@corti/embedded-web 0.1.0-alpha.1

package/dist/utils/PostMessageHandler.js

@@ -0,0 +1,353 @@
+export class PostMessageHandler {
+    constructor(iframe, callbacks = {}) {
+        this.pendingRequests = new Map();
+        this.messageListener = null;
+        this.isReady = false;
+        this.iframe = iframe;
+        this.callbacks = callbacks;
+        this.setupMessageListener();
+    }
+    setupMessageListener() {
+        this.messageListener = (event) => {
+            // Only handle messages from our iframe
+            if (event.source !== this.iframe.contentWindow) {
+                return;
+            }
+            // Enforce origin to match the trusted iframe origin
+            const trustedOrigin = this.getTrustedOrigin();
+            if (!trustedOrigin || event.origin !== trustedOrigin) {
+                return;
+            }
+            const { data } = event;
+            // Check for Corti embedded events
+            if (data?.type === 'CORTI_EMBEDDED_EVENT') {
+                this.handleEvent(data);
+                return;
+            }
+            // Check if this is a response to a pending request
+            if (data.requestId && this.pendingRequests.has(data.requestId)) {
+                this.handleResponse(data);
+            }
+        };
+        window.addEventListener('message', this.messageListener);
+    }
+    handleEvent(eventData) {
+        const eventType = eventData.event;
+        const { payload } = eventData;
+        // Handle ready-like events
+        if (eventType === 'ready' || eventType === 'loaded') {
+            this.isReady = true;
+        }
+        // Handle specific events with callbacks
+        switch (eventType) {
+            case 'ready':
+            case 'loaded':
+                this.callbacks.onReady?.();
+                break;
+            case 'authChanged':
+                this.callbacks.onAuthChanged?.(payload);
+                break;
+            case 'interactionCreated':
+                this.callbacks.onInteractionCreated?.(payload);
+                break;
+            case 'recordingStarted':
+                this.callbacks.onRecordingStarted?.();
+                break;
+            case 'recordingStopped':
+                this.callbacks.onRecordingStopped?.();
+                break;
+            case 'documentGenerated':
+                this.callbacks.onDocumentGenerated?.(payload);
+                break;
+            case 'documentUpdated':
+                this.callbacks.onDocumentUpdated?.(payload);
+                break;
+            case 'navigationChanged':
+                this.callbacks.onNavigationChanged?.(payload);
+                break;
+            case 'usage':
+                this.callbacks.onUsage?.(payload);
+                break;
+            default:
+                console.warn(`Unhandled event type: ${eventType}`);
+                break;
+        }
+    }
+    handleResponse(data) {
+        const pendingRequest = this.pendingRequests.get(data.requestId);
+        if (pendingRequest) {
+            const { resolve, reject } = pendingRequest;
+            this.pendingRequests.delete(data.requestId);
+            if (data.success === false || data.error) {
+                const error = {
+                    message: data.error || 'Request failed',
+                    code: data.errorCode,
+                    details: data.errorDetails,
+                };
+                this.callbacks.onError?.(error);
+                reject(error);
+            }
+            else {
+                resolve(data);
+            }
+        }
+    }
+    destroy() {
+        if (this.messageListener) {
+            window.removeEventListener('message', this.messageListener);
+            this.messageListener = null;
+        }
+        this.pendingRequests.clear();
+    }
+    /**
+     * Update callbacks after construction
+     */
+    updateCallbacks(callbacks) {
+        this.callbacks = { ...this.callbacks, ...callbacks };
+    }
+    /**
+     * Check if the iframe is ready to receive postMessages
+     */
+    get ready() {
+        return this.isReady;
+    }
+    /**
+     * Wait for the iframe to be ready
+     * @param timeout - Optional timeout in milliseconds (default: 30000ms)
+     * @returns Promise that resolves when ready
+     */
+    async waitForReady(timeout = 30000) {
+        if (this.isReady) {
+            return Promise.resolve();
+        }
+        return new Promise((resolve, reject) => {
+            const timeoutId = setTimeout(() => {
+                reject(new Error('Timeout waiting for iframe to be ready'));
+            }, timeout);
+            // Create a one-time listener for the ready event
+            const readyListener = (event) => {
+                if (event.source === this.iframe.contentWindow &&
+                    event.origin === this.getTrustedOrigin() &&
+                    event.data?.type === 'CORTI_EMBEDDED_EVENT' &&
+                    event.data.event === 'ready') {
+                    clearTimeout(timeoutId);
+                    window.removeEventListener('message', readyListener);
+                    resolve();
+                }
+            };
+            window.addEventListener('message', readyListener);
+        });
+    }
+    /**
+     * Sends a postMessage to the iframe and returns a Promise that resolves with the response
+     * @param message - The message to send
+     * @param timeout - Optional timeout in milliseconds (default: 10000ms)
+     * @returns Promise that resolves with the response
+     */
+    async postMessage(message, timeout = 10000) {
+        if (!this.iframe.contentWindow) {
+            throw new Error('Iframe not ready');
+        }
+        // Ensure the iframe has signaled readiness before sending
+        await this.waitForReady();
+        const { contentWindow } = this.iframe;
+        const requestId = PostMessageHandler.generateRequestId();
+        return new Promise((resolve, reject) => {
+            // Set up timeout
+            const timeoutId = setTimeout(() => {
+                this.pendingRequests.delete(requestId);
+                reject(new Error('Request timeout'));
+            }, timeout);
