[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","Tribeca_Rep","name","tribeca-chat","path","widget.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/Tribeca_Rep/tribeca-chat/code/widget.ts","extension","id","c0d354b5-e6db-4c26-9474-c2ca8ae5736d","fileId","3cd4f40c-a5a5-11f1-ac9a-1607ee4eb77e","parentId","branchId","7f3f9c05-d6ad-413b-a869-bc1a5f60764f","branchVersion",562,"latest",true,"createdAt",["D",1788533320633],"version",74,"fileType","script","content","// Visitor widget.\n//\n// Served from /widget.js and embedded with a single script tag. No build step,\n// no dependencies.\n//\n// SHADOW DOM, NOT AN IFRAME. tawk uses a cross-origin iframe, which is exactly\n// what stopped us injecting anything into the conversation all day — no\n// buttons, no cards, no reading what the visitor typed except through its own\n// callbacks. A shadow root gives full isolation from the WooCommerce theme's\n// CSS while leaving the DOM ours to do anything with.\n//\n// Enrichment is read from window.TribecaChat, set by the WordPress snippet\n// before this loads. Absent that, the visitor is simply anonymous — and unlike\n// tawk, an anonymous visitor still displays everything we know, because the\n// dashboard is ours.\n\nexport const WIDGET_JS = /* js */ `(function () {\n if (window.__tribecaChatLoaded) return;\n window.__tribecaChatLoaded = true;\n\n var API = document.currentScript\n ? new URL(document.currentScript.src).origin\n : '';\n // WHICH SITE THIS IS, not which company runs the chat — same bot, same\n // Salesforce pipeline, same Jack, embedded on Tribeca's own geo-targeted\n // lead pages (Jersey/Manhattan/Miami Water Delivery Pros) as well as\n // tribecabeverage.com itself. Set via a data attribute on the script tag\n // rather than a hardcoded per-domain table, so a new site is a one-line\n // embed change, not a redeploy of this file.\n var BRAND = (document.currentScript && document.currentScript.dataset.brand)\n || 'TriBeCa Beverage';\n var WP = window.TribecaChat || {};\n\n // Returning visitors keep their history and their resolved account.\n var visitorId = null;\n try { visitorId = localStorage.getItem('tribecaChatVisitor'); } catch (e) {}\n\n // Global Privacy Control is the opt-out signal with legal weight behind it\n // in several US states; Do Not Track has none but costs nothing to respect.\n // Only readable here, so the verdict is sent to the server rather than the\n // raw signals. When set, the chat still works — nothing is profiled.\n var DNT = 0;\n try {\n if (navigator.globalPrivacyControl === true ||\n navigator.doNotTrack === '1' ||\n window.doNotTrack === '1' ||\n navigator.msDoNotTrack === '1') DNT = 1;\n } catch (e) {}\n\n var conversationId = null;\n var since = 0;\n var es = null;\n var open = false;\n var awaitingAI = false;\n var seen = {};\n\n // Proactive opening. tawk opened all 100 exported chats itself and 92% of\n // real visitors replied, so this is the behaviour being reproduced rather\n // than a new idea — the difference is what gets said.\n //\n // FOUR SECONDS, NOT TEN. Measured 9/1/2026 over a two-hour window: 55 of 103\n // visitors were gone from the site inside ten seconds, and only 10 of those\n // 55 were ever greeted. Of the 48 who stayed past ten seconds, 33 were. The\n // ten-second wait was not politeness, it was the single largest reason the\n // console filled with visitors nobody had spoken to.\n var AUTO_OPEN_MS = 4000;\n\n // How long the opener gets before the page-specific line follows it. Long\n // enough to read and answer the first message, short enough that the visitor\n // is still on the page: the median tawk chat ran 231 seconds in total.\n var NUDGE_MS = 25000;\n\n var greeting = null; // built server-side from the ZIP, if one is known\n var nudge = null; // page-specific, sent only if the opener is ignored\n var nudgeTimer = null;\n var nudged = false;\n var visitorSpoke = false;\n\n // The opener as ACTUALLY DRAWN. Both it and the page nudge live only in this\n // browser — they are never posted as messages — so an agent opening the\n // console saw a blank thread for someone who had already been spoken to\n // twice. The presence ping carries these up so the console can show them.