@duyquangnvx/iframe-rpc 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,180 @@
+# @duyquangnvx/iframe-rpc
+
+Type-safe bidirectional RPC communication between parent window and iframe.
+
+## Features
+
+- **Type-safe RPC**: Full TypeScript inference for method parameters and return types
+- **Bidirectional**: Both parent and iframe can call methods on each other
+- **Fire-and-forget**: Support for one-way notifications without waiting for response
+- **Timeout handling**: Configurable timeouts with automatic cleanup
+- **Channel isolation**: Multiple independent bridges on the same page
+- **Zero dependencies**: Lightweight with no runtime dependencies
+
+## Installation
+
+```bash
+npm install @duyquangnvx/iframe-rpc
+# or
+pnpm add @duyquangnvx/iframe-rpc
+# or
+yarn add @duyquangnvx/iframe-rpc
+```
+
+## Quick Start
+
+### 1. Define your API contracts
+
+```typescript
+// Shared types (e.g., shared/types.ts)
+type ParentMethods = {
+  getUser: (id: string) => Promise<{ name: string; age: number }>;
+  notify: (message: string) => void;
+};
+
+type IframeMethods = {
+  initialize: (config: { theme: string }) => Promise<void>;
+  getStatus: () => Promise<'ready' | 'loading'>;
+};
+```
+
+### 2. Set up the parent window
+
+```typescript
+import { createParentBridge } from '@duyquangnvx/iframe-rpc';
+
+const iframe = document.getElementById('my-iframe') as HTMLIFrameElement;
+
+const bridge = createParentBridge<ParentMethods, IframeMethods>(iframe, {
+  getUser: async (id) => ({ name: 'John', age: 30 }),
+  notify: (message) => console.log('Notification:', message),
+});
+
+// Call iframe methods with full type safety
+const status = await bridge.call.getStatus();
+await bridge.call.initialize({ theme: 'dark' });
+```
+
+### 3. Set up the iframe
+
+```typescript
+import { createIframeBridge } from '@duyquangnvx/iframe-rpc';
+
+const bridge = createIframeBridge<IframeMethods, ParentMethods>({
+  initialize: async (config) => {
+    document.body.className = config.theme;
+  },
+  getStatus: async () => 'ready',
+});
+
+// Call parent methods with full type safety
+const user = await bridge.call.getUser('123');
+bridge.notify('logEvent', 'iframe-loaded'); // Fire-and-forget
+```
+
+## API Reference
+
+### `createParentBridge<TLocal, TRemote>(iframe, handlers, options?)`
+
+Creates a bridge in the parent window to communicate with an iframe.
+
+**Parameters:**
+- `iframe`: `HTMLIFrameElement` - The iframe to communicate with
+- `handlers`: `TLocal` - Object containing methods the iframe can call
+- `options?`: `BridgeOptions` - Configuration options
+
+**Returns:** `Bridge<TLocal, TRemote>`
+
+### `createIframeBridge<TLocal, TRemote>(handlers, options?)`
+
+Creates a bridge in the iframe to communicate with the parent window.
+
+**Parameters:**
+- `handlers`: `TLocal` - Object containing methods the parent can call
+- `options?`: `BridgeOptions` - Configuration options
+
+**Returns:** `Bridge<TLocal, TRemote>`
+
+### `BridgeOptions`
+
+```typescript
+interface BridgeOptions {
+  timeout?: number;       // RPC timeout in ms (default: 30000)
+  targetOrigin?: string;  // postMessage target origin (default: '*')
+  channel?: string;       // Channel name for isolation (default: 'default')
+  debug?: boolean;        // Enable debug logging (default: false)
+}
+```
+
+### `Bridge<TLocal, TRemote>`
+
+```typescript
+interface Bridge<TLocal, TRemote> {
+  call: CallProxy<TRemote>;           // Type-safe proxy for calling remote methods
+  invoke: (method, ...args) => Promise; // Call by method name (for dynamic calls)
+  notify: (method, ...args) => void;  // Fire-and-forget calls
+  destroy: () => void;                // Clean up and stop listening
+  isActive: () => boolean;            // Check if bridge is active
+}
+```
+
+### Calling Methods
+
+Two ways to call remote methods:
+
+```typescript
+// 1. Proxy API (recommended) - best IDE support
+const user = await bridge.call.getUser('123');
+
+// 2. Invoke API - for dynamic method names
+const methodName = 'getUser';
+const user = await bridge.invoke(methodName, '123');
+```
+
+Both are fully type-safe. Use `call` for static calls, `invoke` when method name is dynamic.
