@bounded-sh/client 0.0.97 → 0.0.99

package/dist/services/broadcast.d.ts

@@ -0,0 +1,28 @@
+export interface BroadcastTicket {
+    url: string;
+    token: string;
+    expiresAt: number;
+    broadcastId: string;
+    transport: "webrtc-broadcast";
+    role: "publisher" | "listener";
+    maxSeconds: number;
+}
+export interface BroadcastConnection {
+    /** Resolves when local media stops, independently of delayed settlement. */
+    readonly closed: Promise<void>;
+    /** Stops this connection immediately; server billing reconciles asynchronously. */
+    close(): Promise<void>;
+    status(): Promise<{
+        state: string;
+        chargedMicroUsd: number | null;
+        egressBytes: number | null;
+    }>;
+}
+/** Admission comes from an app-authenticated function invoking the Cloudflare
+ * broadcast connector. No application membership is managed by this helper. */
+export declare function connectBroadcast(ticket: BroadcastTicket, options: {
+    microphone?: MediaStream;
+    assistant?: MediaStream;
+    audio?: [HTMLAudioElement, HTMLAudioElement];
+    signal?: AbortSignal;
+}): Promise<BroadcastConnection>;

package/dist/services/session.d.ts

@@ -0,0 +1,28 @@
+/** One-use admission capability returned by ctx.services.invoke. Do not log it. */
+export interface ServiceSessionTicket {
+    url: string;
+    token: string;
+    expiresAt: number;
+    transport: "webrtc-session";
+    maxSeconds: number;
+}
+export interface ServiceSessionReceipt {
+    seconds: number;
+    chargedMicroUsd: number;
+    finalUsage: true;
+}
+export interface ServiceSession {
+    /** Assistant audio received from the provider, available for opt-in broadcast. */
+    readonly audioStream: MediaStream;
+    send(event: Record<string, unknown>): void;
+    close(): Promise<ServiceSessionReceipt>;
+    readonly closed: Promise<ServiceSessionReceipt>;
+}
+/** Attach browser media directly to the connector's provider. Bounded observes
+ * usage independently; data-channel messages never count as billing receipts. */
+export declare function connectServiceSession(ticket: ServiceSessionTicket, options: {
+    stream: MediaStream;
+    audio: HTMLAudioElement;
+    onEvent?: (event: Record<string, any>) => void;
+    signal?: AbortSignal;
+}): Promise<ServiceSession>;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bounded-sh/client",
-    "version": "0.0.97",
+    "version": "0.0.99",
     "description": "Web and React Native client SDK for Bounded, the full-stack app builder and runtime for AI-built apps: hosted auth, policy-enforced data, files and search, functions, realtime subscriptions, and atomic writes.",
     "homepage": "https://bounded.sh/docs/sdk",
     "main": "./dist/index.js",
@@ -115,7 +115,7 @@
         "vite": "7.3.5"
     },
     "dependencies": {
-        "@bounded-sh/core": "0.0.97",
+        "@bounded-sh/core": "0.0.99",
         "@coral-xyz/anchor": "0.31.1",
         "@noble/curves": "^1.9.7",
         "@solana/kit": "8.2.0",
@@ -129,8 +129,12 @@
         "rpc-websockets": "9.3.9",
         "ws": "^8.21.0"
     },
+    "overrides": {
+        "toml": "4.2.0"
+    },
     "resolutions": {
-        "@bounded-sh/core": "portal:../tarobase-core"
+        "@bounded-sh/core": "portal:../tarobase-core",
+        "toml": "npm:4.2.0"
     },
     "packageManager": "yarn@4.17.1+sha512.ccbfabf7d7b6b32075088be9386fb9a2e00bb6887ef07fa56effabc890a56d53da1ccc4128d62db245fcbd3961b236d75335bdf7d5320ed6eafb7588b7ad4697",
     "publishConfig": {

package/dist/bounded-widget-modal-C0Z7gmxH.mjs

@@ -1,31 +0,0 @@
-// bounded-widget-modal.ts - the shared in-app WIDGET shell for Bounded's login
-// and signing surfaces. One Shadow-DOM overlay + panel that matches the Bounded
-// widget (Seal) look and MOTION: a backdrop fade, a panel rise on desktop, a
-// bottom-sheet on mobile, a height tween as content swaps, and a clean close.
-//
-// It hosts EITHER:
-//   - NATIVE content (the login card the SDK renders itself), or
-//   - an IFRAME (the Bounded-owned signer page, which must run on the single
-//     signer origin because the wallet's 24h signing session lives in that
-//     origin's storage, out of every app's reach).
