@corti/embedded-web 0.1.1 → 0.3.1

package/dist/utils/PostMessageHandler.js

@@ -1,10 +1,27 @@
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function isEmbeddedEventMessage(value) {
+    return (isRecord(value) &&
+        value.type === "CORTI_EMBEDDED_EVENT" &&
+        typeof value.event === "string");
+}
+function isEmbeddedResponseMessage(value) {
+    return (isRecord(value) &&
+        value.type === "CORTI_EMBEDDED_RESPONSE" &&
+        typeof value.action === "string" &&
+        typeof value.requestId === "string" &&
+        typeof value.success === "boolean");
+}
 export class PostMessageHandler {
     constructor(iframe, callbacks = {}) {
         this.pendingRequests = new Map();
         this.messageListener = null;
         this.isReady = false;
+        this._protocolVersion = null;
         this.iframe = iframe;
         this.callbacks = callbacks;
+        this.requestTimeout = callbacks.requestTimeout ?? 10000;
         this.setupMessageListener();
     }
     setupMessageListener() {
@@ -20,25 +37,56 @@ export class PostMessageHandler {
             }
             const { data } = event;
             // Check for Corti embedded events
-            if (data?.type === 'CORTI_EMBEDDED_EVENT') {
+            if (isEmbeddedEventMessage(data)) {
                 this.handleEvent(data);
                 return;
             }
             // Check if this is a response to a pending request
-            if (data.requestId && this.pendingRequests.has(data.requestId)) {
+            if (isEmbeddedResponseMessage(data) &&
+                this.pendingRequests.has(data.requestId)) {
                 this.handleResponse(data);
             }
         };
-        window.addEventListener('message', this.messageListener);
+        window.addEventListener("message", this.messageListener);
     }
     handleEvent(eventData) {
         const eventType = eventData.event;
         const { payload } = eventData;
-        // Handle ready-like events
-        if (eventType === 'ready' ||
-            eventType === 'loaded' ||
-            eventType === 'embedded.ready') {
+        // Only 'embedded.ready' signals that the iframe is ready to receive messages
+        if (eventType === "embedded.ready") {
             this.isReady = true;
+            // Store and validate the protocol version from the ready payload
+            const version = isRecord(payload) && typeof payload.version === "string"
+                ? payload.version
+                : undefined;
+            if (typeof version === "string") {
+                this._protocolVersion = version;
+                if (version !== PostMessageHandler.SUPPORTED_PROTOCOL_VERSION) {
+                    this.callbacks.onError?.({
+                        message: `Protocol version mismatch: host supports '${PostMessageHandler.SUPPORTED_PROTOCOL_VERSION}', iframe reported '${version}'. Some features may not work correctly.`,
+                    });
+                }
+            }
+        }
+        if (eventType === "error.triggered") {
+            const errorPayload = payload && typeof payload === "object"
+                ? payload
+                : undefined;
+            const payloadMessage = errorPayload && typeof errorPayload.message === "string"
+                ? errorPayload.message
+                : undefined;
+            const payloadCode = errorPayload && typeof errorPayload.code === "string"
+                ? errorPayload.code
+                : undefined;
+            this.callbacks.onError?.({
+                message: payloadMessage ||
+                    (typeof payload === "string"
+                        ? payload
+                        : "Embedded event reported an error"),
+                code: payloadCode,
+                details: eventData,
+            });
+            return;
         }
         this.callbacks.onEvent?.({
             name: eventType,
@@ -52,7 +100,7 @@ export class PostMessageHandler {
             this.pendingRequests.delete(data.requestId);
             if (data.success === false || data.error) {
                 const error = {
-                    message: data.error || 'Request failed',
+                    message: data.error || "Request failed",
                     code: data.errorCode,
                     details: data.errorDetails,
                 };
@@ -66,7 +114,7 @@ export class PostMessageHandler {
     }
     destroy() {
         if (this.messageListener) {
-            window.removeEventListener('message', this.messageListener);
+            window.removeEventListener("message", this.messageListener);
             this.messageListener = null;
         }
         this.pendingRequests.clear();
@@ -78,73 +126,81 @@ export class PostMessageHandler {
         this.callbacks = { ...this.callbacks, ...callbacks };
     }
     /**
-     * Check if the iframe is ready to receive postMessages
+     * Whether the iframe has signaled it is ready to receive postMessages
      */
     get ready() {
         return this.isReady;
     }
     /**
-     * Wait for the iframe to be ready
+     * The protocol version reported by the iframe in its 'embedded.ready' event,
+     * or null if the version was not included in the ready payload.
+     */
+    get protocolVersion() {
+        return this._protocolVersion;
+    }
+    /**
+     * Wait for the iframe to signal readiness via the 'embedded.ready' event.
      * @param timeout - Optional timeout in milliseconds (default: 30000ms)
-     * @returns Promise that resolves when ready
      */
     async waitForReady(timeout = 30000) {
         if (this.isReady) {
             return Promise.resolve();
         }
         return new Promise((resolve, reject) => {
-            const timeoutId = setTimeout(() => {
-                reject(new Error('Timeout waiting for iframe to be ready'));
-            }, timeout);
+            let timeoutId = null;
+            let readyListener = () => { };
+            function cleanup() {
+                if (timeoutId !== null) {
+                    clearTimeout(timeoutId);
+                }
+                window.removeEventListener("message", readyListener);
+            }
             // Create a one-time listener for the ready event
-            const readyListener = (event) => {
+            readyListener = (event) => {
                 if (event.source === this.iframe.contentWindow &&
                     event.origin === this.getTrustedOrigin() &&
-                    event.data?.type === 'CORTI_EMBEDDED_EVENT' &&
-                    (event.data.event === 'ready' ||
-                        event.data.event === 'loaded' ||
-                        event.data.event === 'embedded.ready')) {
-                    clearTimeout(timeoutId);
-                    window.removeEventListener('message', readyListener);
+                    event.data?.type === "CORTI_EMBEDDED_EVENT" &&
+                    event.data.event === "embedded.ready") {
+                    cleanup();
                     resolve();
                 }
             };
-            window.addEventListener('message', readyListener);
+            timeoutId = setTimeout(() => {
+                cleanup();
+                reject(new Error("Timeout waiting for iframe to be ready"));
+            }, timeout);
+            window.addEventListener("message", readyListener);
         });
     }
     /**
-     * Sends a postMessage to the iframe and returns a Promise that resolves with the response
+     * Sends a postMessage to the iframe and returns a Promise that resolves with the response.