+
+## Error Handling
+
+The library provides typed error classes:
+
+```typescript
+import { RpcError, RpcTimeoutError, RpcMethodNotFoundError } from '@duyquangnvx/iframe-rpc';
+
+try {
+  await bridge.call.someMethod();
+} catch (error) {
+  if (error instanceof RpcTimeoutError) {
+    console.log('Call timed out');
+  } else if (error instanceof RpcMethodNotFoundError) {
+    console.log('Method not found on remote side');
+  } else if (error instanceof RpcError) {
+    console.log('RPC error:', error.message, error.code);
+  }
+}
+```
+
+## Channel Isolation
+
+Run multiple independent bridges on the same page:
+
+```typescript
+// Widget A
+const bridgeA = createParentBridge(iframeA, handlersA, { channel: 'widget-a' });
+
+// Widget B (won't interfere with Widget A)
+const bridgeB = createParentBridge(iframeB, handlersB, { channel: 'widget-b' });
+```
+
+## Security Considerations
+
+By default, `targetOrigin` is set to `'*'` which allows communication with any origin. For production, you should specify the exact origin:
+
+```typescript
+const bridge = createParentBridge(iframe, handlers, {
+  targetOrigin: 'https://trusted-domain.com',
+});
+```
+
+## License
+
+MIT

package/dist/index.cjs

@@ -0,0 +1,271 @@
+'use strict';
+
+// src/index.ts
+var MESSAGE_TYPE = {
+  REQUEST: "iframe-rpc:request",
+  RESPONSE: "iframe-rpc:response",
+  ERROR: "iframe-rpc:error",
+  FIRE_AND_FORGET: "iframe-rpc:fire-and-forget"
+};
+var RpcError = class extends Error {
+  constructor(message, code, originalStack) {
+    super(message);
+    this.code = code;
+    this.originalStack = originalStack;
+    this.name = "RpcError";
+  }
+};
+var RpcTimeoutError = class extends RpcError {
+  constructor(method, timeout) {
+    super(`RPC call to "${method}" timed out after ${timeout}ms`, "TIMEOUT");
+    this.name = "RpcTimeoutError";
+  }
+};
+var RpcMethodNotFoundError = class extends RpcError {
+  constructor(method) {
+    super(`Method "${method}" not found`, "METHOD_NOT_FOUND");
+    this.name = "RpcMethodNotFoundError";
+  }
+};
+var DEFAULT_OPTIONS = {
+  timeout: 3e4,
+  targetOrigin: "*",
+  channel: "default",
+  debug: false,
+  includeStackTraces: false
+};
+function generateId() {
+  if (typeof crypto !== "undefined" && crypto.randomUUID) {
+    return crypto.randomUUID();
+  }
+  if (typeof crypto !== "undefined" && crypto.getRandomValues) {
+    const array = new Uint32Array(2);
+    crypto.getRandomValues(array);
+    return `${array[0].toString(16)}-${array[1].toString(16)}-${Date.now().toString(36)}`;
+  }
+  return `${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
+}
+var VALID_MESSAGE_TYPES = new Set(Object.values(MESSAGE_TYPE));