\n var openerShown = null;\n\n /**\n * IS THIS PAGE A 404?\n *\n * Read from WordPress's own body class, which is the only honest source: the\n * agent console cannot fetch a URL to check it, and a hardcoded list of dead\n * paths is stale the week after it is written.\n *\n * It matters because of what it means on ARRIVAL. A customer who landed on\n * /my-account/invoices/ — a 404 — then went to the login screen and never got\n * in showed up as \"Anonymous, browsing\", indistinguishable from someone idly\n * reading. The page being broken is the whole story, and nothing on the row\n * said so.\n */\n function pageIs404() {\n try {\n var cls = ' ' + (document.body.className || '') + ' ';\n return cls.indexOf(' error404 ') > -1;\n } catch (e) {\n return false;\n }\n }\n\n // OPENING IS NOT ONE SHOT ANY MORE.\n //\n // It used to be a single setTimeout: if that moment was wrong — the tab was\n // in the background, the timer was throttled away, the page came back from\n // the back-forward cache with its timers dropped — the visitor was never\n // spoken to for the whole of that page view, however long they then stayed.\n //\n // Three is the cap. The retries are driven by the presence heartbeat, which\n // only fires while the tab is actually being looked at, so an extra attempt\n // is by definition made at a moment we have evidence the person is still\n // here. It is not a timer firing hopefully into an empty room.\n var MAX_OPEN_ATTEMPTS = 3;\n var openAttempts = 0;\n\n // One deferral listener at a time. autoOpen can now be called from several\n // places, and without this a visitor who backgrounds and returns repeatedly\n // would accumulate a listener per round trip, each one queuing its own open.\n var waitingForVisible = false;\n\n // Closing the panel is an answer. Someone who has dismissed it should not be\n // re-opened at them on the next page, or on the next visit — that is the\n // behaviour that makes people hate chat widgets, and it costs a conversation\n // to learn the lesson once.\n // IT EXPIRES AFTER A WEEK. It used to be a bare '1' with no timestamp, which\n // meant one × on one page silenced the widget in that browser PERMANENTLY —\n // every page, every future visit, nothing to clear it but wiping site data.\n // Someone who closed a chat in March was still being skipped in September,\n // and nothing anywhere made that visible. Seven days is long enough that\n // closing it means something and short enough that a returning visitor is\n // treated like anyone else.\n var DISMISS_MS = 7 * 24 * 60 * 60 * 1000;\n var dismissed = false;\n try {\n var d0 = localStorage.getItem('tribecaChatDismissed');\n // The legacy '1' carries no date. Stamped as dismissed NOW rather than\n // treated as expired: those people closed the panel at some unknown point,\n // possibly a minute ago, and popping open at them the moment this ships is\n // the exact behaviour the flag exists to prevent.\n if (d0 === '1') {\n dismissed = true;\n try { localStorage.setItem('tribecaChatDismissed', String(Date.now())); } catch (e) {}\n } else if (d0) {\n dismissed = (Date.now() - Number(d0)) < DISMISS_MS;\n if (!dismissed) localStorage.removeItem('tribecaChatDismissed');\n }\n } catch (e) {}\n\n // Bodies of messages drawn optimistically on send, awaiting their echo from\n // the stream. Without this the visitor sees everything they type twice: once\n // instantly with a local id, once again with the real one.\n var pendingLocal = [];\n\n // THE SAME PROBLEM AS pendingLocal, ON THE OTHER SIDE.\n //\n // armNudge() draws the nudge instantly with a synthetic id so it does not\n // wait on a round trip, then tells the server to persist it. When the SSE\n // stream later delivers that same line back with its real id, render() has\n // no way to know it is the message already on screen — the reconciliation\n // above only ever checked sender === 'visitor'. The result was two\n // identical bubbles, confirmed live: the database only ever held one copy,\n // so this was never a storage bug, only a rendering one.