-//
-// The modal is a warm singleton: it stays mounted (hidden) between uses so a
-// second open - or a signature right after login - is instant and, when it is
-// already open, a clean in-place view swap rather than a reopen.
-/**
- * Destroy the warm signer iframe if one is currently mounted for `origin`, and report
- * whether there was one. Logout needs this: a signing session can live in that document's
- * MEMORY (the signer keeps an in-memory mirror when the browser blocks its storage), and a
- * throwaway iframe opened by the sweep can only ever clear the shared store, never another
- * document's memory. Removing the iframe discards its browsing context, which takes the
- * mirror with it.
- *
- * Deliberately does NOT call getModal(): that would BUILD a modal just to tear it down, on
- * every logout of every app, most of which never mounted one.
- */
-function detachWarmSignerIframe(origin) {
-    return false;
-}
-
-export { detachWarmSignerIframe };
-//# sourceMappingURL=bounded-widget-modal-C0Z7gmxH.mjs.map

package/dist/bounded-widget-modal-C0Z7gmxH.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"bounded-widget-modal-C0Z7gmxH.mjs","sources":["../.rollup-tmp/auth/bounded-widget-modal.js"],"sourcesContent":["// bounded-widget-modal.ts - the shared in-app WIDGET shell for Bounded's login\n// and signing surfaces. One Shadow-DOM overlay + panel that matches the Bounded\n// widget (Seal) look and MOTION: a backdrop fade, a panel rise on desktop, a\n// bottom-sheet on mobile, a height tween as content swaps, and a clean close.\n//\n// It hosts EITHER:\n//   - NATIVE content (the login card the SDK renders itself), or\n//   - an IFRAME (the Bounded-owned signer page, which must run on the single\n//     signer origin because the wallet's 24h signing session lives in that\n//     origin's storage, out of every app's reach).\n//\n// The modal is a warm singleton: it stays mounted (hidden) between uses so a\n// second open - or a signature right after login - is instant and, when it is\n// already open, a clean in-place view swap rather than a reopen.\nfunction hasDOM() {\n    return typeof window !== \"undefined\" && typeof document !== \"undefined\";\n}\nconst OVERLAY_CSS = `\n:host{all:initial}\n*{box-sizing:border-box}\n.bw-ov{position:fixed;inset:0;z-index:2147483647;display:none;\n  font-family:\"Schibsted Grotesk\",\"Helvetica Neue\",Arial,sans-serif}\n.bw-ov.mounted{display:block}\n.bw-back{position:fixed;inset:0;background:rgba(4,4,5,.62);opacity:0;\n  transition:opacity .24s ease;-webkit-backdrop-filter:blur(5px);backdrop-filter:blur(5px)}\n.bw-wrap{position:fixed;inset:0;display:flex;align-items:center;justify-content:center;padding:20px}\n.bw-panel{position:relative;width:420px;max-width:calc(100vw - 28px);height:280px;\n  border-radius:14px;overflow:hidden;background:#0e0f11;border:1px solid rgba(232,230,222,.08);\n  box-shadow:0 1px 0 rgba(232,230,222,.03) inset,0 40px 90px -45px rgba(0,0,0,.85);\n  opacity:0;transform:translateY(14px) scale(.98);will-change:transform,opacity,height;\n  transition:opacity .28s cubic-bezier(.2,.8,.2,1),transform .28s cubic-bezier(.2,.8,.2,1),\n    height .3s cubic-bezier(.2,.8,.2,1)}\n.bw-ov.show .bw-back{opacity:1}\n.bw-ov.show .bw-panel{opacity:1;transform:none}\n.bw-ov.closing .bw-back{opacity:0}\n.bw-ov.closing .bw-panel{opacity:0;transform:translateY(12px) scale(.99)}\n.bw-content{position:absolute;inset:0;overflow:hidden}\n.bw-frame{display:block;width:100%;height:100%;border:0;background:transparent;color-scheme:dark}\n/* editorial corner crop-marks, matching the reference frame */\n.bw-mk{position:absolute;width:13px;height:13px;pointer-events:none;z-index:2;\n  border-color:rgba(232,230,222,.22);border-style:solid;border-width:0}\n.bw-mk.tl{top:11px;left:11px;border-top-width:1px;border-left-width:1px}\n.bw-mk.tr{top:11px;right:11px;border-top-width:1px;border-right-width:1px}\n.bw-mk.bl{bottom:11px;left:11px;border-bottom-width:1px;border-left-width:1px}\n.bw-mk.br{bottom:11px;right:11px;border-bottom-width:1px;border-right-width:1px}\n@media(max-width:560px){\n  .bw-wrap{align-items:flex-end;padding:0}\n  .bw-panel{width:100%;max-width:100%;border-radius:18px 18px 0 0;border-bottom:0}\n  .bw-content{overflow-y:auto}\n  .bw-ov.show .bw-panel{transform:none}\n  .bw-ov:not(.show) .bw-panel,.bw-ov.closing .bw-panel{transform:translateY(18%)}\n}\n@media(prefers-reduced-motion:reduce){.bw-back,.bw-panel{transition:opacity .12s linear!important}}\n`;\nlet modal = null;\nexport function getModal() {\n    if (modal)\n        return modal;\n    const root = document.createElement(\"div\");\n    root.setAttribute(\"data-bounded-widget\", \"\");\n    const shadow = root.attachShadow({ mode: \"open\" });\n    const style = document.createElement(\"style\");\n    style.textContent = OVERLAY_CSS;\n    shadow.appendChild(style);\n    const overlay = document.createElement(\"div\");\n    overlay.className = \"bw-ov\";\n    const back = document.createElement(\"div\");\n    back.className = \"bw-back\";\n    const wrap = document.createElement(\"div\");\n    wrap.className = \"bw-wrap\";\n    const panel = document.createElement(\"div\");\n    panel.className = \"bw-panel\";\n    const content = document.createElement(\"div\");\n    content.className = \"bw-content\";\n    panel.appendChild(content);\n    for (const corner of [\"tl\", \"tr\", \"bl\", \"br\"]) {\n        const mk = document.createElement(\"span\");\n        mk.className = \"bw-mk \" + corner;\n        panel.appendChild(mk);\n    }\n    wrap.appendChild(panel);\n    overlay.appendChild(back);\n    overlay.appendChild(wrap);\n    shadow.appendChild(overlay);\n    (document.body || document.documentElement).appendChild(root);\n    const m = {\n        root,\n        overlay,\n        panel,\n        content,\n        iframe: null,\n        iframeOrigin: \"\",\n        iframeReady: false,\n        onBackdrop: null,\n        onIframeMessage: null,\n        chain: Promise.resolve(),\n        fitObserver: null,\n        generation: 0,\n        onSupersede: null,\n    };\n    // The dismiss handler lives on `.bw-wrap`: it is the full-viewport flex layer\n    // that sits ABOVE `.bw-back`, so it (not the backdrop element) receives clicks\n    // outside the panel. Fire only when the click lands on the wrap itself, never\n    // when it bubbles up from the panel or its content.\n    wrap.addEventListener(\"click\", (event) => {\n        if (event.target === wrap && m.onBackdrop)\n            m.onBackdrop();\n    });\n    window.addEventListener(\"message\", (event) => {\n        if (!m.iframe)\n            return;\n        if (event.origin !== m.iframeOrigin)\n            return;\n        if (event.source !== m.iframe.contentWindow)\n            return;\n        const d = event.data;\n        if (!d || typeof d !== \"object\")\n            return;\n        if (m.onIframeMessage)\n            m.onIframeMessage(d);\n    });\n    modal = m;\n    return m;\n}\nexport function modalIsMounted() {\n    return !!modal && modal.overlay.classList.contains(\"mounted\");\n}\nexport function showModal(m) {\n    m.overlay.classList.remove(\"closing\");\n    m.overlay.classList.add(\"mounted\");\n    // Force a reflow so the .show transition runs from the hidden state every open.\n    void m.panel.offsetWidth;\n    m.overlay.classList.add(\"show\");\n}\nexport function hideModal(m, after) {\n    m.overlay.classList.remove(\"show\");\n    m.overlay.classList.add(\"closing\");\n    // Capture the generation at hide time. If a newer open re-shows the modal within\n    // the close tween, this stale timer must NOT strip `.mounted`/`.closing` off the\n    // freshly reopened widget - only tear down when we are still the same open.