+function isRpcMessage(data) {
+  return typeof data === "object" && data !== null && "__iframeRpc" in data && data.__iframeRpc === true && "type" in data && VALID_MESSAGE_TYPES.has(data.type);
+}
+function warnIfInsecureOrigin(options) {
+  if (options.debug && options.targetOrigin === "*") {
+    console.warn('[iframe-rpc] Using targetOrigin:"*" is insecure for production. Consider specifying an exact origin.');
+  }
+}
+function createLogger(debug, prefix) {
+  return {
+    log: (...args) => {
+      if (debug) console.log(`[${prefix}]`, ...args);
+    },
+    error: (...args) => {
+      if (debug) console.error(`[${prefix}]`, ...args);
+    }
+  };
+}
+function createBridge(target, handlers, options, side) {
+  const pendingRequests = /* @__PURE__ */ new Map();
+  let isDestroyed = false;
+  const logger = createLogger(options.debug, `iframe-rpc:${side}`);
+  const handleMessage = (event) => {
+    if (isDestroyed) return;
+    if (options.targetOrigin !== "*" && event.origin !== options.targetOrigin) {
+      logger.log("Rejected message from untrusted origin:", event.origin);
+      return;
+    }
+    const data = event.data;
+    if (!isRpcMessage(data)) return;
+    if (data.channel !== options.channel) return;
+    logger.log("Received message:", data);
+    switch (data.type) {
+      case MESSAGE_TYPE.REQUEST:
+        if (!event.source) {
+          logger.error("Request received with null source");
+          return;
+        }
+        handleRequest(data, event.source);
+        break;
+      case MESSAGE_TYPE.RESPONSE:
+        handleResponse(data);
+        break;
+      case MESSAGE_TYPE.ERROR:
+        handleError(data);
+        break;
+      case MESSAGE_TYPE.FIRE_AND_FORGET:
+        handleFireAndForget(data);
+        break;
+    }
+  };
+  const handleRequest = async (message, source) => {
+    const { id, method, args } = message;
+    const handler = handlers[method];
+    if (!handler) {
+      sendError(source, id, new RpcMethodNotFoundError(method));
+      return;
+    }
+    try {
+      const result = await handler(...args);
+      sendResponse(source, id, result);
+    } catch (error) {
+      sendError(source, id, error instanceof Error ? error : new Error(String(error)));
+    }
+  };
+  const handleResponse = (message) => {
+    const pending = pendingRequests.get(message.id);
+    if (!pending) {
+      logger.error("No pending request for response:", message.id);
+      return;
+    }
+    clearTimeout(pending.timeoutId);
+    pendingRequests.delete(message.id);
+    pending.resolve(message.result);
+  };
+  const handleError = (message) => {
+    const pending = pendingRequests.get(message.id);
+    if (!pending) {