      * @param message - The message to send
-     * @param timeout - Optional timeout in milliseconds (default: 10000ms)
-     * @returns Promise that resolves with the response
+     * @param timeout - Optional timeout in milliseconds. Defaults to the requestTimeout set at construction.
      */
-    async postMessage(message, timeout = 10000) {
+    async postMessage(message, timeout) {
         if (!this.iframe.contentWindow) {
-            throw new Error('Iframe not ready');
+            throw new Error("Iframe not ready");
         }
         // Ensure the iframe has signaled readiness before sending
         await this.waitForReady();
         const { contentWindow } = this.iframe;
         const requestId = PostMessageHandler.generateRequestId();
+        const effectiveTimeout = timeout ?? this.requestTimeout;
         return new Promise((resolve, reject) => {
-            // Set up timeout
             const timeoutId = setTimeout(() => {
                 this.pendingRequests.delete(requestId);
-                reject(new Error('Request timeout'));
-            }, timeout);
-            // Store the promise handlers
-            const handlers = {
-                resolve: (value) => {
+                reject(new Error("Request timeout"));
+            }, effectiveTimeout);
+            this.pendingRequests.set(requestId, {
+                resolve: value => {
                     clearTimeout(timeoutId);
                     resolve(value);
                 },
-                reject: (reason) => {
+                reject: reason => {
                     clearTimeout(timeoutId);
                     reject(reason);
                 },
-            };
-            this.pendingRequests.set(requestId, handlers);
-            // Send the message
+            });
             const fullMessage = {
                 ...message,
                 requestId,
@@ -152,172 +208,14 @@ export class PostMessageHandler {
             const targetOrigin = this.getTrustedOrigin();
             if (!targetOrigin) {
                 this.pendingRequests.delete(requestId);
-                reject(new Error('Cannot determine trusted origin for postMessage'));
+                reject(new Error("Cannot determine trusted origin for postMessage"));
                 return;
             }
             contentWindow.postMessage(fullMessage, targetOrigin);
         });
     }
-    /**
-     * Helper method to send an auth message and return clean user data
-     * @param payload - Auth payload
-     * @returns Promise that resolves with user data
-     */
-    async auth(payload) {
-        const response = await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'auth',
-            payload,
-        });
-        if (response.payload && response.success) {
-            return response.payload.user;
-        }
-        throw new Error(response.error);
-    }
-    /**
-     * Helper method to configure a session
-     * @param payload - Session configuration payload
-     * @returns Promise that resolves when configuration is complete
-     */
-    async configureSession(payload) {
-        await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'configureSession',
-            payload,
-        });
-    }
-    /**
-     * Helper method to navigate to a specific path
-     * @param payload - Navigation payload
-     * @returns Promise that resolves when navigation is complete
-     */
-    async navigate(payload) {
-        await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'navigate',
-            payload,
-        });
-    }
-    /**
-     * Helper method to add facts to the session
-     * @param payload - Facts payload
-     * @returns Promise that resolves when facts are added
-     */
-    async addFacts(payload) {
-        await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'addFacts',
-            payload,
-        });
-    }
-    /**
-     * Helper method to create a new interaction and return clean interaction data
-     * @param payload - Interaction creation payload
-     * @returns Promise that resolves with interaction details
-     */
-    async createInteraction(payload) {
-        const response = await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'createInteraction',
-            payload,
-        });
-        if (response.payload && response.success) {
-            return response.payload;
-        }
-        throw new Error(response.error);
-    }
-    /**
-     * Helper method to start recording
-     * @returns Promise that resolves when recording starts
-     */
-    async startRecording() {
-        await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'startRecording',
-            payload: {},
-        });
-    }
-    /**
-     * Helper method to stop recording
-     * @returns Promise that resolves when recording stops
-     */
-    async stopRecording() {
-        await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'stopRecording',
-            payload: {},
-        });
-    }
-    /**
-     * Helper method to get current status
-     * @returns Promise that resolves with current status
-     */
-    async getStatus() {
-        const response = await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'getStatus',
-            payload: {},
-        });
-        if (response.payload && response.success) {
-            return response.payload;
-        }
-        throw new Error(response.error);
-    }
-    /**
-     * Helper method to configure the component
-     * @param payload - Component configuration payload
-     * @returns Promise that resolves when configuration is applied
-     */
-    async configure(payload) {
-        const response = await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'configure',
-            payload,
-        });
-        if (response.payload && response.success) {
-            return response.payload;
-        }
-        throw new Error(response.error);
-    }
-    /**
-     * Helper method to set credentials without triggering auth flow
-     * @param payload - Credentials payload
-     * @returns Promise that resolves when credentials are set
-     */
-    async setCredentials(payload) {
-        await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'setCredentials',
-            payload,
-        });
-    }
-    /**
-     * Helper method to get templates
-     * @returns Promise that resolves with a list of templates
-     */
-    async getTemplates() {
-        const response = await this.postMessage({
-            type: 'CORTI_EMBEDDED',
-            version: 'v1',
-            action: 'getTemplates',
-        });
-        if (response.payload && response.success) {
-            return response.payload;
-        }
-        throw new Error(response.error);
-    }
     static generateRequestId() {
-        return `req_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
+        return `req_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;
     }
     /**
      * Derive the trusted origin from the iframe src (constructed from baseURL).
@@ -325,9 +223,7 @@ export class PostMessageHandler {
      */
     getTrustedOrigin() {
         try {
-            // If iframe.src is relative, URL() will resolve against the current location.
-            // Embeds should provide an absolute baseURL; enforcing strict origin here.
