open-chat-studio-widget 0.8.0 → 0.9.1

package/dist/components/open-chat-studio-widget.js

@@ -4468,6 +4468,8 @@ var ar = {
 	"status.starting": "جارٍ بدء المحادثة...",
 	"status.typing": "جارٍ تحضير الرد",
 	"status.uploading": "جارٍ التحميل",
+	"status.sessionExpired": "انتهت صلاحية جلسة الدردشة. سيتم بدء محادثة جديدة — يُرجى إعادة إرسال رسالتك.",
+	"status.sessionError": "لم تعد جلسة الدردشة هذه متاحة.",
 	"modal.newChatTitle": "بدء محادثة جديدة",
 	"modal.newChatBody": "بدء محادثة جديدة سيؤدي إلى مسح المحادثة الحالية. هل ترغب بالمتابعة؟",
 	"modal.cancel": "إلغاء",
@@ -4500,6 +4502,8 @@ var en = {
 	"status.starting": "Starting chat...",
 	"status.typing": "Preparing response",
 	"status.uploading": "Uploading",
+	"status.sessionExpired": "Your chat session expired. Starting a new chat — please resend your message.",
+	"status.sessionError": "This chat session is no longer available.",
 	"modal.newChatTitle": "Start New Chat",
 	"modal.newChatBody": "Starting a new chat will clear your current conversation. Continue?",
 	"modal.cancel": "Cancel",
@@ -4532,6 +4536,8 @@ var es = {
 	"status.starting": "Iniciando chat...",
 	"status.typing": "Preparando respuesta",
 	"status.uploading": "Subiendo",
+	"status.sessionExpired": "Tu sesión de chat ha expirado. Se iniciará un nuevo chat: vuelve a enviar tu mensaje.",
+	"status.sessionError": "Esta sesión de chat ya no está disponible.",
 	"modal.newChatTitle": "Iniciar Nuevo Chat",
 	"modal.newChatBody": "Iniciar un nuevo chat borrará tu conversación actual. ¿Continuar?",
 	"modal.cancel": "Cancelar",
@@ -4564,6 +4570,8 @@ var fr = {
 	"status.starting": "Démarrage du chat...",
 	"status.typing": "Préparation de la réponse",
 	"status.uploading": "Téléversement",
+	"status.sessionExpired": "Votre session de chat a expiré. Un nouveau chat va démarrer — veuillez renvoyer votre message.",
+	"status.sessionError": "Cette session de chat n'est plus disponible.",
 	"modal.newChatTitle": "Nouveau Chat",
 	"modal.newChatBody": "Démarrer un nouveau chat effacera votre conversation actuelle. Continuer?",
 	"modal.cancel": "Annuler",
@@ -4596,6 +4604,8 @@ var hi = {
 	"status.starting": "चैट शुरू हो रही है...",
 	"status.typing": "जवाब तैयार किया जा रहा है",
 	"status.uploading": "अपलोड हो रहा है",
+	"status.sessionExpired": "आपका चैट सत्र समाप्त हो गया है। एक नई चैट शुरू हो रही है — कृपया अपना संदेश फिर से भेजें।",
+	"status.sessionError": "यह चैट सत्र अब उपलब्ध नहीं है।",
 	"modal.newChatTitle": "नई चैट शुरू करें",
 	"modal.newChatBody": "नई चैट शुरू करने से आपकी मौजूदा बातचीत हट जाएगी। क्या आप जारी रखना चाहते हैं?",
 	"modal.cancel": "रद्द करें",
@@ -4628,6 +4638,8 @@ var it = {
 	"status.starting": "Avvio della chat...",
 	"status.typing": "Preparazione della risposta",
 	"status.uploading": "Caricamento",
+	"status.sessionExpired": "La tua sessione di chat è scaduta. Verrà avviata una nuova chat: invia di nuovo il tuo messaggio.",
+	"status.sessionError": "Questa sessione di chat non è più disponibile.",
 	"modal.newChatTitle": "Avvia nuova chat",
 	"modal.newChatBody": "Avviare una nuova chat cancellerà la conversazione attuale. Continuare?",
 	"modal.cancel": "Annulla",
@@ -4660,6 +4672,8 @@ var pt = {
 	"status.starting": "Iniciando chat...",
 	"status.typing": "Preparando resposta",
 	"status.uploading": "Carregando",
+	"status.sessionExpired": "Sua sessão de chat expirou. Iniciando um novo chat — reenvie sua mensagem.",
+	"status.sessionError": "Esta sessão de chat não está mais disponível.",
 	"modal.newChatTitle": "Iniciar novo chat",
 	"modal.newChatBody": "Iniciar um novo chat apagará sua conversa atual. Deseja continuar?",
 	"modal.cancel": "Cancelar",
@@ -4692,6 +4706,8 @@ var sw = {
 	"status.starting": "Inaanzisha gumzo...",
 	"status.typing": "Inatayarisha jibu",
 	"status.uploading": "Inapakia",
+	"status.sessionExpired": "Kipindi chako cha gumzo kimeisha. Gumzo jipya linaanza — tafadhali tuma tena ujumbe wako.",
