@bstage-sdk/bridge 0.10.0 → 0.12.0

package/dist/index.cjs

@@ -34,8 +34,15 @@ __export(src_exports, {
   MAX_ENVELOPE_TYPE_LENGTH: () => MAX_ENVELOPE_TYPE_LENGTH,
   MAX_MEDIA_ORIGINS: () => MAX_MEDIA_ORIGINS,
   READY_EVENT: () => READY_EVENT,
+  REPORTS_PER_SESSION: () => REPORTS_PER_SESSION,
+  REPORT_COUNT_MAX: () => REPORT_COUNT_MAX,
+  REPORT_FLUSH_DELAY_MS: () => REPORT_FLUSH_DELAY_MS,
+  REPORT_FRAME_MAX_LENGTH: () => REPORT_FRAME_MAX_LENGTH,
+  REPORT_MAX_FRAMES: () => REPORT_MAX_FRAMES,
+  REPORT_MESSAGE_MAX_LENGTH: () => REPORT_MESSAGE_MAX_LENGTH,
   REQUEST_TIMEOUT_MS: () => REQUEST_TIMEOUT_MS,
   REQUEST_TYPES: () => REQUEST_TYPES,
+  TEMPLATE_REPORT_KINDS: () => TEMPLATE_REPORT_KINDS,
   buildFrameCsp: () => buildFrameCsp,
   createEnvelope: () => createEnvelope,
   createNonce: () => createNonce,
@@ -110,7 +117,8 @@ var REQUEST_TYPES = [
   "resize",
   "track",
   "storage",
-  "log"
+  "log",
+  "report"
 ];
 var HOST_EVENT_TYPES = ["slot.context", "locale", "member", "theme", "visibility"];
 var READY_EVENT = "ready";
@@ -120,6 +128,12 @@ var BRIDGE_SURFACES = ["page", "slot"];
 function isBridgeSurface(value) {
   return BRIDGE_SURFACES.includes(value);
 }
+var TEMPLATE_REPORT_KINDS = ["error", "rejection", "load"];
+var REPORT_MESSAGE_MAX_LENGTH = 300;
+var REPORT_MAX_FRAMES = 10;
+var REPORT_FRAME_MAX_LENGTH = 200;
+var REPORT_COUNT_MAX = 100;
+var REPORTS_PER_SESSION = 5;
 var IFRAME_ATTRIBUTES = {
   sandbox: "allow-scripts",
   allow: "autoplay; fullscreen; picture-in-picture; encrypted-media; clipboard-write",
@@ -496,6 +510,232 @@ function createBridgeFetch(client) {
   return bridgeFetch;
 }
 