-            const src = this.iframe.getAttribute('src') || this.iframe.src;
+            const src = this.iframe.getAttribute("src") || this.iframe.src;
             if (!src)
                 return null;
             const url = new URL(src, window.location.href);
@@ -338,4 +234,5 @@ export class PostMessageHandler {
         }
     }
 }
+PostMessageHandler.SUPPORTED_PROTOCOL_VERSION = "v1";
 //# sourceMappingURL=PostMessageHandler.js.map

package/dist/utils/PostMessageHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"PostMessageHandler.js","sourceRoot":"","sources":["../../src/utils/PostMessageHandler.ts"],"names":[],"mappings":"AA2BA,MAAM,OAAO,kBAAkB;IAc7B,YACE,MAAyB,EACzB,YAAyC,EAAE;QAfrC,oBAAe,GAAG,IAAI,GAAG,EAG9B,CAAC;QAEI,oBAAe,GAA2C,IAAI,CAAC;QAI/D,YAAO,GAAG,KAAK,CAAC;QAQtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,eAAe,GAAG,CAAC,KAAmB,EAAE,EAAE;YAC7C,uCAAuC;YACvC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC/C,OAAO;YACT,CAAC;YAED,oDAAoD;YACpD,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9C,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;YAEvB,kCAAkC;YAClC,IAAI,IAAI,EAAE,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC1C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,mDAAmD;YACnD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3D,CAAC;IAEO,WAAW,CAAC,SAAmB;QACrC,MAAM,SAAS,GAAI,SAAiB,CAAC,KAAK,CAAC;QAC3C,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;QAE9B,2BAA2B;QAC3B,IACE,SAAS,KAAK,OAAO;YACrB,SAAS,KAAK,QAAQ;YACtB,SAAS,KAAK,gBAAgB,EAC9B,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,EAAE,SAAS;YACf,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,IAAS;QAC9B,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;YAC3C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE5C,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG;oBACZ,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,gBAAgB;oBACvC,IAAI,EAAE,IAAI,CAAC,SAAS;oBACpB,OAAO,EAAE,IAAI,CAAC,YAAY;iBAC3B,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAsC;QACpD,IAAI,CAAC,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,EAAE,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,OAAO,GAAG,KAAK;QAChC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;YAC9D,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,iDAAiD;YACjD,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,EAAE;gBAC5C,IACE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa;oBAC1C,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB,EAAE;oBACxC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,sBAAsB;oBAC3C,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO;wBAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;wBAC7B,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,gBAAgB,CAAC,EACxC,CAAC;oBACD,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;oBACrD,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,OAA2C,EAC3C,OAAO,GAAG,KAAK;QAEf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QAED,0DAA0D;QAC1D,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACtC,MAAM,SAAS,GAAG,kBAAkB,CAAC,iBAAiB,EAAE,CAAC;QAEzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,iBAAiB;YACjB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACvC,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,6BAA6B;YAC7B,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,CAAC,KAAU,EAAE,EAAE;oBACtB,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;gBACD,MAAM,EAAE,CAAC,MAAW,EAAE,EAAE;oBACtB,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjB,CAAC;aACF,CAAC;YAEF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAE9C,mBAAmB;YACnB,MAAM,WAAW,GAAoB;gBACnC,GAAG,OAAO;gBACV,SAAS;aACV,CAAC;YAEF,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YACD,aAAa,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,OAAoB;QAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM;YACd,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzC,OAAQ,QAAQ,CAAC,OAAwB,CAAC,IAAI,CAAC;QACjD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAAgC;QACrD,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,kBAAkB;YAC1B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,UAAU;YAClB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,UAAU;YAClB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAiC;QAEjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,mBAAmB;YAC3B,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzC,OAAO,QAAQ,CAAC,OAAoC,CAAC;QACvD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,gBAAgB;YACxB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzC,OAAO,QAAQ,CAAC,OAA4B,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,OAA4B;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,WAAW;YACnB,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzC,OAAO,QAAQ,CAAC,OAA+B,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAA8B;QACjD,MAAM,IAAI,CAAC,WAAW,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,gBAAgB;YACxB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzC,OAAO,QAAQ,CAAC,OAA+B,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,MAAM,CAAC,iBAAiB;QAC9B,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC;IAED;;;OAGG;IACK,gBAAgB;QACtB,IAAI,CAAC;YACH,8EAA8E;YAC9E,2EAA2E;YAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC/D,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF","sourcesContent":["import type {\n  AddFactsPayload,\n  AnyEvent,\n  AuthPayload,\n  AuthResponse,\n  ConfigureAppPayload,\n  ConfigureAppResponse,\n  ConfigureSessionPayload,\n  CreateInteractionPayload,\n  CreateInteractionResponse,\n  EmbeddedRequest,\n  EmbeddedResponse,\n  GetStatusResponse,\n  NavigatePayload,\n  SetCredentialsPayload,\n  GetTemplatesResponse,\n} from '../types';\n\nexport interface PostMessageHandlerCallbacks {\n  onEvent?: (event: { name: string; payload: unknown }) => void;\n  onError?: (error: {\n    message: string;\n    code?: string;\n    details?: unknown;\n  }) => void;\n}\n\nexport class PostMessageHandler {\n  private pendingRequests = new Map<\n    string,\n    { resolve: (value: any) => void; reject: (reason: any) => void }\n  >();\n\n  private messageListener: ((event: MessageEvent) => void) | null = null;\n\n  private iframe: HTMLIFrameElement;\n\n  private isReady = false;\n\n  private callbacks: PostMessageHandlerCallbacks;\n\n  constructor(\n    iframe: HTMLIFrameElement,\n    callbacks: PostMessageHandlerCallbacks = {},\n  ) {\n    this.iframe = iframe;\n    this.callbacks = callbacks;\n    this.setupMessageListener();\n  }\n\n  private setupMessageListener() {\n    this.messageListener = (event: MessageEvent) => {\n      // Only handle messages from our iframe\n      if (event.source !