+	"status.sessionError": "Kipindi hiki cha gumzo hakipatikani tena.",
 	"modal.newChatTitle": "Anza gumzo jipya",
 	"modal.newChatBody": "Kuanza gumzo jipya kutafuta gumzo lako la sasa. Je, ungependa kuendelea?",
 	"modal.cancel": "Ghairi",
@@ -4724,6 +4740,8 @@ var uk = {
 	"status.starting": "Запуск чату...",
 	"status.typing": "Готується відповідь",
 	"status.uploading": "Завантаження",
+	"status.sessionExpired": "Ваш сеанс чату завершився. Розпочинається новий чат — будь ласка, надішліть повідомлення ще раз.",
+	"status.sessionError": "Цей сеанс чату більше недоступний.",
 	"modal.newChatTitle": "Почати новий чат",
 	"modal.newChatBody": "Початок нового чату видалить вашу поточну розмову. Продовжити?",
 	"modal.cancel": "Скасувати",
@@ -4980,55 +4998,54 @@ function currentDomainMatchesApiBaseUrl(apiBaseUrl) {
     return window.location.origin === apiBase.origin;
 }
 
+class SessionAccessError extends Error {
+    constructor(status, code, message) {
+        super(message);
+        this.name = 'SessionAccessError';
+        this.status = status;
+        this.code = code;
+    }
+}
 class ChatSessionService {
     constructor(options) {
         var _a, _b, _c, _d;
         this.apiBaseUrl = options.apiBaseUrl;
         this.embedKey = options.embedKey;
         this.widgetVersion = options.widgetVersion;
+        this.sessionToken = options.sessionToken;
         this.csrfTokenProvider = (_a = options.csrfTokenProvider) !== null && _a !== void 0 ? _a : getCSRFToken;
         this.taskPollingIntervalMs = (_b = options.taskPollingIntervalMs) !== null && _b !== void 0 ? _b : 1000;
         this.taskPollingMaxAttempts = (_c = options.taskPollingMaxAttempts) !== null && _c !== void 0 ? _c : 120;
         this.messagePollingIntervalMs = (_d = options.messagePollingIntervalMs) !== null && _d !== void 0 ? _d : 30000;
     }
     async startSession(requestBody) {
-        const response = await fetch(`${this.apiBaseUrl}/api/chat/start/`, {
+        const response = await this.request(`${this.apiBaseUrl}/api/chat/start/`, {
             method: 'POST',
             headers: this.getJsonHeaders(),
             body: JSON.stringify(requestBody),
         });
         if (!response.ok) {
-            throw new Error(`Failed to start session: ${response.statusText}`);
+            await this.raiseForStatus(response, 'Failed to start session');
         }
         return response.json();
     }
     async sendMessage(sessionId, payload) {
-        const response = await fetch(`${this.apiBaseUrl}/api/chat/${sessionId}/message/`, {
+        const response = await this.request(`${this.apiBaseUrl}/api/chat/${sessionId}/message/`, {
             method: 'POST',
             headers: this.getJsonHeaders(),
             body: JSON.stringify(payload),
         });
         if (!response.ok) {
-            throw new Error(`Failed to send message: ${response.statusText}`);
+            await this.raiseForStatus(response, 'Failed to send message');
         }
         return response.json();
     }
     async pollTaskOnce(sessionId, taskId) {
-        const response = await fetch(`${this.apiBaseUrl}/api/chat/${sessionId}/${taskId}/poll/`, {
+        const response = await this.request(`${this.apiBaseUrl}/api/chat/${sessionId}/${taskId}/poll/`, {
             headers: this.getCommonHeaders(),
         });
         if (!response.ok) {
-            let errorMessage = `Failed to poll task: ${response.statusText}`;
-            try {
-                const data = (await response.json());
-                if (data === null || data === void 0 ? void 0 : data.error) {
-                    errorMessage = data.error;
-                }
-            }
-            catch (_a) {
-                // non-JSON body; keep statusText fallback
-            }
-            throw new Error(errorMessage);
+            await this.raiseForStatus(response, 'Failed to poll task');
         }
         return response.json();
     }