+            // Store the promise handlers
+            const handlers = {
+                resolve: (value) => {
+                    clearTimeout(timeoutId);
+                    resolve(value);
+                },
+                reject: (reason) => {
+                    clearTimeout(timeoutId);
+                    reject(reason);
+                },
+            };
+            this.pendingRequests.set(requestId, handlers);
+            // Send the message
+            const fullMessage = {
+                ...message,
+                requestId,
+            };
+            const targetOrigin = this.getTrustedOrigin();
+            if (!targetOrigin) {
+                this.pendingRequests.delete(requestId);
+                reject(new Error('Cannot determine trusted origin for postMessage'));
+                return;
+            }
+            contentWindow.postMessage(fullMessage, targetOrigin);
+        });
+    }
+    /**
+     * Helper method to send an auth message and return clean user data
+     * @param payload - Auth payload
+     * @returns Promise that resolves with user data
+     */
+    async auth(payload) {
+        const response = await this.postMessage({
+            type: 'CORTI_EMBEDDED',
+            version: 'v1',
+            action: 'auth',
+            payload,
+        });
+        this.isReady = false;
+        if (response.payload && typeof response.success) {
+            return response.payload.user;
+        }
+        throw new Error(response.error);
+    }
+    /**
+     * Helper method to configure a session
+     * @param payload - Session configuration payload
+     * @returns Promise that resolves when configuration is complete
+     */
+    async configureSession(payload) {
+        await this.postMessage({
+            type: 'CORTI_EMBEDDED',
+            version: 'v1',
+            action: 'configureSession',
+            payload,
+        });
+    }
+    /**
+     * Helper method to navigate to a specific path
+     * @param payload - Navigation payload
+     * @returns Promise that resolves when navigation is complete
+     */
+    async navigate(payload) {
+        await this.postMessage({
+            type: 'CORTI_EMBEDDED',
+            version: 'v1',
+            action: 'navigate',
+            payload,
+        });
+    }
+    /**
+     * Helper method to add facts to the session
+     * @param payload - Facts payload
+     * @returns Promise that resolves when facts are added
+     */
+    async addFacts(payload) {
+        await this.postMessage({
+            type: 'CORTI_EMBEDDED',
+            version: 'v1',
+            action: 'addFacts',
+            payload,
+        });
+    }
+    /**
+     * Helper method to create a new interaction and return clean interaction data
+     * @param payload - Interaction creation payload
+     * @returns Promise that resolves with interaction details
+     */
+    async createInteraction(payload) {
+        const response = await this.postMessage({
+            type: 'CORTI_EMBEDDED',
+            version: 'v1',
+            action: 'createInteraction',
+            payload,
+        });
+        if (response.payload && typeof response.success) {
+            return response.payload;
+        }
+        throw new Error(response.error);
+    }
+    /**
+     * Helper method to start recording
+     * @returns Promise that resolves when recording starts
+     */
+    async startRecording() {
+        await this.postMessage({
+            type: 'CORTI_EMBEDDED',
+            version: 'v1',
+            action: 'startRecording',
+            payload: {},
+        });
+    }
+    /**
+     * Helper method to stop recording
+     * @returns Promise that resolves when recording stops
+     */
+    async stopRecording() {
+        await this.postMessage({
+            type: 'CORTI_EMBEDDED',
+            version: 'v1',
+            action: 'stopRecording',
+            payload: {},
+        });
+    }
+    /**
+     * Helper method to get current status
+     * @returns Promise that resolves with current status
+     */
+    async getStatus() {
+        const response = await this.postMessage({
+            type: 'CORTI_EMBEDDED',
+            version: 'v1',
+            action: 'getStatus',
+            payload: {},
+        });
+        if (response.payload && typeof response.success) {
+            return response.payload;
+        }
+        throw new Error(response.error);
+    }
+    /**
+     * Helper method to configure the component
+     * @param payload - Component configuration payload
+     * @returns Promise that resolves when configuration is applied
+     */
+    async configure(payload) {
+        const response = await this.postMessage({
+            type: 'CORTI_EMBEDDED',
+            version: 'v1',
+            action: 'configure',
+            payload,
+        });
+        if (response.payload && typeof response.success) {
+            return response.payload;
+        }
+        throw new Error(response.error);
+    }
+    /**
+     * Helper method to set credentials without triggering auth flow
+     * @param payload - Credentials payload
+     * @returns Promise that resolves when credentials are set
+     */
+    async setCredentials(payload) {
+        await this.postMessage({
+            type: 'CORTI_EMBEDDED',
+            version: 'v1',
+            action: 'setCredentials',
+            payload,
+        });
+    }
+    static generateRequestId() {
+        return `req_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
+    }
+    /**
+     * Derive the trusted origin from the iframe src (constructed from baseURL).
+     * Returns null if it cannot be determined.
+     */
+    getTrustedOrigin() {
+        try {
+            // If iframe.src is relative, URL() will resolve against the current location.
+            // Embeds should provide an absolute baseURL; enforcing strict origin here.
+            const src = this.iframe.getAttribute('src') || this.iframe.src;
+            if (!src)
+                return null;
+            const url = new URL(src, window.location.href);
+            return url.origin;
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=PostMessageHandler.js.map

