@benji-money/connect-sdk 1.1.4-beta.6 → 1.1.4-beta.7

package/README.md

@@ -2,6 +2,8 @@
 
 A JavaScript Github Package SDK for integrating Benji Connect, Benji's authentication and verification services.
 
+LOGIN mode (shells, timers, same-tab resume): [docs/login-mode.md](./docs/login-mode.md).
+
 ## Installation
 
 ```bash

package/dist/connect-sdk.umd.d.ts

@@ -0,0 +1,14 @@
+// These are compile-time constants replaced by tsup's `define` option.
+// Declaring them globally prevents TypeScript errors.
+
+
+declare global {
+  const __VERSION__: string;
+  const __NAMESPACE__: string;
+
+  // Global browser exposure for UMD builds 
+  interface Window {
+    // SDK main class (UMD builds attach this)
+    ConnectSDK?: any;
+  }
+}

package/dist/connect-sdk.umd.global.js

@@ -110,7 +110,7 @@ var ConnectSDK = (() => {
   // src/utils/config.ts
   var buildContext = () => ({
     namespace: "benji-connect-sdk" ? "benji-connect-sdk" : "benji-connect-sdk",
-    version: "1.1.4-beta.6" ? String("1.1.4-beta.6") : "0.0.0"
+    version: "1.1.4-beta.7" ? String("1.1.4-beta.7") : "0.0.0"
   });
   function isBenjiConnectEnvironment(environment) {
     return environment === "local" /* LOCAL */ || environment === "development" /* DEVELOPMENT */ || environment === "sandbox" /* SANDBOX */ || environment === "production" /* PRODUCTION */;
@@ -216,6 +216,16 @@ var ConnectSDK = (() => {
     }
   }
 
+  // src/constants/login.ts
+  var LOGIN_RETURN_STATE_SEPARATOR = ".benji_return.";
+  var LOGIN_RESUME_QUERY_FLAG = "login_resume";
+  var LOGIN_PENDING_STORAGE_KEY = "benji_login_pending";
+  var LOGIN_FORCE_REDIRECT_STORAGE_KEY = "benji_force_login_redirect";
+  var LOGIN_POPUP_CLOSED_POLL_MS = 500;
+  var LOGIN_IFRAME_DELIVERABILITY_POLL_MS = 100;
+  var LOGIN_SAME_TAB_AUTH_REDELIVERY_MS = 500;
+  var LOGIN_SAME_TAB_RESUME_TIMEOUT_MS = 45e3;
+
   // src/utils/partnerAuthLink.ts
   var LOGIN_POPUP_QUERY_FLAG = "benji_login_popup";
   function ensureAuthLinkStateNonce(url, nonce) {
@@ -248,33 +258,80 @@ var ConnectSDK = (() => {
   }
 
   // src/utils/verifyAppUrl.ts
-  var DEFAULT_LOCAL_VERIFY_ORIGIN = "http://localhost:3000";
-  var REMOTE_VERIFY_ORIGINS = [
-    "https://verifyapp-staging.withbenji.com",
-    "https://verifyapp-dev.withbenji.com",
-    "https://verifyapp.withbenji.com"
-  ];
-  function rewriteVerifyAppUrlForLocalConnect(partnerLoginLink, localOrigin = DEFAULT_LOCAL_VERIFY_ORIGIN) {
-    if (!partnerLoginLink) {
+  var VERIFYAPP_HOST = /^verifyapp(?:-[a-z0-9]+)?\.withbenji\.com$/i;
+  function safeDecode(value) {
+    try {
+      return decodeURIComponent(value);
+    } catch {
+      return value;
+    }
+  }
+  function rewriteParsedUrl(raw, local) {
+    let parsed;
+    try {
+      parsed = new URL(raw);
+    } catch {
+      return raw;
+    }
+    let changed = false;
+    if (VERIFYAPP_HOST.test(parsed.hostname)) {
+      parsed.protocol = local.protocol;
+      parsed.hostname = local.hostname;
+      parsed.port = local.port;
+      changed = true;
+    }
+    for (const key of parsed.searchParams.keys()) {
+      const value = parsed.searchParams.get(key);
+      if (value == null) {
+        continue;
+      }
+      const decoded = safeDecode(value);
+      const nested = rewriteParsedUrl(decoded, local);
+      if (nested !== decoded) {
+        parsed.searchParams.set(key, nested);
+        changed = true;
+      }
+    }
+    return changed ? parsed.toString() : raw;
+  }
+  function rewriteVerifyAppHostsInString(value, local) {
