saasco-sdk 0.2.4 → 0.2.5

package/dist/index.cjs

@@ -38,7 +38,7 @@ module.exports = __toCommonJS(index_exports);
 var import_psl = require("psl");
 
 // package.json
-var version = "0.2.4";
+var version = "0.2.5";
 
 // src/lib/timezones.ts
 var timezones = {
@@ -487,6 +487,9 @@ var AnalyticsLogger = class {
   constructor(config) {
     this.config = config;
   }
+  setLevel(level) {
+    this.config.level = level;
+  }
   debug(...args) {
     if (this.config.level < 3 /* DEBUG */) {
       return;
@@ -567,9 +570,34 @@ function getIntegrationLoggerLevel(integrationName, debug) {
 }
 
 // src/lib/utils/uuid.ts
-var import_uuid = require("@lukeed/uuid");
+var HEX = [];
+for (let i = 0; i < 256; i++) {
+  HEX[i] = (i + 256).toString(16).slice(1);
+}
 function uuid() {
-  return (0, import_uuid.v4)();
+  const bytes = randomBytes(16);
+  bytes[6] = bytes[6] & 15 | 64;
+  bytes[8] = bytes[8] & 63 | 128;
+  let out = "";
+  for (let i = 0; i < 16; i++) {
+    out += HEX[bytes[i]];
+    if (i === 3 || i === 5 || i === 7 || i === 9) {
+      out += "-";
+    }
+  }
+  return out;
+}
+function randomBytes(length) {
+  const bytes = new Uint8Array(length);
+  const webCrypto = globalThis.crypto;
+  if (typeof webCrypto?.getRandomValues === "function") {
+    webCrypto.getRandomValues(bytes);
+    return bytes;
+  }
+  for (let i = 0; i < length; i++) {
+    bytes[i] = Math.random() * 256 | 0;
+  }
+  return bytes;
 }
 
 // src/lib/getBrowserContext.ts
@@ -1875,6 +1903,41 @@ function normalizeSaascoUrl(url) {
   return parsed.toString();
 }
 
+// src/lib/widgetLoader.ts
+function isEnabledPayload(data2) {
+  return typeof data2 === "object" && data2 !== null && "enabled" in data2 && data2.enabled === true;
+}
+function getUrlOrigin(url) {
+  try {
+    return new URL(
+      url,
+      typeof window === "undefined" ? void 0 : window.location.href
+    ).origin;
+  } catch {
+  }
+}
+function isLoaderPresent(fileName, injectedFlag) {
+  return Boolean(
+    injectedFlag || document.querySelector(`script[src*="${fileName}"]`)
+  );
+}
+function appendLoaderScript({
+  attributes,
+  onLoad,
+  src
+}) {
+  const script = document.createElement("script");
+  script.async = true;
+  script.src = src;
+  for (const [name, value] of Object.entries(attributes)) {
+    script.setAttribute(name, value);
+  }
+  if (onLoad) {
+    script.addEventListener("load", onLoad);
+  }
+  (document.body ?? document.head ?? document.documentElement).append(script);
+}
+
 // src/lib/social-proof/storage.ts
 var WIDGET_PAYLOAD_PATH = "/api/social-proof/widget";
 var SOCIAL_PROOF_LOADER_FILE = "saasco-social-proof-loader.js";
@@ -1954,17 +2017,16 @@ async function injectSocialProofLoader({
     return;
   }
   window.__saascoSocialProofInjected = true;
-  const script = document.createElement("script");
-  script.async = true;
-  script.src = normalizeSaascoUrl(scriptUrl);
-  script.setAttribute("data-projectId", projectId);
+  const attributes = {
+    "data-projectId": projectId
+  };
   if (baseUrlOverride !== void 0) {
-    script.setAttribute(
-      "data-base-url",
-      normalizeSaascoBaseUrl(baseUrlOverride)
-    );
+    attributes["data-base-url"] = normalizeSaascoBaseUrl(baseUrlOverride);
   }