\n var pendingNudgeBody = null;\n\n // True only while the stored thread is being painted back on load. Without\n // it, a returning visitor with ten past messages gets ten overlapping chimes\n // the moment the panel opens — every one of them \"unprompted\" by the test in\n // render(), because none was asked for in this page's lifetime.\n var replaying = false;\n\n /* -------------------------------------------------------------- shell */\n\n // Presence-only mode. The script loads on every page and reports who is on\n // the site, but renders nothing at all — no bubble, no panel, no shadow root.\n // This is how you get full visitor statistics while another chat product is\n // still the one customers actually talk to.\n /**\n * TELL THE SERVER WHEN THIS PAGE IS BEING PUT AWAY.\n *\n * Without it, \"gone\" can only ever be guessed from a heartbeat that did not\n * arrive — and a heartbeat that did not arrive is also a locked phone, a\n * switched tab, or a browser throttling a background timer. Someone who\n * closed the site and someone still reading looked the same for ninety\n * seconds, which is most of a short visit.\n *\n * pagehide, NOT unload. unload is ignored outright by mobile Safari and\n * blocks the back-forward cache where it does run; pagehide is the event\n * that actually fires when a phone browser puts a page away.\n *\n * sendBeacon, NOT fetch. The document is being torn down, and an ordinary\n * request is cancelled with it. A beacon is queued by the browser and sent\n * afterwards, which is the entire reason it exists. keepalive fetch is the\n * fallback for anything too old to have it.\n *\n * The id is read through a getter rather than captured, because at the time\n * this is wired the widget usually has no id yet — presence hands one back a\n * moment later, and a captured null would send nothing for the whole visit.\n */\n function goneBeacon(getId) {\n window.addEventListener('pagehide', function () {\n var id = getId();\n if (!id) return;\n var payload = JSON.stringify({ visitorId: id });\n try {\n if (navigator.sendBeacon) {\n navigator.sendBeacon(API + '/api/gone', payload);\n return;\n }\n } catch (e) {}\n try {\n fetch(API + '/api/gone', { method: 'POST', body: payload, keepalive: true })\n .catch(function () {});\n } catch (e) {}\n });\n }\n\n if (WP.hidden) {\n var quiet = null;\n try { quiet = localStorage.getItem('tribecaChatVisitor'); } catch (e) {}\n\n var ping = function () {\n fetch(API + '/api/presence', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n visitorId: quiet,\n pageUrl: location.href,\n referrer: document.referrer || null,\n dnt: DNT,\n // Reported in presence-only mode too. This mode is what runs while\n // tawk owns the chat, so it is exactly when a broken landing page\n // would otherwise go unnoticed.\n notFound: pageIs404(),\n // The arm the site assigned. Sent from presence-only mode too — in\n // fact ESPECIALLY from here, because this is the mode the tawk half\n // of a split runs in, and without it the comparison has only one side.\n arm: window.TribecaChatArm || null,\n name: WP.name, email: WP.email, phone: WP.phone,\n zip: WP.zip, company: WP.company, wpUserId: WP.wpUserId\n })\n })\n .then(function (r) { return r.json(); })\n .then(function (d) {\n if (d.visitorId && !quiet) {\n quiet = d.visitorId;\n try { localStorage.setItem('tribecaChatVisitor', quiet); } catch (e) {}\n }\n })\n .catch(function () {});\n };\n\n ping();\n setInterval(function () {\n if (document.visibilityState === 'visible') ping();\n }, 45000);\n goneBeacon(function () { return quiet; });\n return;\n }\n\n var host = document.createElement('div');\n host.style.cssText = 'position:fixed;bottom:0;right:0;z-index:2147483000;';\n document.body.appendChild(host);\n var root = host.attachShadow({ mode: 'open' });\n\n root.innerHTML = [\n '',\n '',\n '',\n '

