@aiworkbench/vibe-bridge 0.0.4 → 0.0.6

package/dist/components/VibeHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"VibeHost.d.ts","sourceRoot":"","sources":["../../src/components/VibeHost.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAiFnD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,2CAiB5C"}
+{"version":3,"file":"VibeHost.d.ts","sourceRoot":"","sources":["../../src/components/VibeHost.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAkFnD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,2CAiB5C"}

package/dist/core/loader.d.ts

@@ -1,3 +1,35 @@
-export declare function loadScript(src: string): Promise<void>;
+/**
+ * Register shared dependencies that mini-app bundles may import as bare
+ * specifiers. Call this once at app startup, *before* any VibeHost renders.
+ *
+ * Example:
+ *   setSharedDependencies({
+ *     "react":            "https://esm.sh/react@19",
+ *     "react/jsx-runtime":"https://esm.sh/react@19/jsx-runtime",
+ *     "react-dom":        "https://esm.sh/react-dom@19",
+ *     "react-dom/client":  "https://esm.sh/react-dom@19/client",
+ *   });
+ */
+export declare function setSharedDependencies(deps: Record<string, string>): void;
+/**
+ * Configure the set of trusted origins for mini-app bundles.
+ * Call this once at app startup before any VibeHost renders.
+ *
+ * Example:
+ *   setAllowedOrigins([
+ *     "https://vibedevstore.blob.core.windows.net",
+ *     "https://vibestagingstore.blob.core.windows.net",
+ *   ]);
+ */
+export declare function setAllowedOrigins(origins: string[]): void;
+export interface LoadScriptOptions {
+    /** SRI integrity hash (e.g. "sha384-..."). If provided, the browser will
+     *  refuse to execute the script if the content doesn't match. */
+    integrity?: string;
+    /** CORS setting for the script. Required for SRI on cross-origin scripts.
+     *  Defaults to "anonymous" when integrity is provided. */
+    crossOrigin?: string;
+}
+export declare function loadScript(src: string, options?: LoadScriptOptions): Promise<void>;
 export declare function waitForElement(tagName: string): Promise<void>;
 //# sourceMappingURL=loader.d.ts.map

package/dist/core/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/core/loader.ts"],"names":[],"mappings":"AAmBA,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BrD;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/core/loader.ts"],"names":[],"mappings":"AAoBA;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CASxE;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAQzD;AAwBD,MAAM,WAAW,iBAAiB;IAChC;qEACiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;8DAC0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,UAAU,CACxB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D"}

package/dist/core/types.d.ts

@@ -5,6 +5,10 @@ export interface VibeHostProps {
     manifest: VibeManifest;
     /** URL to the built JS bundle for the mini-app. */
     src: string;
+    /** SRI integrity hash (e.g. "sha384-...") from the registry entry.
+     *  When provided, the browser refuses to execute the script if the
+     *  content doesn't match — preventing tampered bundles from running. */
+    integrity?: string;
     /** Shown while the script loads and custom element registers. */
     fallback?: ReactNode;
     /** Shown when the script fails to load or the element fails to mount. */

package/dist/core/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EACN,YAAY,EACZ,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,aAAa,EACb,YAAY,EACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,QAAQ,EAAE,YAAY,CAAC;IACvB,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,iEAAiE;IACjE,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,yEAAyE;IACzE,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC;IAC5C,iDAAiD;IACjD,QAAQ,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrC,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,sCAAsC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,SAAS,CAAC;IACf,UAAU,EAAE,gBAAgB,CAAC;IAC7B,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,SAAS,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACvC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EACN,YAAY,EACZ,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,aAAa,EACb,YAAY,EACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,QAAQ,EAAE,YAAY,CAAC;IACvB,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ;;4EAEwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,yEAAyE;IACzE,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC;IAC5C,iDAAiD;IACjD,QAAQ,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrC,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,sCAAsC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,SAAS,CAAC;IACf,UAAU,EAAE,gBAAgB,CAAC;IAC7B,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,SAAS,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACvC"}