-  (document.body ?? document.head ?? document.documentElement).append(script);
+  appendLoaderScript({
+    attributes,
+    src: normalizeSaascoUrl(scriptUrl)
+  });
 }
 async function shouldInjectSocialProof({
   baseUrl,
@@ -1993,23 +2055,12 @@ async function shouldInjectSocialProof({
   writeSession(cacheKey, JSON.stringify({ data: data2, fetchedAt: Date.now() }));
   return isEnabledPayload(data2);
 }
-function isEnabledPayload(data2) {
-  return typeof data2 === "object" && data2 !== null && data2.enabled === true;
-}
 function isSocialProofLoaderPresent() {
-  return Boolean(
-    window.__saascoSocialProofInjected || document.querySelector(`script[src*="${SOCIAL_PROOF_LOADER_FILE}"]`)
+  return isLoaderPresent(
+    SOCIAL_PROOF_LOADER_FILE,
+    window.__saascoSocialProofInjected
   );
 }
-function getUrlOrigin(url) {
-  try {
-    return new URL(
-      url,
-      typeof window === "undefined" ? void 0 : window.location.href
-    ).origin;
-  } catch {
-  }
-}
 function isSocialProofQaMode() {
   if (typeof window === "undefined") {
     return false;
@@ -2024,6 +2075,72 @@ function isSocialProofQaMode() {
   }
 }
 
+// src/lib/support/widgetEnabledCheck.ts
+var SUPPORT_WIDGET_PATH = "/api/support/widget";
+var SUPPORT_LOADER_FILE = "saasco-support-loader.js";
+async function injectSupportLoader({
+  baseUrl: baseUrlOverride,
+  onLoad,
+  placeholder,
+  projectId,
+  scriptUrl
+}) {
+  if (typeof window === "undefined" || typeof document === "undefined") {
+    return "skipped";
+  }
+  if (isSupportLoaderPresent()) {
+    return "present";
+  }
+  const baseUrl = normalizeSaascoBaseUrl(
+    baseUrlOverride ?? getUrlOrigin(scriptUrl) ?? SAASCO_ORIGIN
+  );
+  const enabled = await shouldInjectSupport({
+    baseUrl,
+    projectId
+  });
+  if (!enabled) {
+    return "skipped";
+  }
+  if (isSupportLoaderPresent()) {
+    return "present";
+  }
+  window.__saascoSupportInjected = true;
+  const attributes = {
+    "data-projectId": projectId
+  };
+  if (baseUrlOverride !== void 0) {
+    attributes["data-base-url"] = normalizeSaascoBaseUrl(baseUrlOverride);
+  }
+  if (placeholder !== void 0) {
+    attributes["data-placeholder"] = placeholder;
+  }
+  appendLoaderScript({
+    attributes,
+    onLoad,
+    src: normalizeSaascoUrl(scriptUrl)
+  });
+  return "injected";
+}
+async function shouldInjectSupport({
+  baseUrl,
+  projectId
+}) {
+  try {
+    const response = await fetch(
+      `${baseUrl}${SUPPORT_WIDGET_PATH}?projectId=${encodeURIComponent(projectId)}`
+    );
+    if (!response.ok) {
+      return false;
+    }
+    return isEnabledPayload(await response.json());
+  } catch {
+    return false;
+  }
+}
+function isSupportLoaderPresent() {
+  return isLoaderPresent(SUPPORT_LOADER_FILE, window.__saascoSupportInjected);
+}
+
 // src/lib/analytics.ts
 function getSupportGlobal() {
   return window.SaascoSupport;
@@ -2033,10 +2150,6 @@ var isServer5 = !isBrowser5;
 var PREF = "saasco-sdk";
 var SESSION_DURATION = 1e3 * 60 * 30;
 var USER_DURATION = 1e3 * 60 * 60 * 24 * 365;
-var SUPPORT_ATTR_MAP = {
-  baseUrl: "data-base-url",
-  placeholder: "data-placeholder"
-};
 var data = {};
 function getRootDomain(url) {
   if (isServer5) {
@@ -2325,7 +2438,7 @@ var Saasco = class {
    * @param config Configuration options.