+    const localOrigin = local.origin;
+    const localHalfEncoded = `${local.protocol.replace(":", "")}%3A//${local.host}`;
+    const localFullyEncodedOrigin = encodeURIComponent(localOrigin);
+    let result = value;
+    result = result.replace(
+      /https:\/\/verifyapp(?:-[a-z0-9]+)?\.withbenji\.com/gi,
+      localOrigin
+    );
+    result = result.replace(
+      /https%3A\/\/verifyapp(?:-[a-z0-9]+)?\.withbenji\.com/gi,
+      localHalfEncoded
+    );
+    result = result.replace(
+      /https%3A%2F%2Fverifyapp(?:-[a-z0-9]+)?\.withbenji\.com/gi,
+      localFullyEncodedOrigin
+    );
+    return result;
+  }
+  function rewriteVerifyAppUrlForLocalConnect(partnerLoginLink, localOrigin) {
+    if (!partnerLoginLink || !localOrigin) {
       return partnerLoginLink;
     }
-    let url = partnerLoginLink;
-    for (const remote of REMOTE_VERIFY_ORIGINS) {
-      url = url.replaceAll(remote, localOrigin);
-      url = url.replaceAll(
-        remote.replace(/^https:\/\//, "https%3A//"),
-        localOrigin.replace(/^http:\/\//, "http%3A//")
-      );
-      url = url.replaceAll(encodeURIComponent(remote), encodeURIComponent(localOrigin));
+    let local;
+    try {
+      local = new URL(localOrigin);
+    } catch {
+      return partnerLoginLink;
+    }
+    if (VERIFYAPP_HOST.test(local.hostname)) {
+      return partnerLoginLink;
     }
-    return url;
+    let result = rewriteVerifyAppHostsInString(partnerLoginLink, local);
+    result = rewriteParsedUrl(result, local);
+    return result;
   }
 
   // src/utils/loginTransport.ts
-  var LOGIN_PENDING_STORAGE_KEY = "benji_login_pending";
-  var LOGIN_FORCE_REDIRECT_STORAGE_KEY = "benji_force_login_redirect";
-  var LOGIN_RESUME_QUERY_FLAG = "login_resume";
-  var LOGIN_RETURN_STATE_SEPARATOR = ".benji_return.";
   function isIosSafari(userAgent, maxTouchPoints) {
     const isIos = /iPhone|iPad|iPod/.test(userAgent) || userAgent.includes("Macintosh") && maxTouchPoints > 1;
     const isSafari = /Safari/.test(userAgent) && !/CriOS|FxiOS|EdgiOS|OPiOS|Chrome/.test(userAgent);
@@ -385,10 +442,10 @@ var ConnectSDK = (() => {
         args.returnOrigin
       );
     }
-    if (!args.rewriteForLocalConnect) {
+    if (!args.rewriteForLocalConnect || !args.localVerifyOrigin) {
       return prepared;
     }
-    return rewriteVerifyAppUrlForLocalConnect(prepared);
+    return rewriteVerifyAppUrlForLocalConnect(prepared, args.localVerifyOrigin);
   }
 
   // src/utils/placement.ts
@@ -884,7 +941,7 @@ var ConnectSDK = (() => {
       return false;
     }
   }
-  function isPopupOriginatedAuth(event, loginPopup, iframeWindow, connectOrigin) {
+  function isLoginPopupOriginatedAuth(event, loginPopup, iframeWindow, connectOrigin) {
     if (iframeWindow && event.source === iframeWindow) {
       return false;
     }
@@ -896,7 +953,7 @@ var ConnectSDK = (() => {
     }
     return isMessageWindow(event.source) && event.origin === connectOrigin && event.source !== iframeWindow;
   }
-  function canDeliverAuthToConnectIframe(iframe) {
+  function canDeliverLoginAuthToConnectIframe(iframe) {
     var _a;
     const iframeWindow = (_a = iframe == null ? void 0 : iframe.contentWindow) != null ? _a : null;
     if (!iframeWindow) return false;
@@ -912,13 +969,13 @@ var ConnectSDK = (() => {
     const type = data2.type;
     return typeof type === "string" ? type : void 0;
   }
-  function resolveLoginPartnerWindow(loginPopup, lastVerifiedPopupSource) {