+      logger.error("No pending request for error:", message.id);
+      return;
+    }
+    clearTimeout(pending.timeoutId);
+    pendingRequests.delete(message.id);
+    pending.reject(
+      new RpcError(message.error.message, message.error.code, message.error.stack)
+    );
+  };
+  const handleFireAndForget = (message) => {
+    const handler = handlers[message.method];
+    if (!handler) {
+      logger.error("Handler not found for fire-and-forget:", message.method);
+      return;
+    }
+    Promise.resolve().then(() => handler(...message.args)).catch((error) => logger.error("Error in fire-and-forget handler:", error));
+  };
+  const sendMessage = (targetWindow, message) => {
+    logger.log("Sending message:", message);
+    targetWindow.postMessage(message, options.targetOrigin);
+  };
+  const sendResponse = (targetWindow, id, result) => {
+    const message = {
+      __iframeRpc: true,
+      type: MESSAGE_TYPE.RESPONSE,
+      channel: options.channel,
+      id,
+      result
+    };
+    sendMessage(targetWindow, message);
+  };
+  const sendError = (targetWindow, id, error) => {
+    const message = {
+      __iframeRpc: true,
+      type: MESSAGE_TYPE.ERROR,
+      channel: options.channel,
+      id,
+      error: {
+        message: error.message,
+        ...error instanceof RpcError && error.code ? { code: error.code } : {},
+        // Only include stack traces if explicitly enabled (security consideration)
+        ...options.includeStackTraces && error.stack ? { stack: error.stack } : {}
+      }
+    };
+    sendMessage(targetWindow, message);
+  };
+  const callMethod = (method, args) => {
+    if (isDestroyed) {
+      return Promise.reject(new RpcError("Bridge has been destroyed", "DESTROYED"));
+    }
+    return new Promise((resolve, reject) => {
+      const id = generateId();
+      const timeoutId = setTimeout(() => {
+        pendingRequests.delete(id);
+        reject(new RpcTimeoutError(String(method), options.timeout));
+      }, options.timeout);
+      pendingRequests.set(id, {
+        resolve,
+        reject,
+        timeoutId
+      });
+      const message = {
+        __iframeRpc: true,
+        type: MESSAGE_TYPE.REQUEST,
+        channel: options.channel,
+        id,
+        method,
+        args
+      };
+      sendMessage(target, message);
+    });
+  };
+  const notify = (method, ...args) => {
+    if (isDestroyed) {
+      logger.error("Cannot notify: bridge has been destroyed");
+      return;
+    }
+    const message = {
+      __iframeRpc: true,
+      type: MESSAGE_TYPE.FIRE_AND_FORGET,
+      channel: options.channel,
+      method,
+      args
+    };
+    sendMessage(target, message);
