open-chat-studio-widget 0.8.0 → 0.9.1

package/dist/collection/components/ocs-chat/ocs-chat.js

@@ -4,7 +4,7 @@ import { XMarkIcon, GripDotsVerticalIcon, PlusWithCircleIcon, ArrowsPointingOutI
 import { renderMarkdownSync as renderMarkdownComplete } from "../../utils/markdown";
 import { varToPixels } from "../../utils/utils";
 import { TranslationManager, defaultTranslations } from "../../utils/translations";
-import { ChatSessionService } from "../../services/chat-session-service";
+import { ChatSessionService, SessionAccessError } from "../../services/chat-session-service";
 import { FileAttachmentManager } from "../../services/file-attachment-manager";
 export class OcsChat {
     constructor() {
@@ -237,13 +237,15 @@ export class OcsChat {
         if (this.isSessionBound()) {
             // Bound to an externally-managed session: the host page is the source of truth.
             this.activeSessionId = this.sessionId;
+            this.applySessionToken(this.sessionToken);
         }
         else if (this.persistentSession && this.isLocalStorageAvailable()) {
             // Always try to load existing session if localStorage is available
-            const { sessionId, messages } = this.loadSessionFromStorage();
+            const { sessionId, messages, sessionToken } = this.loadSessionFromStorage();
             if (sessionId && messages) {
                 this.activeSessionId = sessionId;
                 this.messages = messages;
+                this.applySessionToken(sessionToken);
             }
         }
         this.parseWelcomeMessages();
@@ -292,6 +294,11 @@ export class OcsChat {
         this.removeButtonEventListeners();
         window.removeEventListener('resize', this.handleWindowResize);
     }
+    applySessionToken(token) {
+        var _a;
+        this.currentSessionToken = token;
+        (_a = this.chatService) === null || _a === void 0 ? void 0 : _a.setSessionToken(token);
+    }
     getChatService() {
         if (!this.chatService) {
             this.chatService = new ChatSessionService({
@@ -301,6 +308,7 @@ export class OcsChat {
                 taskPollingIntervalMs: OcsChat.TASK_POLLING_INTERVAL_MS,
                 taskPollingMaxAttempts: OcsChat.TASK_POLLING_MAX_ATTEMPTS,
                 messagePollingIntervalMs: OcsChat.MESSAGE_POLLING_INTERVAL_MS,
+                sessionToken: this.currentSessionToken,
             });
         }
         return this.chatService;
@@ -316,6 +324,27 @@ export class OcsChat {
         this.saveSessionToStorage();
         this.scrollToBottom();
     }
+    /**
+     * Recover from a rejected session token (403). Unbound widgets discard the
+     * dead session/token, show a notice, and start fresh on the next send; bound
+     * widgets cannot restart a host-owned session, so they surface an error.
+     */
+    handleSessionAccessError() {
+        this.cleanup();
+        this.isLoading = false;
+        this.isTyping = false;
+        this.isUploadingFiles = false;
+        this.typingProgressMessage = '';
+        if (this.isSessionBound()) {
+            this.addErrorMessage(this.translationManager.get('status.sessionError', 'This chat session is no longer available.'));
+            return;
+        }
+        this.sessionEpoch += 1;
+        this.activeSessionId = undefined;
+        this.applySessionToken(undefined);
+        this.clearSessionStorage();
+        this.addErrorMessage(this.translationManager.get('status.sessionExpired', 'Your chat session expired. Starting a new chat — please resend your message.'));
+    }
     handleError(errorText) {
         // show as system message
         this.addErrorMessage(errorText);
@@ -388,12 +417,14 @@ export class OcsChat {
         this.currentPollTaskId = '';
     }
     async startSession() {
+        var _a;
         const epoch = this.sessionEpoch;
         try {
             this.isLoading = true;
             const userId = this.getOrGenerateUserId();
             const requestBody = {
                 chatbot_id: this.chatbotId,
+                use_session_token: true,
                 session_data: {
                     source: 'widget',
                     page_url: window.location.href,
@@ -410,6 +441,7 @@ export class OcsChat {
             if (epoch !== this.sessionEpoch)
                 return;
             this.activeSessionId = data.session_id;
+            this.applySessionToken((_a = data.session_token) !== null && _a !== void 0 ? _a : undefined);
             this.saveSessionToStorage();
             this.startMessagePolling();
         }
@@ -442,6 +474,10 @@ export class OcsChat {
         catch (error) {
             if (epoch !== this.sessionEpoch)
                 return;
+            if (error instanceof SessionAccessError) {
+                this.handleSessionAccessError();
+                return;
+            }
             console.warn('Failed to load chat history:', error);
         }
         this.startMessagePolling();
@@ -457,8 +493,12 @@ export class OcsChat {