package/dist/utils/PostMessageHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostMessageHandler.js","sourceRoot":"","sources":["../../src/utils/PostMessageHandler.ts"],"names":[],"mappings":"AAuCA,MAAM,OAAO,kBAAkB;IAc7B,YACE,MAAyB,EACzB,YAAyC,EAAE;QAfrC,oBAAe,GAAG,IAAI,GAAG,EAG9B,CAAC;QAEI,oBAAe,GAA2C,IAAI,CAAC;QAI/D,YAAO,GAAG,KAAK,CAAC;QAQtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,eAAe,GAAG,CAAC,KAAmB,EAAE,EAAE;YAC7C,uCAAuC;YACvC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC/C,OAAO;YACT,CAAC;YAED,oDAAoD;YACpD,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9C,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;YAEvB,kCAAkC;YAClC,IAAI,IAAI,EAAE,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC1C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,mDAAmD;YACnD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3D,CAAC;IAEO,WAAW,CAAC,SAA2B;QAC7C,MAAM,SAAS,GAAI,SAAiB,CAAC,KAAK,CAAC;QAC3C,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;QAE9B,2BAA2B;QAC3B,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QAED,wCAAwC;QACxC,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,OAAO,CAAC;YACb,KAAK,QAAQ;gBACX,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3B,MAAM;YACR,KAAK,aAAa;gBAChB,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM;YACR,KAAK,oBAAoB;gBACvB,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC/C,MAAM;YACR,KAAK,kBAAkB;gBACrB,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,EAAE,CAAC;gBACtC,MAAM;YACR,KAAK,kBAAkB;gBACrB,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,EAAE,CAAC;gBACtC,MAAM;YACR,KAAK,mBAAmB;gBACtB,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAClC,OAAkD,CACnD,CAAC;gBACF,MAAM;YACR,KAAK,iBAAiB;gBACpB,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAChC,OAAgD,CACjD,CAAC;gBACF,MAAM;YACR,KAAK,mBAAmB;gBACtB,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,OAAqC,CAAC,CAAC;gBAChE,MAAM;YACR;gBACE,OAAO,CAAC,IAAI,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;gBACnD,MAAM;QACV,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,IAAS;QAC9B,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;YAC3C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE5C,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG;oBACZ,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,gBAAgB;oBACvC,IAAI,EAAE,IAAI,CAAC,SAAS;oBACpB,OAAO,EAAE,IAAI,CAAC,YAAY;iBAC3B,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAsC;QACpD,IAAI,CAAC,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,EAAE,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,OAAO,GAAG,KAAK;QAChC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;YAC9D,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,iDAAiD;YACjD,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,EAAE;gBAC5C,IACE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa;oBAC1C,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB,EAAE;oBACxC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,sBAAsB;oBAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,EAC5B,CAAC;oBACD,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;oBACrD,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,OAA2C,EAC3C,OAAO,GAAG,KAAK;QAEf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QAED,0DAA0D;QAC1D,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACtC,MAAM,SAAS,GAAG,kBAAkB,CAAC,iBAAiB,EAAE,CAAC;QAEzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,iBAAiB;YACjB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACvC,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,6BAA6B;YAC7B,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,CAAC,KAAU,EAAE,EAAE;oBACtB,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;gBACD,MAAM,EAAE,CAAC,MAAW,EAAE,EAAE;oBACtB,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjB,CAAC;aACF,CAAC;YAEF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAE9C,mBAAmB;YACnB,MAAM,WAAW,GAAoB;gBACnC,GAAG,OAAO;gBACV,SAAS;aACV,CAAC;YAEF,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YACD,aAAa,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,OAAoB;QAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM;YACd,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAErB,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC;YAChD,OAAQ,QAAQ,CAAC,OAAwB,CAAC,IAAI,CAAC;QACjD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAAgC;QACrD,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,kBAAkB;YAC1B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,UAAU;YAClB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,UAAU;YAClB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAA2B;QAE3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,mBAAmB;YAC3B,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO,QAAQ,CAAC,OAAoC,CAAC;QACvD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,gBAAgB;YACxB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO,QAAQ,CAAC,OAA4B,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CACb,OAA4B;QAE5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,WAAW;YACnB,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO,QAAQ,CAAC,OAAsC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAA8B;QACjD,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,gBAAgB;YACxB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,iBAAiB;QAC9B,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC;IAED;;;OAGG;IACK,gBAAgB;QACtB,IAAI,CAAC;YACH,8EAA8E;YAC9E,2EAA2E;YAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC/D,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF","sourcesContent":["import type { Corti } from '@corti/sdk';\nimport type {\n  AddFactsPayload,\n  AnyEmbeddedEvent,\n  AuthPayload,\n  AuthResponse,\n  ConfigureAppPayload,\n  ConfigureAppResponsePayload,\n  ConfigureSessionPayload,\n  CreateInteractionResponse,\n  EmbeddedRequest,\n  EmbeddedResponse,\n  GetStatusResponse,\n  NavigatePayload,\n  SetCredentialsPayload,\n} from '../internal-types.js';\nimport type { EmbeddedEventData, InteractionPayload } from '../public-types.js';\n\nexport interface PostMessageHandlerCallbacks {\n  onReady?: () => void;\n  onAuthChanged?: (payload: any) => void;\n  onInteractionCreated?: (payload: any) => void;\n  onRecordingStarted?: () => void;\n  onRecordingStopped?: () => void;\n  onDocumentGenerated?: (payload: {\n    document: Corti.DocumentsGetResponse;\n  }) => void;\n  onDocumentUpdated?: (payload: {\n    document: Corti.DocumentsGetResponse;\n  }) => void;\n  onNavigationChanged?: (payload: any) => void;\n  onUsage?: (payload: EmbeddedEventData['usage']) => void;\n  onError?: (error: {\n    message: string;\n    code?: string;\n    details?: unknown;\n  }) => void;\n}\n\nexport class PostMessageHandler {\n  private pendingRequests = new Map<\n    string,\n    { resolve: (value: any) => void; reject: (reason: any) => void }\n  >();\n\n  private messageListener: ((event: MessageEvent) => void) | null = null;\n\n  private iframe: HTMLIFrameElement;\n\n  private isReady = false;\n\n  private callbacks: PostMessageHandlerCallbacks;\n\n  constructor(\n    iframe: HTMLIFrameElement,\n    callbacks: PostMessageHandlerCallbacks = {},\n  ) {\n    this.iframe = iframe;\n    this.callbacks = callbacks;\n    this.setupMessageListener();\n  }\n\n  private setupMessageListener() {\n    this.messageListener = (event: MessageEvent) => {\n      // Only handle messages from our iframe\n      if (event.source !== this.iframe.contentWindow) {\n        return;\n      }\n\n      // Enforce origin to match the trusted iframe origin\n      const trustedOrigin = this.getTrustedOrigin();\n      if (!trustedOrigin || event.origin !== trustedOrigin) {\n        return;\n      }\n\n      const { data } = event;\n\n      // Check for Corti embedded events\n      if (data?.type === 'CORTI_EMBEDDED_EVENT') {\n        this.handleEvent(data);\n        return;\n      }\n\n      // Check if this is a response to a pending request\n      if (data.requestId && this.pendingRequests.has(data.requestId)) {\n        this.handleResponse(data);\n      }\n    };\n\n    window.addEventListener('message', this.messageListener);\n  }\n\n  private handleEvent(eventData: AnyEmbeddedEvent): void {\n    const eventType = (eventData as any).event;\n    const { payload } = eventData;\n\n    // Handle ready-like events\n    if (eventType === 'ready' || eventType === 'loaded') {\n      this.isReady = true;\n    }\n\n    // Handle specific events with callbacks\n    switch (eventType) {\n      case 'ready':\n      case 'loaded':\n        this.callbacks.onReady?.();\n        break;\n      case 'authChanged':\n        this.callbacks.onAuthChanged?.(payload);\n        break;\n      case 'interactionCreated':\n        this.callbacks.onInteractionCreated?.(payload);\n        break;\n      case 'recordingStarted':\n        this.callbacks.onRecordingStarted?.();\n        break;\n      case 'recordingStopped':\n        this.callbacks.onRecordingStopped?.();\n        break;\n      case 'documentGenerated':\n        this.callbacks.onDocumentGenerated?.(\n          payload as EmbeddedEventData['document-generated'],\n        );\n        break;\n      case 'documentUpdated':\n        this.callbacks.onDocumentUpdated?.(\n          payload as EmbeddedEventData['document-updated'],\n        );\n        break;\n      case 'navigationChanged':\n        this.callbacks.onNavigationChanged?.(payload);\n        break;\n      case 'usage':\n        this.callbacks.onUsage?.(payload as EmbeddedEventData['usage']);\n        break;\n      default:\n        console.warn(`Unhandled event type: ${eventType}`);\n        break;\n    }\n  }\n\n  private handleResponse(data: any): void {\n    const pendingRequest = this.pendingRequests.get(data.requestId);\n    if (pendingRequest) {\n      const { resolve, reject } = pendingRequest;\n      this.pendingRequests.delete(data.requestId);\n\n      if (data.success === false || data.error) {\n        const error = {\n          message: data.error || 'Request failed',\n          code: data.errorCode,\n          details: data.errorDetails,\n        };\n        this.callbacks.onError?.(error);\n        reject(error);\n      } else {\n        resolve(data);\n      }\n    }\n  }\n\n  destroy() {\n    if (this.messageListener) {\n      window.removeEventListener('message', this.messageListener);\n      this.messageListener = null;\n    }\n    this.pendingRequests.clear();\n  }\n\n  /**\n   * Update callbacks after construction\n   */\n  updateCallbacks(callbacks: PostMessageHandlerCallbacks) {\n    this.callbacks = { ...this.callbacks, ...callbacks };\n  }\n\n  /**\n   * Check if the iframe is ready to receive postMessages\n   */\n  get ready(): boolean {\n    return this.isReady;\n  }\n\n  /**\n   * Wait for the iframe to be ready\n   * @param timeout - Optional timeout in milliseconds (default: 30000ms)\n   * @returns Promise that resolves when ready\n   */\n  async waitForReady(timeout = 30000): Promise<void> {\n    if (this.isReady) {\n      return Promise.resolve();\n    }\n\n    return new Promise((resolve, reject) => {\n      const timeoutId = setTimeout(() => {\n        reject(new Error('Timeout waiting for iframe to be ready'));\n      }, timeout);\n\n      // Create a one-time listener for the ready event\n      const readyListener = (event: MessageEvent) => {\n        if (\n          event.source === this.iframe.contentWindow &&\n          event.origin === this.getTrustedOrigin() &&\n          event.data?.type === 'CORTI_EMBEDDED_EVENT' &&\n          event.data.event === 'ready'\n        ) {\n          clearTimeout(timeoutId);\n          window.removeEventListener('message', readyListener);\n          resolve();\n        }\n      };\n\n      window.addEventListener('message', readyListener);\n    });\n  }\n\n  /**\n   * Sends a postMessage to the iframe and returns a Promise that resolves with the response\n   * @param message - The message to send\n   * @param timeout - Optional timeout in milliseconds (default: 10000ms)\n   * @returns Promise that resolves with the response\n   */\n  async postMessage(\n    message: Omit<EmbeddedRequest, 'requestId'>,\n    timeout = 