+  };
+  const call = new Proxy({}, {
+    get(_, prop) {
+      if (typeof prop === "symbol") return void 0;
+      return (...args) => callMethod(prop, args);
+    }
+  });
+  window.addEventListener("message", handleMessage);
+  return {
+    call,
+    invoke: (method, ...args) => callMethod(method, args),
+    notify,
+    destroy: () => {
+      isDestroyed = true;
+      window.removeEventListener("message", handleMessage);
+      for (const [, pending] of pendingRequests) {
+        clearTimeout(pending.timeoutId);
+        pending.reject(new RpcError("Bridge destroyed", "DESTROYED"));
+      }
+      pendingRequests.clear();
+      logger.log("Bridge destroyed");
+    },
+    isActive: () => !isDestroyed
+  };
+}
+function createParentBridge(iframe, handlers, options = {}) {
+  if (!iframe.contentWindow) {
+    throw new Error("Iframe contentWindow is not available. Make sure the iframe is loaded.");
+  }
+  const mergedOptions = { ...DEFAULT_OPTIONS, ...options };
+  warnIfInsecureOrigin(mergedOptions);
+  return createBridge(
+    iframe.contentWindow,
+    handlers,
+    mergedOptions,
+    "parent"
+  );
+}
+function createIframeBridge(handlers, options = {}) {
+  if (!window.parent || window.parent === window) {
+    throw new Error("Not running inside an iframe");
+  }
+  const mergedOptions = { ...DEFAULT_OPTIONS, ...options };
+  warnIfInsecureOrigin(mergedOptions);
+  return createBridge(
+    window.parent,
+    handlers,
+    mergedOptions,
+    "iframe"
+  );
+}
+
+exports.MESSAGE_TYPE = MESSAGE_TYPE;
+exports.RpcError = RpcError;
+exports.RpcMethodNotFoundError = RpcMethodNotFoundError;
+exports.RpcTimeoutError = RpcTimeoutError;
+exports.createIframeBridge = createIframeBridge;
+exports.createParentBridge = createParentBridge;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AA0DA,IAAM,YAAA,GAAe;AAAA,EACjB,OAAA,EAAS,oBAAA;AAAA,EACT,QAAA,EAAU,qBAAA;AAAA,EACV,KAAA,EAAO,kBAAA;AAAA,EACP,eAAA,EAAiB;AACrB;AA8CO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EAChC,WAAA,CACI,OAAA,EACgB,IAAA,EACA,aAAA,EAClB;AACE,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,aAAA,GAAA,aAAA;AAGhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AAAA,EAChB;AACJ;AAEO,IAAM,eAAA,GAAN,cAA8B,QAAA,CAAS;AAAA,EAC1C,WAAA,CAAY,QAAgB,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,CAAA,aAAA,EAAgB,MAAM,CAAA,kBAAA,EAAqB,OAAO,MAAM,SAAS,CAAA;AACvE,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AAAA,EAChB;AACJ;AAEO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACjD,YAAY,MAAA,EAAgB;AACxB,IAAA,KAAA,CAAM,CAAA,QAAA,EAAW,MAAM,CAAA,WAAA,CAAA,EAAe,kBAAkB,CAAA;AACxD,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EAChB;AACJ;AAmBA,IAAM,eAAA