                 sessionId: this.activeSessionId,
                 participantId: this.getOrGenerateUserId(),
                 participantName: this.userName,
+                headers: this.getChatService().getUploadHeaders(),
             });
             this.selectedFiles = uploadResult.selectedFiles;
+            if (uploadResult.tokenRejected) {
+                throw new SessionAccessError(403, 'session_token_required', uploadResult.errorMessage || 'Session token rejected');
+            }
             return uploadResult.uploadedIds;
         }
         finally {
@@ -550,6 +590,10 @@ export class OcsChat {
         catch (error) {
             if (epoch !== this.sessionEpoch)
                 return;
+            if (error instanceof SessionAccessError) {
+                this.handleSessionAccessError();
+                return;
+            }
             const errorText = error instanceof Error ? error.message : 'Failed to send message';
             this.handleError(errorText);
         }
@@ -724,8 +768,12 @@ export class OcsChat {
             },
             onError: error => {
                 this.typingProgressMessage = '';
-                this.handleError(error.message);
                 this.taskPollingHandle = undefined;
+                if (error instanceof SessionAccessError) {
+                    this.handleSessionAccessError();
+                    return;
+                }
+                this.handleError(error.message);
                 this.startMessagePolling();
             },
         });
@@ -1087,6 +1135,7 @@ export class OcsChat {
             messages: `ocs-chat-messages-${this.chatbotId}`,
             lastActivity: `ocs-chat-activity-${this.chatbotId}`,
             visible: `ocs-chat-visible-${this.chatbotId}`,
+            sessionToken: `ocs-chat-token-${this.chatbotId}`,
         };
     }
     saveSessionToStorage() {
@@ -1098,6 +1147,12 @@ export class OcsChat {
             if (this.activeSessionId) {
                 localStorage.setItem(keys.sessionId, this.activeSessionId);
                 localStorage.setItem(keys.lastActivity, new Date().toISOString());
+                if (this.currentSessionToken) {
+                    localStorage.setItem(keys.sessionToken, this.currentSessionToken);
+                }
+                else {
+                    localStorage.removeItem(keys.sessionToken);
+                }
             }
             localStorage.setItem(keys.messages, JSON.stringify(this.messages));
         }
@@ -1106,6 +1161,7 @@ export class OcsChat {
         }
     }
     loadSessionFromStorage() {
+        var _a;
         const keys = this.getStorageKeys();
         try {
             if (this.persistentSessionExpire > 0) {
@@ -1133,7 +1189,8 @@ export class OcsChat {
                     messages = [];
                 }
             }
-            return { sessionId, messages };
+            const sessionToken = (_a = localStorage.getItem(keys.sessionToken)) !== null && _a !== void 0 ? _a : undefined;
+            return { sessionId, messages, sessionToken };
         }
         catch (error) {
             // fall back to starting a new session
@@ -1205,6 +1262,7 @@ export class OcsChat {
             localStorage.removeItem(keys.messages);
             localStorage.removeItem(keys.lastActivity);
             localStorage.removeItem(keys.visible);
+            localStorage.removeItem(keys.sessionToken);
         }
         catch (error) {
             console.warn('Failed to clear chat session from localStorage:', error);
@@ -1246,6 +1304,7 @@ export class OcsChat {
         // A session provided by the host page (session-id prop) cannot be cleared;
         // stay bound to it. Unbound widgets start a new session on the next message.
         this.activeSessionId = this.sessionId;
+        this.applySessionToken(this.isSessionBound() ? this.sessionToken : undefined);
         this.messages = [];
         this.isTyping = false;
         this.currentPollTaskId = '';
@@ -1800,6 +1859,25 @@ export class OcsChat {
                 "getter": false,
                 "setter": false,
                 "reflect": false
+            },
+            "sessionToken": {
+                "type": "string",
+                "attribute": "session-token",
+                "mutable": false,
+                "complexType": {
+                    "original": "string",
+                    "resolved": "string",
+                    "references": {}
+                },
+                "required": false,
+                "optional": true,
+                "docs": {
+                    "tags": [],
+                    "text": "A session token proving access to the session named by `session-id`. Host\npages that create the session server-side pass a server-minted token here so\nthe widget can authenticate its requests. Only meaningful with `session-id`."
+                },
+                "getter": false,
+                "setter": false,
+                "reflect": false
             }
         };
     }