== this.iframe.contentWindow) {\n        return;\n      }\n\n      // Enforce origin to match the trusted iframe origin\n      const trustedOrigin = this.getTrustedOrigin();\n      if (!trustedOrigin || event.origin !== trustedOrigin) {\n        return;\n      }\n\n      const { data } = event;\n\n      // Check for Corti embedded events\n      if (data?.type === 'CORTI_EMBEDDED_EVENT') {\n        this.handleEvent(data);\n        return;\n      }\n\n      // Check if this is a response to a pending request\n      if (data.requestId && this.pendingRequests.has(data.requestId)) {\n        this.handleResponse(data);\n      }\n    };\n\n    window.addEventListener('message', this.messageListener);\n  }\n\n  private handleEvent(eventData: AnyEvent): void {\n    const eventType = (eventData as any).event;\n    const { payload } = eventData;\n\n    // Handle ready-like events\n    if (\n      eventType === 'ready' ||\n      eventType === 'loaded' ||\n      eventType === 'embedded.ready'\n    ) {\n      this.isReady = true;\n    }\n\n    this.callbacks.onEvent?.({\n      name: eventType,\n      payload,\n    });\n  }\n\n  private handleResponse(data: any): void {\n    const pendingRequest = this.pendingRequests.get(data.requestId);\n    if (pendingRequest) {\n      const { resolve, reject } = pendingRequest;\n      this.pendingRequests.delete(data.requestId);\n\n      if (data.success === false || data.error) {\n        const error = {\n          message: data.error || 'Request failed',\n          code: data.errorCode,\n          details: data.errorDetails,\n        };\n        this.callbacks.onError?.(error);\n        reject(error);\n      } else {\n        resolve(data);\n      }\n    }\n  }\n\n  destroy() {\n    if (this.messageListener) {\n      window.removeEventListener('message', this.messageListener);\n      this.messageListener = null;\n    }\n    this.pendingRequests.clear();\n  }\n\n  /**\n   * Update callbacks after construction\n   */\n  updateCallbacks(callbacks: PostMessageHandlerCallbacks) {\n    this.callbacks = { ...this.callbacks, ...callbacks };\n  }\n\n  /**\n   * Check if the iframe is ready to receive postMessages\n   */\n  get ready(): boolean {\n    return this.isReady;\n  }\n\n  /**\n   * Wait for the iframe to be ready\n   * @param timeout - Optional timeout in milliseconds (default: 30000ms)\n   * @returns Promise that resolves when ready\n   */\n  async waitForReady(timeout = 30000): Promise<void> {\n    if (this.isReady) {\n      return Promise.resolve();\n    }\n\n    return new Promise((resolve, reject) => {\n      const timeoutId = setTimeout(() => {\n        reject(new Error('Timeout waiting for iframe to be ready'));\n      }, timeout);\n\n      // Create a one-time listener for the ready event\n      const readyListener = (event: MessageEvent) => {\n        if (\n          event.source === this.iframe.contentWindow &&\n          event.origin === this.getTrustedOrigin() &&\n          event.data?.type === 'CORTI_EMBEDDED_EVENT' &&\n          (event.data.event === 'ready' ||\n            event.data.event === 'loaded' ||\n            event.data.event === 'embedded.ready')\n        ) {\n          clearTimeout(timeoutId);\n          window.removeEventListener('message', readyListener);\n          resolve();\n        }\n      };\n\n      window.addEventListener('message', readyListener);\n    });\n  }\n\n  /**\n   * Sends a postMessage to the iframe and returns a Promise that resolves with the response\n   * @param message - The message to send\n   * @param timeout - Optional timeout in milliseconds (default: 10000ms)\n   * @returns Promise that resolves with the response\n   */\n  async postMessage(\n    message: Omit<EmbeddedRequest, 'requestId'>,\n    timeout = 10000,\n  ): Promise<EmbeddedResponse> {\n    if (!this.iframe.contentWindow) {\n      throw new Error('Iframe not ready');\n    }\n\n    // Ensure the iframe has signaled readiness before sending\n    await this.waitForReady();\n\n    const { contentWindow } = this.iframe;\n    const requestId = PostMessageHandler.generateRequestId();\n\n    return new Promise((resolve, reject) => {\n      // Set up timeout\n      const timeoutId = setTimeout(() => {\n        this.pendingRequests.delete(requestId);\n        reject(new Error('Request timeout'));\n      }, timeout);\n\n      // Store the promise handlers\n      const handlers = {\n        resolve: (value: any) => {\n          clearTimeout(timeoutId);\n          resolve(value);\n        },\n        reject: (reason: any) => {\n          clearTimeout(timeoutId);\n          reject(reason);\n        },\n      };\n\n      this.pendingRequests.set(requestId, handlers);\n\n      // Send the message\n      const fullMessage: EmbeddedRequest = {\n        ...message,\n        requestId,\n      };\n\n      const targetOrigin = this.getTrustedOrigin();\n      if (!targetOrigin) {\n        this.pendingRequests.delete(requestId);\n        reject(new Error('Cannot determine trusted origin for postMessage'));\n        return;\n      }\n      contentWindow.postMessage(fullMessage, targetOrigin);\n    });\n  }\n\n  /**\n   * Helper method to send an auth message and return clean user data\n   * @param payload - Auth payload\n   * @returns Promise that resolves with user data\n   */\n  async auth(payload: AuthPayload): Promise<AuthResponse['user']> {\n    const response = await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'auth',\n      payload,\n    });\n\n    if (response.payload && response.success) {\n      return (response.payload as AuthResponse).user;\n    }\n    throw new Error(response.error);\n  }\n\n  /**\n   * Helper method to configure a session\n   * @param payload - Session configuration payload\n   * @returns Promise that resolves when configuration is complete\n   */\n  async configureSession(payload: ConfigureSessionPayload): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'configureSession',\n      payload,\n    });\n  }\n\n  /**\n   * Helper method to navigate to a specific path\n   * @param payload - Navigation payload\n   * @returns Promise that resolves when navigation is