    * @param config.projectId The unique identifier for the project.
    * @param config.proxy The URL of the proxy server to use, if any.
-   * @param config.autoPageTracking Whether to automatically track page views. Default is false.
+   * @param config.autoPageTracking Whether to automatically track page views. Default is true.
    * @param config.enabled Whether analytics is enabled. Default is true. Set to false for development and staging envioronments. Will still allow debug mode to be true, just no events will be sent
    * @param config.debug Whether to log debug information. Default is false.
    * @param config.trackUrlParams Whether to track URL parameters. Default is true.
@@ -2401,52 +2514,20 @@ var Saasco = class {
       );
     }
     this.initAutoPageTracking();
-    if (this.config.support && this.config.support.enabled !== false) {
-      this.injectSupport();
-    }
-    if (this.config.socialProof?.enabled !== false) {
-      void this.injectSocialProof();
-    }
+    void this.injectSupport();
+    void this.injectSocialProof();
     this.isInitialized = true;
   }
   disableDebug() {
     this.logger.info("Debug mode deactivated.");
     this.config.debug = false;
+    this.logger.setLevel(getLoggerLevel(this.config));
   }
   enableDebug() {
     this.config.debug = true;
+    this.logger.setLevel(getLoggerLevel(this.config));
     this.logger.info("Debug mode activated.");
   }
-  /**
-   * Enables and injects the support widget when it was constructed with
-   * `support: { enabled: false }`. Safe to call multiple times.
-   */
-  enableSupport() {
-    if (!this.config.support) {
-      this.logger.warn(
-        "Support is not configured; enableSupport() was ignored."
-      );
-      return;
-    }
-    this.config.support.enabled = true;
-    this.injectSupport();
-    this.pushSupportIdentity();
-  }
-  /**
-   * Enables and injects the social-proof widget (e.g. after constructing with
-   * `socialProof: { enabled: false }`, or when no `socialProof` block was
-   * passed). Injection still runs the server check, so the loader only
-   * downloads when the project has the app enabled in the dashboard.
-   * Safe to call multiple times — the loader injection is guarded against
-   * double-injection.
-   */
-  enableSocialProof() {
-    this.config.socialProof = {
-      ...this.config.socialProof,
-      enabled: true
-    };
-    void this.injectSocialProof();
-  }
   /**
    * Initialize third-party integrations
    */
@@ -2563,7 +2644,7 @@ var Saasco = class {
   }
   /**
    * The page method lets you record page views on your website
-   * This records the page title and path and names the event useing the reserved property "Page Viewed"
+   * This records the page title and path and names the event using the reserved name "Page View"
    *
    * Before implementing this make sure you have disabled the autoPageTracking in the config or you will get duplicate page views
    */
@@ -2787,51 +2868,25 @@ Request Data: ${JSON.stringify(requestData, null, 2)}`
     return this.integrationManager.getStats();
   }
   /**
-   * Lazily injects the support **loader** from the same `/sdk/` origin as
-   * the analytics bundle, forwarding the shared `projectId` and the widget
-   * config as `data-*` attributes. The loader (no React) injects the
-   * cross-origin embed iframe. Deferred (`async`) and guarded against
-   * double-injection so re-running `init()` is a no-op.
+   * Lazily injects the support **loader** (server-gated). See
+   * {@link injectSupportLoader}. Replays identity once the script loads.
