+                                headers: { "Content-Type": "application/json", Accept: "application/json" },
+                                body: JSON.stringify({
+                                    jsonrpc: "2.0",
+                                    id: this.nextId++,
+                                    method: "tools/call",
+                                    params: { name: name, arguments: args },
+                                }),
+                            })];
+                    case 1:
+                        response = _a.sent();
+                        if (!response.ok) {
+                            throw new Error("MCP endpoint answered ".concat(response.status));
+                        }
+                        return [4 /*yield*/, response.json()];
+                    case 2:
+                        body = (_a.sent());
+                        if (body.error) {
+                            throw new Error(body.error.message || "MCP error ".concat(body.error.code));
+                        }
+                        return [2 /*return*/, toolResultToValue(body.result)];
+                }
+            });
+        });
+    };
+    return HomeownerMcpClient;
+})());
+/**
+ * MCP tool results are text parts; agents want a value. JSON text becomes the object it
+ * encodes, prose stays `{ text }`, and a tool-level error becomes `{ ok: false, message }` so
+ * the agent can read the validation message and try again rather than seeing a thrown call.
+ */
+function toolResultToValue(result) {
+    var text = ((result === null || result === void 0 ? void 0 : result.content) || [])
+        .filter(function (part) { return part.type === "text" && typeof part.text === "string"; })
+        .map(function (part) { return part.text; })
+        .join("\n");
+    if (result === null || result === void 0 ? void 0 : result.isError) {
+        return { ok: false, message: text };
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch (_a) {
+        return { text: text };
+    }
+}
+
+/** Page params whose VALUES the load event may send, each as its own metadata field. */
+__spreadArray(__spreadArray([], ATTRIBUTION_PARAMETERS, true), AI_REFERRAL_PARAMETERS);
 
 /**
  * Stop the host page scrolling behind an open overlay.
@@ -15623,11 +15702,26 @@ var ModalContent = function (_a) {
 /**
  * Id the visitor (cookies, browser fingerprint, etc)
  *
+ * Kept in localStorage so the widget's load event, which fires before the chat store exists,
+ * reports the same id the store goes on to adopt for a first-time visitor.
+ *
  * @export
  * @returns {string}
  */
+var VISITOR_ID_KEY = "xapp_chat_visitorId";
 function visitorFingerprint() {
-    return uuid_1();
+    try {
+        var stored = localStorage.getItem(VISITOR_ID_KEY);
+        if (stored) {
+            return stored;
+        }
+        var id = uuid_1();
+        localStorage.setItem(VISITOR_ID_KEY, id);
+        return id;
+    }
+    catch (_a) {
+        return uuid_1();
+    }
 }
 
 var DEFAULT_VISITOR = {