+  function resolveLoginPartnerWindow(loginPopup, lastVerifiedLoginPopupSource) {
     var _a;
     const candidates = [];
-    if (lastVerifiedPopupSource && !lastVerifiedPopupSource.closed) {
-      candidates.push(lastVerifiedPopupSource);
+    if (lastVerifiedLoginPopupSource && !lastVerifiedLoginPopupSource.closed) {
+      candidates.push(lastVerifiedLoginPopupSource);
     }
-    if (loginPopup && !loginPopup.closed && loginPopup !== lastVerifiedPopupSource) {
+    if (loginPopup && !loginPopup.closed && loginPopup !== lastVerifiedLoginPopupSource) {
       candidates.push(loginPopup);
     }
     if (candidates.length === 0) {
@@ -936,9 +993,9 @@ var ConnectSDK = (() => {
     }
     return (_a = candidates[0]) != null ? _a : null;
   }
-  function describeLoginPartnerWindowTarget(target, loginPopup, lastVerifiedPopupSource) {
+  function describeLoginPartnerWindowTarget(target, loginPopup, lastVerifiedLoginPopupSource) {
     if (!target) return "none";
-    if (target === lastVerifiedPopupSource) return "lastVerified";
+    if (target === lastVerifiedLoginPopupSource) return "lastVerified";
     if (target === loginPopup) return "loginPopup";
     return "named";
   }
@@ -1061,8 +1118,6 @@ var ConnectSDK = (() => {
   };
 
   // src/router/message.ts
-  var IFRAME_DELIVERABILITY_POLL_MS = 100;
-  var HOST_AUTH_REDELIVERY_MS = 500;
   var _MessageRouter = class _MessageRouter {
     static configureMessageRouter(config) {
       this.onSuccess = config.onSuccess;
@@ -1079,10 +1134,10 @@ var ConnectSDK = (() => {
       this.mode = context.mode;
       this.connectOrigin = new URL(Endpoints.benji_connect_auth_url).origin;
       if (this.canDeliverToConnectIframe()) {
-        this.flushPendingHostAuth();
-        this.flushPendingPopupAuth();
+        this.flushPendingLoginSameTabAuth();
+        this.flushPendingLoginPopupAuth();
       } else {
-        this.startIframeDeliverabilityPoll();
+        this.startLoginConnectIframeDeliverabilityPoll();
       }
     }
     static resetIframeReady() {
@@ -1091,7 +1146,7 @@ var ConnectSDK = (() => {
     static setMode(mode) {
       this.mode = mode;
       if (mode !== 5 /* LOGIN */) {
-        this.stopIframeDeliverabilityPoll();
+        this.stopLoginConnectIframeDeliverabilityPoll();
       }
     }
     static addEventListeners() {
@@ -1105,17 +1160,17 @@ var ConnectSDK = (() => {
       window.removeEventListener("error", this.errorEventHandler);
       window.removeEventListener("unhandledrejection", this.errorEventHandler);
       window.removeEventListener("message", this.messageEventHandler);
-      this.stopIframeDeliverabilityPoll();
-      this.stopHostAuthRedelivery();
+      this.stopLoginConnectIframeDeliverabilityPoll();
+      this.stopLoginSameTabAuthRedelivery();
       this.configuredListeners = false;
       this.iframe = null;
       this.loginPopup = null;
       this.mode = 1 /* CONNECT */;
       this.connectOrigin = "";
       this.isIframeReady = false;
-      this.pendingPopupAuth = [];
-      this.pendingHostAuth = [];
-      this.lastVerifiedPopupSource = null;
+      this.pendingLoginPopupAuth = [];
+      this.pendingLoginSameTabAuth = [];
+      this.lastVerifiedLoginPopupSource = null;
     }
     static handleErrorMessage(event) {
       switch (event.type) {
@@ -1136,53 +1191,53 @@ var ConnectSDK = (() => {
       }
     }
     static canDeliverToConnectIframe() {
-      return canDeliverAuthToConnectIframe(this.iframe);