10000,\n  ): Promise<EmbeddedResponse> {\n    if (!this.iframe.contentWindow) {\n      throw new Error('Iframe not ready');\n    }\n\n    // Ensure the iframe has signaled readiness before sending\n    await this.waitForReady();\n\n    const { contentWindow } = this.iframe;\n    const requestId = PostMessageHandler.generateRequestId();\n\n    return new Promise((resolve, reject) => {\n      // Set up timeout\n      const timeoutId = setTimeout(() => {\n        this.pendingRequests.delete(requestId);\n        reject(new Error('Request timeout'));\n      }, timeout);\n\n      // Store the promise handlers\n      const handlers = {\n        resolve: (value: any) => {\n          clearTimeout(timeoutId);\n          resolve(value);\n        },\n        reject: (reason: any) => {\n          clearTimeout(timeoutId);\n          reject(reason);\n        },\n      };\n\n      this.pendingRequests.set(requestId, handlers);\n\n      // Send the message\n      const fullMessage: EmbeddedRequest = {\n        ...message,\n        requestId,\n      };\n\n      const targetOrigin = this.getTrustedOrigin();\n      if (!targetOrigin) {\n        this.pendingRequests.delete(requestId);\n        reject(new Error('Cannot determine trusted origin for postMessage'));\n        return;\n      }\n      contentWindow.postMessage(fullMessage, targetOrigin);\n    });\n  }\n\n  /**\n   * Helper method to send an auth message and return clean user data\n   * @param payload - Auth payload\n   * @returns Promise that resolves with user data\n   */\n  async auth(payload: AuthPayload): Promise<AuthResponse['user']> {\n    const response = await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'auth',\n      payload,\n    });\n    this.isReady = false;\n\n    if (response.payload && typeof response.success) {\n      return (response.payload as AuthResponse).user;\n    }\n    throw new Error(response.error);\n  }\n\n  /**\n   * Helper method to configure a session\n   * @param payload - Session configuration payload\n   * @returns Promise that resolves when configuration is complete\n   */\n  async configureSession(payload: ConfigureSessionPayload): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'configureSession',\n      payload,\n    });\n  }\n\n  /**\n   * Helper method to navigate to a specific path\n   * @param payload - Navigation payload\n   * @returns Promise that resolves when navigation is complete\n   */\n  async navigate(payload: NavigatePayload): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'navigate',\n      payload,\n    });\n  }\n\n  /**\n   * Helper method to add facts to the session\n   * @param payload - Facts payload\n   * @returns Promise that resolves when facts are added\n   */\n  async addFacts(payload: AddFactsPayload): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'addFacts',\n      payload,\n    });\n  }\n\n  /**\n   * Helper method to create a new interaction and return clean interaction data\n   * @param payload - Interaction creation payload\n   * @returns Promise that resolves with interaction details\n   */\n  async createInteraction(\n    payload: InteractionPayload,\n  ): Promise<CreateInteractionResponse> {\n    const response = await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'createInteraction',\n      payload,\n    });\n\n    if (response.payload && typeof response.success) {\n      return response.payload as CreateInteractionResponse;\n    }\n    throw new Error(response.error);\n  }\n\n  /**\n   * Helper method to start recording\n   * @returns Promise that resolves when recording starts\n   */\n  async startRecording(): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'startRecording',\n      payload: {},\n    });\n  }\n\n  /**\n   * Helper method to stop recording\n   * @returns Promise that resolves when recording stops\n   */\n  async stopRecording(): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'stopRecording',\n      payload: {},\n    });\n  }\n\n  /**\n   * Helper method to get current status\n   * @returns Promise that resolves with current status\n   */\n  async getStatus(): Promise<GetStatusResponse> {\n    const response = await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'getStatus',\n      payload: {},\n    });\n\n    if (response.payload && typeof response.success) {\n      return response.payload as GetStatusResponse;\n    }\n    throw new Error(response.error);\n  }\n\n  /**\n   * Helper method to configure the component\n   * @param payload - Component configuration payload\n   * @returns Promise that resolves when configuration is applied\n   */\n  async configure(\n    payload: ConfigureAppPayload,\n  ): Promise<ConfigureAppResponsePayload> {\n    const response = await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'configure',\n      payload,\n    });\n\n    if (response.payload && typeof response.success) {\n      return response.payload as ConfigureAppResponsePayload;\n    }\n    throw new Error(response.error);\n  }\n\n  /**\n   * Helper method to set credentials without triggering auth flow\n   * @param payload - Credentials payload\n   * @returns Promise that resolves when credentials are set\n   */\n  async setCredentials(payload: SetCredentialsPayload): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'setCredentials',\n      payload,\n    });\n  }\n\n  private static generateRequestId(): string {\n    return `req_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;\n  }\n\n  /**\n   * Derive the trusted origin from the iframe src (constructed from baseURL).\n   * Returns null if it cannot be determined.\n   */\n  private getTrustedOrigin(): string | null {\n    try {\n      // If iframe.src is relative, URL() will resolve against the current location.\n      // Embeds should provide an absolute baseURL; enforcing strict origin here.\n      const src = this.iframe.getAttribute('src') || this.iframe.src;\n      if (!src) return null;\n      const url = new URL(src, window.location.href);\n      return url.origin;\n    } catch {\n      return null;\n    }\n  }\n}\n"]}