,GAA2C;AAAA,EAC7C,OAAA,EAAS,GAAA;AAAA,EACT,YAAA,EAAc,GAAA;AAAA,EACd,OAAA,EAAS,SAAA;AAAA,EACT,KAAA,EAAO,KAAA;AAAA,EACP,kBAAA,EAAoB;AACxB,CAAA;AAMA,SAAS,UAAA,GAAqB;AAC1B,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACpD,IAAA,OAAO,OAAO,UAAA,EAAW;AAAA,EAC7B;AAEA,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,eAAA,EAAiB;AACzD,IAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,CAAY,CAAC,CAAA;AAC/B,IAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,IAAA,OAAO,CAAA,EAAG,MAAM,CAAC,CAAA,CAAE,SAAS,EAAE,CAAC,IAAI,KAAA,CAAM,CAAC,EAAE,QAAA,CAAS,EAAE,CAAC,CAAA,CAAA,EAAI,IAAA,CAAK,KAAI,CAAE,QAAA,CAAS,EAAE,CAAC,CAAA,CAAA;AAAA,EACvF;AACA,EAAA,OAAO,CAAA,EAAG,IAAA,CAAK,GAAA,EAAK,IAAI,IAAA,CAAK,MAAA,EAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA;AACnE;AAGA,IAAM,sBAAsB,IAAI,GAAA,CAAI,MAAA,CAAO,MAAA,CAAO,YAAY,CAAC,CAAA;AAE/D,SAAS,aAAa,IAAA,EAAmC;AACrD,EAAA,OACI,OAAO,IAAA,KAAS,QAAA,IAChB,IAAA,KAAS,QACT,aAAA,IAAiB,IAAA,IAChB,IAAA,CAAa,WAAA,KAAgB,QAC9B,MAAA,IAAU,IAAA,IACV,mBAAA,CAAoB,GAAA,CAAK,KAAa,IAAI,CAAA;AAElD;AAEA,SAAS,qBAAqB,OAAA,EAAwC;AAClE,EAAA,IAAI,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,YAAA,KAAiB,GAAA,EAAK;AAC/C,IAAA,OAAA,CAAQ,KAAK,sGAAsG,CAAA;AAAA,EACvH;AACJ;AAEA,SAAS,YAAA,CAAa,OAAgB,MAAA,EAAgB;AAClD,EAAA,OAAO;AAAA,IACH,GAAA,EAAK,IAAI,IAAA,KAAoB;AACzB,MAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,CAAI,IAAI,MAAM,CAAA,CAAA,CAAA,EAAK,GAAG,IAAI,CAAA;AAAA,IACjD,CAAA;AAAA,IACA,KAAA,EAAO,IAAI,IAAA,KAAoB;AAC3B,MAAA,IAAI,OAAO,OAAA,CAAQ,KAAA,CAAM,IAAI,MAAM,CAAA,CAAA,CAAA,EAAK,GAAG,IAAI,CAAA;AAAA,IACnD;AAAA,GACJ;AACJ;AAkDA,SAAS,YAAA,CAIL,MAAA,EACA,QAAA,EACA,OAAA,EACA,IAAA,EACuB;AACvB,EAAA,MAAM,eAAA,uBAAsB,GAAA,EAA4B;AACxD,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,MAAM,SAAS,YAAA,CAAa,OAAA,CAAQ,KAAA,EAAO,CAAA,WAAA,EAAc,IAAI,CAAA,CAAE,CAAA;AAG/D,EAAA,MAAM,aAAA,GAAgB,CAAC,KAAA,KAAwB;AAC3C,IAAA,IAAI,WAAA,EAAa;AAGjB,IAAA,IAAI,QAAQ,YAAA,KAAiB,GAAA,IAAO,KAAA,CAAM,MAAA,KAAW,QAAQ,YAAA,EAAc;AACvE,MAAA,MAAA,CAAO,GAAA,CAAI,yCAAA,EAA2C,KAAA,CAAM,MAAM,CAAA;AAClE,MAAA;AAAA,IACJ;AAEA,IAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,IAAA,IAAI,CAAC,YAAA,CAAa,IAAI,CAAA,EAAG;AACzB,IAAA,IAAI,IAAA,CAAK,OAAA,KAAY,OAAA,CAAQ,OAAA,EAAS;AAEtC,IAAA,MAAA,CAAO,GAAA,CAAI,qBAAqB,IAAI,CAAA;AAEpC,IAAA,QAAQ,KAAK,IAAA;AAAM,MACf,KAAK,YAAA,CAAa,OAAA;AACd,QAAA,IAAI,CAAC,MAAM,MAAA,EAAQ;AACf,UAAA,MAAA,CAAO,MAAM,mCAAmC,CAAA;AAChD,UAAA;AAAA,QACJ;AACA,QAAA,aAAA,CAAc,IAAA,EAAwB,MAAM,MAAgB,CAAA;AAC5D,QAAA;AAAA,MACJ,KAAK,YAAA,CAAa,QAAA;AACd,QAAA,cAAA,CAAe,IAAuB,CAAA;AACtC,QAAA;AAAA,MACJ,KAAK,YAAA,CAAa,KAAA;AACd,QAAA,WAAA,CAAY,IAAoB,CAAA;AAChC,QAAA;AAAA,MACJ,KAAK,YAAA,CAAa,eAAA;AACd,QAAA,mBAAA,CAAoB,IAA4B,CAAA;AAChD,QAAA;AAAA;AACR,EACJ,CAAA;AAEA,