    */
-  injectSupport() {
-    if (!isBrowser5 || typeof document === "undefined") {
-      return;
-    }
-    const chat = this.config.support;
-    if (!chat) {
-      return;
-    }
-    if (window.__saascoSupportInjected || document.querySelector('script[src*="saasco-support-loader.js"]')) {
-      return;
-    }
-    const scriptUrl = resolveLoaderScriptUrl(
-      "saasco-support-loader.js",
-      chat.scriptUrl
-    );
-    if (!scriptUrl) {
-      this.logger.warn(
-        "Support is enabled but the loader URL could not be resolved. Pass `support.scriptUrl` pointing at your hosted saasco-support-loader.js (or load the analytics SDK from the CDN)."
-      );
+  async injectSupport() {
+    if (!isBrowser5) {
       return;
     }
-    window.__saascoSupportInjected = true;
-    const script = document.createElement("script");
-    script.async = true;
-    script.src = normalizeSaascoUrl(scriptUrl);
-    script.setAttribute("data-projectId", this.config.projectId);
-    for (const [key, attr] of Object.entries(SUPPORT_ATTR_MAP)) {
-      const value = chat[key];
-      if (value !== void 0) {
-        script.setAttribute(
-          attr,
-          attr === "data-base-url" ? normalizeSaascoBaseUrl(value) : value
-        );
-      }
-    }
-    script.addEventListener("load", () => {
-      this.pushSupportIdentity();
+    const { support } = this.config;
+    const scriptUrl = resolveLoaderScriptUrl("saasco-support-loader.js", support?.scriptUrl) ?? `${SAASCO_ORIGIN}/sdk/saasco-support-loader.js`;
+    const result = await injectSupportLoader({
+      baseUrl: support?.baseUrl,
+      onLoad: () => this.pushSupportIdentity(),
+      placeholder: support?.placeholder,
+      projectId: this.config.projectId,
+      scriptUrl
     });
-    (document.body ?? document.head ?? document.documentElement).append(script);
+    if (result === "present") {
+      this.pushSupportIdentity();
+    }
   }
   /**
    * Lazily injects the social-proof loader (server-gated). See
@@ -2854,27 +2909,23 @@ Request Data: ${JSON.stringify(requestData, null, 2)}`
   }
   /**
    * Records the latest CRM identity and forwards it to the support widget.
-   * No-op when support isn't enabled.
    */
   updateSupportIdentity(identity) {
-    if (!isBrowser5 || !this.config.support) {
+    if (!isBrowser5) {
       return;
     }
     const hasTraits = identity.traits && Object.keys(identity.traits).length > 0;
     this.lastSupportIdentity = identity.distinctId || identity.email || hasTraits ? identity : null;
-    if (this.config.support.enabled === false) {
-      return;
-    }
     this.pushSupportIdentity();
   }
   /**
    * Pushes the current identity onto `window.SaascoSupport.identify`. The
    * widget bundle publishes that global asynchronously, so this short-polls for
-   * it (same approach as tool registration); the load handler also calls this,
-   * so a fresh page load with a stored distinctId still identifies the chat.
+   * it (same approach as tool registration). `injectSupport` calls this on
+   * script load (or immediately when the loader is already present).
    */
   pushSupportIdentity() {
-    if (!isBrowser5 || !this.config.support || this.config.support.enabled === false) {
+    if (!isBrowser5) {
       return;
     }
     const identity = this.lastSupportIdentity ?? {

package/dist/index.d.cts

@@ -287,17 +287,22 @@ type DoRequestResponse = {
 };
 type IntegrationsConfig = (FacebookPixelIntegrationConfig | PinterestTagIntegrationConfig | TikTokPixelIntegrationConfig)[];
 /**
- * Opt-in config for the support widget, set on the `Saasco` constructor.
- * The widget is a cross-origin iframe loaded by a lean host-page loader
- * (`saasco-support-loader.js`); no React ships in this analytics entry,
- * which stays React-free by lazily injecting the loader rather than importing
- * it. Providing this object opts in; pass `enabled: false` to keep it off (e.g.