+      return canDeliverLoginAuthToConnectIframe(this.iframe);
     }
-    static startIframeDeliverabilityPoll() {
-      if (this.iframeDeliverabilityPoll !== null || this.mode !== 5 /* LOGIN */ || this.pendingPopupAuth.length === 0) {
+    static startLoginConnectIframeDeliverabilityPoll() {
+      if (this.loginConnectIframeDeliverabilityPoll !== null || this.mode !== 5 /* LOGIN */ || this.pendingLoginPopupAuth.length === 0) {
         return;
       }
-      this.iframeDeliverabilityPoll = window.setInterval(() => {
-        if (this.mode !== 5 /* LOGIN */ || this.pendingPopupAuth.length === 0) {
-          this.stopIframeDeliverabilityPoll();
+      this.loginConnectIframeDeliverabilityPoll = window.setInterval(() => {
+        if (this.mode !== 5 /* LOGIN */ || this.pendingLoginPopupAuth.length === 0) {
+          this.stopLoginConnectIframeDeliverabilityPoll();
           return;
         }
         if (this.canDeliverToConnectIframe()) {
-          this.flushPendingPopupAuth();
+          this.flushPendingLoginPopupAuth();
         }
-      }, IFRAME_DELIVERABILITY_POLL_MS);
+      }, LOGIN_IFRAME_DELIVERABILITY_POLL_MS);
     }
-    static stopIframeDeliverabilityPoll() {
-      if (this.iframeDeliverabilityPoll === null) return;
-      window.clearInterval(this.iframeDeliverabilityPoll);
-      this.iframeDeliverabilityPoll = null;
+    static stopLoginConnectIframeDeliverabilityPoll() {
+      if (this.loginConnectIframeDeliverabilityPoll === null) return;
+      window.clearInterval(this.loginConnectIframeDeliverabilityPoll);
+      this.loginConnectIframeDeliverabilityPoll = null;
     }
     // Forward popup/tab auth payloads into Connect. Queue until deliverable.
-    static relayToIframe(event) {
+    static relayToLoginConnectIframe(event) {
       var _a;
       const type = authMessageType(event.data);
       const deliverable = this.canDeliverToConnectIframe();
       const iframeWindow = (_a = this.iframe) == null ? void 0 : _a.contentWindow;
       if (!iframeWindow || !deliverable) {
-        this.pendingPopupAuth.push(event);
-        this.startIframeDeliverabilityPoll();
-        console.debug("[Benji Connect SDK] LOGIN relayToIframe queued", {
+        this.pendingLoginPopupAuth.push(event);
+        this.startLoginConnectIframeDeliverabilityPoll();
+        console.debug("[Benji Connect SDK] LOGIN relayToLoginConnectIframe queued", {
           type,
           queued: true,
-          pendingCount: this.pendingPopupAuth.length,
+          pendingCount: this.pendingLoginPopupAuth.length,
           isIframeReady: this.isIframeReady,
           deliverable
         });
         return;
       }
-      if (this.pendingPopupAuth.length > 0) {
-        this.flushPendingPopupAuth();
+      if (this.pendingLoginPopupAuth.length > 0) {
+        this.flushPendingLoginPopupAuth();
       }
       iframeWindow.postMessage(event.data, this.connectOrigin);
-      console.debug("[Benji Connect SDK] LOGIN relayToIframe posted", {
+      console.debug("[Benji Connect SDK] LOGIN relayToLoginConnectIframe posted", {
         type,
         queued: false,
-        pendingCount: this.pendingPopupAuth.length,
+        pendingCount: this.pendingLoginPopupAuth.length,
         isIframeReady: this.isIframeReady,
         deliverable
       });
@@ -1191,52 +1246,52 @@ var ConnectSDK = (() => {
      * Same-tab LOGIN resume: post immediately, then re-post on an interval until
      * FLOW_SUCCESS / onError / close stops redelivery. Connect dedupes repeats.