+// src/frame/directFetch.ts
+function installDirectFetch(g, client, config) {
+  const hostOrigin = config.hostOrigin;
+  const callFn = Function.prototype.call;
+  const NativeURL = g.URL;
+  const rawFetch = g.fetch;
+  const nativeFetch = typeof rawFetch === "function" ? callFn.bind(rawFetch) : void 0;
+  const bridgeFetch = client.fetch;
+  const strSlice = callFn.bind(String.prototype.slice);
+  const promiseThen = callFn.bind(Promise.prototype.then);
+  const promiseReject = Promise.reject.bind(Promise);
+  const assign = Object.assign;
+  const TypeErr = TypeError;
+  function getter(ctor, name) {
+    if (typeof ctor !== "function") return void 0;
+    let proto = ctor.prototype;
+    while (proto) {
+      const desc = Object.getOwnPropertyDescriptor(proto, name);
+      if (desc && typeof desc.get === "function") {
+        return callFn.bind(desc.get);
+      }
+      proto = Object.getPrototypeOf(proto);
+    }
+    return void 0;
+  }
+  const getHref = getter(NativeURL, "href");
+  const getOrigin = getter(NativeURL, "origin");
+  const getProtocol = getter(NativeURL, "protocol");
+  const getPathname = getter(NativeURL, "pathname");
+  const getRequestUrl = getter(g.Request, "url");
+  let gatewayPrefixes = null;
+  let partnerOrigins = [];
+  let routesReady = false;
+  function copyStrings(value) {
+    if (!Array.isArray(value)) return null;
+    const out = [];
+    for (let i = 0; i < value.length; i += 1) {
+      if (typeof value[i] === "string") out[out.length] = value[i];
+    }
+    return out;
+  }
+  function takeSnapshot(init) {
+    if (routesReady) return;
+    const raw = init;
+    gatewayPrefixes = copyStrings(raw.gatewayPrefixes);
+    partnerOrigins = copyStrings(raw.partnerOrigins) || [];
+    routesReady = true;
+  }
+  promiseThen(client.ready, takeSnapshot);
+  function matchesPrefix(pathname, prefix) {
+    const bare = strSlice(prefix, prefix.length - 1) === "/" ? strSlice(prefix, 0, -1) : prefix;
+    return pathname === bare || strSlice(pathname, 0, bare.length + 1) === bare + "/";
+  }
+  function routeOf(origin, protocol, pathname) {
+    if (origin === hostOrigin) {
+      if (gatewayPrefixes === null) return "bridge";
+      for (let i = 0; i < gatewayPrefixes.length; i += 1) {
+        if (matchesPrefix(pathname, gatewayPrefixes[i])) return "bridge";
+      }
+      return "reject";
+    }
+    for (let i = 0; i < partnerOrigins.length; i += 1) {
+      if (origin === partnerOrigins[i]) return "bridge";
+    }
+    return protocol === "https:" ? "direct" : "reject";
+  }
+  function requestUrlOf(input) {
+    if (!getRequestUrl || typeof input !== "object" || input === null) return void 0;
+    try {
+      return getRequestUrl(input);
+    } catch {
+      return void 0;
+    }
+  }
+  function dispatch(input, init) {
+    if (typeof NativeURL !== "function" || !getHref || !getOrigin || !getProtocol || !getPathname) {
+      return promiseReject(new TypeErr("bstage fetch: URL is unavailable"));
+    }
+    const requestUrl = requestUrlOf(input);
+    const request = requestUrl !== void 0;
+    let parsed;
+    try {
+      parsed = new NativeURL(request ? requestUrl : String(input), hostOrigin);
+    } catch {
+      return promiseReject(new TypeErr("bstage fetch: invalid url"));
+    }
+    const href = getHref(parsed);
+    const route = routeOf(getOrigin(parsed), getProtocol(parsed), getPathname(parsed));
+    const target = request ? input : href;
+    if (route === "bridge") return bridgeFetch(target, init);
+    if (route === "reject") {
+      return promiseReject(new TypeErr("bstage fetch: destination not allowed"));
+    }
+    if (!nativeFetch) return promiseReject(new TypeErr("bstage fetch: fetch is unavailable"));
+    return nativeFetch(
+      g,
+      target,
+      assign({}, init, { credentials: "omit", referrerPolicy: "no-referrer" })
+    );
+  }
+  function bstageFetch(input, init) {
+    try {
+      if (routesReady) return dispatch(input, init);
+      return promiseThen(client.ready, function(value) {
+        takeSnapshot(value);
+        return dispatch(input, init);
+      });
+    } catch {
+      return promiseReject(new TypeErr("bstage fetch: request failed"));
+    }
+  }
+  Object.defineProperty(g, "__bstage_fetch__", {
+    value: bstageFetch,
+    writable: false,
+    configurable: false,
+    enumerable: false
+  });
+  return bstageFetch;
+}
+
+// src/frame/errorReport.ts
+function installErrorReport(g, client, config) {
+  const schedule = typeof g.setTimeout === "function" ? g.setTimeout : void 0;
+  const entries = /* @__PURE__ */ new Map();
+  let admitted = 0;
+  function toText(value) {
+    if (typeof value === "string") return value;
+    try {
+      return String(value);
+    } catch {
+      return "";
+    }
+  }
+  function framesOf(stack) {
+    const out = [];
+    if (typeof stack !== "string") return out;
+    const lines = stack.split("\n");
+    for (let i = 0; i < lines.length && out.length < config.maxFrames; i += 1) {
+      const line = lines[i].trim();
+      if (/^at\s/.test(line) || /^[^@]*@(?:[a-z][\w+.-]*:\/\/|\/)\S*:\d+:\d+$/i.test(line) || /^(?:[a-z][\w+.-]*:\/\/|\/)\S*:\d+:\d+$/i.test(line))
+        out.push(line.slice(0, config.maxFrameLength));
+    }
+    return out;
+  }
+  function send(key) {
+    const entry = entries.get(key);
+    if (!entry || entry.sent) return;
+    entries.set(key, {
+      kind: entry.kind,
+      message: entry.message,
+      frames: entry.frames,
+      count: entry.count,
+      sent: true
+    });
+    try {
+      client.request("report", {
+        kind: entry.kind,
+        message: entry.message,
+        frames: entry.frames,
+        count: entry.count
+      }).catch(function() {
+      });
+    } catch {
+    }
+  }
+  function record(kind, message, stack) {
+    try {
+      const text = toText(message).slice(0, config.maxMessageLength);
+      const frames = framesOf(stack);
+      const key = kind + "|" + text.replace(/\d+/g, "") + "|" + (frames[0] || "");
+      const entry = entries.get(key);
+      if (entry) {
+        if (!entry.sent && entry.count < config.maxCount) {
+          entries.set(key, {
+            kind: entry.kind,
+            message: entry.message,
+            frames: entry.frames,
+            count: entry.count + 1,
+            sent: false
+          });
+        }
+        return;
+      }
+      if (admitted >= config.maxReports) return;
+      admitted += 1;
+      entries.set(key, { kind, message: text, frames, count: 1, sent: false });
+      if (admitted >= config.maxReports) stop();
+      if (schedule) {
+        schedule(function() {
+          send(key);
+        }, config.flushDelayMs);
+      } else {
+        send(key);
+      }
+    } catch {
+    }
+  }
+  function onError(ev) {
+    const err = ev && ev.error;
+    if (err && typeof err === "object") {
+      record("error", typeof err.message === "string" ? err.message : ev.message, err.stack);
+      return;
+    }
+    const where = ev && typeof ev.filename === "string" && ev.filename !== "" ? "at " + ev.filename + ":" + toText(ev.lineno) + ":" + toText(ev.colno) : "";
+    record("error", ev ? ev.message : "", where);
+  }
+  function onRejection(ev) {
+    const reason = ev ? ev.reason : void 0;
+    if (reason && typeof reason === "object" && typeof reason.message === "string") {
+      record("rejection", reason.message, reason.stack);
+      return;
+    }
+    record("rejection", reason, "");
+  }
+  function stop() {
+    if (typeof g.removeEventListener !== "function") return;
+    g.removeEventListener("error", onError);
+    g.removeEventListener("unhandledrejection", onRejection);
+  }
+  if (typeof g.addEventListener === "function") {
+    g.addEventListener("error", onError);
+    g.addEventListener("unhandledrejection", onRejection);
+  }
+  return record;
+}
+
 // src/srcdoc/escape.ts
 var HTML_ESCAPES = {
   "&": "&amp;",
@@ -588,6 +828,7 @@ var LOCAL_HOST_NAMES = Object.freeze([
 
