เชื่อมแชทบอทเข้ากับแอปมือถือ

สวัสดีครับ ทีมพัฒนาแอปจะเชื่อมแชทบอท AgenticOS เข้ากับแอปมือถือ รบกวนขอข้อมูลดังนี้ครับ
1. Embed token ของช่องทางเว็บที่ตั้งบอทตอบไว้แล้ว (OmniChat → ช่องทาง → เว็บไซต์ → โค้ดฝัง)
2. Identity key (ช่องทางเว็บ → เชื่อมกับระบบสมาชิกของเว็บคุณ → สร้างกุญแจ) — ส่งผ่าน password manager
3. ใส่ Webhook URL นี้: https://<เซิร์ฟเวอร์ของเรา>/omnichat/reply แล้วส่ง signing key กลับมา — ส่งผ่าน password manager
4. ฟอร์มก่อนแชทเปิดอยู่หรือไม่ และขอเพิ่มเพดานข้อความเป็น __ ครั้ง/นาที (ถ้าจำเป็น)

<!doctype html>
<html>
<head>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <style>
    html, body { margin: 0; height: 100%; }
    #omnichat-chat { height: 100%; }
    .ocw-inline { height: 100% !important; border: 0 !important; border-radius: 0 !important; }
  </style>
</head>
<body>
  <div id="omnichat-chat"></div>
  <script src="https://app.agenticos.tech/widget.js"
          data-omnichat-token="EMBED_TOKEN"
          data-omnichat-inline="omnichat-chat"
          data-omnichat-user-id="{{ user.id }}"
          data-omnichat-user-hash="{{ user_hash }}"
          data-omnichat-user-name="{{ user.name }}"
          async></script>
</body>
</html>

// iOS — open _blank links (payment, attachments) outside the chat
func webView(_ webView: WKWebView, createWebViewWith configuration: WKWebViewConfiguration,
             for navigationAction: WKNavigationAction, windowFeatures: WKWindowFeatures) -> WKWebView? {
    if let url = navigationAction.request.url { UIApplication.shared.open(url) }
    return nil
}

// Android
webView.settings.javaScriptEnabled = true
webView.settings.domStorageEnabled = true
webView.webViewClient = object : WebViewClient() {
    override fun shouldOverrideUrlLoading(view: WebView, req: WebResourceRequest): Boolean {
        val host = req.url.host ?: return false
        if (host.endsWith("agenticos.tech")) return false          // stay in the chat
        startActivity(Intent(Intent.ACTION_VIEW, req.url)); return true
    }
}
webView.webChromeClient = object : WebChromeClient() {
    override fun onShowFileChooser(view: WebView, cb: ValueCallback<Array<Uri>>,
                                   params: FileChooserParams): Boolean {
        filePathCallback = cb
        fileChooser.launch(params.createIntent())   // registerForActivityResult(StartActivityForResult)
        return true
    }
}
webView.loadUrl(chatPageUrl)

user_hash = hex( HMAC-SHA256( key = identity key, message = user_id ) )   // lowercase hex, 64 chars

const userHash = crypto.createHmac("sha256", process.env.OMNICHAT_IDENTITY_KEY)
  .update(String(user.id)).digest("hex");

user_hash = hmac.new(IDENTITY_KEY.encode(), str(user.id).encode(), hashlib.sha256).hexdigest()

$userHash = hash_hmac('sha256', (string)$user->id, OMNICHAT_IDENTITY_KEY);

{
  "name": "Website chat",
  "avatarUrl": "https://…/avatar.png",
  "style": { "color": "#6366f1", "color2": "#22d3ee", "gradient": true, "title": "…", "placeholder": "…" },
  "prechat": null,
  "chatUrl": "https://app.agenticos.tech/chat/<token>",
  "suggestions": ["What can you do?", "Pricing", "Talk to our team"],
  "followup": true
}

{
  "token": "<embed token>",
  "session_id": "wsx-1ecb99647586f8100cb4b7ca25d51ac9",
  "text": "Machine 3 at the Lat Phrao branch is not working",
  "user_id": "member-42",
  "user_hash": "<64 hex>",
  "user_name": "Somying Jaidee",
  "user_phone": "0812345678",
  "user_email": "[email protected]"
}

{
  "messages": [
    {
      "direction": "out",
      "sender_type": "ai",
      "text": "Hi! How can I help?",
      "created_at": "2026-09-30T08:15:02.418221+00:00",
      "attachment_url": null,
      "attachment_kind": null,
      "attachment_name": null,
      "card": null,
      "checkout_url": null
    }
  ],
  "cursor": "2026-09-30T08:15:02.418221+00:00",
  "prechat_done": true
}

{ "token": "…", "session_id": "…", "name": "Somying", "phone": "0812345678", "email": "", "company": "", "consent": true }

{
  "event": "message.created",
  "channel_id": "75538105-e14a-4f76-bb2d-dd1cc048b0bc",
  "conversation_id": "183b01f7-fd8e-4951-a07f-d323fbf6cfac",
  "user_id": "member-42",
  "session_id": null,
  "message": {
    "id": "77072727-82a3-4497-ad6d-7582175cf8a4",
    "sender": "bot",
    "sender_name": "Assistant",
    "preview": "The payback period depends on several things…",
    "has_attachment": false,
    "created_at": "2026-09-30T08:15:02.418221+00:00"
  },
  "sent_at": "2026-09-30T08:15:04.102118+00:00",
  "visitor_active": false
}

app.post("/omnichat/reply", express.raw({ type: "application/json" }), (req, res) => {
  const sig = Object.fromEntries(String(req.get("X-AgenticOS-Signature") || "")
    .split(",").map((p) => p.split("=", 2)));
  const expected = crypto.createHmac("sha256", process.env.OMNICHAT_PUSH_KEY)
    .update(`${sig.t}.`).update(req.body).digest("hex");
  const fresh = Math.abs(Date.now() / 1000 - Number(sig.t)) < 300;
  if (!fresh || !sig.v1 || sig.v1.length !== expected.length
      || !crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(sig.v1)))
    return res.sendStatus(401);
  const evt = JSON.parse(req.body);
  res.sendStatus(200);                       // answer first, then push
  if (evt.event === "message.created" && !evt.visitor_active) {
    sendPush(evt.user_id ?? evt.session_id, {
      title: evt.message.sender_name || "New message",
      body: evt.message.preview || "📎 Attachment",
      collapseKey: evt.message.id,
      data: { conversation_id: evt.conversation_id },
    });
  }
});

@app.post("/omnichat/reply")
async def omnichat_reply(request: Request):
    raw = await request.body()
    parts = dict(p.split("=", 1) for p in request.headers.get("X-AgenticOS-Signature", "").split(","))
    expected = hmac.new(PUSH_KEY.encode(), f"{parts.get('t')}.".encode() + raw, hashlib.sha256).hexdigest()
    if abs(time.time() - int(parts.get("t", 0))) > 300 or not hmac.compare_digest(expected, parts.get("v1", "")):
        raise HTTPException(401)
    evt = json.loads(raw)
    # … push to evt["user_id"] or evt["session_id"]
    return {"ok": True}