complete\n   */\n  async navigate(payload: NavigatePayload): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'navigate',\n      payload,\n    });\n  }\n\n  /**\n   * Helper method to add facts to the session\n   * @param payload - Facts payload\n   * @returns Promise that resolves when facts are added\n   */\n  async addFacts(payload: AddFactsPayload): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'addFacts',\n      payload,\n    });\n  }\n\n  /**\n   * Helper method to create a new interaction and return clean interaction data\n   * @param payload - Interaction creation payload\n   * @returns Promise that resolves with interaction details\n   */\n  async createInteraction(\n    payload: CreateInteractionPayload,\n  ): Promise<CreateInteractionResponse> {\n    const response = await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'createInteraction',\n      payload,\n    });\n\n    if (response.payload && response.success) {\n      return response.payload as CreateInteractionResponse;\n    }\n    throw new Error(response.error);\n  }\n\n  /**\n   * Helper method to start recording\n   * @returns Promise that resolves when recording starts\n   */\n  async startRecording(): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'startRecording',\n      payload: {},\n    });\n  }\n\n  /**\n   * Helper method to stop recording\n   * @returns Promise that resolves when recording stops\n   */\n  async stopRecording(): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'stopRecording',\n      payload: {},\n    });\n  }\n\n  /**\n   * Helper method to get current status\n   * @returns Promise that resolves with current status\n   */\n  async getStatus(): Promise<GetStatusResponse> {\n    const response = await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'getStatus',\n      payload: {},\n    });\n\n    if (response.payload && response.success) {\n      return response.payload as GetStatusResponse;\n    }\n    throw new Error(response.error);\n  }\n\n  /**\n   * Helper method to configure the component\n   * @param payload - Component configuration payload\n   * @returns Promise that resolves when configuration is applied\n   */\n  async configure(payload: ConfigureAppPayload): Promise<ConfigureAppResponse> {\n    const response = await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'configure',\n      payload,\n    });\n\n    if (response.payload && response.success) {\n      return response.payload as ConfigureAppResponse;\n    }\n    throw new Error(response.error);\n  }\n\n  /**\n   * Helper method to set credentials without triggering auth flow\n   * @param payload - Credentials payload\n   * @returns Promise that resolves when credentials are set\n   */\n  async setCredentials(payload: SetCredentialsPayload): Promise<void> {\n    await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'setCredentials',\n      payload,\n    });\n  }\n\n  /**\n   * Helper method to get templates\n   * @returns Promise that resolves with a list of templates\n   */\n  async getTemplates(): Promise<GetTemplatesResponse> {\n    const response = await this.postMessage({\n      type: 'CORTI_EMBEDDED',\n      version: 'v1',\n      action: 'getTemplates',\n    });\n\n    if (response.payload && response.success) {\n      return response.payload as GetTemplatesResponse;\n    }\n    throw new Error(response.error);\n  }\n\n  private static generateRequestId(): string {\n    return `req_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;\n  }\n\n  /**\n   * Derive the trusted origin from the iframe src (constructed from baseURL).\n   * Returns null if it cannot be determined.\n   */\n  private getTrustedOrigin(): string | null {\n    try {\n      // If iframe.src is relative, URL() will resolve against the current location.\n      // Embeds should provide an absolute baseURL; enforcing strict origin here.\n      const src = this.iframe.getAttribute('src') || this.iframe.src;\n      if (!src) return null;\n      const url = new URL(src, window.location.href);\n      return url.origin;\n    } catch {\n      return null;\n    }\n  }\n}\n"]}
+{"version":3,"file":"PostMessageHandler.js","sourceRoot":"","sources":["../../src/utils/PostMessageHandler.ts"],"names":[],"mappings":"AA2BA,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,IAAI,KAAK,sBAAsB;QACrC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,IAAI,KAAK,yBAAyB;QACxC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,CACnC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,kBAAkB;IAiB7B,YACE,MAAyB,EACzB,YAAyC,EAAE;QAlBrC,oBAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;QAEpD,oBAAe,GAA2C,IAAI,CAAC;QAI/D,YAAO,GAAG,KAAK,CAAC;QAEhB,qBAAgB,GAAkB,IAAI,CAAC;QAY7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC,cAAc,IAAI,KAAK,CAAC;QACxD,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,eAAe,GAAG,CAAC,KAAmB,EAAE,EAAE;YAC7C,uCAAuC;YACvC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC/C,OAAO;YACT,CAAC;YAED,oDAAoD;YACpD,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9C,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;YAEvB,kCAAkC;YAClC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,mDAAmD;YACnD,IACE,yBAAyB,CAAC,IAAI,CAAC;gBAC/B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EACxC,CAAC;gBACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3D,CAAC;IAEO,WAAW,CAAC,SAAmB;QACrC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;QAE9B,6EAA6E;QAC7E,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YAEpB,iEAAiE;YACjE,MAAM,OAAO,GACX,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;gBACtD,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;gBAChC,IAAI,OAAO,KAAK,kBAAkB,CAAC,0BAA0B,EAAE,CAAC;oBAC9D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;wBACvB,OAAO,EAAE,6CAA6C,kBAAkB,CAAC,0BAA0B,uBAAuB,OAAO,0CAA0C;qBAC5K,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;YACpC,MAAM,YAAY,GAChB,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBACpC,CAAC,CAAE,OAAmC;gBACtC,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,cAAc,GAClB,YAAY,IAAI,OAAO,YAAY,CAAC,OAAO,KAAK,QAAQ;gBACtD,CAAC,CAAC,YAAY,CAAC,OAAO;gBACtB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,WAAW,GACf,YAAY,IAAI,OAAO,YAAY,CAAC,IAAI,KAAK,QAAQ;gBACnD,CAAC,CAAC,YAAY,CAAC,IAAI;gBACnB,CAAC,CAAC,SAAS,CAAC;YAEhB,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACvB,OAAO,EACL,cAAc;oBACd,CAAC,OAAO,OAAO,KAAK,QAAQ;wBAC1B