',\n '

💧

',\n '

' + BRAND + '

',\n // Deliberately the same shape as the line a human takeover writes here\n // (\"Michael is here\"), so the handover reads as one person replacing\n // another rather than the header changing what kind of thing it is.\n '

Jack is here

',\n '',\n '

',\n '

'\n ].join('');\n\n var $ = function (s) { return root.querySelector(s); };\n var bubble = $('.bubble'), panel = $('.panel'), body = $('#body'), dot = $('.dot');\n\n function esc(s){ return String(s==null?'':s).replace(/[&<>]/g,function(c){\n return {'&':'&','<':'<','>':'>'}[c]; }); }\n\n // Make URLs clickable. The bot hands out a pay link the moment it creates an\n // account, and it was arriving as plain text the customer had to select and\n // copy — on a phone, effectively unusable.\n //\n // RUNS ON ALREADY-ESCAPED TEXT, and that ordering is the safety property: by\n // this point there is no way for a < or a quote to survive into the markup,\n // so nothing a visitor or a model types can close the attribute. An & in\n // the href is parsed back to & by the browser, so query strings arrive intact\n // — which matters, because the pay link carries &showInvoiceLines=true.\n //\n // Trailing sentence punctuation is pushed back OUT of the link, or a URL at\n // the end of a sentence 404s on its own full stop. ';' is deliberately not in\n // that set: it would bite the tail off an &.\n function linkify(s){\n return s.replace(/https?:\\\\/\\\\/[^\\\\s<]+/g, function (u) {\n var trail = '';\n var m = u.match(/[.,!?)\\\\]]+$/);\n if (m) { trail = m[0]; u = u.slice(0, u.length - trail.length); }\n\n // THE PAY LINK GETS A BUTTON. It is the only link here a customer is\n // meant to ACT on rather than read, and as a bare URL it was a 120-\n // character string they had to select and copy. Matched on the payment\n // page's own host and path, so an ordinary product link stays an\n // ordinary link — and a URL that merely mentions \"pay\" does not get\n // dressed up as one.\n var isPay = u.indexOf('salesforce-sites.com') > -1 && u.indexOf('/payments/') > -1;\n if (isPay) {\n return ''\n + 'Pay your invoice' + trail;\n }\n return '' + u + '' + trail;\n });\n }\n\n function bodyHtml(s){ return linkify(esc(s)); }\n\n function scroll(){ body.scrollTop = body.scrollHeight; }\n\n /**\n * A short, quiet two-note chime.\n *\n * SYNTHESISED, NOT FETCHED. This widget has no build step and no assets, and\n * an mp3 would mean a second network request on every page of the storefront\n * plus a file to host and cache-bust. Two sine oscillators cost nothing.\n *\n * WILL OFTEN BE SILENT, AND THAT IS CORRECT. Browsers refuse audio until the\n * visitor has interacted with the page, so the ten-second auto-open makes no\n * sound for someone who has only scrolled. Nothing is broken when that\n * happens — the panel still opens, and the red dot still shows. Every failure\n * path here is swallowed: a chat that throws because of a decoration would be\n * a far worse bug than a missing noise.\n */\n var audioCtx = null;\n function chime() {\n try {\n var Ctx = window.AudioContext || window.webkitAudioContext;\n if (!Ctx) return;\n if (!audioCtx) audioCtx = new Ctx();\n\n // SCHEDULE ONLY ONCE THE CONTEXT IS ACTUALLY RUNNING.\n //\n // A suspended context has currentTime frozen at 0 and resume() is\n // ASYNCHRONOUS. Scheduling straight after calling it — which is the\n // obvious way to write this — puts both notes at t=0 and t=0.12, and by\n // the time the context starts those moments are already in the past, so\n // nothing is ever heard. That failure looks exactly like the browser's\n // autoplay block, which is what makes it easy to write off as \"audio is\n // blocked\" and leave in place. A context is created suspended even when\n // the visitor HAS clicked, so this silenced the chime in both cases.\n var play = function () {\n try {\n // A hair in the future: scheduling at exactly currentTime races the\n // audio thread and can clip the attack off the first note.\n var now = audioCtx.currentTime + 0.03;\n // A rising fourth, A5 then D6. Deliberately not a descending pair,\n // which reads as an error tone.\n [[880, 0], [1174.66, 0.12]].forEach(function (note) {\n var osc = audioCtx.createOscillator();\n var gain = audioCtx.createGain();\n osc.type = 'sine';\n osc.frequency.value = note[0];\n\n // Ramped, not switched. Starting or stopping a sine at full\n // amplitude puts a square edge in the signal, audible as a click.\n var t = now + note[1];\n gain.gain.setValueAtTime(0.0001, t);\n gain.gain.exponentialRampToValueAtTime(0.09, t + 0.015);\n gain.gain.exponentialRampToValueAtTime(0.0001, t + 0.22);\n\n osc.connect(gain);\n gain.connect(audioCtx.destination);\n osc.start(t);\n osc.stop(t + 0.25);\n });\n } catch (e) {}\n };\n\n if (audioCtx.state === 'suspended' && audioCtx.resume) {\n audioCtx.resume().then(play).catch(function () {});\n } else {\n play();\n }\n } catch (e) {}\n }\n\n function render(m) {\n if (seen[m.id]) return;\n seen[m.id] = 1;\n\n // The stream echo of something already drawn locally. Swallow it — the\n // bubble is already on screen, and its id will never match the local one.\n if (m.sender === 'visitor' && !m.local) {\n var dup = pendingLocal.indexOf(m.body);\n if (dup > -1) { pendingLocal.splice(dup, 1); return; }\n }\n\n // Same reconciliation, for the nudge specifically — see pendingNudgeBody.\n if (m.sender === 'ai' && pendingNudgeBody !== null && m.body === pendingNudgeBody) {\n pendingNudgeBody = null;\n return;\n }\n\n var d = document.createElement('div');\n if (m.sender === 'system') {\n d.className = 'm sys';\n d.innerHTML = '

' + bodyHtml(m.body) + '

';\n } else if (m.sender === 'visitor') {\n d.className = 'm me';\n d.innerHTML = '

' + bodyHtml(m.body) + '

';\n } else {\n d.className = 'm them';\n // NAMED, BOTH OF THEM. The assistant used to be unlabelled, on the\n // reasoning that \"AI\" in front of every line invites people to discount\n // correct answers. That reasoning still holds — which is why the label is\n // \"Jack\" and not \"AI\". An unlabelled reply is not neutral: it reads as\n // the company talking at you, where a name reads as somebody answering.\n // Jack says what he is the moment anyone asks; the label is an\n // introduction, not a disguise.\n var who = m.sender === 'agent' && m.sender_name\n ? '

' + esc(m.sender_name) + '

'\n : (m.sender === 'ai' ? '

Jack

' : '');\n d.innerHTML = who + '