package/dist/hooks/useVibeLoader.d.ts

@@ -1,3 +1,3 @@
 import type { UseVibeLoaderResult } from "../core/types";
-export declare function useVibeLoader(src: string, tagName: string): UseVibeLoaderResult;
+export declare function useVibeLoader(src: string, tagName: string, integrity?: string): UseVibeLoaderResult;
 //# sourceMappingURL=useVibeLoader.d.ts.map

package/dist/hooks/useVibeLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useVibeLoader.d.ts","sourceRoot":"","sources":["../../src/hooks/useVibeLoader.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAgB,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEvE,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,mBAAmB,CAkCrB"}
+{"version":3,"file":"useVibeLoader.d.ts","sourceRoot":"","sources":["../../src/hooks/useVibeLoader.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAgB,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEvE,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,mBAAmB,CAkCrB"}

package/dist/index.d.ts

@@ -12,6 +12,7 @@ export { createStorageAdapter } from "./adapters/storage";
 export { createEventsAdapter } from "./adapters/events";
 export { filterByPermissions } from "./core/permissions";
 export { getEventBus, emitEvent } from "./core/event-bus";
+export { setAllowedOrigins, setSharedDependencies } from "./core/loader";
 export type { VibeHostProps, AdapterOverrides, LoaderStatus, UseVibeLoaderResult, } from "./core/types";
 export type { AuthAdapterDeps } from "./adapters/auth";
 export type { ApiAdapterDeps } from "./adapters/api";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAGnE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAGtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG1D,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAGnE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAGtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGzE,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -1,450 +1 @@
-// src/components/VibeHost.tsx
-import { useRef, useEffect as useEffect2, useCallback } from "react";
-
-// src/hooks/useVibeLoader.ts
-import { useState, useEffect } from "react";
-
-// src/core/loader.ts
-var loadedScripts = new Set;
-var ALLOWED_PROTOCOLS = new Set(["https:", "http:"]);
-function validateScriptSrc(src) {
-  let url;
-  try {
-    url = new URL(src, window.location.href);
-  } catch {
-    return `Invalid vibe app script URL: ${src}`;
-  }
-  if (!ALLOWED_PROTOCOLS.has(url.protocol)) {
-    return `Refused to load vibe app script with disallowed protocol "${url.protocol}": ${src}`;
-  }
-  return null;
-}
-function loadScript(src) {
-  const validationError = validateScriptSrc(src);
-  if (validationError) {
-    return Promise.reject(new Error(validationError));
-  }
-  if (loadedScripts.has(src)) {
-    return Promise.resolve();
-  }
-  return new Promise((resolve, reject) => {
-    const existing = document.querySelector(`script[src="${CSS.escape(src)}"]`);
-    if (existing) {
-      loadedScripts.add(src);
-      resolve();
-      return;
-    }
-    const script = document.createElement("script");
-    script.type = "module";
-    script.src = src;
-    script.onload = () => {
-      loadedScripts.add(src);
-      resolve();
-    };
-    script.onerror = () => {
-      reject(new Error(`Failed to load vibe app script: ${src}`));
-    };
-    document.head.appendChild(script);
-  });
-}
-function waitForElement(tagName) {
-  if (customElements.get(tagName)) {
-    return Promise.resolve();
-  }
-  return customElements.whenDefined(tagName).then(() => {
-    return;
-  });
-}
-
-// src/hooks/useVibeLoader.ts
-function useVibeLoader(src, tagName) {
-  const [status, setStatus] = useState("loading");
-  const [error, setError] = useState(null);
-  useEffect(() => {
-    let cancelled = false;
-    setStatus("loading");
-    setError(null);
-    loadScript(src).then(() => waitForElement(tagName)).then(() => {
-      if (!cancelled) {
-        setStatus("ready");
-      }
-    }).catch((err) => {
-      if (!cancelled) {
-        const e = err instanceof Error ? err : new Error(`Failed to load vibe app: ${tagName}`);
-        setError(e);
-        setStatus("error");
-      }
-    });