package/dist/utils/baseUrl.d.ts

@@ -0,0 +1 @@
+export declare function validateAndNormalizeBaseURL(url: string): string;

package/dist/utils/baseUrl.js

@@ -0,0 +1,25 @@
+export function validateAndNormalizeBaseURL(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new Error('Invalid baseURL: not a parseable URL');
+    }
+    if (parsed.protocol !== 'https:') {
+        throw new Error('Invalid baseURL: must use https');
+    }
+    const host = parsed.host.toLowerCase();
+    const pattern = /^assistant\.[a-z0-9-]+\.corti\.app$/i;
+    if (!pattern.test(host)) {
+        throw new Error('Invalid baseURL: host must match assistant.xxx.corti.app');
+    }
+    if (parsed.pathname && parsed.pathname !== '/' && parsed.pathname !== '') {
+        throw new Error('Invalid baseURL: must not include a path');
+    }
+    if (parsed.username || parsed.password) {
+        throw new Error('Invalid baseURL: must not include credentials');
+    }
+    return parsed.origin.replace(/\/+$/, '');
+}
+//# sourceMappingURL=baseUrl.js.map

package/dist/utils/baseUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseUrl.js","sourceRoot":"","sources":["../../src/utils/baseUrl.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,sCAAsC,CAAC;IACvD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC","sourcesContent":["export function validateAndNormalizeBaseURL(url: string): string {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    throw new Error('Invalid baseURL: not a parseable URL');\n  }\n  if (parsed.protocol !== 'https:') {\n    throw new Error('Invalid baseURL: must use https');\n  }\n  const host = parsed.host.toLowerCase();\n  const pattern = /^assistant\\.[a-z0-9-]+\\.corti\\.app$/i;\n  if (!pattern.test(host)) {\n    throw new Error('Invalid baseURL: host must match assistant.xxx.corti.app');\n  }\n  if (parsed.pathname && parsed.pathname !== '/' && parsed.pathname !== '') {\n    throw new Error('Invalid baseURL: must not include a path');\n  }\n  if (parsed.username || parsed.password) {\n    throw new Error('Invalid baseURL: must not include credentials');\n  }\n  return parsed.origin.replace(/\\/+$/, '');\n}\n"]}

package/dist/utils/embedUrl.d.ts

@@ -0,0 +1,2 @@
+export declare function buildEmbeddedUrl(normalizedBaseURL: string): string;
+export declare function isRealEmbeddedLoad(src: string, normalizedBaseURL: string): boolean;

package/dist/utils/embedUrl.js

@@ -0,0 +1,23 @@
+export function buildEmbeddedUrl(normalizedBaseURL) {
+    return `${normalizedBaseURL}/embedded`;
+}
+export function isRealEmbeddedLoad(src, normalizedBaseURL) {
+    if (!src || src.startsWith('about:')) {
+        return false;
+    }
+    try {
+        const srcUrl = new URL(src, window.location.href);
+        const baseUrl = new URL(normalizedBaseURL);
+        // Require exact origin match
+        if (srcUrl.origin !== baseUrl.origin) {
+            return false;
+        }
+        // Accept /embedded with optional trailing slash; allow query/hash
+        const normalizedPath = srcUrl.pathname.replace(/\/+$/, '');
+        return normalizedPath === '/embedded';
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=embedUrl.js.map

package/dist/utils/embedUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedUrl.js","sourceRoot":"","sources":["../../src/utils/embedUrl.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,gBAAgB,CAAC,iBAAyB;IACxD,OAAO,GAAG,iBAAiB,WAAW,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,iBAAyB;IAEzB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC3C,6BAA6B;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,kEAAkE;QAClE,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO,cAAc,KAAK,WAAW,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["export function buildEmbeddedUrl(normalizedBaseURL: string): string {\n  return `${normalizedBaseURL}/embedded`;\n}\n\nexport function isRealEmbeddedLoad(\n  src: string,\n  normalizedBaseURL: string,\n): boolean {\n  if (!src || src.startsWith('about:')) {\n    return false;\n  }\n  try {\n    const srcUrl = new URL(src, window.location.href);\n    const baseUrl = new URL(normalizedBaseURL);\n    // Require exact origin match\n    if (srcUrl.origin !== baseUrl.origin) {\n      return false;\n    }\n    // Accept /embedded with optional trailing slash; allow query/hash\n    const normalizedPath = srcUrl.pathname.replace(/\\/+$/, '');\n    return normalizedPath === '/embedded';\n  } catch {\n    return false;\n  }\n}\n"]}

package/dist/utils/errorFormatter.d.ts

@@ -0,0 +1,10 @@
+interface FormattedError {
+    message: string;
+    code?: string;
+    details?: unknown;
+}
+/**
+ * Generic error formatter that handles various error formats
+ */
+export declare function formatError(error: unknown, fallbackMessage?: string): FormattedError;
+export {};