@@ -5088,11 +5105,11 @@ class ChatSessionService {
         if (since) {
             url.searchParams.set('since', since);
         }
-        const response = await fetch(url.toString(), {
+        const response = await this.request(url.toString(), {
             headers: this.getCommonHeaders(),
         });
         if (!response.ok) {
-            throw new Error(`Failed to poll messages: ${response.statusText}`);
+            await this.raiseForStatus(response, 'Failed to poll messages');
         }
         return response.json();
     }
@@ -5149,15 +5166,88 @@ class ChatSessionService {
             this.messagePollingTimer = undefined;
         }
     }
-    getJsonHeaders() {
+    setSessionToken(token) {
+        this.sessionToken = token;
+    }
+    async request(input, init) {
+        const response = await fetch(input, init);
+        this.checkSunsetHeaders(response);
+        return response;
+    }
+    /**
+     * Log a deprecation warning (RFC 8594 `Deprecation`/`Sunset`/`Link` headers)
+     * when the server reports that this widget version is deprecated. Warns
+     * during the deprecation window and errors once the sunset date has passed.
+     * Logs at most once per level so polling does not flood the console.
+     */
+    checkSunsetHeaders(response) {
+        const headers = response === null || response === void 0 ? void 0 : response.headers;
+        if (!headers || typeof headers.get !== 'function') {
+            return;
+        }
+        if (headers.get('Deprecation') !== 'true') {
+            return;
+        }
+        const sunsetAt = this.parseSunsetDate(headers.get('Sunset'));
+        const pastSunset = sunsetAt !== null && Date.now() >= sunsetAt.getTime();
+        const level = pastSunset ? 'error' : 'warn';
+        if (this.loggedSunsetLevel === level) {
+            return;
+        }
+        this.loggedSunsetLevel = level;
+        const upgradeUrl = this.parseSuccessorUrl(headers.get('Link'));
+        const upgradeSuffix = upgradeUrl ? ` Upgrade: ${upgradeUrl}` : '';
+        const sunsetText = sunsetAt ? sunsetAt.toUTCString() : 'an upcoming date';
+        if (level === 'error') {
+            console.error(`[open-chat-studio-widget] Widget version ${this.widgetVersion} is past its sunset date ` + `(${sunsetText}) and may stop working.${upgradeSuffix}`);
+        }
+        else {
+            console.warn(`[open-chat-studio-widget] Widget version ${this.widgetVersion} is deprecated and will stop ` + `working after ${sunsetText}.${upgradeSuffix}`);
+        }
+    }
+    parseSunsetDate(sunset) {
+        if (!sunset) {
+            return null;
+        }
+        const parsed = new Date(sunset);
+        return Number.isNaN(parsed.getTime()) ? null : parsed;
+    }
+    parseSuccessorUrl(link) {
+        const match = link === null || link === void 0 ? void 0 : link.match(/<([^>]+)>\s*;\s*rel="?successor-version"?/);
+        return match === null || match === void 0 ? void 0 : match[1];
+    }
+    async raiseForStatus(response, fallbackPrefix) {
+        let message = `${fallbackPrefix}: ${response.statusText}`;
+        let code;
+        try {
+            const data = (await response.json());
+            if (data === null || data === void 0 ? void 0 : data.error) {
+                message = data.error;
+            }
+            code = data === null || data === void 0 ? void 0 : data.code;
+        }
+        catch (_a) {
+            // non-JSON body; keep statusText fallback
+        }
+        if (response.status === 403) {
+            throw new SessionAccessError(response.status, code, message);
+        }
+        throw new Error(message);
+    }
+    /** Headers for multipart requests (no Content-Type — fetch sets the boundary). */
+    getUploadHeaders() {
         const headers = this.getCommonHeaders();
-        headers['Content-Type'] = 'application/json';
         const csrfToken = this.csrfTokenProvider(this.apiBaseUrl);