 // src/srcdoc/createSrcdoc.ts
 var MAX_MEDIA_ORIGINS = 20;
+var REPORT_FLUSH_DELAY_MS = 1e3;
 var MAX_ELEMENT_NAME_LENGTH = 100;
 var ELEMENT_NAME_RE = /^[a-z][a-z0-9._]*-[a-z0-9._-]*$/;
 function isValidElementName(value) {
@@ -636,7 +877,7 @@ function buildFrameCsp(nonce, assetOrigin, mediaOrigins = []) {
     `img-src ${media} data: blob:`,
     `font-src ${assetOrigin} data:`,
     `media-src ${media} blob:`,
-    "connect-src 'none'",
+    "connect-src https: wss:",
     "frame-src 'none'",
     "form-action 'none'",
     "base-uri 'none'"
@@ -653,6 +894,19 @@ function bootstrapScript(o) {
     `var bridgeRuntime = ${bridgeRuntime.toString()};`,
     `var createBridgeFetch = ${createBridgeFetch.toString()};`,
     "var client = bridgeRuntime(globalThis, createBridgeFetch, { session: SESSION, hostOrigin: HOST_ORIGIN });",
+    // 라우터는 항상 심는다. ready.then이 엔트리 로드(아래 client.ready.then)보다 먼저 등록돼야 템플릿보다 먼저 스냅샷을 잡는다.
+    `var installDirectFetch = ${installDirectFetch.toString()};`,
+    "installDirectFetch(globalThis, client, { hostOrigin: HOST_ORIGIN });",
+    // 에러 수집기는 엔트리(템플릿)보다 먼저 리스너를 건다. 상한은 호스트 검증기와 같은 프로토콜 값이다.
+    `var installErrorReport = ${installErrorReport.toString()};`,
+    "var reportError = installErrorReport(globalThis, client, {",
+    `  maxReports: ${REPORTS_PER_SESSION},`,
+    `  maxMessageLength: ${REPORT_MESSAGE_MAX_LENGTH},`,
+    `  maxFrames: ${REPORT_MAX_FRAMES},`,
+    `  maxFrameLength: ${REPORT_FRAME_MAX_LENGTH},`,
+    `  maxCount: ${REPORT_COUNT_MAX},`,
+    `  flushDelayMs: ${REPORT_FLUSH_DELAY_MS}`,
+    "});",
     "var lastHeight = -1;",
     "var scheduled = false;",
     "function reportHeight() {",
@@ -669,9 +923,12 @@ function bootstrapScript(o) {
     "}",
     "client.ready.then(function () {",
     "  var script = document.createElement('script');",
+    // crossOrigin은 src보다 먼저 둔다(요청 모드가 src 대입 시점에 정해지는 브라우저가 있다). 주지 않으면 줄 자체가 없다.
+    ...o.crossOrigin === "anonymous" ? ["  script.crossOrigin = 'anonymous';"] : [],
     "  script.src = ENTRY_URL;",
     "  script.onerror = function () {",
     "    client.request('log', { level: 'error', message: 'template entry failed to load' }).catch(function () {});",
+    "    reportError('load', 'template entry failed to load', '');",
     "  };",
     "  document.head.appendChild(script);",
     "  customElements.whenDefined(ELEMENT_NAME).then(function () {",
@@ -697,8 +954,12 @@ function createSrcdoc(options) {
   }
   if (typeof title !== "string") throw new TypeError("[bstage-bridge] title\uC740 \uBB38\uC790\uC5F4\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4");
   const mediaOrigins = normalizeMediaOrigins(options.mediaOrigins);
+  const { crossOrigin } = options;
+  if (crossOrigin !== void 0 && crossOrigin !== "anonymous") {
+    throw new TypeError("[bstage-bridge] crossOrigin\uC740 'anonymous'\uB9CC \uBC1B\uC2B5\uB2C8\uB2E4");
+  }
   const csp = buildFrameCsp(nonce, assetOrigin, mediaOrigins);
-  const script = bootstrapScript({ session, hostOrigin, entryUrl, elementName });
+  const script = bootstrapScript({ session, hostOrigin, entryUrl, elementName, crossOrigin });
   if (/<\/script|<!--/i.test(script)) {
     throw new Error("[bstage-bridge] \uBD80\uD2B8\uC2A4\uD2B8\uB7A9 \uC2A4\uD06C\uB9BD\uD2B8\uC5D0 \uC2A4\uD06C\uB9BD\uD2B8 \uC885\uB8CC \uC2DC\uD000\uC2A4\uAC00 \uC788\uC2B5\uB2C8\uB2E4");
   }
@@ -737,8 +998,15 @@ ${script}
   MAX_ENVELOPE_TYPE_LENGTH,
   MAX_MEDIA_ORIGINS,
   READY_EVENT,
+  REPORTS_PER_SESSION,
+  REPORT_COUNT_MAX,
+  REPORT_FLUSH_DELAY_MS,
+  REPORT_FRAME_MAX_LENGTH,
+  REPORT_MAX_FRAMES,
+  REPORT_MESSAGE_MAX_LENGTH,
   REQUEST_TIMEOUT_MS,
   REQUEST_TYPES,
+  TEMPLATE_REPORT_KINDS,
   buildFrameCsp,
   createEnvelope,
   createNonce,