\n    const gen = m.generation;\n    window.setTimeout(() => {\n        if (m.generation === gen)\n            m.overlay.classList.remove(\"mounted\", \"closing\");\n        if (after)\n            after();\n    }, 260);\n}\nexport function setPanelHeight(m, px) {\n    const h = Math.max(140, Math.min(680, Math.round(px)));\n    m.panel.style.height = h + \"px\";\n}\n// True outer height of the mounted card: the max of its padding-box scroll height\n// (catches overflowing descendants) and its border-box height plus own vertical\n// margins (catches border + margins, which scrollHeight omits). Ceiled so a\n// sub-pixel row is never clipped under `overflow:hidden`.\nfunction measureOuterHeight(target) {\n    var _a;\n    const cs = (_a = target.ownerDocument.defaultView) === null || _a === void 0 ? void 0 : _a.getComputedStyle(target);\n    const marginY = cs ? parseFloat(cs.marginTop) + parseFloat(cs.marginBottom) : 0;\n    const borderBox = target.offsetHeight + (Number.isFinite(marginY) ? marginY : 0);\n    const rect = target.getBoundingClientRect().height;\n    return Math.ceil(Math.max(target.scrollHeight, borderBox, rect));\n}\n/**\n * Measure the currently mounted native content and tween the panel to fit it.\n * Re-fits automatically when the card's intrinsic height changes - notably after\n * the Newsreader/Schibsted web fonts swap in (which grows line boxes a few px\n * after first paint) and on inline view swaps (email -> OTP code -> success).\n */\nexport function fitPanelToContent(m) {\n    var _a, _b;\n    const first = m.content.firstElementChild;\n    const target = first || m.content;\n    const apply = () => {\n        // Only fit while this exact node is still the mounted card.\n        if (m.content.firstElementChild !== first && first)\n            return;\n        const h = measureOuterHeight(target);\n        if (h > 0)\n            setPanelHeight(m, h);\n    };\n    apply();\n    const view = target.ownerDocument.defaultView;\n    // Re-fit after fonts load (one-shot) and once the ResizeObserver-less browsers\n    // have painted, so the height never lags a late reflow.\n    (_a = view === null || view === void 0 ? void 0 : view.requestAnimationFrame) === null || _a === void 0 ? void 0 : _a.call(view, apply);\n    const fonts = target.ownerDocument.fonts;\n    if (fonts === null || fonts === void 0 ? void 0 : fonts.ready)\n        fonts.ready.then(apply).catch(() => { });\n    (_b = m.fitObserver) === null || _b === void 0 ? void 0 : _b.disconnect();\n    m.fitObserver = null;\n    if (first && typeof (view === null || view === void 0 ? void 0 : view.ResizeObserver) === \"function\") {\n        const ro = new view.ResizeObserver(() => apply());\n        ro.observe(first);\n        m.fitObserver = ro;\n    }\n}\n/** Switch the modal into NATIVE-content mode: detach any iframe, mount `node`. */\nexport function mountContent(m, node) {\n    var _a;\n    detachIframe(m);\n    (_a = m.fitObserver) === null || _a === void 0 ? void 0 : _a.disconnect();\n    m.fitObserver = null;\n    m.content.replaceChildren(node);\n    m.content.style.display = \"block\";\n}\n/** Get (or lazily create) the warm iframe for signer/hosted-page mode. */\nexport function ensureIframe(m, url, origin) {\n    var _a;\n    if (m.iframe && m.iframeOrigin === origin && m.iframe.src === url)\n        return m.iframe;\n    detachIframe(m);\n    (_a = m.fitObserver) === null || _a === void 0 ? void 0 : _a.disconnect();\n    m.fitObserver = null;\n    m.content.style.display = \"none\";\n    const iframe = document.createElement(\"iframe\");\n    iframe.className = \"bw-frame\";\n    iframe.setAttribute(\"title\", \"Bounded\");\n    iframe.setAttribute(\"allow\", \"clipboard-write\");\n    iframe.src = url;\n    m.iframeOrigin = origin;\n    m.iframeReady = false;\n    m.panel.appendChild(iframe);\n    m.iframe = iframe;\n    return iframe;\n}\n/**\n * Destroy the warm signer iframe if one is currently mounted for `origin`, and report\n * whether there was one. Logout needs this: a signing session can live in that document's\n * MEMORY (the signer keeps an in-memory mirror when the browser blocks its storage), and a\n * throwaway iframe opened by the sweep can only ever clear the shared store, never another\n * document's memory. Removing the iframe discards its browsing context, which takes the\n * mirror with it.