      */
-    static startHostAuthRedelivery(payload, intervalMs = HOST_AUTH_REDELIVERY_MS) {
-      this.stopHostAuthRedelivery();
-      this.upsertPendingHostAuth(payload);
-      this.flushPendingHostAuth();
-      this.hostAuthRedeliveryId = window.setInterval(() => {
-        if (!this.pendingHostAuth.length) {
-          this.stopHostAuthRedelivery();
+    static startLoginSameTabAuthRedelivery(payload, intervalMs = LOGIN_SAME_TAB_AUTH_REDELIVERY_MS) {
+      this.stopLoginSameTabAuthRedelivery();
+      this.upsertPendingLoginSameTabAuth(payload);
+      this.flushPendingLoginSameTabAuth();
+      this.loginSameTabAuthRedeliveryId = window.setInterval(() => {
+        if (!this.pendingLoginSameTabAuth.length) {
+          this.stopLoginSameTabAuthRedelivery();
           return;
         }
-        this.flushPendingHostAuth();
+        this.flushPendingLoginSameTabAuth();
       }, intervalMs);
     }
-    static stopHostAuthRedelivery() {
-      if (this.hostAuthRedeliveryId !== null) {
-        window.clearInterval(this.hostAuthRedeliveryId);
-        this.hostAuthRedeliveryId = null;
+    static stopLoginSameTabAuthRedelivery() {
+      if (this.loginSameTabAuthRedeliveryId !== null) {
+        window.clearInterval(this.loginSameTabAuthRedeliveryId);
+        this.loginSameTabAuthRedeliveryId = null;
       }
-      this.pendingHostAuth = [];
+      this.pendingLoginSameTabAuth = [];
     }
-    static upsertPendingHostAuth(payload) {
+    static upsertPendingLoginSameTabAuth(payload) {
       const type = authMessageType(payload);
       if (!type) {
-        this.pendingHostAuth.push(payload);
+        this.pendingLoginSameTabAuth.push(payload);
         return;
       }
-      const existingIndex = this.pendingHostAuth.findIndex(
+      const existingIndex = this.pendingLoginSameTabAuth.findIndex(
         (item) => authMessageType(item) === type
       );
       if (existingIndex >= 0) {
-        this.pendingHostAuth[existingIndex] = payload;
+        this.pendingLoginSameTabAuth[existingIndex] = payload;
       } else {
-        this.pendingHostAuth.push(payload);
+        this.pendingLoginSameTabAuth.push(payload);
       }
     }
-    static flushPendingHostAuth() {
+    static flushPendingLoginSameTabAuth() {
       var _a, _b;
-      if (!this.pendingHostAuth.length) return;
+      if (!this.pendingLoginSameTabAuth.length) return;
       const iframeWindow = (_b = (_a = this.iframe) == null ? void 0 : _a.contentWindow) != null ? _b : null;
       if (!iframeWindow || !this.canDeliverToConnectIframe()) {
         return;
       }
-      const queued = [...this.pendingHostAuth];
+      const queued = [...this.pendingLoginSameTabAuth];
       for (const payload of queued) {
         iframeWindow.postMessage(payload, this.connectOrigin);
       }
-      console.debug("[Benji Connect SDK] LOGIN flushPendingHostAuth", {
+      console.debug("[Benji Connect SDK] LOGIN flushPendingLoginSameTabAuth", {
         flushedCount: queued.length
       });
     }
@@ -1244,36 +1299,36 @@ var ConnectSDK = (() => {
       if (this.iframe !== iframe) return;
       this.isIframeReady = true;
       console.debug("[Benji Connect SDK] LOGIN iframe_load");
-      this.flushPendingHostAuth();
-      this.flushPendingPopupAuth();
+      this.flushPendingLoginSameTabAuth();
+      this.flushPendingLoginPopupAuth();
     }
-    static flushPendingPopupAuth() {
+    static flushPendingLoginPopupAuth() {
       var _a, _b;