package/dist/utils/errorFormatter.js

@@ -0,0 +1,163 @@
+/**
+ * Attempts to parse a JSON string safely
+ */
+function tryParseJson(str) {
+    try {
+        return JSON.parse(str);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Extracts a 3-digit HTTP status code from an error message
+ */
+function extractStatusCode(message) {
+    // Match 3-digit numbers that look like HTTP status codes (100-599)
+    const statusCodeMatch = message.match(/\b([1-5]\d{2})\b/);
+    return statusCodeMatch ? statusCodeMatch[1] : undefined;
+}
+/**
+ * Checks if an object looks like a validation error
+ */
+function isValidationError(obj) {
+    return (typeof obj === 'object' &&
+        obj !== null &&
+        ('expected' in obj || 'code' in obj || 'path' in obj || 'message' in obj));
+}
+/**
+ * Formats a validation error into a human-readable message
+ */
+function formatValidationError(error) {
+    const { path, expected, message, code } = error;
+    // Use the provided message if available
+    if (message) {
+        return message;
+    }
+    // Build a descriptive message from the parts
+    const pathString = path && path.length > 0 ? path.join('.') : 'field';
+    if (expected) {
+        return `Invalid ${pathString}: expected ${expected}`;
+    }
+    if (code) {
+        return `Validation error in ${pathString} (${code})`;
+    }
+    return `Validation error in ${pathString}`;
+}
+/**
+ * Formats multiple validation errors into a single message
+ */
+function formatValidationErrors(errors) {
+    if (errors.length === 0) {
+        return 'Unknown validation error';
+    }
+    if (errors.length === 1) {
+        return formatValidationError(errors[0]);
+    }
+    const errorMessages = errors.map(formatValidationError);
+    return `Multiple validation errors: ${errorMessages.join('; ')}`;
+}
+/**
+ * Generic error formatter that handles various error formats
+ */
+export function formatError(error, fallbackMessage = 'An error occurred') {
+    // Handle null/undefined
+    if (!error) {
+        return {
+            message: fallbackMessage,
+            details: error,
+        };
+    }
+    // Handle Error objects
+    if (error instanceof Error) {
+        const extractedCode = extractStatusCode(error.message);
+        return {
+            message: error.message || fallbackMessage,
+            code: extractedCode,
+            details: error,
+        };
+    }
+    // Handle string errors (like "400 Bad Request")
+    if (typeof error === 'string') {
+        const extractedCode = extractStatusCode(error);
+        return {
+            message: error,
+            code: extractedCode,
+            details: error,
+        };
+    }
+    // Handle arrays (direct validation error arrays)
+    if (Array.isArray(error)) {
+        // Check if it's an array of validation errors
+        if (error.every(isValidationError)) {
+            const validationErrors = error;
+            return {
+                message: formatValidationErrors(validationErrors),
+                code: validationErrors[0]?.code, // Use the first error's code if available
+                details: error,
+            };
+        }
+        // Handle other arrays
+        return {
+            message: `Multiple errors: ${error.length} item(s)`,
+            details: error,
+        };
+    }
+    // Handle error objects
+    if (typeof error === 'object') {
+        const errorObj = error;
+        // Handle objects with message and details structure (your original case)
+        if (errorObj.message && typeof errorObj.message === 'string') {
+            let formattedMessage = errorObj.message;
+            let { code } = errorObj;
+            // If no code is provided, try to extract it from the message
+            if (!code) {
+                code = extractStatusCode(formattedMessage);
+            }
+            // Try to enhance the message with parsed details
+            if (errorObj.details?.message &&
+                typeof errorObj.details.message === 'string') {
+                const parsedDetails = tryParseJson(errorObj.details.message);
+                // Check if parsed details is an array of validation errors
+                if (Array.isArray(parsedDetails) &&
+                    parsedDetails.every(isValidationError)) {
+                    formattedMessage = formatValidationErrors(parsedDetails);
+                }
+            }
+            return {
+                message: formattedMessage,
+                code,
+                details: errorObj.details,
+            };
+        }
+        // Handle single validation error objects
+        if (isValidationError(errorObj)) {
+            return {
+                message: formatValidationError(errorObj),
+                code: errorObj.code,
+                details: error,
+            };
+        }
+        // Handle objects that might have useful error info
+        if (errorObj.error || errorObj.message || errorObj.detail) {
+            const message = errorObj.error || errorObj.message || errorObj.detail;
+            const messageStr = typeof message === 'string' ? message : fallbackMessage;
+            // Try to get code from various properties, or extract from message
+            let code = errorObj.code || errorObj.status;
+            if (!code && typeof message === 'string') {
+                code = extractStatusCode(message);
+            }
+            return {
+                message: messageStr,
+                code,
+                details: error,
+            };
+        }
+    }
+    // Fallback for any other case
+    return {
+        message: fallbackMessage,
+        details: error,
+    };
+}
+//# sourceMappingURL=errorFormatter.js.map