\n *\n * Deliberately does NOT call getModal(): that would BUILD a modal just to tear it down, on\n * every logout of every app, most of which never mounted one.\n */\nexport function detachWarmSignerIframe(origin) {\n    if (!modal || !modal.iframe || modal.iframeOrigin !== origin)\n        return false;\n    detachIframe(modal);\n    return true;\n}\nexport function detachIframe(m) {\n    if (m.iframe) {\n        try {\n            m.iframe.remove();\n        }\n        catch (_a) {\n            /* ignore */\n        }\n    }\n    m.iframe = null;\n    m.iframeReady = false;\n    m.iframeOrigin = \"\";\n    m.onIframeMessage = null;\n}\n// Load the Bounded editorial typefaces (Newsreader display + Schibsted Grotesk body +\n// JetBrains Mono) once at the document level so they apply inside the shadow root. A\n// no-op if already present or off-DOM. Fonts loaded here match the hosted auth page.\nconst FONTS_HREF = \"https://fonts.googleapis.com/css2?family=Newsreader:opsz,wght@6..72,400;6..72,500&family=Schibsted+Grotesk:wght@400;500;600&family=JetBrains+Mono:wght@400;500&display=swap\";\nexport function ensureFonts() {\n    if (!hasDOM())\n        return;\n    if (document.querySelector('link[data-bounded-fonts=\"1\"]'))\n        return;\n    const pre1 = document.createElement(\"link\");\n    pre1.rel = \"preconnect\";\n    pre1.href = \"https://fonts.googleapis.com\";\n    const pre2 = document.createElement(\"link\");\n    pre2.rel = \"preconnect\";\n    pre2.href = \"https://fonts.gstatic.com\";\n    pre2.crossOrigin = \"anonymous\";\n    const link = document.createElement(\"link\");\n    link.rel = \"stylesheet\";\n    link.href = FONTS_HREF;\n    link.setAttribute(\"data-bounded-fonts\", \"1\");\n    document.head.append(pre1, pre2, link);\n}\nexport { hasDOM };\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAsNA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,sBAAsB,CAAC,MAAM,EAAE;AAC/C,IACQ,OAAO,KAAK;AAGpB;;;;"}

package/dist/bounded-widget-modal-s0PL86Y-.js

@@ -1,33 +0,0 @@
-'use strict';
-
-// bounded-widget-modal.ts - the shared in-app WIDGET shell for Bounded's login
-// and signing surfaces. One Shadow-DOM overlay + panel that matches the Bounded
-// widget (Seal) look and MOTION: a backdrop fade, a panel rise on desktop, a
-// bottom-sheet on mobile, a height tween as content swaps, and a clean close.
-//
-// It hosts EITHER:
-//   - NATIVE content (the login card the SDK renders itself), or
-//   - an IFRAME (the Bounded-owned signer page, which must run on the single
-//     signer origin because the wallet's 24h signing session lives in that
-//     origin's storage, out of every app's reach).
-//
-// The modal is a warm singleton: it stays mounted (hidden) between uses so a
-// second open - or a signature right after login - is instant and, when it is
-// already open, a clean in-place view swap rather than a reopen.
-/**
- * Destroy the warm signer iframe if one is currently mounted for `origin`, and report
- * whether there was one. Logout needs this: a signing session can live in that document's
- * MEMORY (the signer keeps an in-memory mirror when the browser blocks its storage), and a
- * throwaway iframe opened by the sweep can only ever clear the shared store, never another
- * document's memory. Removing the iframe discards its browsing context, which takes the
- * mirror with it.
- *
- * Deliberately does NOT call getModal(): that would BUILD a modal just to tear it down, on
- * every logout of every app, most of which never mounted one.