- * behind your own runtime flag). The projectId is shared from the analytics
- * config — you never declare it twice.
+ * Optional config for the support widget. Support is **always available
+ * wherever the analytics SDK runs** — you don't need to pass this object at
+ * all. Whether the widget actually renders is decided **server-side**: on init
+ * the SDK runs a cheap `{ enabled }` check and lazily injects the lean loader
+ * (`saasco-support-loader.js`) only when the project has the widget enabled
+ * in the dashboard, so pages where it's off never download it — and the
+ * dashboard toggle controls every install (CDN and npm) uniformly.
+ *
+ * The loader origin is resolved automatically: the CDN `<script>` origin for
+ * CDN installs, else the public Saasco CDN for npm/bundled installs. Pass this
+ * object only to override those defaults: `baseUrl`/`scriptUrl` point a
+ * same-origin, proxied, or self-hosted install at the right origin.
+ * The projectId is shared from the analytics config — you never declare it
+ * twice.
  */
 type SupportInit = {
-    /** Defaults to `true` when the `support` object is provided. */
-    enabled?: boolean;
     /** Origin of the saasco app hosting the support API. Defaults server-side to where the widget bundle is served from. */
     baseUrl?: string;
     /** Input placeholder for the chat composer. */
@@ -323,19 +328,11 @@ type SupportInit = {
  * The loader + widget-payload origin is resolved automatically: the CDN
  * `<script>` origin for CDN installs, else the public Saasco CDN for
  * npm/bundled installs (which carry no script tag on the page). Pass this object
- * only to override those defaults or to opt out: `enabled: false` (or
- * `data-social-proof-enabled="false"` on the CDN tag) is a client kill-switch
- * that skips the check entirely; `baseUrl`/`scriptUrl` point a same-origin,
+ * only to override those defaults: `baseUrl`/`scriptUrl` point a same-origin,
  * proxied, or self-hosted install at the right origin. The projectId is shared
  * from the analytics config — you never declare it twice.
  */
 type SocialProofInit = {
-    /**
-     * Client kill-switch. Defaults to `true`. When `false`, the SDK skips the
-     * server check and never injects the loader, regardless of the dashboard
-     * setting.
-     */
-    enabled?: boolean;
     /**
      * Origin of the saasco app hosting the social-proof widget-payload API.
      * Defaults to the loader bundle's origin — the CDN `<script>` origin for CDN
@@ -362,7 +359,7 @@ declare class Saasco {
      * @param config Configuration options.
      * @param config.projectId The unique identifier for the project.
      * @param config.proxy The URL of the proxy server to use, if any.
-     * @param config.autoPageTracking Whether to automatically track page views. Default is false.
+     * @param config.autoPageTracking Whether to automatically track page views. Default is true.
      * @param config.enabled Whether analytics is enabled. Default is true. Set to false for development and staging envioronments. Will still allow debug mode to be true, just no events will be sent
      * @param config.debug Whether to log debug information. Default is false.
      * @param config.trackUrlParams Whether to track URL parameters. Default is true.
@@ -387,20 +384,6 @@ declare class Saasco {
     init(): void;
     disableDebug(): void;
     enableDebug(): void;
-    /**
-     * Enables and injects the support widget when it was constructed with
-     * `support: { enabled: false }`. Safe to call multiple times.
-     */
-    enableSupport(): void;
-    /**
-     * Enables and injects the social-proof widget (e.g. after constructing with
-     * `socialProof: { enabled: false }`, or when no `socialProof` block was
-     * passed). Injection still runs the server check, so the loader only
-     * downloads when the project has the app enabled in the dashboard.
-     * Safe to call multiple times — the loader injection is guarded against
-     * double-injection.