-    return () => {
-      cancelled = true;
-    };
-  }, [src, tagName]);
-  return { status, error };
-}
-
-// src/hooks/useVibeBridge.ts
-import { useMemo } from "react";
-import { useSession } from "next-auth/react";
-import { useRouter } from "next/navigation";
-import { toast } from "sonner";
-
-// src/adapters/auth.ts
-function createAuthAdapter(deps) {
-  return {
-    getUser() {
-      const user = deps.session?.user;
-      return {
-        id: user?.email ?? "unknown",
-        name: user?.name ?? "Unknown User",
-        email: user?.email ?? undefined
-      };
-    },
-    async getToken() {
-      const token = deps.session?.idToken;
-      if (!token) {
-        throw new Error("No authentication token available.");
-      }
-      return token;
-    }
-  };
-}
-
-// src/adapters/api.ts
-function createApiAdapter(deps) {
-  return {
-    async fetch(endpoint, options) {
-      const url = endpoint.startsWith("/api/") ? endpoint : `/api/${endpoint.replace(/^\//, "")}`;
-      const token = await deps.getToken();
-      const headers = new Headers(options?.headers);
-      headers.set("Authorization", `Bearer ${token}`);
-      return globalThis.fetch(url, {
-        ...options,
-        headers
-      });
-    }
-  };
-}
-
-// src/adapters/navigation.ts
-function createNavigationAdapter(deps) {
-  return {
-    navigate(path) {
-      if (/^https?:\/\//i.test(path) || /^javascript:/i.test(path)) {
-        throw new Error(`Navigation to external URLs is not allowed: ${path}`);
-      }
-      deps.push(path);
-    }
-  };
-}
-
-// src/adapters/theme.ts
-function createThemeAdapter() {
-  return {
-    current() {
-      const html = document.documentElement;
-      if (html.classList.contains("dark"))
-        return "dark";
-      if (html.classList.contains("light"))
-        return "light";
-      const dataTheme = html.getAttribute("data-theme");
-      if (dataTheme === "dark")
-        return "dark";
-      if (dataTheme === "light")
-        return "light";
-      if (globalThis.matchMedia?.("(prefers-color-scheme: dark)").matches) {
-        return "dark";
-      }
-      return "light";
-    }
-  };
-}
-
-// src/adapters/toast.ts
-function createToastAdapter(deps) {
-  return {
-    show(message, options) {
-      const type = options?.type ?? "info";
-      switch (type) {
-        case "success":
-          deps.toast.success(message);
-          break;
-        case "error":
-          deps.toast.error(message);
-          break;
-        case "info":
-          deps.toast.info(message);
-          break;
-        default:
-          deps.toast(message);
-      }
-    }
-  };
-}
-
-// src/adapters/storage.ts
-function createStorageAdapter(appId) {
-  const prefix = `vibe:${appId}:`;
-  return {
-    async get(key) {
-      return localStorage.getItem(`${prefix}${key}`);
-    },
-    async set(key, value) {
-      localStorage.setItem(`${prefix}${key}`, value);
-    },
-    async remove(key) {
-      localStorage.removeItem(`${prefix}${key}`);
-    },
-    async keys() {
-      const result = [];
-      for (let i = 0;i < localStorage.length; i++) {
-        const k = localStorage.key(i);
-        if (k?.startsWith(prefix)) {
-          result.push(k.slice(prefix.length));
-        }
-      }
-      return result;
-    }
-  };
-}
-
-// src/core/event-bus.ts
-var VIBE_EVENT_PREFIX = "vibe:";
-var sharedBus = null;
-function getEventBus() {
-  if (!sharedBus) {
-    sharedBus = new EventTarget;
-  }
-  return sharedBus;
-}
-function prefixedEventName(event) {
-  if (event.startsWith(VIBE_EVENT_PREFIX)) {
-    return event;
-  }
-  return `${VIBE_EVENT_PREFIX}${event}`;
-}
-function emitEvent(event, payload, sourceAppId) {
-  const bus = getEventBus();
-  const detail = { payload, sourceAppId };
-  bus.dispatchEvent(new CustomEvent(prefixedEventName(event), { detail }));
-}
-function onEvent(event, handler) {
-  const bus = getEventBus();
-  const prefixed = prefixedEventName(event);
-  const listener = (e) => {
-    handler(e.detail);
-  };
-  bus.addEventListener(prefixed, listener);
-  return () => bus.removeEventListener(prefixed, listener);
-}
-function onceEvent(event, handler) {