- */
-function detachWarmSignerIframe(origin) {
-    return false;
-}
-
-exports.detachWarmSignerIframe = detachWarmSignerIframe;
-//# sourceMappingURL=bounded-widget-modal-s0PL86Y-.js.map

package/dist/bounded-widget-modal-s0PL86Y-.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bounded-widget-modal-s0PL86Y-.js","sources":["../.rollup-tmp/auth/bounded-widget-modal.js"],"sourcesContent":["// bounded-widget-modal.ts - the shared in-app WIDGET shell for Bounded's login\n// and signing surfaces. One Shadow-DOM overlay + panel that matches the Bounded\n// widget (Seal) look and MOTION: a backdrop fade, a panel rise on desktop, a\n// bottom-sheet on mobile, a height tween as content swaps, and a clean close.\n//\n// It hosts EITHER:\n//   - NATIVE content (the login card the SDK renders itself), or\n//   - an IFRAME (the Bounded-owned signer page, which must run on the single\n//     signer origin because the wallet's 24h signing session lives in that\n//     origin's storage, out of every app's reach).\n//\n// The modal is a warm singleton: it stays mounted (hidden) between uses so a\n// second open - or a signature right after login - is instant and, when it is\n// already open, a clean in-place view swap rather than a reopen.\nfunction hasDOM() {\n    return typeof window !== \"undefined\" && typeof document !== \"undefined\";\n}\nconst OVERLAY_CSS = `\n:host{all:initial}\n*{box-sizing:border-box}\n.bw-ov{position:fixed;inset:0;z-index:2147483647;display:none;\n  font-family:\"Schibsted Grotesk\",\"Helvetica Neue\",Arial,sans-serif}\n.bw-ov.mounted{display:block}\n.bw-back{position:fixed;inset:0;background:rgba(4,4,5,.62);opacity:0;\n  transition:opacity .24s ease;-webkit-backdrop-filter:blur(5px);backdrop-filter:blur(5px)}\n.bw-wrap{position:fixed;inset:0;display:flex;align-items:center;justify-content:center;padding:20px}\n.bw-panel{position:relative;width:420px;max-width:calc(100vw - 28px);height:280px;\n  border-radius:14px;overflow:hidden;background:#0e0f11;border:1px solid rgba(232,230,222,.08);\n  box-shadow:0 1px 0 rgba(232,230,222,.03) inset,0 40px 90px -45px rgba(0,0,0,.85);\n  opacity:0;transform:translateY(14px) scale(.98);will-change:transform,opacity,height;\n  transition:opacity .28s cubic-bezier(.2,.8,.2,1),transform .28s cubic-bezier(.2,.8,.2,1),\n    height .3s cubic-bezier(.2,.8,.2,1)}\n.bw-ov.show .bw-back{opacity:1}\n.bw-ov.show .bw-panel{opacity:1;transform:none}\n.bw-ov.closing .bw-back{opacity:0}\n.bw-ov.closing .bw-panel{opacity:0;transform:translateY(12px) scale(.99)}\n.bw-content{position:absolute;inset:0;overflow:hidden}\n.bw-frame{display:block;width:100%;height:100%;border:0;background:transparent;color-scheme:dark}\n/* editorial corner crop-marks, matching the reference frame */\n.bw-mk{position:absolute;width:13px;height:13px;pointer-events:none;z-index:2;\n  border-color:rgba(232,230,222,.22);border-style:solid;border-width:0}\n.bw-mk.tl{top:11px;left:11px;border-top-width:1px;border-left-width:1px}\n.bw-mk.tr{top:11px;right:11px;border-top-width:1px;border-right-width:1px}\n.bw-mk.bl{bottom:11px;left:11px;border-bottom-width:1px;border-left-width:1px}\n.bw-mk.br{bottom:11px;right:11px;border-bottom-width:1px;border-right-width:1px}\n@media(max-width:560px){\n  .bw-wrap{align-items:flex-end;padding:0}\n  .bw-panel{width:100%;max-width:100%;border-radius:18px 18px 0 0;border-bottom:0}\n  .bw-content{overflow-y:auto}\n  .bw-ov.show .bw-panel{transform:none}\n  .bw-ov:not(.show) .bw-panel,.bw-ov.closing .bw-panel{transform:translateY(18%)}\n}\n@media(prefers-reduced-motion:reduce){.bw-back,.bw-panel{transition:opacity .12s linear!important}}\n`;\nlet modal = null;\nexport function getModal() {\n    if (modal)\n        return modal;\n    const root = document.createElement(\"div\");\n    root.setAttribute(\"data-bounded-widget\", \"\");\n    const shadow = root.attachShadow({ mode: \"open\" });\n    const style = document.createElement(\"style\");\n    style.textContent = OVERLAY_CSS;\n    shadow.appendChild(style);\n    const overlay = document.createElement(\"div\");\n    overlay.className = \"bw-ov\";\n    const back = document.createElement(\"div\");\n    back.className = \"bw-back\";\n    const wrap = document.createElement(\"div\");\n    wrap.className = \"bw-wrap\";\n    const panel = document.createElement(\"div\");\n    panel.className = \"bw-panel\";\n    const content = document.createElement(\"div\");\n    