,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,kCAAkC,CAAC;gBACzC,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,EAAE,SAAS;YACf,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,IAAsB;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;YAC3C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE5C,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG;oBACZ,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,gBAAgB;oBACvC,IAAI,EAAE,IAAI,CAAC,SAAS;oBACpB,OAAO,EAAE,IAAI,CAAC,YAAY;iBAC3B,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAsC;QACpD,IAAI,CAAC,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,EAAE,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,OAAO,GAAG,KAAK;QAChC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,SAAS,GAAyC,IAAI,CAAC;YAC3D,IAAI,aAAa,GAAkC,GAAG,EAAE,GAAE,CAAC,CAAC;YAE5D,SAAS,OAAO;gBACd,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;gBACD,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACvD,CAAC;YAED,iDAAiD;YACjD,aAAa,GAAG,CAAC,KAAmB,EAAE,EAAE;gBACtC,IACE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa;oBAC1C,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB,EAAE;oBACxC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,sBAAsB;oBAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,gBAAgB,EACrC,CAAC;oBACD,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YAEF,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;YAC9D,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CACf,OAA2C,EAC3C,OAAgB;QAEhB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QAED,0DAA0D;QAC1D,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACtC,MAAM,SAAS,GAAG,kBAAkB,CAAC,iBAAiB,EAAE,CAAC;QACzD,MAAM,gBAAgB,GAAG,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC;QAExD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACvC,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAErB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE;gBAClC,OAAO,EAAE,KAAK,CAAC,EAAE;oBACf,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;gBACD,MAAM,EAAE,MAAM,CAAC,EAAE;oBACf,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjB,CAAC;aACF,CAAC,CAAC;YAEH,MAAM,WAAW,GAAoB;gBACnC,GAAG,OAAO;gBACV,SAAS;aACV,CAAC;YAEF,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YACD,aAAa,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,iBAAiB;QAC9B,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED;;;OAGG;IACK,gBAAgB;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC/D,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;;AAzQuB,6CAA0B,GAAG,IAAI,AAAP,CAAQ","sourcesContent":["import type { AnyEvent, EmbeddedRequest, EmbeddedResponse } from \"../types\";\n\nexport interface PostMessageHandlerCallbacks {\n  onEvent?: (event: { name: string; payload: unknown }) => void;\n  onError?: (error: {\n    message: string;\n    code?: string;\n    details?: unknown;\n  }) => void;\n  /**\n   * Default timeout in milliseconds for postMessage requests.\n   * @default 10000\n   */\n  requestTimeout?: number;\n}\n\ninterface PostMessageHandlerError {\n  message: string;\n  code?: string;\n  details?: unknown;\n}\n\ninterface PendingRequest {\n  resolve: (value: EmbeddedResponse) => void;\n  reject: (reason: PostMessageHandlerError) => void;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction isEmbeddedEventMessage(value: unknown): value is AnyEvent {\n  return (\n    isRecord(value) &&\n    value.type === \"CORTI_EMBEDDED_EVENT\" &&\n    typeof value.event === \"string\"\n  );\n}\n\nfunction isEmbeddedResponseMessage(value: unknown): value is EmbeddedResponse {\n  return (\n    isRecord(value) &&\n    value.type === \"CORTI_EMBEDDED_RESPONSE\" &&\n    typeof value.action === \"string\" &&\n    typeof value.requestId === \"string\" &&\n    typeof value.success === \"boolean\"\n  );\n}\n\nexport class PostMessageHandler {\n  private pendingRequests = new Map<string, PendingRequest>();\n\n  private messageListener: ((event: MessageEvent) => void) | null = null;\n\n  private iframe: HTMLIFrameElement;\n\n  private isReady = false;\n\n  private _protocolVersion: string | null = null;\n\n  private static readonly SUPPORTED_PROTOCOL_VERSION = \"v1\";\n\n  private readonly requestTimeout: number;\n\n  private callbacks: PostMessageHandlerCallbacks;\n\n  constructor(\n    iframe: HTMLIFrameElement,\n    callbacks: PostMessageHandlerCallbacks = {},\n  ) {\n    this.iframe = iframe;\n    this.callbacks = callbacks;\n    this.requestTimeout = callbacks.requestTimeout ?? 10000;\n    this.setupMessageListener();\n  }\n\n  private setupMessageListener() {\n    this.messageListener = (event: MessageEvent) => {\n      // Only handle messages from our iframe\n      if (event.source !== this.iframe.contentWindow) {\n        return;\n      }\n\n      // Enforce origin to match the trusted iframe origin\n      const trustedOrigin = this.getTrustedOrigin();\n      if (!trustedOrigin || event.origin !== trustedOrigin) {\n        return;\n      }\n\n      const { data } = event;\n\n      // Check for Corti embedded events\n      if (isEmbeddedEventMessage(data)) {\n        this.handleEvent(data);\n        return;\n      }\n\n      // Check if this is a response to a pending request\n      if (\n        isEmbeddedResponseMessage(data) &&\n        this.pendingRequests.has(data.requestId)\n      ) {\n        this.handleResponse(data);\n      }\n    };\n\n    window.addEventListener(\"message\", this.messageListener);\n  }\n\n  private handleEvent(eventData: AnyEvent): void {\n    const eventType = eventData.event;\n    const { payload } = eventData;\n\n    // Only 'embedded.ready' signals that the iframe is ready to receive messages\n    if (eventType === \"embedded.ready\") {\n      this.isReady = true;\n\n      // Store and validate the protocol version from the ready payload\n      const version =\n        isRecord(payload) && typeof payload.version === \"string\"\n          ? payload.version\n          : undefined;\n      if (typeof version === \"string\") {\n        this._protocolVersion = version;\n        if (version !== PostMessageHandler.SUPPORTED_PROTOCOL_VERSION) {\n          this.callbacks.onError?.({\n            message: `Protocol version mismatch: host supports '${PostMessageHandler.SUPPORTED_PROTOCOL_VERSION}', iframe reported '${version}'. Some features may not work correctly.