EAAA,MAAM,aAAA,GAAgB,OAAO,OAAA,EAAyB,MAAA,KAAmB;AACrE,IAAA,MAAM,EAAE,EAAA,EAAI,MAAA,EAAQ,IAAA,EAAK,GAAI,OAAA;AAC7B,IAAA,MAAM,OAAA,GAAU,SAAS,MAAsB,CAAA;AAE/C,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,SAAA,CAAU,MAAA,EAAQ,EAAA,EAAI,IAAI,sBAAA,CAAuB,MAAM,CAAC,CAAA;AACxD,MAAA;AAAA,IACJ;AAEA,IAAA,IAAI;AACA,MAAA,MAAM,MAAA,GAAS,MAAO,OAAA,CAAsB,GAAG,IAAI,CAAA;AACnD,MAAA,YAAA,CAAa,MAAA,EAAQ,IAAI,MAAM,CAAA;AAAA,IACnC,SAAS,KAAA,EAAO;AACZ,MAAA,SAAA,CAAU,MAAA,EAAQ,EAAA,EAAI,KAAA,YAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,IACnF;AAAA,EACJ,CAAA;AAEA,EAAA,MAAM,cAAA,GAAiB,CAAC,OAAA,KAA6B;AACjD,IAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,EAAE,CAAA;AAC9C,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,MAAA,CAAO,KAAA,CAAM,kCAAA,EAAoC,OAAA,CAAQ,EAAE,CAAA;AAC3D,MAAA;AAAA,IACJ;AAEA,IAAA,YAAA,CAAa,QAAQ,SAAS,CAAA;AAC9B,IAAA,eAAA,CAAgB,MAAA,CAAO,QAAQ,EAAE,CAAA;AACjC,IAAA,OAAA,CAAQ,OAAA,CAAQ,QAAQ,MAAM,CAAA;AAAA,EAClC,CAAA;AAEA,EAAA,MAAM,WAAA,GAAc,CAAC,OAAA,KAA0B;AAC3C,IAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,EAAE,CAAA;AAC9C,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,MAAA,CAAO,KAAA,CAAM,+BAAA,EAAiC,OAAA,CAAQ,EAAE,CAAA;AACxD,MAAA;AAAA,IACJ;AAEA,IAAA,YAAA,CAAa,QAAQ,SAAS,CAAA;AAC9B,IAAA,eAAA,CAAgB,MAAA,CAAO,QAAQ,EAAE,CAAA;AACjC,IAAA,OAAA,CAAQ,MAAA;AAAA,MACJ,IAAI,QAAA,CAAS,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,QAAQ,KAAA,CAAM,IAAA,EAAM,OAAA,CAAQ,KAAA,CAAM,KAAK;AAAA,KAC/E;AAAA,EACJ,CAAA;AAEA,EAAA,MAAM,mBAAA,GAAsB,CAAC,OAAA,KAAkC;AAC3D,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,OAAA,CAAQ,MAAsB,CAAA;AACvD,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,MAAA,CAAO,KAAA,CAAM,wCAAA,EAA0C,OAAA,CAAQ,MAAM,CAAA;AACrE,MAAA;AAAA,IACJ;AAGA,IAAA,OAAA,CAAQ,SAAQ,CACX,IAAA,CAAK,MAAO,OAAA,CAAsB,GAAG,OAAA,CAAQ,IAAI,CAAC,CAAA,CAClD,MAAM,CAAC,KAAA,KAAU,OAAO,KAAA,CAAM,mCAAA,EAAqC,KAAK,CAAC,CAAA;AAAA,EAClF,CAAA;AAEA,EAAA,MAAM,WAAA,GAAc,CAAC,YAAA,EAAsB,OAAA,KAAwB;AAC/D,IAAA,MAAA,CAAO,GAAA,CAAI,oBAAoB,OAAO,CAAA;AACtC,IAAA,YAAA,CAAa,WAAA,CAAY,OAAA,EAAS,OAAA,CAAQ,YAAY,CAAA;AAAA,EAC1D,CAAA;AAEA,EAAA,MAAM,YAAA,GAAe,CAAC,YAAA,EAAsB,EAAA,EAAY,MAAA,KAAoB;AACxE,IAAA,MAAM,OAAA,GAA2B;AAAA,MAC7B,WAAA,EAAa,IAAA;AAAA,MACb,MAAM,YAAA,CAAa,QAAA;AAAA,MACnB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,EAAA;AAAA,MACA;AAAA,KACJ;AACA,IAAA,WAAA,CAAY,cAAc,OAAO,CAAA;AAAA,EACrC,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,CAAC,YAAA,EAAsB,EAAA,EAAY,KAAA,KAAiB;AAClE,IAAA,MAAM,OAAA,GAAwB;AAAA,MAC1B,WAAA,EAAa,IAAA;AAAA,MACb,MAAM,YAAA,CAAa,KAAA;AAAA,MACnB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,EAAA;AAAA,MACA,KAAA,EAAO;AAAA,QACH,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,GAAI,KAAA,YAAiB,QAAA,IAAY,