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-export { B as BRIDGE_ERROR_CODES, a as BRIDGE_SURFACES, b as BridgeError, c as BridgeErrorCode, d as BridgeErrorLike, e as BridgeEventMap, f as BridgeHostEventType, g as BridgeInit, h as BridgeLimits, i as BridgeRequestMap, j as BridgeRequestType, k as BridgeResult, l as BridgeSurface, m as BridgeTranslations, F as FRAME_UNLOAD_EVENT, n as FetchRequest, o as FetchResult, H as HOST_EVENT_TYPES, I as IFRAME_ATTRIBUTES, p as INIT_RESPONSE, L as LogLevel, M as MemberState, R as READY_EVENT, q as REQUEST_TIMEOUT_MS, r as REQUEST_TYPES, S as SlotState, s as StorageOp, T as ThemeState, t as ToastKind, W as WithSession, u as isBridgeErrorCode, v as isBridgeErrorLike, w as isBridgeSurface, x as isHostEventType, y as isRequestType } from './messages-CRGnyf-6.cjs';
-export { C as CreateSrcdocOptions, M as MAX_ELEMENT_NAME_LENGTH, a as MAX_MEDIA_ORIGINS, b as buildFrameCsp, c as createNonce, d as createSession, e as createSrcdoc, i as isValidNonce, f as isValidSession } from './createSrcdoc-bOoxttPz.cjs';
+export { B as BRIDGE_ERROR_CODES, a as BRIDGE_SURFACES, b as BridgeError, c as BridgeErrorCode, d as BridgeErrorLike, e as BridgeEventMap, f as BridgeHostEventType, g as BridgeInit, h as BridgeLimits, i as BridgeRequestMap, j as BridgeRequestType, k as BridgeResult, l as BridgeSurface, m as BridgeTranslations, F as FRAME_UNLOAD_EVENT, n as FetchRequest, o as FetchResult, H as HOST_EVENT_TYPES, I as IFRAME_ATTRIBUTES, p as INIT_RESPONSE, L as LogLevel, M as MemberState, R as READY_EVENT, q as REPORTS_PER_SESSION, r as REPORT_COUNT_MAX, s as REPORT_FRAME_MAX_LENGTH, t as REPORT_MAX_FRAMES, u as REPORT_MESSAGE_MAX_LENGTH, v as REQUEST_TIMEOUT_MS, w as REQUEST_TYPES, S as SlotState, x as StorageOp, T as TEMPLATE_REPORT_KINDS, y as TemplateReport, z as TemplateReportKind, A as ThemeState, C as ToastKind, W as WithSession, D as isBridgeErrorCode, E as isBridgeErrorLike, G as isBridgeSurface, J as isHostEventType, K as isRequestType } from './messages-Cdjpvu2S.cjs';
+export { C as CreateSrcdocOptions, M as MAX_ELEMENT_NAME_LENGTH, a as MAX_MEDIA_ORIGINS, R as REPORT_FLUSH_DELAY_MS, b as buildFrameCsp, c as createNonce, d as createSession, e as createSrcdoc, i as isValidNonce, f as isValidSession } from './createSrcdoc-DYZk6dDJ.cjs';
 