`,\n          });\n        }\n      }\n    }\n\n    if (eventType === \"error.triggered\") {\n      const errorPayload =\n        payload && typeof payload === \"object\"\n          ? (payload as Record<string, unknown>)\n          : undefined;\n      const payloadMessage =\n        errorPayload && typeof errorPayload.message === \"string\"\n          ? errorPayload.message\n          : undefined;\n      const payloadCode =\n        errorPayload && typeof errorPayload.code === \"string\"\n          ? errorPayload.code\n          : undefined;\n\n      this.callbacks.onError?.({\n        message:\n          payloadMessage ||\n          (typeof payload === \"string\"\n            ? payload\n            : \"Embedded event reported an error\"),\n        code: payloadCode,\n        details: eventData,\n      });\n      return;\n    }\n\n    this.callbacks.onEvent?.({\n      name: eventType,\n      payload,\n    });\n  }\n\n  private handleResponse(data: EmbeddedResponse): void {\n    const pendingRequest = this.pendingRequests.get(data.requestId);\n    if (pendingRequest) {\n      const { resolve, reject } = pendingRequest;\n      this.pendingRequests.delete(data.requestId);\n\n      if (data.success === false || data.error) {\n        const error = {\n          message: data.error || \"Request failed\",\n          code: data.errorCode,\n          details: data.errorDetails,\n        };\n        this.callbacks.onError?.(error);\n        reject(error);\n      } else {\n        resolve(data);\n      }\n    }\n  }\n\n  destroy() {\n    if (this.messageListener) {\n      window.removeEventListener(\"message\", this.messageListener);\n      this.messageListener = null;\n    }\n    this.pendingRequests.clear();\n  }\n\n  /**\n   * Update callbacks after construction\n   */\n  updateCallbacks(callbacks: PostMessageHandlerCallbacks) {\n    this.callbacks = { ...this.callbacks, ...callbacks };\n  }\n\n  /**\n   * Whether the iframe has signaled it is ready to receive postMessages\n   */\n  get ready(): boolean {\n    return this.isReady;\n  }\n\n  /**\n   * The protocol version reported by the iframe in its 'embedded.ready' event,\n   * or null if the version was not included in the ready payload.\n   */\n  get protocolVersion(): string | null {\n    return this._protocolVersion;\n  }\n\n  /**\n   * Wait for the iframe to signal readiness via the 'embedded.ready' event.\n   * @param timeout - Optional timeout in milliseconds (default: 30000ms)\n   */\n  async waitForReady(timeout = 30000): Promise<void> {\n    if (this.isReady) {\n      return Promise.resolve();\n    }\n\n    return new Promise((resolve, reject) => {\n      let timeoutId: ReturnType<typeof setTimeout> | null = null;\n      let readyListener: (event: MessageEvent) => void = () => {};\n\n      function cleanup() {\n        if (timeoutId !== null) {\n          clearTimeout(timeoutId);\n        }\n        window.removeEventListener(\"message\", readyListener);\n      }\n\n      // Create a one-time listener for the ready event\n      readyListener = (event: MessageEvent) => {\n        if (\n          event.source === this.iframe.contentWindow &&\n          event.origin === this.getTrustedOrigin() &&\n          event.data?.type === \"CORTI_EMBEDDED_EVENT\" &&\n          event.data.event === \"embedded.ready\"\n        ) {\n          cleanup();\n          resolve();\n        }\n      };\n\n      timeoutId = setTimeout(() => {\n        cleanup();\n        reject(new Error(\"Timeout waiting for iframe to be ready\"));\n      }, timeout);\n\n      window.addEventListener(\"message\", readyListener);\n    });\n  }\n\n  /**\n   * Sends a postMessage to the iframe and returns a Promise that resolves with the response.\n   * @param message - The message to send\n   * @param timeout - Optional timeout in milliseconds. Defaults to the requestTimeout set at construction.\n   */\n  async postMessage(\n    message: Omit<EmbeddedRequest, \"requestId\">,\n    timeout?: number,\n  ): Promise<EmbeddedResponse> {\n    if (!this.iframe.contentWindow) {\n      throw new Error(\"Iframe not ready\");\n    }\n\n    // Ensure the iframe has signaled readiness before sending\n    await this.waitForReady();\n\n    const { contentWindow } = this.iframe;\n    const requestId = PostMessageHandler.generateRequestId();\n    const effectiveTimeout = timeout ?? this.requestTimeout;\n\n    return new Promise((resolve, reject) => {\n      const timeoutId = setTimeout(() => {\n        this.pendingRequests.delete(requestId);\n        reject(new Error(\"Request timeout\"));\n      }, effectiveTimeout);\n\n      this.pendingRequests.set(requestId, {\n        resolve: value => {\n          clearTimeout(timeoutId);\n          resolve(value);\n        },\n        reject: reason => {\n          clearTimeout(timeoutId);\n          reject(reason);\n        },\n      });\n\n      const fullMessage: EmbeddedRequest = {\n        ...message,\n        requestId,\n      };\n\n      const targetOrigin = this.getTrustedOrigin();\n      if (!targetOrigin) {\n        this.pendingRequests.delete(requestId);\n        reject(new Error(\"Cannot determine trusted origin for postMessage\"));\n        return;\n      }\n      contentWindow.postMessage(fullMessage, targetOrigin);\n    });\n  }\n\n  private static generateRequestId(): string {\n    return `req_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;\n  }\n\n  /**\n   * Derive the trusted origin from the iframe src (constructed from baseURL).\n   * Returns null if it cannot be determined.\n   */\n  private getTrustedOrigin(): string | null {\n    try {\n      const src = this.iframe.getAttribute(\"src\") || this.iframe.src;\n      if (!src) return null;\n      const url = new URL(src, window.location.href);\n      return url.origin;\n    } catch {\n      return null;\n    }\n  }\n}\n"]}

package/dist/utils/baseUrl.js

@@ -4,22 +4,22 @@ export function validateAndNormalizeBaseURL(url) {
         parsed = new URL(url);
     }
     catch {
-        throw new Error('Invalid baseURL: not a parseable URL');
+        throw new Error("Invalid baseURL: not a parseable URL");
     }
-    if (parsed.protocol !== 'https:') {
-        throw new Error('Invalid baseURL: must use https');
+    if (parsed.protocol !== "https:") {
+        throw new Error("Invalid baseURL: must use https");
     }
     const host = parsed.host.toLowerCase();
     const pattern = /^assistant\.[a-z0-9-]+\.corti\.app$/i;