' + bodyHtml(m.body) + '

';\n }\n body.appendChild(d);\n\n // SOUND ONLY FOR WHAT THE VISITOR IS NOT ALREADY WAITING FOR.\n //\n // awaitingAI is true exactly while they are watching for a reply they just\n // asked for, and chiming at someone who has this second pressed Enter is\n // noise. What is left is the messages that arrive unannounced — the opener,\n // the page nudge, and an agent reaching out — which is the only time a\n // sound earns its place.\n //\n // Read BEFORE clearTyping(), which resets the flag on the next line.\n var unprompted = m.sender !== 'visitor' && !awaitingAI;\n\n if (m.sender !== 'visitor') clearTyping();\n if (unprompted && !replaying) chime();\n if (m.sender === 'agent') $('#sub').textContent = esc(m.sender_name || 'Team') + ' is here';\n if (!open && m.sender !== 'visitor') dot.style.display = 'block';\n scroll();\n\n // Anything landing in the thread — theirs or ours — restarts the clock.\n resetIdle();\n }\n\n function showTyping() {\n if (root.querySelector('.typing')) return;\n var d = document.createElement('div');\n d.className = 'm them typing';\n d.innerHTML = '

Typing…

';\n body.appendChild(d);\n scroll();\n }\n function clearTyping() {\n var t = root.querySelector('.typing');\n if (t) t.remove();\n awaitingAI = false;\n }\n\n // Idle nudge. This does NOT decide to nudge anyone — it reports the one thing\n // the server cannot see, which is that this person stopped typing and is\n // still sitting here with the chat open. Every rule about who deserves a\n // nudge is applied server-side, so the worst a tampered-with call can do is\n // trigger a nudge the conversation had already earned.\n var idleTimer = null;\n // 45 SECONDS, down from three minutes — the office's call, 9/2/2026.\n //\n // Three minutes is a long time to sit in front of a chat window that has\n // stopped talking to you; most people who stall have decided or left well\n // before then. Forty-five seconds catches someone still reading the last\n // answer, which is the moment a question is actually welcome.\n //\n // The server still decides WHO gets one — engaged, we spoke last, still on\n // the bot, at most two ever — so shortening this cannot turn into pestering,\n // only into arriving sooner.\n var IDLE_MS = 45 * 1000;\n\n // Throttle for the typing ping — see pingTyping() below. Three seconds is\n // often enough that the console's indicator never looks stale while someone\n // is mid-sentence, and far too sparse to ever look like a keystroke log.\n var TYPING_PING_MS = 3000;\n var lastTypingPing = 0;\n\n /**\n * Tell the server keystrokes are happening, at most once per\n * TYPING_PING_MS. NEVER sends the textarea's value — only that it fired,\n * and when. See the matching comment on /api/typing in main.ts for why\n * that boundary is deliberate, not an oversight.\n */\n function pingTyping() {\n if (!conversationId) return;\n var t = Date.now();\n if (t - lastTypingPing < TYPING_PING_MS) return;\n lastTypingPing = t;\n fetch(API + '/api/typing', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ conversationId: conversationId })\n }).catch(function () {});\n }\n\n function resetIdle() {\n if (idleTimer) clearTimeout(idleTimer);\n if (!open) return;\n idleTimer = setTimeout(function () {\n // A backgrounded tab is not \"still here\", and browsers throttle timers in\n // one anyway — the 15-minute sweep covers that case instead.\n if (!conversationId || document.visibilityState !== 'visible') return;\n fetch(API + '/api/nudge', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ conversationId: conversationId })\n }).catch(function () {});\n }, IDLE_MS);\n }\n\n /* ---------------------------------------------------------- transport */\n\n function start() {\n return fetch(API + '/api/session', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n visitorId: visitorId,\n dnt: DNT,\n name: WP.name, email: WP.email, phone: WP.phone,\n zip: WP.zip, company: WP.company, wpUserId: WP.wpUserId,\n pageUrl: location.href\n })\n })\n .then(function (r) { return r.json(); })\n .then(function (d) {\n visitorId = d.visitorId;\n conversationId = d.conversationId;\n try { localStorage.setItem('tribecaChatVisitor', visitorId); } catch (e) {}\n\n replaying = true;\n (d.messages || []).forEach(function (m) {\n render(m);\n if (m.created_at > since) since = m.created_at;\n });\n replaying = false;\n\n greeting = d.greeting || 'Hi! Ask us about delivery in your area, pricing, or your account.';\n nudge = d.nudge || null;\n\n // Anyone who has already said something is mid-conversation, not being\n // greeted. Re-opening with a sales line over the top of their own thread\n // would read as the system having forgotten them.