 /** 봉투 버전. 형식이 하위 호환되지 않게 바뀔 때만 올린다. */
 declare const BRIDGE_VERSION = 1;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-export { B as BRIDGE_ERROR_CODES, a as BRIDGE_SURFACES, b as BridgeError, c as BridgeErrorCode, d as BridgeErrorLike, e as BridgeEventMap, f as BridgeHostEventType, g as BridgeInit, h as BridgeLimits, i as BridgeRequestMap, j as BridgeRequestType, k as BridgeResult, l as BridgeSurface, m as BridgeTranslations, F as FRAME_UNLOAD_EVENT, n as FetchRequest, o as FetchResult, H as HOST_EVENT_TYPES, I as IFRAME_ATTRIBUTES, p as INIT_RESPONSE, L as LogLevel, M as MemberState, R as READY_EVENT, q as REQUEST_TIMEOUT_MS, r as REQUEST_TYPES, S as SlotState, s as StorageOp, T as ThemeState, t as ToastKind, W as WithSession, u as isBridgeErrorCode, v as isBridgeErrorLike, w as isBridgeSurface, x as isHostEventType, y as isRequestType } from './messages-CRGnyf-6.js';
-export { C as CreateSrcdocOptions, M as MAX_ELEMENT_NAME_LENGTH, a as MAX_MEDIA_ORIGINS, b as buildFrameCsp, c as createNonce, d as createSession, e as createSrcdoc, i as isValidNonce, f as isValidSession } from './createSrcdoc-bOoxttPz.js';
+export { B as BRIDGE_ERROR_CODES, a as BRIDGE_SURFACES, b as BridgeError, c as BridgeErrorCode, d as BridgeErrorLike, e as BridgeEventMap, f as BridgeHostEventType, g as BridgeInit, h as BridgeLimits, i as BridgeRequestMap, j as BridgeRequestType, k as BridgeResult, l as BridgeSurface, m as BridgeTranslations, F as FRAME_UNLOAD_EVENT, n as FetchRequest, o as FetchResult, H as HOST_EVENT_TYPES, I as IFRAME_ATTRIBUTES, p as INIT_RESPONSE, L as LogLevel, M as MemberState, R as READY_EVENT, q as REPORTS_PER_SESSION, r as REPORT_COUNT_MAX, s as REPORT_FRAME_MAX_LENGTH, t as REPORT_MAX_FRAMES, u as REPORT_MESSAGE_MAX_LENGTH, v as REQUEST_TIMEOUT_MS, w as REQUEST_TYPES, S as SlotState, x as StorageOp, T as TEMPLATE_REPORT_KINDS, y as TemplateReport, z as TemplateReportKind, A as ThemeState, C as ToastKind, W as WithSession, D as isBridgeErrorCode, E as isBridgeErrorLike, G as isBridgeSurface, J as isHostEventType, K as isRequestType } from './messages-Cdjpvu2S.js';
+export { C as CreateSrcdocOptions, M as MAX_ELEMENT_NAME_LENGTH, a as MAX_MEDIA_ORIGINS, R as REPORT_FLUSH_DELAY_MS, b as buildFrameCsp, c as createNonce, d as createSession, e as createSrcdoc, i as isValidNonce, f as isValidSession } from './createSrcdoc-DYZk6dDJ.js';
 
 /** 봉투 버전. 형식이 하위 호환되지 않게 바뀔 때만 올린다. */
 declare const BRIDGE_VERSION = 1;