       const iframeWindow = (_b = (_a = this.iframe) == null ? void 0 : _a.contentWindow) != null ? _b : null;
-      if (!this.pendingPopupAuth.length) {
-        this.stopIframeDeliverabilityPoll();
+      if (!this.pendingLoginPopupAuth.length) {
+        this.stopLoginConnectIframeDeliverabilityPoll();
         return;
       }
       if (!iframeWindow) {
-        this.startIframeDeliverabilityPoll();
+        this.startLoginConnectIframeDeliverabilityPoll();
         return;
       }
       if (!this.canDeliverToConnectIframe()) {
-        this.startIframeDeliverabilityPoll();
-        console.debug("[Benji Connect SDK] LOGIN flushPendingPopupAuth skipped", {
-          pendingCount: this.pendingPopupAuth.length,
+        this.startLoginConnectIframeDeliverabilityPoll();
+        console.debug("[Benji Connect SDK] LOGIN flushPendingLoginPopupAuth skipped", {
+          pendingCount: this.pendingLoginPopupAuth.length,
           isIframeReady: this.isIframeReady,
           deliverable: false
         });
         return;
       }
       const expectedOrigin = this.connectOrigin || new URL(Endpoints.benji_connect_auth_url).origin;
-      const queued = [...this.pendingPopupAuth];
+      const queued = [...this.pendingLoginPopupAuth];
       let flushedCount = 0;
       let skippedNotOriginated = 0;
       const remaining = [];
       for (const event of queued) {
-        if (!isPopupOriginatedAuth(
+        if (!isLoginPopupOriginatedAuth(
           event,
           this.loginPopup,
           iframeWindow,
@@ -1289,45 +1344,45 @@ var ConnectSDK = (() => {
         iframeWindow.postMessage(event.data, this.connectOrigin);
         flushedCount += 1;
       }
-      this.pendingPopupAuth = remaining;
-      if (this.pendingPopupAuth.length === 0) {
-        this.stopIframeDeliverabilityPoll();
+      this.pendingLoginPopupAuth = remaining;
+      if (this.pendingLoginPopupAuth.length === 0) {
+        this.stopLoginConnectIframeDeliverabilityPoll();
       } else {
-        this.startIframeDeliverabilityPoll();
+        this.startLoginConnectIframeDeliverabilityPoll();
       }
-      console.debug("[Benji Connect SDK] LOGIN flushPendingPopupAuth", {
+      console.debug("[Benji Connect SDK] LOGIN flushPendingLoginPopupAuth", {
         pendingCount: queued.length,
         flushedCount,
         skippedNotOriginated,
-        remainingCount: this.pendingPopupAuth.length
+        remainingCount: this.pendingLoginPopupAuth.length
       });
     }
-    static relayToPopup(payload) {
+    static relayToLoginPopup(payload) {
       var _a, _b, _c, _d, _e, _f, _g, _h;
       const type = authMessageType(payload);
       const target = resolveLoginPartnerWindow(
         this.loginPopup,
-        this.lastVerifiedPopupSource
+        this.lastVerifiedLoginPopupSource
       );
       const targetLabel = describeLoginPartnerWindowTarget(
         target,
         this.loginPopup,
-        this.lastVerifiedPopupSource
+        this.lastVerifiedLoginPopupSource
       );
       if (!target) {
         console.warn("[Benji Connect SDK] Skipping login auth relay, no live partner window", {
           type,
           target: targetLabel,
           loginPopupClosed: (_b = (_a = this.loginPopup) == null ? void 0 : _a.closed) != null ? _b : true,
-          lastVerifiedClosed: (_d = (_c = this.lastVerifiedPopupSource) == null ? void 0 : _c.closed) != null ? _d : true
+          lastVerifiedClosed: (_d = (_c = this.lastVerifiedLoginPopupSource) == null ? void 0 : _c.closed) != null ? _d : true
