@aippy/runtime 0.4.1-dev.1 → 0.4.2-beta.0

package/dist/container-message-gRiGPin4.js

@@ -0,0 +1,56 @@
+import { g as o, a as i } from "./bridge-K3HqQwdj.js";
+const r = "0.4.2-beta.0", c = {
+  version: r
+}, a = c.version, p = "@aippy/runtime";
+function u() {
+  return {
+    name: p,
+    version: a,
+    buildTime: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function g(n) {
+  const { token: t, existingHeaders: s } = n, e = new Headers(s);
+  return e.set("Aippy-Runtime-Authorization", `Bearer ${t}`), e.set("Aippy-Runtime-SDK-Version", a), typeof navigator < "u" && navigator.userAgent && e.set("Aippy-Runtime-UA", navigator.userAgent), e;
+}
+async function m(n) {
+  const t = await o();
+  return g({ token: t, existingHeaders: n });
+}
+function y(n) {
+  if (!(typeof window > "u"))
+    try {
+      const t = window.webkit?.messageHandlers?.aippyListener;
+      if (t)
+        try {
+          const e = {
+            command: "container.message",
+            parameters: n
+          };
+          t.postMessage(e);
+        } catch {
+          console.warn("Failed to send container message to the native host");
+        }
+      const s = i();
+      if (s)
+        try {
+          const e = {
+            type: "container.message",
+            data: n
+          };
+          window.parent.postMessage(e, s);
+        } catch {
+          console.warn("Failed to send container message to the parent host");
+        }
+    } catch {
+      console.warn("Failed to send container message");
+    }
+}
+export {
+  p as S,
+  a as V,
+  m as a,
+  g as c,
+  u as g,
+  y as s
+};

package/dist/core/env.d.ts

@@ -4,6 +4,8 @@
  * All environment-specific URLs live here — no other file should
  * hardcode aippy domain strings.
  */
+/** @internal Runtime credentials may only be sent to these official API origins. */
+export declare function isTrustedApiOrigin(origin: string): boolean;
 /**
  * Resolves the API base URL at runtime by inspecting the page hostname.
  *

package/dist/core/index.js

@@ -1,7 +1,7 @@
 import { D as r, g as s, m as o } from "../config-B0A7gHQM.js";
-import { _ as t, r as i } from "../bridge-CtB9L5kL.js";
+import { _ as t, r as i } from "../bridge-K3HqQwdj.js";
 import { A as R, a as E, E as c, b as m, c as A } from "../errors-B3bDbQbD.js";
-import { S as f, V as g, c as l, a as y, g as _, s as d } from "../container-message-KgL1paGV.js";
+import { S as f, V as g, c as l, a as y, g as _, s as d } from "../container-message-gRiGPin4.js";
 import { A as D, C as O, R as F, a as I, p as S } from "../runtime-CmoG3v2m.js";
 export {
   D as AippyRuntime,

package/dist/core/parent-message.d.ts

@@ -0,0 +1,5 @@
+/** Browser-observed parent origin; never trust an origin supplied in a message. */
+export declare function getParentOrigin(): string | undefined;
+export declare function isParentMessage(event: MessageEvent, origin?: string | undefined): boolean;
+/** Preserve native self-postMessage callbacks, but reject sibling/foreign frames. */
+export declare function isHostMessage(event: MessageEvent): boolean;

package/dist/core/wallet-recharge.d.ts

@@ -0,0 +1,16 @@
+/** Shared native recharge sheet tracking. No payment or balance is inferred here. */
+export declare const WALLET_SHOW_RECHARGE = "wallet.showRecharge";
+type Failure = 'unavailable' | 'busy' | 'cancelled' | 'timeout' | 'protocol' | 'bridge';
+export declare class WalletRechargeError extends Error {
+    readonly type: Failure;
+    constructor(type: Failure, message: string);
+}
+/** Request GEM recharge guidance without waiting for funds or retrying an action. */
+export declare function showNativeRecharge(): void;
+/**
+ * At most one continuation owns a sheet. An existing unclaimed sheet may be joined.
+ * After timeout/abort, retain a drain-only listener until closed: no requestId
+ * exists, so opening another sheet earlier could mistake an old result for it.
+ */
+export declare function waitForNativeRecharge(signal?: AbortSignal): Promise<boolean>;
+export {};