package/dist/index.js

@@ -13,8 +13,15 @@ import {
   MAX_ENVELOPE_TYPE_LENGTH,
   MAX_MEDIA_ORIGINS,
   READY_EVENT,
+  REPORTS_PER_SESSION,
+  REPORT_COUNT_MAX,
+  REPORT_FLUSH_DELAY_MS,
+  REPORT_FRAME_MAX_LENGTH,
+  REPORT_MAX_FRAMES,
+  REPORT_MESSAGE_MAX_LENGTH,
   REQUEST_TIMEOUT_MS,
   REQUEST_TYPES,
+  TEMPLATE_REPORT_KINDS,
   buildFrameCsp,
   createEnvelope,
   createNonce,
@@ -29,8 +36,8 @@ import {
   isRequestType,
   isValidNonce,
   isValidSession
-} from "./chunk-JH3A3Z2A.js";
-import "./chunk-N3JID7KQ.js";
+} from "./chunk-NXB47KPE.js";
+import "./chunk-TPKNGW34.js";
 export {
   BRIDGE_ERROR_CODES,
   BRIDGE_NAMESPACE,
@@ -46,8 +53,15 @@ export {
   MAX_ENVELOPE_TYPE_LENGTH,
   MAX_MEDIA_ORIGINS,
   READY_EVENT,
+  REPORTS_PER_SESSION,
+  REPORT_COUNT_MAX,
+  REPORT_FLUSH_DELAY_MS,
+  REPORT_FRAME_MAX_LENGTH,
+  REPORT_MAX_FRAMES,
+  REPORT_MESSAGE_MAX_LENGTH,
   REQUEST_TIMEOUT_MS,
   REQUEST_TYPES,
+  TEMPLATE_REPORT_KINDS,
   buildFrameCsp,
   createEnvelope,
   createNonce,

package/dist/{messages-CRGnyf-6.d.cts → messages-Cdjpvu2S.d.cts}

@@ -19,7 +19,7 @@ declare function isBridgeErrorLike(value: unknown): value is BridgeErrorLike;
 /** 프레임 요청 타임아웃. */
 declare const REQUEST_TIMEOUT_MS = 15000;
 /** 프레임 → 호스트 요청 종류(브리지 프로토콜 표). */
-declare const REQUEST_TYPES: readonly ["fetch", "navigate", "back", "openExternal", "toast", "resize", "track", "storage", "log"];
+declare const REQUEST_TYPES: readonly ["fetch", "navigate", "back", "openExternal", "toast", "resize", "track", "storage", "log", "report"];
 type BridgeRequestType = (typeof REQUEST_TYPES)[number];
 /** 호스트 → 프레임 이벤트 종류. */
 declare const HOST_EVENT_TYPES: readonly ["slot.context", "locale", "member", "theme", "visibility"];
@@ -70,6 +70,12 @@ interface BridgeInit {
     readonly spaceId: string;
     readonly hostOrigin: string;
     readonly gatewayBase: string;
+    /**
+     * 호스트 정책의 같은 origin 게이트웨이 경로 접두사(`policy.gatewayPrefixes`). 프레임
+     * 라우터(`__bstage_fetch__`)가 "브리지로 보낼 같은 origin 경로"를 가르는 데 쓴다. 판정의 정본은 여전히 호스트다.
+     * 이 필드가 없는 옛 호스트면 라우터는 hostOrigin 요청을 모두 브리지로 보낸다.
+     */
+    readonly gatewayPrefixes?: readonly string[];
     readonly locale: string;
     readonly theme: ThemeState;
     readonly slot?: SlotState;
@@ -95,6 +101,29 @@ interface FetchResult {
 type ToastKind = 'info' | 'success' | 'warning' | 'error';
 type LogLevel = 'debug' | 'info' | 'warn' | 'error';
 type StorageOp = 'get' | 'set' | 'remove';
+/** 템플릿 에러 보고 종류 — 전역 에러, 처리 안 된 Promise 거절, 엔트리 스크립트 로드 실패. */
+declare const TEMPLATE_REPORT_KINDS: readonly ["error", "rejection", "load"];
+type TemplateReportKind = (typeof TEMPLATE_REPORT_KINDS)[number];
+/** report message 최대 길이(자). 프레임 수집기는 이 길이로 잘라 보내고, 호스트는 넘으면 거절한다. */
+declare const REPORT_MESSAGE_MAX_LENGTH = 300;
+/** report frames 최대 개수. */
+declare const REPORT_MAX_FRAMES = 10;
+/** report frame 한 줄 최대 길이(자). */
+declare const REPORT_FRAME_MAX_LENGTH = 200;
+/** report count 상한(같은 fingerprint 누적 횟수). 하한은 1. */
+declare const REPORT_COUNT_MAX = 100;
+/** 프레임 세션당 report 상한. 프레임 수집기와 호스트가 각자 지킨다. */
+declare const REPORTS_PER_SESSION = 5;
+/**
+ * `report` payload — 격리 프레임이 잡은 템플릿 에러 하나(같은 fingerprint는 count로 묶는다).
+ * URL·placement 같은 귀속 정보는 싣지 않는다 — 호스트가 자기가 띄운 템플릿으로 귀속한다.
+ */
+interface TemplateReport {
+    readonly kind: TemplateReportKind;
+    readonly message: string;
+    readonly frames: readonly string[];
+    readonly count: number;
+}
 /** 요청 type별 payload·결과 타입. */
 interface BridgeRequestMap {
     fetch: {
@@ -154,6 +183,10 @@ interface BridgeRequestMap {
         };
         res: Record<string, never>;
     };
+    report: {
+        req: TemplateReport;
+        res: Record<string, never>;
+    };
 }
 /** 이벤트 type별 payload. */
 interface BridgeEventMap {
@@ -188,4 +221,4 @@ declare const IFRAME_ATTRIBUTES: {
 declare function isRequestType(value: unknown): value is BridgeRequestType;
 declare function isHostEventType(value: unknown): value is BridgeHostEventType;
 