         });
         return;
       }
-      console.debug("[Benji Connect SDK] LOGIN relayToPopup", {
+      console.debug("[Benji Connect SDK] LOGIN relayToLoginPopup", {
         type,
         target: targetLabel,
         loginPopupClosed: (_f = (_e = this.loginPopup) == null ? void 0 : _e.closed) != null ? _f : true,
-        lastVerifiedClosed: (_h = (_g = this.lastVerifiedPopupSource) == null ? void 0 : _g.closed) != null ? _h : true
+        lastVerifiedClosed: (_h = (_g = this.lastVerifiedLoginPopupSource) == null ? void 0 : _g.closed) != null ? _h : true
       });
       try {
         target.postMessage(payload, "*");
@@ -1355,19 +1410,19 @@ var ConnectSDK = (() => {
             origin: event.origin,
             direction: "iframe_to_popup"
           });
-          this.relayToPopup(event.data);
+          this.relayToLoginPopup(event.data);
           return;
         }
-        if (isPopupOriginatedAuth(event, this.loginPopup, iframeWindow != null ? iframeWindow : null, expectedOrigin2)) {
+        if (isLoginPopupOriginatedAuth(event, this.loginPopup, iframeWindow != null ? iframeWindow : null, expectedOrigin2)) {
           if (isMessageWindow(event.source)) {
-            this.lastVerifiedPopupSource = event.source;
+            this.lastVerifiedLoginPopupSource = event.source;
           }
           console.debug("[Benji Connect SDK] LOGIN auth relay", {
             type,
             origin: event.origin,
             direction: "popup_to_iframe"
           });
-          this.relayToIframe(event);
+          this.relayToLoginConnectIframe(event);
           return;
         }
         console.warn("[Benji Connect SDK] LOGIN auth relay unclassified", {
@@ -1449,19 +1504,19 @@ var ConnectSDK = (() => {
   _MessageRouter.mode = 1 /* CONNECT */;
   _MessageRouter.connectOrigin = "";
   _MessageRouter.isIframeReady = false;
-  _MessageRouter.pendingPopupAuth = [];
+  _MessageRouter.pendingLoginPopupAuth = [];
   /**
    * Sticky host→iframe auth (same-tab LOGIN resume). Kept after each post so
    * redelivery can cover the window where the iframe is "deliverable" but
    * Connect has not installed its message listener yet.
-   * Invariant: only `startHostAuthRedelivery` writes this queue, and it always
+   * Invariant: only `startLoginSameTabAuthRedelivery` writes this queue, and it always
    * owns a timer while the queue is non-empty. The deliverability poll is
    * popup-only so it cannot double-post this payload.
    */
-  _MessageRouter.pendingHostAuth = [];
-  _MessageRouter.hostAuthRedeliveryId = null;
-  _MessageRouter.lastVerifiedPopupSource = null;
-  _MessageRouter.iframeDeliverabilityPoll = null;
+  _MessageRouter.pendingLoginSameTabAuth = [];
+  _MessageRouter.loginSameTabAuthRedeliveryId = null;
+  _MessageRouter.lastVerifiedLoginPopupSource = null;
+  _MessageRouter.loginConnectIframeDeliverabilityPoll = null;
   _MessageRouter.errorEventHandler = (event) => {
     return _MessageRouter.handleErrorMessage(event);
   };
@@ -1471,8 +1526,6 @@ var ConnectSDK = (() => {
   var MessageRouter = _MessageRouter;
 
   // src/connect-sdk.ts
-  var POPUP_CLOSED_POLL_MS = 500;
-  var SAME_TAB_RESUME_TIMEOUT_MS = 45e3;
   var ConnectSDK = class {
     constructor(config) {
       this.iframe = null;
@@ -1557,11 +1610,13 @@ var ConnectSDK = (() => {
         return;
       }
       const rewriteForLocalConnect = Environment === "local" /* LOCAL */;