-  const bus = getEventBus();
-  const prefixed = prefixedEventName(event);
-  const listener = (e) => {
-    handler(e.detail);
-  };
-  bus.addEventListener(prefixed, listener, { once: true });
-  return () => bus.removeEventListener(prefixed, listener);
-}
-
-// src/adapters/events.ts
-function createEventsAdapter(appId) {
-  return {
-    emit(event, payload) {
-      emitEvent(event, payload ?? {}, appId);
-    },
-    on(event, handler) {
-      return onEvent(event, (detail) => handler(detail.payload));
-    },
-    once(event, handler) {
-      return onceEvent(event, (detail) => handler(detail.payload));
-    }
-  };
-}
-
-// src/core/permissions.ts
-function createDeniedProxy(capability) {
-  return new Proxy({}, {
-    get(_target, prop) {
-      if (typeof prop === "symbol")
-        return;
-      throw new Error(`Access denied: ${capability}.${prop} is not permitted. Add '${capability}' to your manifest.json permissions.`);
-    }
-  });
-}
-function filterByPermissions(bridge, permissions) {
-  const allCapabilities = [
-    "auth",
-    "api",
-    "navigation",
-    "theme",
-    "toast",
-    "storage",
-    "events"
-  ];
-  const filtered = {};
-  for (const cap of allCapabilities) {
-    if (permissions.includes(cap)) {
-      filtered[cap] = bridge[cap];
-    } else {
-      filtered[cap] = createDeniedProxy(cap);
-    }
-  }
-  return filtered;
-}
-
-// src/hooks/useVibeBridge.ts
-function useVibeBridge(options) {
-  const { appId, permissions, overrides } = options;
-  const { data: session } = useSession();
-  const router = useRouter();
-  return useMemo(() => {
-    const authAdapter = overrides?.auth ?? createAuthAdapter({ session: session ?? null });
-    const fullBridge = {
-      auth: authAdapter,
-      api: overrides?.api ?? createApiAdapter({ getToken: () => authAdapter.getToken() }),
-      navigation: overrides?.navigation ?? createNavigationAdapter({ push: (path) => router.push(path) }),
-      theme: overrides?.theme ?? createThemeAdapter(),
-      toast: overrides?.toast ?? createToastAdapter({ toast }),
-      storage: overrides?.storage ?? createStorageAdapter(appId),
-      events: overrides?.events ?? createEventsAdapter(appId)
-    };
-    return filterByPermissions(fullBridge, permissions);
-  }, [session, router, appId, permissions, overrides]);
-}
-
-// src/components/VibeErrorBoundary.tsx
-import { Component } from "react";
-
-class VibeErrorBoundary extends Component {
-  constructor(props) {
-    super(props);
-    this.state = { error: null };
-  }
-  static getDerivedStateFromError(error) {
-    return { error };
-  }
-  componentDidCatch(error, _info) {
-    this.props.onError?.(error);
-  }
-  render() {
-    if (this.state.error) {
-      return this.props.fallback(this.state.error);
-    }
-    return this.props.children;
-  }
-}
-
-// src/components/VibeHost.tsx
-import { jsxDEV, Fragment } from "react/jsx-dev-runtime";
-function VibeHostInner({
-  manifest,
-  src,
-  fallback,
-  errorFallback,
-  adapters,
-  onReady,
-  onError,
-  className,
-  style
-}) {
-  const containerRef = useRef(null);
-  const elementRef = useRef(null);
-  const readyFiredRef = useRef(false);
-  const { status, error: loadError } = useVibeLoader(src, manifest.id);
-  const bridge = useVibeBridge({
-    appId: manifest.id,
-    permissions: manifest.permissions,
-    overrides: adapters
-  });
-  useEffect2(() => {
-    if (loadError) {
-      onError?.(loadError);
-    }
-  }, [loadError, onError]);
-  useEffect2(() => {
-    const container = containerRef.current;
-    if (status !== "ready" || !container)
-      return;
-    const el = document.createElement(manifest.id);
-    el.bridge = bridge;
-    container.appendChild(el);
-    elementRef.current = el;
-    if (!readyFiredRef.current) {
-      readyFiredRef.current = true;
-      onReady?.();
-    }
-    return () => {
-      if (container.contains(el)) {
-        container.removeChild(el);
-      }
-      elementRef.current = null;
-    };
-  }, [status, manifest.id]);
-  useEffect2(() => {
-    if (elementRef.current) {
-      elementRef.current.bridge = bridge;
-    }
-  }, [bridge]);
-  if (status === "error" && loadError) {
-    if (errorFallback) {