\n visitorSpoke = (d.messages || []).some(function (m) { return m.sender === 'visitor'; });\n\n // THE OPENER NOW ARRIVES AS A STORED MESSAGE and has already been drawn\n // by the replay above. This branch is the fallback for the older server\n // behaviour, where the greeting came back as text and nothing else — it\n // still works, and it must, because a browser can hold a cached widget\n // for five minutes across a deploy.\n if (!(d.messages || []).length) {\n render({ id:'greet', sender:'ai', body: greeting });\n // Recorded so the presence ping can tell the console what this person\n // was actually shown. Set HERE, at the point it is drawn, not where the\n // text arrives — a greeting we received but did not display is not\n // something the visitor has seen.\n openerShown = greeting;\n }\n\n // ARMED ON \"NOBODY HAS SPOKEN\", not on \"the thread was empty\".\n //\n // Those were the same test until the opener started being stored. Once\n // it is a real message the thread is never empty, so keying the nudge on\n // emptiness silently retired it — the follow-up simply stopped happening\n // for everyone, with nothing to show it had.\n if (!visitorSpoke) armNudge();\n\n listen();\n });\n }\n\n // The server closes a stream after five minutes so abandoned tabs cannot\n // poll forever. Reconnecting is expected, not an error.\n function listen() {\n if (es) es.close();\n es = new EventSource(API + '/api/stream?c=' + encodeURIComponent(conversationId) + '&since=' + since);\n\n es.onmessage = function (ev) {\n try {\n var m = JSON.parse(ev.data);\n if (!m || !m.id) return;\n if (m.created_at > since) since = m.created_at;\n render(m);\n } catch (e) {}\n };\n\n es.onerror = function () {\n es.close();\n setTimeout(listen, 3000);\n };\n }\n\n /**\n * Queue the page-specific follow-up, to be sent only if the opener is\n * ignored. Cancelled the moment the visitor types anything — a nudge that\n * lands after someone has already started talking is the system talking over\n * them.\n */\n function armNudge() {\n if (!nudge || nudged || visitorSpoke || nudgeTimer) return;\n nudgeTimer = setTimeout(function () {\n nudgeTimer = null;\n if (nudged || visitorSpoke || !open) return;\n nudged = true;\n render({ id: 'nudge_' + Date.now(), sender: 'ai', body: nudge });\n // SET AFTER THE LOCAL DRAW, not before — render() checks this on every\n // call, and setting it first would make the optimistic draw swallow\n // itself before anything ever reached the screen.\n pendingNudgeBody = nudge;\n\n // TELL THE SERVER IT WAS DRAWN, so it becomes part of the transcript.\n // Otherwise the model answers a reply to a line it cannot see — the\n // same failure the opener had. No text is sent: the server recomputes\n // the nudge for this conversation's page, so this call can only decide\n // WHEN it is recorded, never what it says.\n fetch(API + '/api/shown-nudge', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ conversationId: conversationId })\n }).catch(function () {});\n }, NUDGE_MS);\n }\n\n function cancelNudge() {\n visitorSpoke = true;\n if (nudgeTimer) { clearTimeout(nudgeTimer); nudgeTimer = null; }\n }\n\n function send(text) {\n if (!text.trim() || !conversationId) return;\n\n cancelNudge();\n pendingLocal.push(text);\n render({ id: 'local_' + Date.now(), sender: 'visitor', body: text, local: true });\n showTyping();\n awaitingAI = true;\n\n fetch(API + '/api/message', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n // pageUrl travels WITH the message, not just on the 45s presence\n // heartbeat — a visitor who just navigated to a product page and\n // typed within that window was otherwise quoted off wherever they\n // were up to 45 seconds ago. Confirmed live 9/4/2026: quoted plastic\n // pricing while sitting on the glass bottle page for exactly this\n // reason.\n body: JSON.stringify({ conversationId: conversationId, body: text, pageUrl: location.href })\n })\n .then(function (r) { return r.json(); })\n .then(function (d) {\n // The AI turn completes inside that POST, so if it produced nothing the\n // model failed. Say so and offer a person rather than leaving a spinner\n // running forever.\n if (d && d.ai === false && !d.handoff) clearTyping();\n if (d && d.ai && awaitingAI) {\n setTimeout(function () {\n if (!awaitingAI) return;\n clearTyping();\n render({ id:'err_'+Date.now(), sender:'system',\n // Names the phrase that actually triggers a handoff, now that the\n // button is gone. wantsHuman() in main.ts matches on exactly this.\n body:'Sorry — I had trouble with that. Try again, or say \"I\\\\'d like to talk to someone\" and I\\\\'ll bring in the team.' });\n }, 6000);\n }\n })\n .catch(function () {\n clearTyping();\n render({ id:'off_'+Date.now(), sender:'system',\n body:'Message not sent. Check your connection and try again.' });\n });\n }\n\n // The \"Talk to a person\" button was removed on request. Handoff is NOT gone:\n // main.ts still matches phrases like \"can I talk to someone\" in wantsHuman()\n // and escalates, and the model is told to hand off when asked. /api/handoff\n // remains for any caller that wants it — nothing here calls it now.