+      const localVerifyOrigin = rewriteForLocalConnect ? new URL(Endpoints.benji_connect_auth_url).origin : void 0;
       const returnOrigin = window.location.origin;
       const url = buildSameTabPartnerAuthUrl({
         partnerAuthLink,
         configToken: (_d = this.sdkConfig.tokenData) == null ? void 0 : _d.configToken,
         rewriteForLocalConnect,
+        localVerifyOrigin,
         returnOrigin
       });
       try {
@@ -1595,7 +1650,7 @@ var ConnectSDK = (() => {
         onSuccess: (token, metadata) => {
           var _a, _b;
           this.clearSameTabResumeTimeout();
-          MessageRouter.stopHostAuthRedelivery();
+          MessageRouter.stopLoginSameTabAuthRedelivery();
           (_b = (_a = this.sdkConfig).onSuccess) == null ? void 0 : _b.call(_a, token, metadata);
         },
         onError: (error, errorId, metadata) => {
@@ -1604,7 +1659,7 @@ var ConnectSDK = (() => {
             this.close();
           } else {
             this.clearSameTabResumeTimeout();
-            MessageRouter.stopHostAuthRedelivery();
+            MessageRouter.stopLoginSameTabAuthRedelivery();
           }
           (_b = (_a = this.sdkConfig).onError) == null ? void 0 : _b.call(_a, error, errorId, metadata);
         },
@@ -1657,7 +1712,7 @@ var ConnectSDK = (() => {
         if ((_a = this.loginPopup) == null ? void 0 : _a.closed) {
           const live = resolveLoginPartnerWindow(
             this.loginPopup,
-            MessageRouter.lastVerifiedPopupSource
+            MessageRouter.lastVerifiedLoginPopupSource
           );
           if (live) {
             console.debug("[Benji Connect SDK] LOGIN popup_closed_poll skipped, live partner window remains");
@@ -1670,7 +1725,7 @@ var ConnectSDK = (() => {
           });
           this.close();
         }
-      }, POPUP_CLOSED_POLL_MS);
+      }, LOGIN_POPUP_CLOSED_POLL_MS);
     }
     stopPopupClosedPoll() {
       if (this.popupClosedPollId != null) {
@@ -1748,7 +1803,7 @@ var ConnectSDK = (() => {
         token: params.state,
         redirectUri: (_a = params.redirectUri) != null ? _a : this.buildCallbackUrl(params.partnerId)
       });
-      MessageRouter.startHostAuthRedelivery(payload);
+      MessageRouter.startLoginSameTabAuthRedelivery(payload);
       this.startSameTabResumeTimeout();
     }
     buildCallbackUrl(partnerId) {
@@ -1768,7 +1823,7 @@ var ConnectSDK = (() => {
           { context: buildContext() }
         );
         this.close();
-      }, SAME_TAB_RESUME_TIMEOUT_MS);
+      }, LOGIN_SAME_TAB_RESUME_TIMEOUT_MS);
     }
     clearSameTabResumeTimeout() {
       if (this.sameTabResumeTimeoutId === null) return;
@@ -1794,7 +1849,7 @@ var ConnectSDK = (() => {
         applyOverlayBaseStyle(this.container);
       }
       console.debug("[Connect SDK] endpoints", Endpoints);
-      console.log("[Connect SDK] opeining URL", Endpoints.benji_connect_auth_url);
+      console.debug("[Connect SDK] opening URL", Endpoints.benji_connect_auth_url);
       const url = new URL(Endpoints.benji_connect_auth_url);
       const connectToken = this.sdkConfig.token;
       url.searchParams.set("connect_token", connectToken);
@@ -1884,7 +1939,7 @@ var ConnectSDK = (() => {
       var _a, _b;
       this.abortInflightOpen();
       this.clearSameTabResumeTimeout();
-      MessageRouter.stopHostAuthRedelivery();
+      MessageRouter.stopLoginSameTabAuthRedelivery();
       this.isResumingSameTabLogin = false;
       this.isClosing = true;
       this.stopPopupClosedPoll();