-export { BRIDGE_ERROR_CODES as B, FRAME_UNLOAD_EVENT as F, HOST_EVENT_TYPES as H, IFRAME_ATTRIBUTES as I, type LogLevel as L, type MemberState as M, READY_EVENT as R, type SlotState as S, type ThemeState as T, type WithSession as W, BRIDGE_SURFACES as a, BridgeError as b, type BridgeErrorCode as c, type BridgeErrorLike as d, type BridgeEventMap as e, type BridgeHostEventType as f, type BridgeInit as g, type BridgeLimits as h, type BridgeRequestMap as i, type BridgeRequestType as j, type BridgeResult as k, type BridgeSurface as l, type BridgeTranslations as m, type FetchRequest as n, type FetchResult as o, INIT_RESPONSE as p, REQUEST_TIMEOUT_MS as q, REQUEST_TYPES as r, type StorageOp as s, type ToastKind as t, isBridgeErrorCode as u, isBridgeErrorLike as v, isBridgeSurface as w, isHostEventType as x, isRequestType as y };
+export { type ThemeState as A, BRIDGE_ERROR_CODES as B, type ToastKind as C, isBridgeErrorCode as D, isBridgeErrorLike as E, FRAME_UNLOAD_EVENT as F, isBridgeSurface as G, HOST_EVENT_TYPES as H, IFRAME_ATTRIBUTES as I, isHostEventType as J, isRequestType as K, type LogLevel as L, type MemberState as M, READY_EVENT as R, type SlotState as S, TEMPLATE_REPORT_KINDS as T, type WithSession as W, BRIDGE_SURFACES as a, BridgeError as b, type BridgeErrorCode as c, type BridgeErrorLike as d, type BridgeEventMap as e, type BridgeHostEventType as f, type BridgeInit as g, type BridgeLimits as h, type BridgeRequestMap as i, type BridgeRequestType as j, type BridgeResult as k, type BridgeSurface as l, type BridgeTranslations as m, type FetchRequest as n, type FetchResult as o, INIT_RESPONSE as p, REPORTS_PER_SESSION as q, REPORT_COUNT_MAX as r, REPORT_FRAME_MAX_LENGTH as s, REPORT_MAX_FRAMES as t, REPORT_MESSAGE_MAX_LENGTH as u, REQUEST_TIMEOUT_MS as v, REQUEST_TYPES as w, type StorageOp as x, type TemplateReport as y, type TemplateReportKind as z };