-      return /* @__PURE__ */ jsxDEV(Fragment, {
-        children: errorFallback(loadError)
-      }, undefined, false, undefined, this);
-    }
-    return null;
-  }
-  if (status === "loading") {
-    return /* @__PURE__ */ jsxDEV(Fragment, {
-      children: fallback ?? null
-    }, undefined, false, undefined, this);
-  }
-  return /* @__PURE__ */ jsxDEV("div", {
-    ref: containerRef,
-    className,
-    style
-  }, undefined, false, undefined, this);
-}
-function VibeHost(props) {
-  const defaultErrorFallback = useCallback((error) => {
-    props.onError?.(error);
-    if (props.errorFallback) {
-      return /* @__PURE__ */ jsxDEV(Fragment, {
-        children: props.errorFallback(error)
-      }, undefined, false, undefined, this);
-    }
-    return null;
-  }, [props.onError, props.errorFallback]);
-  return /* @__PURE__ */ jsxDEV(VibeErrorBoundary, {
-    fallback: defaultErrorFallback,
-    onError: props.onError,
-    children: /* @__PURE__ */ jsxDEV(VibeHostInner, {
-      ...props
-    }, undefined, false, undefined, this)
-  }, undefined, false, undefined, this);
-}
-// src/hooks/useVibeEvents.ts
-import { useEffect as useEffect3 } from "react";
-function useVibeEvents(event, handler) {
-  useEffect3(() => {
-    return onEvent(event, (detail) => {
-      handler(detail.payload, detail.sourceAppId);
-    });
-  }, [event, handler]);
-}
-export {
-  useVibeLoader,
-  useVibeEvents,
-  useVibeBridge,
-  getEventBus,
-  filterByPermissions,
-  emitEvent,
-  createToastAdapter,
-  createThemeAdapter,
-  createStorageAdapter,
-  createNavigationAdapter,
-  createEventsAdapter,
-  createAuthAdapter,
-  createApiAdapter,
-  VibeHost,
-  VibeErrorBoundary
-};
+import{useRef as N,useEffect as X,useCallback as ne}from"react";import{useState as G,useEffect as M}from"react";var b=new Set,K=new Set(["https:","http:"]),c=null,x=null,h=!1;function Q(e){if(h){console.warn("[vibe-bridge] setSharedDependencies() called after an import map was already injected. The new entries will be ignored.");return}x={...e}}function Y(){if(h||!x)return;let e=document.createElement("script");e.type="importmap",e.textContent=JSON.stringify({imports:x}),document.head.appendChild(e),h=!0}function Z(e){c=new Set(e.map((t)=>{return new URL(t).origin}))}function O(e){let t;try{t=new URL(e,window.location.href)}catch{return`Invalid vibe app script URL: ${e}`}if(!K.has(t.protocol))return`Refused to load vibe app script with disallowed protocol "${t.protocol}": ${e}`;if(c&&!c.has(t.origin))return`Refused to load vibe app script from untrusted origin "${t.origin}": ${e}. Allowed origins: ${[...c].join(", ")}`;return null}function R(e,t){let r=O(e);if(r)return Promise.reject(Error(r));if(b.has(e))return Promise.resolve();return new Promise((o,n)=>{if(document.querySelector(`script[src="${CSS.escape(e)}"]`)){b.add(e),o();return}let i=document.createElement("script");if(i.type="module",i.src=e,t?.integrity)i.integrity=t.integrity,i.crossOrigin=t.crossOrigin??"anonymous";i.onload=()=>{b.add(e),o()},i.onerror=()=>{let a=t?.integrity?" This may be an SRI integrity mismatch — the bundle content doesn't match the expected hash.":"";n(Error(`Failed to load vibe app script: ${e}.${a}`))},Y(),document.head.appendChild(i)})}function q(e){if(customElements.get(e))return Promise.resolve();return customElements.whenDefined(e).then(()=>{return})}function V(e,t,r){let[o,n]=G("loading"),[s,i]=G(null);return M(()=>{let a=!1;return n("loading"),i(null),R(e,r?{integrity:r}:void 0).then(()=>q(t)).then(()=>{if(!a)n("ready")}).catch((p)=>{if(!a){let l=p instanceof Error?p:Error(`Failed to load vibe app: ${t}`);i(l),n("error")}}),()=>{a=!0}},[e,t,r]),{status:o,error:s}}import{useMemo as j}from"react";import{useSession as ee}from"next-auth/react";import{useRouter as te}from"next/navigation";import{toast as re}from"sonner";function w(e){return{getUser(){let t=e.session?.user;return{id:t?.email??"unknown",name:t?.name??"Unknown User",email:t?.email??void 0}},async getToken(){let t=e.session?.idToken;if(!t)throw Error("No authentication token available.");return t}}}function P(e){return{async fetch(t,r){let o=t.startsWith("/api/")?t:`/api/${t.replace(/^\//,"")}`,n=await e.getToken(),s=new Headers(r?.headers);return s.set("Authorization",`Bearer ${n}`),globalThis.fetch(o,{...r,headers:s})}}}function k(e){return{navigate(t){if(/^https?:\/\//i.test(t)||/^javascript:/i.test(t))throw Error(`Navigation to external URLs is not allowed: ${t}`);e.push(t)}}}function T(){return{current(){let e=document.documentElement;if(e.classList.contains("dark"))return"dark";if(e.classList.contains("light"))return"light";let t=e.getAttribute("data-theme");if(t==="dark")return"dark";if(t==="light")return"light";if(globalThis.matchMedia?.