         if (csrfToken) {
             headers['X-CSRFToken'] = csrfToken;
         }
         return headers;
     }
+    getJsonHeaders() {
+        const headers = this.getUploadHeaders();
+        headers['Content-Type'] = 'application/json';
+        return headers;
+    }
     getCommonHeaders() {
         const headers = {
             'x-ocs-widget-version': this.widgetVersion,
@@ -5165,6 +5255,9 @@ class ChatSessionService {
         if (this.embedKey) {
             headers['X-Embed-Key'] = this.embedKey;
         }
+        if (this.sessionToken) {
+            headers['X-Session-Token'] = this.sessionToken;
+        }
         return headers;
     }
 }
@@ -5214,6 +5307,7 @@ class FileAttachmentManager {
         });
     }
     async uploadPendingFiles(existingFiles, context) {
+        var _a;
         if (existingFiles.length === 0) {
             return { selectedFiles: existingFiles, uploadedIds: [] };
         }
@@ -5233,6 +5327,7 @@ class FileAttachmentManager {
         try {
             const response = await fetch(`${context.apiBaseUrl}/api/chat/${context.sessionId}/upload/`, {
                 method: 'POST',
+                headers: (_a = context.headers) !== null && _a !== void 0 ? _a : {},
                 body: formData,
             });
             if (!response.ok) {
@@ -5242,6 +5337,7 @@ class FileAttachmentManager {
                     selectedFiles: this.markPendingFilesWithError(existingFiles, errorMessage),
                     uploadedIds,
                     errorMessage,
+                    tokenRejected: response.status === 403,
                 };
             }
             const data = await this.safeJson(response);
@@ -5529,13 +5625,15 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
         if (this.isSessionBound()) {
             // Bound to an externally-managed session: the host page is the source of truth.
             this.activeSessionId = this.sessionId;
+            this.applySessionToken(this.sessionToken);
         }
         else if (this.persistentSession && this.isLocalStorageAvailable()) {
             // Always try to load existing session if localStorage is available
-            const { sessionId, messages } = this.loadSessionFromStorage();
+            const { sessionId, messages, sessionToken } = this.loadSessionFromStorage();
             if (sessionId && messages) {
                 this.activeSessionId = sessionId;
                 this.messages = messages;
+                this.applySessionToken(sessionToken);
             }
         }
         this.parseWelcomeMessages();
@@ -5584,6 +5682,11 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
         this.removeButtonEventListeners();
         window.removeEventListener('resize', this.handleWindowResize);
     }
+    applySessionToken(token) {
+        var _a;
+        this.currentSessionToken = token;
+        (_a = this.chatService) === null || _a === void 0 ? void 0 : _a.setSessionToken(token);
+    }
     getChatService() {
         if (!this.chatService) {
             this.chatService = new ChatSessionService({
@@ -5593,6 +5696,7 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
                 taskPollingIntervalMs: OcsChat.TASK_POLLING_INTERVAL_MS,
                 taskPollingMaxAttempts: OcsChat.TASK_POLLING_MAX_ATTEMPTS,
                 messagePollingIntervalMs: OcsChat.MESSAGE_POLLING_INTERVAL_MS,
+                sessionToken: this.currentSessionToken,
             });
         }
         return this.chatService;
@@ -5608,6 +5712,27 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
         this.saveSessionToStorage();
         this.scrollToBottom();
     }
+    /**
+     * Recover from a rejected session token (403). Unbound widgets discard the
+     * dead session/token, show a notice, and start fresh on the next send; bound
+     * widgets cannot restart a host-owned session, so they surface an error.