     if (!pattern.test(host)) {
-        throw new Error('Invalid baseURL: host must match assistant.xxx.corti.app');
+        throw new Error("Invalid baseURL: host must match assistant.xxx.corti.app");
     }
-    if (parsed.pathname && parsed.pathname !== '/' && parsed.pathname !== '') {
-        throw new Error('Invalid baseURL: must not include a path');
+    if (parsed.pathname && parsed.pathname !== "/" && parsed.pathname !== "") {
+        throw new Error("Invalid baseURL: must not include a path");
     }
     if (parsed.username || parsed.password) {
-        throw new Error('Invalid baseURL: must not include credentials');
+        throw new Error("Invalid baseURL: must not include credentials");
     }
-    return parsed.origin.replace(/\/+$/, '');
+    return parsed.origin.replace(/\/+$/, "");
 }
 //# sourceMappingURL=baseUrl.js.map

package/dist/utils/baseUrl.js.map

@@ -1 +1 @@
-{"version":3,"file":"baseUrl.js","sourceRoot":"","sources":["../../src/utils/baseUrl.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,sCAAsC,CAAC;IACvD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC","sourcesContent":["export function validateAndNormalizeBaseURL(url: string): string {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    throw new Error('Invalid baseURL: not a parseable URL');\n  }\n  if (parsed.protocol !== 'https:') {\n    throw new Error('Invalid baseURL: must use https');\n  }\n  const host = parsed.host.toLowerCase();\n  const pattern = /^assistant\\.[a-z0-9-]+\\.corti\\.app$/i;\n  if (!pattern.test(host)) {\n    throw new Error('Invalid baseURL: host must match assistant.xxx.corti.app');\n  }\n  if (parsed.pathname && parsed.pathname !== '/' && parsed.pathname !== '') {\n    throw new Error('Invalid baseURL: must not include a path');\n  }\n  if (parsed.username || parsed.password) {\n    throw new Error('Invalid baseURL: must not include credentials');\n  }\n  return parsed.origin.replace(/\\/+$/, '');\n}\n"]}
+{"version":3,"file":"baseUrl.js","sourceRoot":"","sources":["../../src/utils/baseUrl.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,sCAAsC,CAAC;IACvD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC","sourcesContent":["export function validateAndNormalizeBaseURL(url: string): string {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    throw new Error(\"Invalid baseURL: not a parseable URL\");\n  }\n  if (parsed.protocol !== \"https:\") {\n    throw new Error(\"Invalid baseURL: must use https\");\n  }\n  const host = parsed.host.toLowerCase();\n  const pattern = /^assistant\\.[a-z0-9-]+\\.corti\\.app$/i;\n  if (!pattern.test(host)) {\n    throw new Error(\"Invalid baseURL: host must match assistant.xxx.corti.app\");\n  }\n  if (parsed.pathname && parsed.pathname !== \"/\" && parsed.pathname !== \"\") {\n    throw new Error(\"Invalid baseURL: must not include a path\");\n  }\n  if (parsed.username || parsed.password) {\n    throw new Error(\"Invalid baseURL: must not include credentials\");\n  }\n  return parsed.origin.replace(/\\/+$/, \"\");\n}\n"]}

package/dist/utils/embedUrl.js

@@ -2,7 +2,7 @@ export function buildEmbeddedUrl(normalizedBaseURL) {
     return `${normalizedBaseURL}/embedded`;
 }
 export function isRealEmbeddedLoad(src, normalizedBaseURL) {
-    if (!src || src.startsWith('about:')) {
+    if (!src || src.startsWith("about:")) {
         return false;
     }
     try {
@@ -13,8 +13,8 @@ export function isRealEmbeddedLoad(src, normalizedBaseURL) {
             return false;
         }
         // Accept /embedded with optional trailing slash; allow query/hash
-        const normalizedPath = srcUrl.pathname.replace(/\/+$/, '');
-        return normalizedPath === '/embedded';
+        const normalizedPath = srcUrl.pathname.replace(/\/+$/, "");
+        return normalizedPath === "/embedded";
     }
     catch {
         return false;

package/dist/utils/embedUrl.js.map

@@ -1 +1 @@
-{"version":3,"file":"embedUrl.js","sourceRoot":"","sources":["../../src/utils/embedUrl.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,gBAAgB,CAAC,iBAAyB;IACxD,OAAO,GAAG,iBAAiB,WAAW,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,iBAAyB;IAEzB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC3C,6BAA6B;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,kEAAkE;QAClE,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO,cAAc,KAAK,WAAW,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["export function buildEmbeddedUrl(normalizedBaseURL: string): string {\n  return `${normalizedBaseURL}/embedded`;\n}\n\nexport function isRealEmbeddedLoad(\n  src: string,\n  normalizedBaseURL: string,\n): boolean {\n  if (!src || src.startsWith('about:')) {\n    return false;\n  }\n  try {\n    const srcUrl = new URL(src, window.location.href);\n    const baseUrl = new URL(normalizedBaseURL);\n    // Require exact origin match\n    if (srcUrl.origin !== baseUrl.origin) {\n      return false;\n    }\n    // Accept /embedded with optional trailing slash; allow query/hash\n    const normalizedPath = srcUrl.pathname.replace(/\\/+$/, '');\n    return normalizedPath === '/embedded';\n  } catch {\n    return false;\n  }\n}\n"]}
+{"version":3,"file":"embedUrl.js","sourceRoot":"","sources":["../../src/utils/embedUrl.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,gBAAgB,CAAC,iBAAyB;IACxD,OAAO,GAAG,iBAAiB,WAAW,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,iBAAyB;IAEzB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC3C,6BAA6B;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,kEAAkE;QAClE,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO,cAAc,KAAK,WAAW,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["export function buildEmbeddedUrl(normalizedBaseURL: string): string {\n  return `${normalizedBaseURL}/embedded`;\n}\n\nexport function isRealEmbeddedLoad(\n  src: string,\n  normalizedBaseURL: string,\n): boolean {\n  if (!src || src.startsWith(\"about:\")) {\n    return false;\n  }\n  try {\n    const srcUrl = new URL(src, window.location.href);\n    const baseUrl = new URL(normalizedBaseURL);\n    // Require exact origin match\n    if (srcUrl.origin !== baseUrl.origin) {\n      return false;\n    }\n    // Accept /embedded with optional trailing slash; allow query/hash\n    const normalizedPath = srcUrl.pathname.replace(/\\/+$/, \"\");\n    return normalizedPath === \"/embedded\";\n  } catch {\n    return false;\n  }\n}\n"]}