("(prefers-color-scheme: dark)").matches)return"dark";return"light"}}}function D(e){return{show(t,r){switch(r?.type??"info"){case"success":e.toast.success(t);break;case"error":e.toast.error(t);break;case"info":e.toast.info(t);break;default:e.toast(t)}}}}function S(e){let t=`vibe:${e}:`;return{async get(r){return localStorage.getItem(`${t}${r}`)},async set(r,o){localStorage.setItem(`${t}${r}`,o)},async remove(r){localStorage.removeItem(`${t}${r}`)},async keys(){let r=[];for(let o=0;o<localStorage.length;o++){let n=localStorage.key(o);if(n?.startsWith(t))r.push(n.slice(t.length))}return r}}}var $=null;function E(){if(!$)$=new EventTarget;return $}function I(e){if(e.startsWith("vibe:"))return e;return`vibe:${e}`}function C(e,t,r){let o=E(),n={payload:t,sourceAppId:r};o.dispatchEvent(new CustomEvent(I(e),{detail:n}))}function y(e,t){let r=E(),o=I(e),n=(s)=>{t(s.detail)};return r.addEventListener(o,n),()=>r.removeEventListener(o,n)}function J(e,t){let r=E(),o=I(e),n=(s)=>{t(s.detail)};return r.addEventListener(o,n,{once:!0}),()=>r.removeEventListener(o,n)}function U(e){return{emit(t,r){C(t,r??{},e)},on(t,r){return y(t,(o)=>r(o.payload))},once(t,r){return J(t,(o)=>r(o.payload))}}}function F(e){return new Proxy({},{get(t,r){if(typeof r==="symbol")return;throw Error(`Access denied: ${e}.${r} is not permitted. Add '${e}' to your manifest.json permissions.`)}})}function _(e,t){let r=["auth","api","navigation","theme","toast","storage","events"],o={};for(let n of r)if(t.includes(n))o[n]=e[n];else o[n]=F(n);return o}function L(e){let{appId:t,permissions:r,overrides:o}=e,{data:n}=ee(),s=te();return j(()=>{let i=o?.auth??w({session:n??null}),a={auth:i,api:o?.api??P({getToken:()=>i.getToken()}),navigation:o?.navigation??k({push:(p)=>s.push(p)}),theme:o?.theme??T(),toast:o?.toast??D({toast:re}),storage:o?.storage??S(t),events:o?.events??U(t)};return _(a,r)},[n,s,t,r,o])}import{Component as oe}from"react";class A extends oe{constructor(e){super(e);this.state={error:null}}static getDerivedStateFromError(e){return{error:e}}componentDidCatch(e,t){this.props.onError?.(e)}render(){if(this.state.error)return this.props.fallback(this.state.error);return this.props.children}}import{jsx as d,Fragment as W}from"react/jsx-runtime";function ie({manifest:e,src:t,integrity:r,fallback:o,errorFallback:n,adapters:s,onReady:i,onError:a,className:p,style:l}){let z=N(null),v=N(null),H=N(!1),{status:m,error:u}=V(t,e.id,r),B=L({appId:e.id,permissions:e.permissions,overrides:s});if(X(()=>{if(u)a?.(u)},[u,a]),X(()=>{let f=z.current;if(m!=="ready"||!f)return;let g=document.createElement(e.id);if(g.bridge=B,f.appendChild(g),v.current=g,!H.current)H.current=!0,i?.();return()=>{if(f.contains(g))f.removeChild(g);v.current=null}},[m,e.id]),X(()=>{if(v.current)v.current.bridge=B},[B]),m==="error"&&u){if(n)return d(W,{children:n(u)});return null}if(m==="loading")return d(W,{children:o??null});return d("div",{ref:z,className:p,style:l})}function se(e){let t=ne((r)=>{if(e.onError?.(r),e.errorFallback)return d(W,{children:e.errorFallback(r)});return null},[e.onError,e.errorFallback]);return d(A,{fallback:t,onError:e.onError,children:d(ie,{...e})})}import{useEffect as ae}from"react";function pe(e,t){ae(()=>{return y(e,(r)=>{t(r.payload,r.sourceAppId)})},[e,t])}export{V as useVibeLoader,pe as useVibeEvents,L as useVibeBridge,Q as setSharedDependencies,Z as setAllowedOrigins,E as getEventBus,_ as filterByPermissions,C as emitEvent,D as createToastAdapter,T as createThemeAdapter,S as createStorageAdapter,k as createNavigationAdapter,U as createEventsAdapter,w as createAuthAdapter,P as createApiAdapter,se as VibeHost,A as VibeErrorBoundary};