\n\n /* -------------------------------------------------------------- wiring */\n\n bubble.onclick = function () {\n open = true;\n panel.classList.add('on');\n bubble.style.display = 'none';\n dot.style.display = 'none';\n if (!conversationId) startSafe();\n else scroll();\n $('#in').focus();\n };\n\n $('#x').onclick = function () {\n open = false;\n panel.classList.remove('on');\n bubble.style.display = 'flex';\n // Remembered across pages and visits. The bubble is still there if they\n // change their mind; what stops is the widget deciding for them.\n dismissed = true;\n cancelNudge();\n // The TIME, not a flag. Read back above against DISMISS_MS so this lapses\n // after a week instead of lasting for the life of the browser profile.\n try { localStorage.setItem('tribecaChatDismissed', String(Date.now())); } catch (e) {}\n };\n\n $('#go').onclick = function () {\n var el = $('#in');\n send(el.value);\n el.value = '';\n el.style.height = '38px';\n };\n\n $('#in').onkeydown = function (e) {\n if (e.key === 'Enter' && !e.shiftKey) { e.preventDefault(); $('#go').click(); }\n };\n\n // Grow with the message, up to a point.\n $('#in').oninput = function () {\n this.style.height = '38px';\n this.style.height = Math.min(this.scrollHeight, 110) + 'px';\n if (this.value.trim()) pingTyping();\n };\n\n // OPEN BY ITSELF, ONCE, AFTER TEN SECONDS.\n //\n // This is the change the tawk numbers argue for hardest: every one of those\n // 100 exported conversations was opened by the widget rather than by the\n // visitor, and 92% of real people answered. A bubble sitting silently in the\n // corner is a question nobody asks.\n //\n // Three things it will not do — open on top of a panel the visitor opened\n // themselves, open for anyone who has closed it before, or open twice.\n // No chime() here on purpose. The panel opening is not the event worth\n // hearing — the MESSAGE arriving is, and start() is a fetch, so the greeting\n // lands a moment later. render() sounds it then, which puts the noise on the\n // thing that actually appeared. Chiming here as well produced two tones about\n // 300ms apart.\n //\n // AND NOT INTO A TAB NOBODY IS LOOKING AT. A link opened in a background tab\n // — the ordinary way people open search results — would spend its one and\n // only auto-open on a hidden document, and by the time the visitor switched\n // to it the widget had already decided it was done. Shortening the delay to\n // four seconds makes that MORE likely, not less, which is why it is fixed\n // here in the same change. Deferring to the moment the tab is actually\n // looked at costs nothing and is the difference between being greeted and\n // sitting in the console as \"browsing\" forever.\n function autoOpen() {\n if (open || dismissed) return;\n if (openAttempts >= MAX_OPEN_ATTEMPTS) return;\n\n // NOT ON THE RECEIPT PAGE. Someone reading their order confirmation has\n // just done the thing we wanted; opening a chat window over it is a\n // business interrupting a customer for its own benefit, and the sales\n // openers — one of which offers 25% off a first delivery — are actively\n // wrong to show to someone who has this minute paid full price.\n // The bubble is still there if they want us.\n var here = String(location.pathname || '').toLowerCase();\n if (here.indexOf('order-received') > -1 || here.indexOf('/thank-you') > -1) return;\n\n if (document.visibilityState !== 'visible') {\n if (waitingForVisible) return;\n waitingForVisible = true;\n document.addEventListener('visibilitychange', function onVis() {\n if (document.visibilityState !== 'visible') return;\n document.removeEventListener('visibilitychange', onVis);\n waitingForVisible = false;\n setTimeout(autoOpen, AUTO_OPEN_MS);\n });\n return;\n }\n\n openAttempts++;\n bubble.click();\n }\n\n setTimeout(autoOpen, AUTO_OPEN_MS);\n\n /**\n * Open the conversation, and KEEP TRYING IF THE REQUEST FAILS.\n *\n * The old code called start() and ignored the promise. A single failed fetch\n * — a dropped request as a phone changes network, a cold start that timed\n * out — left the panel sitting open and completely empty, with no greeting,\n * no error and no way back except reloading the page. From the visitor's\n * side that is a chat window that does not work; from ours it looked like\n * somebody who was shown the opener and ignored it.\n *\n * Backs off, gives up after three tries, and only retries while the tab is\n * being looked at — retrying into a backgrounded tab burns attempts on\n * somebody who is not watching.