-     */
-    enableSocialProof(): void;
     /**
      * Initialize third-party integrations
      */
@@ -414,7 +397,7 @@ declare class Saasco {
     track(payload: TrackPayload): Promise<DoRequestResponse>;
     /**
      * The page method lets you record page views on your website
-     * This records the page title and path and names the event useing the reserved property "Page Viewed"
+     * This records the page title and path and names the event using the reserved name "Page View"
      *
      * Before implementing this make sure you have disabled the autoPageTracking in the config or you will get duplicate page views
      */
@@ -465,11 +448,8 @@ declare class Saasco {
         readyCount: number;
     };
     /**
-     * Lazily injects the support **loader** from the same `/sdk/` origin as
-     * the analytics bundle, forwarding the shared `projectId` and the widget
-     * config as `data-*` attributes. The loader (no React) injects the
-     * cross-origin embed iframe. Deferred (`async`) and guarded against
-     * double-injection so re-running `init()` is a no-op.
+     * Lazily injects the support **loader** (server-gated). See
+     * {@link injectSupportLoader}. Replays identity once the script loads.
      */
     private injectSupport;
     /**
@@ -479,14 +459,13 @@ declare class Saasco {
     private injectSocialProof;
     /**
      * Records the latest CRM identity and forwards it to the support widget.
-     * No-op when support isn't enabled.
      */
     private updateSupportIdentity;
     /**
      * Pushes the current identity onto `window.SaascoSupport.identify`. The
      * widget bundle publishes that global asynchronously, so this short-polls for
-     * it (same approach as tool registration); the load handler also calls this,
-     * so a fresh page load with a stored distinctId still identifies the chat.
+     * it (same approach as tool registration). `injectSupport` calls this on
+     * script load (or immediately when the loader is already present).
      */
     private pushSupportIdentity;
 }

package/dist/index.d.ts

@@ -287,17 +287,22 @@ type DoRequestResponse = {
 };
 type IntegrationsConfig = (FacebookPixelIntegrationConfig | PinterestTagIntegrationConfig | TikTokPixelIntegrationConfig)[];
 /**
- * Opt-in config for the support widget, set on the `Saasco` constructor.
- * The widget is a cross-origin iframe loaded by a lean host-page loader
- * (`saasco-support-loader.js`); no React ships in this analytics entry,
- * which stays React-free by lazily injecting the loader rather than importing
- * it. Providing this object opts in; pass `enabled: false` to keep it off (e.g.
- * behind your own runtime flag). The projectId is shared from the analytics
- * config — you never declare it twice.
+ * Optional config for the support widget. Support is **always available
+ * wherever the analytics SDK runs** — you don't need to pass this object at
+ * all. Whether the widget actually renders is decided **server-side**: on init
+ * the SDK runs a cheap `{ enabled }` check and lazily injects the lean loader
+ * (`saasco-support-loader.js`) only when the project has the widget enabled
+ * in the dashboard, so pages where it's off never download it — and the
+ * dashboard toggle controls every install (CDN and npm) uniformly.
+ *
+ * The loader origin is resolved automatically: the CDN `<script>` origin for
+ * CDN installs, else the public Saasco CDN for npm/bundled installs. Pass this
+ * object only to override those defaults: `baseUrl`/`scriptUrl` point a
+ * same-origin, proxied, or self-hosted install at the right origin.
+ * The projectId is shared from the analytics config — you never declare it
+ * twice.
  */
 type SupportInit = {
-    /** Defaults to `true` when the `support` object is provided. */
-    enabled?: boolean;
     /** Origin of the saasco app hosting the support API. Defaults server-side to where the widget bundle is served from. */
     baseUrl?: string;
     /** Input placeholder for the chat composer. */
@@ -323,19 +328,11 @@ type SupportInit = {
  * The loader + widget-payload origin is resolved automatically: the CDN
  * `<script>` origin for CDN installs, else the public Saasco CDN for
  * npm/bundled installs (which carry no script tag on the page). Pass this object
- * only to override those defaults or to opt out: `enabled: false` (or
- * `data-social-proof-enabled="false"` on the CDN tag) is a client kill-switch
- * that skips the check entirely; `baseUrl`/`scriptUrl` point a same-origin,
+ * only to override those defaults: `baseUrl`/`scriptUrl` point a same-origin,
  * proxied, or self-hosted install at the right origin. The projectId is shared
  * from the analytics config — you never declare it twice.