package/package.json

@@ -1,7 +1,9 @@
 {
   "name": "@aiworkbench/vibe-bridge",
-  "version": "0.0.4",
-  "publishConfig": { "access": "public" },
+  "version": "0.0.6",
+  "publishConfig": {
+    "access": "public"
+  },
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -12,13 +14,15 @@
     }
   },
   "scripts": {
-    "build": "bun build ./src/index.ts --outdir ./dist --target=browser --external react --external react-dom --external next --external next-auth --external next-auth/react --external next/navigation --external sonner && tsc --emitDeclarationOnly",
+    "build": "bun build ./src/index.ts --outdir ./dist --target=browser --production --external react --external react-dom --external next --external next-auth --external next-auth/react --external next/navigation --external sonner && tsc --emitDeclarationOnly",
     "dev": "tsc --watch --emitDeclarationOnly",
     "type-check": "tsc --noEmit",
     "clean": "rm -rf dist",
     "prepublishOnly": "bun run build"
   },
-  "files": ["dist"],
+  "files": [
+    "dist"
+  ],
   "dependencies": {
     "@aiworkbench/vibe-types": "^0.0.4"
   },
@@ -39,4 +43,4 @@
     "@types/react-dom": "^19.2.3",
     "sonner": "^2.0.0"
   }
-}
+}