content.className = \"bw-content\";\n    panel.appendChild(content);\n    for (const corner of [\"tl\", \"tr\", \"bl\", \"br\"]) {\n        const mk = document.createElement(\"span\");\n        mk.className = \"bw-mk \" + corner;\n        panel.appendChild(mk);\n    }\n    wrap.appendChild(panel);\n    overlay.appendChild(back);\n    overlay.appendChild(wrap);\n    shadow.appendChild(overlay);\n    (document.body || document.documentElement).appendChild(root);\n    const m = {\n        root,\n        overlay,\n        panel,\n        content,\n        iframe: null,\n        iframeOrigin: \"\",\n        iframeReady: false,\n        onBackdrop: null,\n        onIframeMessage: null,\n        chain: Promise.resolve(),\n        fitObserver: null,\n        generation: 0,\n        onSupersede: null,\n    };\n    // The dismiss handler lives on `.bw-wrap`: it is the full-viewport flex layer\n    // that sits ABOVE `.bw-back`, so it (not the backdrop element) receives clicks\n    // outside the panel. Fire only when the click lands on the wrap itself, never\n    // when it bubbles up from the panel or its content.\n    wrap.addEventListener(\"click\", (event) => {\n        if (event.target === wrap && m.onBackdrop)\n            m.onBackdrop();\n    });\n    window.addEventListener(\"message\", (event) => {\n        if (!m.iframe)\n            return;\n        if (event.origin !== m.iframeOrigin)\n            return;\n        if (event.source !== m.iframe.contentWindow)\n            return;\n        const d = event.data;\n        if (!d || typeof d !== \"object\")\n            return;\n        if (m.onIframeMessage)\n            m.onIframeMessage(d);\n    });\n    modal = m;\n    return m;\n}\nexport function modalIsMounted() {\n    return !!modal && modal.overlay.classList.contains(\"mounted\");\n}\nexport function showModal(m) {\n    m.overlay.classList.remove(\"closing\");\n    m.overlay.classList.add(\"mounted\");\n    // Force a reflow so the .show transition runs from the hidden state every open.\n    void m.panel.offsetWidth;\n    m.overlay.classList.add(\"show\");\n}\nexport function hideModal(m, after) {\n    m.overlay.classList.remove(\"show\");\n    m.overlay.classList.add(\"closing\");\n    // Capture the generation at hide time. If a newer open re-shows the modal within\n    // the close tween, this stale timer must NOT strip `.mounted`/`.closing` off the\n    // freshly reopened widget - only tear down when we are still the same open.\n    const gen = m.generation;\n    window.setTimeout(() => {\n        if (m.generation === gen)\n            m.overlay.classList.remove(\"mounted\", \"closing\");\n        if (after)\n            after();\n    }, 260);\n}\nexport function setPanelHeight(m, px) {\n    const h = Math.max(140, Math.min(680, Math.round(px)));\n    m.panel.style.height = h + \"px\";\n}\n// True outer height of the mounted card: the max of its padding-box scroll height\n// (catches overflowing descendants) and its border-box height plus own vertical\n// margins (catches border + margins, which scrollHeight omits). Ceiled so a\n// sub-pixel row is never clipped under `overflow:hidden`.\nfunction measureOuterHeight(target) {\n    var _a;\n    const cs = (_a = target.ownerDocument.defaultView) === null || _a === void 0 ? void 0 : _a.getComputedStyle(target);\n    const marginY = cs ? parseFloat(cs.marginTop) + parseFloat(cs.marginBottom) : 0;\n    const borderBox = target.offsetHeight + (Number.isFinite(marginY) ? marginY : 0);\n    const rect = target.getBoundingClientRect().height;\n    return Math.ceil(Math.max(target.scrollHeight, borderBox, rect));\n}\n/**\n * Measure the currently mounted native content and tween the panel to fit it.\n * Re-fits automatically when the card's intrinsic height changes - notably after\n * the Newsreader/Schibsted web fonts swap in (which grows line boxes a few px\n * after first paint) and on inline view swaps (email -> OTP code -> success).\n */\nexport function fitPanelToContent(m) {\n    var _a, _b;\n    const first = m.content.firstElementChild;\n    const target = first || m.content;\n    const apply = () => {\n        // Only fit while this exact node is still the mounted card.\n        if (m.content.firstElementChild !