+     */
+    handleSessionAccessError() {
+        this.cleanup();
+        this.isLoading = false;
+        this.isTyping = false;
+        this.isUploadingFiles = false;
+        this.typingProgressMessage = '';
+        if (this.isSessionBound()) {
+            this.addErrorMessage(this.translationManager.get('status.sessionError', 'This chat session is no longer available.'));
+            return;
+        }
+        this.sessionEpoch += 1;
+        this.activeSessionId = undefined;
+        this.applySessionToken(undefined);
+        this.clearSessionStorage();
+        this.addErrorMessage(this.translationManager.get('status.sessionExpired', 'Your chat session expired. Starting a new chat — please resend your message.'));
+    }
     handleError(errorText) {
         // show as system message
         this.addErrorMessage(errorText);
@@ -5680,12 +5805,14 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
         this.currentPollTaskId = '';
     }
     async startSession() {
+        var _a;
         const epoch = this.sessionEpoch;
         try {
             this.isLoading = true;
             const userId = this.getOrGenerateUserId();
             const requestBody = {
                 chatbot_id: this.chatbotId,
+                use_session_token: true,
                 session_data: {
                     source: 'widget',
                     page_url: window.location.href,
@@ -5702,6 +5829,7 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
             if (epoch !== this.sessionEpoch)
                 return;
             this.activeSessionId = data.session_id;
+            this.applySessionToken((_a = data.session_token) !== null && _a !== void 0 ? _a : undefined);
             this.saveSessionToStorage();
             this.startMessagePolling();
         }
@@ -5734,6 +5862,10 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
         catch (error) {
             if (epoch !== this.sessionEpoch)
                 return;
+            if (error instanceof SessionAccessError) {
+                this.handleSessionAccessError();
+                return;
+            }
             console.warn('Failed to load chat history:', error);
         }
         this.startMessagePolling();
@@ -5749,8 +5881,12 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
                 sessionId: this.activeSessionId,
                 participantId: this.getOrGenerateUserId(),
                 participantName: this.userName,
+                headers: this.getChatService().getUploadHeaders(),
             });
             this.selectedFiles = uploadResult.selectedFiles;
+            if (uploadResult.tokenRejected) {
+                throw new SessionAccessError(403, 'session_token_required', uploadResult.errorMessage || 'Session token rejected');
+            }
             return uploadResult.uploadedIds;
         }
         finally {
@@ -5842,6 +5978,10 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
         catch (error) {
             if (epoch !== this.sessionEpoch)
                 return;
+            if (error instanceof SessionAccessError) {
+                this.handleSessionAccessError();
+                return;
+            }
             const errorText = error instanceof Error ? error.message : 'Failed to send message';
             this.handleError(errorText);
         }
@@ -6016,8 +6156,12 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
             },
             onError: error => {
                 this.typingProgressMessage = '';
-                this.handleError(error.message);
                 this.taskPollingHandle = undefined;
+                if (error instanceof SessionAccessError) {
+                    this.handleSessionAccessError();
+                    return;
+                }
+                this.handleError(error.message);
                 this.startMessagePolling();
             },
         });
@@ -6379,6 +6523,7 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
             messages: `ocs-chat-messages-${this.chatbotId}`,
             lastActivity: `ocs-chat-activity-${this.chatbotId}`,
             visible: `ocs-chat-visible-${this.chatbotId}`,
+            sessionToken: `ocs-chat-token-${this.chatbotId}`,
         };
     }
     saveSessionToStorage() {
@@ -6390,6 +6535,12 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
             if (this.activeSessionId) {
                 localStorage.setItem(keys.sessionId, this.activeSessionId);
                 localStorage.setItem(keys.lastActivity, new Date().toISOString());
+                if (this.currentSessionToken) {
+                    localStorage.setItem(keys.sessionToken, this.currentSessionToken);
+                }
+                else {
+                    localStorage.removeItem(keys.sessionToken);
+                }
             }
             localStorage.setItem(keys.messages, JSON.stringify(this.messages));
         }
@@ -6398,6 +6549,7 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
         }
     }
     loadSessionFromStorage() {
+        var _a;
         const keys = this.getStorageKeys();
         try {
             if (this.persistentSessionExpire > 0) {
@@ -6425,7 +6577,8 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
                     messages = [];
                 }
             }
-            return { sessionId, messages };
+            const sessionToken = (_a = localStorage.getItem(keys.sessionToken)) !== null && _a !== void 0 ? _a : undefined;
+            return { sessionId, messages, sessionToken };
         }
         catch (error) {
             // fall back to starting a new session
@@ -6497,6 +6650,7 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
             localStorage.removeItem(keys.messages);
             localStorage.removeItem(keys.lastActivity);
             localStorage.removeItem(keys.visible);
+            localStorage.removeItem(keys.sessionToken);
         }
         catch (error) {
             console.warn('Failed to clear chat session from localStorage:', error);
@@ -6538,6 +6692,7 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
         // A session provided by the host page (session-id prop) cannot be cleared;
         // stay bound to it. Unbound widgets start a new session on the next message.
         this.activeSessionId = this.sessionId;
+        this.applySessionToken(this.isSessionBound() ? this.sessionToken : undefined);
         this.messages = [];
         this.isTyping = false;
         this.currentPollTaskId = '';
@@ -6603,6 +6758,7 @@ const OcsChat = /*@__PURE__*/ proxyCustomElement(class OcsChat extends HTMLEleme
         "pageContext": [1040, "page-context"],
         "versionNumber": [2, "version-number"],
         "sessionId": [1, "session-id"],
+        "sessionToken": [1, "session-token"],
         "error": [32],
         "messages": [32],
         "activeSessionId": [32],