package/dist/utils/errorFormatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorFormatter.js","sourceRoot":"","sources":["../../src/utils/errorFormatter.ts"],"names":[],"mappings":"AAaA;;GAEG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,mEAAmE;IACnE,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC1D,OAAO,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,GAAY;IACrC,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,CAAC,UAAU,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,KAAsB;IACnD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAEhD,wCAAwC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,6CAA6C;IAC7C,MAAM,UAAU,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEtE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,WAAW,UAAU,cAAc,QAAQ,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,uBAAuB,UAAU,KAAK,IAAI,GAAG,CAAC;IACvD,CAAC;IAED,OAAO,uBAAuB,UAAU,EAAE,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,MAAyB;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,0BAA0B,CAAC;IACpC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACxD,OAAO,+BAA+B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,eAAe,GAAG,mBAAmB;IAErC,wBAAwB;IACxB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,eAAe;YACzC,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,8CAA8C;QAC9C,IAAI,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACnC,MAAM,gBAAgB,GAAG,KAA0B,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE,sBAAsB,CAAC,gBAAgB,CAAC;gBACjD,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,0CAA0C;gBAC3E,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,OAAO;YACL,OAAO,EAAE,oBAAoB,KAAK,CAAC,MAAM,UAAU;YACnD,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,KAAY,CAAC;QAE9B,yEAAyE;QACzE,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7D,IAAI,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC;YACxC,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;YAExB,6DAA6D;YAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;YAC7C,CAAC;YAED,iDAAiD;YACjD,IACE,QAAQ,CAAC,OAAO,EAAE,OAAO;gBACzB,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,EAC5C,CAAC;gBACD,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAE7D,2DAA2D;gBAC3D,IACE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;oBAC5B,aAAa,CAAC,KAAK,CAAC,iBAAiB,CAAC,EACtC,CAAC;oBACD,gBAAgB,GAAG,sBAAsB,CACvC,aAAkC,CACnC,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,gBAAgB;gBACzB,IAAI;gBACJ,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,qBAAqB,CAAC,QAAQ,CAAC;gBACxC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAED,mDAAmD;QACnD,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;YACtE,MAAM,UAAU,GACd,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAE1D,mEAAmE;YACnE,IAAI,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC;YAC5C,IAAI,CAAC,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzC,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,IAAI;gBACJ,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC","sourcesContent":["interface ValidationError {\n  expected?: string;\n  code?: string;\n  path?: string[];\n  message?: string;\n}\n\ninterface FormattedError {\n  message: string;\n  code?: string;\n  details?: unknown;\n}\n\n/**\n * Attempts to parse a JSON string safely\n */\nfunction tryParseJson(str: string): unknown {\n  try {\n    return JSON.parse(str);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Extracts a 3-digit HTTP status code from an error message\n */\nfunction extractStatusCode(message: string): string | undefined {\n  // Match 3-digit numbers that look like HTTP status codes (100-599)\n  const statusCodeMatch = message.match(/\\b([1-5]\\d{2})\\b/);\n  return statusCodeMatch ? statusCodeMatch[1] : undefined;\n}\n\n/**\n * Checks if an object looks like a validation error\n */\nfunction isValidationError(obj: unknown): obj is ValidationError {\n  return (\n    typeof obj === 'object' &&\n    obj !== null &&\n    ('expected' in obj || 'code' in obj || 'path' in obj || 'message' in obj)\n  );\n}\n\n/**\n * Formats a validation error into a human-readable message\n */\nfunction formatValidationError(error: ValidationError): string {\n  const { path, expected, message, code } = error;\n\n  // Use the provided message if available\n  if (message) {\n    return message;\n  }\n\n  // Build a descriptive message from the parts\n  const pathString = path && path.length > 0 ? path.join('.') : 'field';\n\n  if (expected) {\n    return `Invalid ${pathString}: expected ${expected}`;\n  }\n\n  if (code) {\n    return `Validation error in ${pathString} (${code})`;\n  }\n\n  return `Validation error in ${pathString}`;\n}\n\n/**\n * Formats multiple validation errors into a single message\n */\nfunction formatValidationErrors(errors: ValidationError[]): string {\n  if (errors.length === 0) {\n    return 'Unknown validation error';\n  }\n\n  if (errors.length === 1) {\n    return formatValidationError(errors[0]);\n  }\n\n  const errorMessages = errors.map(formatValidationError);\n  return `Multiple validation errors: ${errorMessages.join('; ')}`;\n}\n\n/**\n * Generic error formatter that handles various error formats\n */\nexport function formatError(\n  error: unknown,\n  fallbackMessage = 'An error occurred',\n): FormattedError {\n  // Handle null/undefined\n  if (!error) {\n    return {\n      message: fallbackMessage,\n      details: error,\n    };\n  }\n\n  // Handle Error objects\n  if (error instanceof Error) {\n    const extractedCode = extractStatusCode(error.message);\n    return {\n      message: error.message || fallbackMessage,\n      code: extractedCode,\n      details: error,\n    };\n  }\n\n  // Handle string errors (like \"400 Bad Request\")\n  if (typeof error === 'string') {\n    const extractedCode = extractStatusCode(error);\n    return {\n      message: error,\n      code: extractedCode,\n      details: error,\n    };\n  }\n\n  // Handle arrays (direct validation error arrays)\n  if (Array.isArray(error)) {\n    // Check if it's an array of validation errors\n    if (error.every(isValidationError)) {\n      const validationErrors = error as ValidationError[];\n      return {\n        message: formatValidationErrors(validationErrors),\n        code: validationErrors[0]?.code, // Use the first error's code if available\n        details: error,\n      };\n    }\n\n    // Handle other arrays\n    return {\n      message: `Multiple errors: ${error.length} item(s)`,\n      details: error,\n    };\n  }\n\n  // Handle error objects\n  if (typeof error === 'object') {\n    const errorObj = error as any;\n\n    // Handle objects with message and details structure (your original case)\n    if (errorObj.message && typeof errorObj.message === 'string') {\n      let formattedMessage = errorObj.message;\n      let { code } = errorObj;\n\n      // If no code is provided, try to extract it from the message\n      if (!code) {\n        code = extractStatusCode(formattedMessage);\n      }\n\n      // Try to enhance the message with parsed details\n      if (\n        errorObj.details?.message &&\n        typeof errorObj.details.message === 'string'\n      ) {\n        const parsedDetails = tryParseJson(errorObj.details.message);\n\n        // Check if parsed details is an array of validation errors\n        if (\n          Array.isArray(parsedDetails) &&\n          parsedDetails.every(isValidationError)\n        ) {\n          formattedMessage = formatValidationErrors(\n            parsedDetails as ValidationError[],\n          );\n        }\n      }\n\n      return {\n        message: formattedMessage,\n        code,\n        details: errorObj.details,\n      };\n    }\n\n    // Handle single validation error objects\n    if (isValidationError(errorObj)) {\n      return {\n        message: formatValidationError(errorObj),\n        code: errorObj.code,\n        details: error,\n      };\n    }\n\n    // Handle objects that might have useful error info\n    if (errorObj.error || errorObj.message || errorObj.detail) {\n      const message = errorObj.error || errorObj.message || errorObj.detail;\n      const messageStr =\n        typeof message === 'string' ? message : fallbackMessage;\n\n      // Try to get code from various properties, or extract from message\n      let code = errorObj.code || errorObj.status;\n      if (!code && typeof message === 'string') {\n        code = extractStatusCode(message);\n      }\n\n      return {\n        message: messageStr,\n        code,\n        details: error,\n      };\n    }\n  }\n\n  // Fallback for any other case\n  return {\n    message: fallbackMessage,\n    details: error,\n  };\n}\n"]}