\n */\n var starting = false;\n var startTries = 0;\n\n function startSafe() {\n if (conversationId || starting) return;\n starting = true;\n start()\n .then(function () { starting = false; })\n .catch(function () {\n starting = false;\n if (++startTries >= 3) return;\n setTimeout(function () {\n if (!conversationId && document.visibilityState === 'visible') startSafe();\n }, startTries * 4000);\n });\n }\n\n /* ------------------------------------------------------------ presence */\n\n var invitedShown = false;\n\n // Runs on page load and on a heartbeat, whether or not the chat is ever\n // opened. This is what puts someone on the agent's monitoring screen — and\n // what lets an agent speak to them first.\n function presence() {\n fetch(API + '/api/presence', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n visitorId: visitorId,\n pageUrl: location.href,\n // Only the referrer that brought them TO the site is interesting, and\n // the server keeps the first one it is told, so sending it on every\n // ping is harmless — internal navigation never overwrites it.\n referrer: document.referrer || null,\n dnt: DNT,\n // What the console cannot otherwise know: whether the panel is open in\n // front of them right now, and which lines this browser drew that were\n // never sent as messages.\n chatOpen: open,\n // Why this person may never have been greeted. It is a localStorage\n // flag, so the console cannot see it any other way, and without it a\n // visitor who closed the chat is indistinguishable on screen from one\n // the widget simply failed to reach.\n dismissed: dismissed,\n notFound: pageIs404(),\n arm: window.TribecaChatArm || null,\n shownOpener: openerShown,\n shownNudge: nudged ? nudge : null,\n name: WP.name, email: WP.email, phone: WP.phone,\n zip: WP.zip, company: WP.company, wpUserId: WP.wpUserId\n })\n })\n .then(function (r) { return r.json(); })\n .then(function (d) {\n if (d.visitorId && !visitorId) {\n visitorId = d.visitorId;\n try { localStorage.setItem('tribecaChatVisitor', visitorId); } catch (e) {}\n }\n\n // Someone from the team has spoken. Open the widget for them — once.\n // Popping open repeatedly would be obnoxious, and a conversation the\n // visitor started themselves must never trigger this.\n if (d.invited && !open && !invitedShown) {\n invitedShown = true;\n bubble.click();\n return;\n }\n\n // THE SECOND CHANCE, AND THE REASON IT IS HERE RATHER THAN ON A TIMER.\n //\n // Reaching this line means a heartbeat just completed, and heartbeats\n // only run while the tab is being looked at — so this is the strongest\n // evidence the widget ever gets that a real person is on the page right\n // now. If they are still here and nothing was ever said to them, the\n // first attempt was lost: a throttled timer, a tab restored from the\n // back-forward cache with its timers dropped, or an open that happened\n // while the document was hidden.\n //\n // The guards are the same three as everywhere else — not already open,\n // not dismissed, no conversation yet — plus the attempt cap, so at worst\n // this fires twice more, 45 and 90 seconds in, and then stops for good.\n if (!open && !dismissed && !conversationId) autoOpen();\n })\n .catch(function () {});\n }\n\n presence();\n goneBeacon(function () { return visitorId; });\n\n // Only while the tab is actually being looked at. A background tab left open\n // all afternoon should not keep reporting its owner as present, or the\n // monitoring screen fills with people who wandered off hours ago.\n setInterval(function () {\n if (document.visibilityState === 'visible') presence();\n }, 45000);\n})();`;\n","deleted",false,"label",[14],"53b5cfec-2084-4c81-ba38-78b35a1e8625",["D",1788226289223],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Chat widget, AI answering, human takeover, Salesforce","imageUrl","userId","c5acd3b3-60a7-4deb-bc6d-528f83012ea9","pinnedFileId","db056860-a5a4-11f1-8f50-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8fe2-cdfc-775d-a845-a69af13d39cb","tursoName","53b5cfec20844c81ba3878b35a1e8625","tursoHostname","53b5cfec20844c81ba3878b35a1e8625-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789484509295],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":102},"org",{"_9":10,"_99":100,"_101":102,"_55":56,"_103":104,"_105":42},"branch",{"_35":89,"_11":90,"_22":28,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",709,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","M A","avatar","https://lh3.googleusercontent.com/a/ACg8ocI9znhXn2hWp1wjjyWzeuOyoO_JrDgJo8aD0umFraR7bAG3UAmc=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_140":141,"_142":143,"_144":145,"_146":42,"_147":42,"_148":42,"_149":32,"_150":-5,"_151":-7,"_152":-7,"_153":63,"_154":42,"_155":42,"_156":-5,"_157":42,"_158":42,"_159":42,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":90,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]