  */
 type SocialProofInit = {
-    /**
-     * Client kill-switch. Defaults to `true`. When `false`, the SDK skips the
-     * server check and never injects the loader, regardless of the dashboard
-     * setting.
-     */
-    enabled?: boolean;
     /**
      * Origin of the saasco app hosting the social-proof widget-payload API.
      * Defaults to the loader bundle's origin — the CDN `<script>` origin for CDN
@@ -362,7 +359,7 @@ declare class Saasco {
      * @param config Configuration options.
      * @param config.projectId The unique identifier for the project.
      * @param config.proxy The URL of the proxy server to use, if any.
-     * @param config.autoPageTracking Whether to automatically track page views. Default is false.
+     * @param config.autoPageTracking Whether to automatically track page views. Default is true.
      * @param config.enabled Whether analytics is enabled. Default is true. Set to false for development and staging envioronments. Will still allow debug mode to be true, just no events will be sent
      * @param config.debug Whether to log debug information. Default is false.
      * @param config.trackUrlParams Whether to track URL parameters. Default is true.
@@ -387,20 +384,6 @@ declare class Saasco {
     init(): void;
     disableDebug(): void;
     enableDebug(): void;
-    /**
-     * Enables and injects the support widget when it was constructed with
-     * `support: { enabled: false }`. Safe to call multiple times.
-     */
-    enableSupport(): void;
-    /**
-     * Enables and injects the social-proof widget (e.g. after constructing with
-     * `socialProof: { enabled: false }`, or when no `socialProof` block was
-     * passed). Injection still runs the server check, so the loader only
-     * downloads when the project has the app enabled in the dashboard.
-     * Safe to call multiple times — the loader injection is guarded against
-     * double-injection.
-     */
-    enableSocialProof(): void;
     /**
      * Initialize third-party integrations
      */
@@ -414,7 +397,7 @@ declare class Saasco {
     track(payload: TrackPayload): Promise<DoRequestResponse>;
     /**
      * The page method lets you record page views on your website
-     * This records the page title and path and names the event useing the reserved property "Page Viewed"
+     * This records the page title and path and names the event using the reserved name "Page View"
      *
      * Before implementing this make sure you have disabled the autoPageTracking in the config or you will get duplicate page views
      */
@@ -465,11 +448,8 @@ declare class Saasco {
         readyCount: number;
     };
     /**
-     * Lazily injects the support **loader** from the same `/sdk/` origin as
-     * the analytics bundle, forwarding the shared `projectId` and the widget
-     * config as `data-*` attributes. The loader (no React) injects the
-     * cross-origin embed iframe. Deferred (`async`) and guarded against
-     * double-injection so re-running `init()` is a no-op.
+     * Lazily injects the support **loader** (server-gated). See
+     * {@link injectSupportLoader}. Replays identity once the script loads.
      */
     private injectSupport;
     /**
@@ -479,14 +459,13 @@ declare class Saasco {
     private injectSocialProof;
     /**
      * Records the latest CRM identity and forwards it to the support widget.
-     * No-op when support isn't enabled.
      */
     private updateSupportIdentity;
     /**
      * Pushes the current identity onto `window.SaascoSupport.identify`. The
      * widget bundle publishes that global asynchronously, so this short-polls for
-     * it (same approach as tool registration); the load handler also calls this,
-     * so a fresh page load with a stored distinctId still identifies the chat.
+     * it (same approach as tool registration). `injectSupport` calls this on
+     * script load (or immediately when the loader is already present).
      */
     private pushSupportIdentity;
 }