package/dist/{messages-CRGnyf-6.d.ts → messages-Cdjpvu2S.d.ts}

@@ -19,7 +19,7 @@ declare function isBridgeErrorLike(value: unknown): value is BridgeErrorLike;
 /** 프레임 요청 타임아웃. */
 declare const REQUEST_TIMEOUT_MS = 15000;
 /** 프레임 → 호스트 요청 종류(브리지 프로토콜 표). */
-declare const REQUEST_TYPES: readonly ["fetch", "navigate", "back", "openExternal", "toast", "resize", "track", "storage", "log"];
+declare const REQUEST_TYPES: readonly ["fetch", "navigate", "back", "openExternal", "toast", "resize", "track", "storage", "log", "report"];
 type BridgeRequestType = (typeof REQUEST_TYPES)[number];
 /** 호스트 → 프레임 이벤트 종류. */
 declare const HOST_EVENT_TYPES: readonly ["slot.context", "locale", "member", "theme", "visibility"];
@@ -70,6 +70,12 @@ interface BridgeInit {
     readonly spaceId: string;
     readonly hostOrigin: string;
     readonly gatewayBase: string;
+    /**
+     * 호스트 정책의 같은 origin 게이트웨이 경로 접두사(`policy.gatewayPrefixes`). 프레임
+     * 라우터(`__bstage_fetch__`)가 "브리지로 보낼 같은 origin 경로"를 가르는 데 쓴다. 판정의 정본은 여전히 호스트다.
+     * 이 필드가 없는 옛 호스트면 라우터는 hostOrigin 요청을 모두 브리지로 보낸다.
+     */
+    readonly gatewayPrefixes?: readonly string[];
     readonly locale: string;
     readonly theme: ThemeState;
     readonly slot?: SlotState;
@@ -95,6 +101,29 @@ interface FetchResult {
 type ToastKind = 'info' | 'success' | 'warning' | 'error';
 type LogLevel = 'debug' | 'info' | 'warn' | 'error';
 type StorageOp = 'get' | 'set' | 'remove';
+/** 템플릿 에러 보고 종류 — 전역 에러, 처리 안 된 Promise 거절, 엔트리 스크립트 로드 실패. */
+declare const TEMPLATE_REPORT_KINDS: readonly ["error", "rejection", "load"];
+type TemplateReportKind = (typeof TEMPLATE_REPORT_KINDS)[number];
+/** report message 최대 길이(자). 프레임 수집기는 이 길이로 잘라 보내고, 호스트는 넘으면 거절한다. */
+declare const REPORT_MESSAGE_MAX_LENGTH = 300;
+/** report frames 최대 개수. */
+declare const REPORT_MAX_FRAMES = 10;
+/** report frame 한 줄 최대 길이(자). */
+declare const REPORT_FRAME_MAX_LENGTH = 200;
+/** report count 상한(같은 fingerprint 누적 횟수). 하한은 1. */
+declare const REPORT_COUNT_MAX = 100;
+/** 프레임 세션당 report 상한. 프레임 수집기와 호스트가 각자 지킨다. */
+declare const REPORTS_PER_SESSION = 5;
+/**
+ * `report` payload — 격리 프레임이 잡은 템플릿 에러 하나(같은 fingerprint는 count로 묶는다).
+ * URL·placement 같은 귀속 정보는 싣지 않는다 — 호스트가 자기가 띄운 템플릿으로 귀속한다.
+ */
+interface TemplateReport {
+    readonly kind: TemplateReportKind;
+    readonly message: string;
+    readonly frames: readonly string[];
+    readonly count: number;
+}
 /** 요청 type별 payload·결과 타입. */
 interface BridgeRequestMap {
     fetch: {
@@ -154,6 +183,10 @@ interface BridgeRequestMap {
         };
         res: Record<string, never>;
     };
+    report: {
+        req: TemplateReport;
+        res: Record<string, never>;
+    };
 }
 /** 이벤트 type별 payload. */
 interface BridgeEventMap {
@@ -188,4 +221,4 @@ declare const IFRAME_ATTRIBUTES: {
 declare function isRequestType(value: unknown): value is BridgeRequestType;
 declare function isHostEventType(value: unknown): value is BridgeHostEventType;
 
-export { BRIDGE_ERROR_CODES as B, FRAME_UNLOAD_EVENT as F, HOST_EVENT_TYPES as H, IFRAME_ATTRIBUTES as I, type LogLevel as L, type MemberState as M, READY_EVENT as R, type SlotState as S, type ThemeState as T, type WithSession as W, BRIDGE_SURFACES as a, BridgeError as b, type BridgeErrorCode as c, type BridgeErrorLike as d, type BridgeEventMap as e, type BridgeHostEventType as f, type BridgeInit as g, type BridgeLimits as h, type BridgeRequestMap as i, type BridgeRequestType as j, type BridgeResult as k, type BridgeSurface as l, type BridgeTranslations as m, type FetchRequest as n, type FetchResult as o, INIT_RESPONSE as p, REQUEST_TIMEOUT_MS as q, REQUEST_TYPES as r, type StorageOp as s, type ToastKind as t, isBridgeErrorCode as u, isBridgeErrorLike as v, isBridgeSurface as w, isHostEventType as x, isRequestType as y };
+export { type ThemeState as A, BRIDGE_ERROR_CODES as B, type ToastKind as C, isBridgeErrorCode as D, isBridgeErrorLike as E, FRAME_UNLOAD_EVENT as F, isBridgeSurface as G, HOST_EVENT_TYPES as H, IFRAME_ATTRIBUTES as I, isHostEventType as J, isRequestType as K, type LogLevel as L, type MemberState as M, READY_EVENT as R, type SlotState as S, TEMPLATE_REPORT_KINDS as T, type WithSession as W, BRIDGE_SURFACES as a, BridgeError as b, type BridgeErrorCode as c, type BridgeErrorLike as d, type BridgeEventMap as e, type BridgeHostEventType as f, type BridgeInit as g, type BridgeLimits as h, type BridgeRequestMap as i, type BridgeRequestType as j, type BridgeResult as k, type BridgeSurface as l, type BridgeTranslations as m, type FetchRequest as n, type FetchResult as o, INIT_RESPONSE as p, REPORTS_PER_SESSION as q, REPORT_COUNT_MAX as r, REPORT_FRAME_MAX_LENGTH as s, REPORT_MAX_FRAMES as t, REPORT_MESSAGE_MAX_LENGTH as u, REQUEST_TIMEOUT_MS as v, REQUEST_TYPES as w, type StorageOp as x, type TemplateReport as y, type TemplateReportKind as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bstage-sdk/bridge",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "bstage SDK bridge — isolated template iframe protocol, host policy and frame client",
   "type": "module",
   "publishConfig": {