== first && first)\n            return;\n        const h = measureOuterHeight(target);\n        if (h > 0)\n            setPanelHeight(m, h);\n    };\n    apply();\n    const view = target.ownerDocument.defaultView;\n    // Re-fit after fonts load (one-shot) and once the ResizeObserver-less browsers\n    // have painted, so the height never lags a late reflow.\n    (_a = view === null || view === void 0 ? void 0 : view.requestAnimationFrame) === null || _a === void 0 ? void 0 : _a.call(view, apply);\n    const fonts = target.ownerDocument.fonts;\n    if (fonts === null || fonts === void 0 ? void 0 : fonts.ready)\n        fonts.ready.then(apply).catch(() => { });\n    (_b = m.fitObserver) === null || _b === void 0 ? void 0 : _b.disconnect();\n    m.fitObserver = null;\n    if (first && typeof (view === null || view === void 0 ? void 0 : view.ResizeObserver) === \"function\") {\n        const ro = new view.ResizeObserver(() => apply());\n        ro.observe(first);\n        m.fitObserver = ro;\n    }\n}\n/** Switch the modal into NATIVE-content mode: detach any iframe, mount `node`. */\nexport function mountContent(m, node) {\n    var _a;\n    detachIframe(m);\n    (_a = m.fitObserver) === null || _a === void 0 ? void 0 : _a.disconnect();\n    m.fitObserver = null;\n    m.content.replaceChildren(node);\n    m.content.style.display = \"block\";\n}\n/** Get (or lazily create) the warm iframe for signer/hosted-page mode. */\nexport function ensureIframe(m, url, origin) {\n    var _a;\n    if (m.iframe && m.iframeOrigin === origin && m.iframe.src === url)\n        return m.iframe;\n    detachIframe(m);\n    (_a = m.fitObserver) === null || _a === void 0 ? void 0 : _a.disconnect();\n    m.fitObserver = null;\n    m.content.style.display = \"none\";\n    const iframe = document.createElement(\"iframe\");\n    iframe.className = \"bw-frame\";\n    iframe.setAttribute(\"title\", \"Bounded\");\n    iframe.setAttribute(\"allow\", \"clipboard-write\");\n    iframe.src = url;\n    m.iframeOrigin = origin;\n    m.iframeReady = false;\n    m.panel.appendChild(iframe);\n    m.iframe = iframe;\n    return iframe;\n}\n/**\n * Destroy the warm signer iframe if one is currently mounted for `origin`, and report\n * whether there was one. Logout needs this: a signing session can live in that document's\n * MEMORY (the signer keeps an in-memory mirror when the browser blocks its storage), and a\n * throwaway iframe opened by the sweep can only ever clear the shared store, never another\n * document's memory. Removing the iframe discards its browsing context, which takes the\n * mirror with it.\n *\n * Deliberately does NOT call getModal(): that would BUILD a modal just to tear it down, on\n * every logout of every app, most of which never mounted one.\n */\nexport function detachWarmSignerIframe(origin) {\n    if (!modal || !modal.iframe || modal.iframeOrigin !== origin)\n        return false;\n    detachIframe(modal);\n    return true;\n}\nexport function detachIframe(m) {\n    if (m.iframe) {\n        try {\n            m.iframe.remove();\n        }\n        catch (_a) {\n            /* ignore */\n        }\n    }\n    m.iframe = null;\n    m.iframeReady = false;\n    m.iframeOrigin = \"\";\n    m.onIframeMessage = null;\n}\n// Load the Bounded editorial typefaces (Newsreader display + Schibsted Grotesk body +\n// JetBrains Mono) once at the document level so they apply inside the shadow root. A\n// no-op if already present or off-DOM. Fonts loaded here match the hosted auth page.\nconst FONTS_HREF = \"https://fonts.googleapis.com/css2?family=Newsreader:opsz,wght@6..72,400;6..72,500&family=Schibsted+Grotesk:wght@400;500;600&family=JetBrains+Mono:wght@400;500&display=swap\";\nexport function ensureFonts() {\n    if (!hasDOM())\n        return;\n    if (document.querySelector('link[data-bounded-fonts=\"1\"]'))\n        return;\n    const pre1 = document.createElement(\"link\");\n    pre1.rel = \"preconnect\";\n    pre1.href = \"https://fonts.googleapis.com\";\n    const pre2 = document.createElement(\"link\");\n    pre2.rel = \"preconnect\";\n    pre2.href = \"https://fonts.gstatic.com\";\n    pre2.crossOrigin = \"anonymous\";\n    const link = document.createElement(\"link\");\n    link.rel = \"stylesheet\";\n    link.href = FONTS_HREF;\n    link.setAttribute(\"data-bounded-fonts\", \"1\");\n    document.head.append(pre1, pre2, link);\n}\nexport { hasDOM };\n"],"names":[],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAsNA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS,sBAAsB,CAAC,MAAM,EAAE;AAC/C,IACQ,OAAO,KAAK;AAGpB;;;;"}