@brainfish-ai/web-tracker 0.0.32 → 0.0.33

package/dist/tracker.es.js

@@ -281,7 +281,7 @@ function createPacketDecoderStream(maxPayload, binaryType) {
     }
   });
 }
-const protocol$1 = 4;
+const protocol = 4;
 function Emitter(obj) {
   if (obj) return mixin(obj);
 }
@@ -1259,7 +1259,7 @@ class SocketWithoutUpgrade extends Emitter {
    */
   createTransport(name) {
     const query = Object.assign({}, this.opts.query);
-    query.EIO = protocol$1;
+    query.EIO = protocol;
     query.transport = name;
     if (this.id)
       query.sid = this.id;
@@ -1588,7 +1588,7 @@ class SocketWithoutUpgrade extends Emitter {
     }
   }
 }
-SocketWithoutUpgrade.protocol = protocol$1;
+SocketWithoutUpgrade.protocol = protocol;
 class SocketWithUpgrade extends SocketWithoutUpgrade {
   constructor() {
     super(...arguments);
@@ -1860,7 +1860,6 @@ const RESERVED_EVENTS$1 = [
   "removeListener"
   // used by the Node.js EventEmitter
 ];
-const protocol = 5;
 var PacketType;
 (function(PacketType2) {
   PacketType2[PacketType2["CONNECT"] = 0] = "CONNECT";
@@ -2111,8 +2110,7 @@ const parser$3 = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProp
   Encoder,
   get PacketType() {
     return PacketType;
-  },
-  protocol
+  }
 }, Symbol.toStringTag, { value: "Module" }));
 function on$2(obj, ev, fn) {
   obj.on(ev, fn);
@@ -3457,6 +3455,19 @@ class TTLSet {
   }
 }
 let latestIdentifyPayload = null;
+const BRAINFISH_IFRAME_SELECTOR = "#bf-iframe-container .trigger-iframe, #bf-search-bar-iframe-container .trigger-iframe";
+function getBrainfishIframes() {
+  if (typeof document === "undefined") {
+    return [];
+  }
+  return Array.from(document.querySelectorAll(BRAINFISH_IFRAME_SELECTOR));
+}
+function isTrustedBrainfishIframeSource(source) {
+  if (!source) {
+    return false;
+  }
+  return getBrainfishIframes().some((iframe) => iframe.contentWindow === source);
+}
 if (typeof window !== "undefined") {
   window.addEventListener("message", (event) => {
     const trustedOrigin = "https://agent.brainfi.sh";
@@ -3465,8 +3476,7 @@ if (typeof window !== "undefined") {
     }
     if (event.data?.type === "REQUEST_USER_IDENTITY") {
       if (latestIdentifyPayload && event.source) {
-        const iframe = document.querySelector("#bf-iframe-container .trigger-iframe");
-        if (!iframe || event.source !== iframe.contentWindow) {
+        if (!isTrustedBrainfishIframeSource(event.source)) {
           console.warn("BrainfishWidgetWarn: Rejected REQUEST_USER_IDENTITY from untrusted iframe source:", event.origin);
           return;
         }
@@ -3635,8 +3645,7 @@ const _TrackerSdk = class _TrackerSdk {
       console.warn("BrainfishWidgetWarn: phone should be in E.164 format (e.g., +14155552671). Providing the correct format ensures accurate user identification.");
     }
     latestIdentifyPayload = payload;
-    const iframe = document.querySelector("#bf-iframe-container .trigger-iframe");
-    if (iframe) {
+    getBrainfishIframes().forEach((iframe) => {
       const sendMessage = () => {
         if (iframe.contentWindow) {
           iframe.contentWindow.postMessage({
@@ -3649,7 +3658,7 @@ const _TrackerSdk = class _TrackerSdk {
         sendMessage();
       }
       iframe.addEventListener("load", sendMessage);
-    }
+    });
     if (Object.keys(payload).length > 1) {
       return this.send({
         type: "user.identify",
@@ -25185,7 +25194,7 @@ function toCamelCase(str) {
     ($1) => $1.toUpperCase().replace("-", "").replace("_", "")
   );
 }
-const VERSION = "0.0.32";
+const VERSION = "0.0.33";
 class Tracker extends TrackerSdk {
   constructor(options) {
     super({