KAAA,CAAM,IAAA,GAAO,EAAE,IAAA,EAAM,KAAA,CAAM,IAAA,EAAK,GAAI,EAAC;AAAA;AAAA,QAEtE,GAAI,OAAA,CAAQ,kBAAA,IAAsB,KAAA,CAAM,KAAA,GAAQ,EAAE,KAAA,EAAO,KAAA,CAAM,KAAA,EAAM,GAAI;AAAC;AAC9E,KACJ;AACA,IAAA,WAAA,CAAY,cAAc,OAAO,CAAA;AAAA,EACrC,CAAA;AAEA,EAAA,MAAM,UAAA,GAAa,CACf,MAAA,EACA,IAAA,KACiD;AACjD,IAAA,IAAI,WAAA,EAAa;AACb,MAAA,OAAO,QAAQ,MAAA,CAAO,IAAI,QAAA,CAAS,2BAAA,EAA6B,WAAW,CAAC,CAAA;AAAA,IAChF;AAEA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACpC,MAAA,MAAM,KAAK,UAAA,EAAW;AAEtB,MAAA,MAAM,SAAA,GAAY,WAAW,MAAM;AAC/B,QAAA,eAAA,CAAgB,OAAO,EAAE,CAAA;AACzB,QAAA,MAAA,CAAO,IAAI,eAAA,CAAgB,MAAA,CAAO,MAAM,CAAA,EAAG,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA,MAC/D,CAAA,EAAG,QAAQ,OAAO,CAAA;AAElB,MAAA,eAAA,CAAgB,IAAI,EAAA,EAAI;AAAA,QACpB,OAAA;AAAA,QACA,MAAA;AAAA,QACA;AAAA,OACH,CAAA;AAED,MAAA,MAAM,OAAA,GAA0B;AAAA,QAC5B,WAAA,EAAa,IAAA;AAAA,QACb,MAAM,YAAA,CAAa,OAAA;AAAA,QACnB,SAAS,OAAA,CAAQ,OAAA;AAAA,QACjB,EAAA;AAAA,QACA,MAAA;AAAA,QACA;AAAA,OACJ;AAEA,MAAA,WAAA,CAAY,QAAQ,OAAO,CAAA;AAAA,IAC/B,CAAC,CAAA;AAAA,EACL,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,CACX,MAAA,EAAA,GACG,IAAA,KACF;AACD,IAAA,IAAI,WAAA,EAAa;AACb,MAAA,MAAA,CAAO,MAAM,0CAA0C,CAAA;AACvD,MAAA;AAAA,IACJ;AAEA,IAAA,MAAM,OAAA,GAAgC;AAAA,MAClC,WAAA,EAAa,IAAA;AAAA,MACb,MAAM,YAAA,CAAa,eAAA;AAAA,MACnB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,MAAA;AAAA,MACA;AAAA,KACJ;AAEA,IAAA,WAAA,CAAY,QAAQ,OAAO,CAAA;AAAA,EAC/B,CAAA;AAGA,EAAA,MAAM,IAAA,GAAO,IAAI,KAAA,CAAM,EAAC,EAAyB;AAAA,IAC7C,GAAA,CAAI,GAAG,IAAA,EAAM;AAET,MAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,OAAO,MAAA;AACrC,MAAA,OAAO,CAAA,GAAI,IAAA,KAAoB,UAAA,CAAW,IAAA,EAAuB,IAAI,CAAA;AAAA,IACzE;AAAA,GACH,CAAA;AAGD,EAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,aAAa,CAAA;AAEhD,EAAA,OAAO;AAAA,IACH,IAAA;AAAA,IACA,QAAQ,CAA0B,MAAA,EAAA,GAAc,IAAA,KAC5C,UAAA,CAAW,QAAQ,IAAI,CAAA;AAAA,IAC3B,MAAA;AAAA,IACA,SAAS,MAAM;AACX,MAAA,WAAA,GAAc,IAAA;AACd,MAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,aAAa,CAAA;AAGnD,MAAA,KAAA,MAAW,GAAG,OAAO,CAAA,IAAK,eAAA,EAAiB;AACvC,QAAA,YAAA,CAAa,QAAQ,SAAS,CAAA;AAC9B,QAAA,OAAA,CAAQ,MAAA,CAAO,IAAI,QAAA,CAAS,kBAAA,EAAoB,WAAW,CAAC,CAAA;AAAA,MAChE;AACA,MAAA,eAAA,CAAgB,KAAA,EAAM;AAEtB,MAAA,MAAA,CAAO,IAAI,kBAAkB,CAAA;AAAA,IACjC,CAAA;AAAA,IACA,QAAA,EAAU,MAAM,CAAC;AAAA,GACrB;AACJ;AA0BO,SAAS,kBAAA,CAIZ,MAAA,EACA,QAAA,EACA,OAAA,GAAyB,EAAC,EACH;AACvB,EAAA,IAAI,CAAC,OAAO,aAAA,EAAe;AACvB,IAAA,MAAM,IAAI,MAAM,wEAAwE,CAAA;AAAA,EAC5F;AAEA,EAAA,MAAM,aAAA,GAAgB,EAAE,GAAG,eAAA,EAAiB,GAAG,OAAA,EAAQ;AACvD,EAAA,oBAAA,CAAqB,aAAa,CAAA;AAElC,EAAA,OAAO,YAAA;AAAA,IACH,MAAA,CAAO,aAAA;AAAA,IACP,QAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACJ;AACJ;AAoBO,SAAS,kBAAA,CAIZ,QAAA,EACA,OAAA,GAAyB,EAAC,EACH;AACvB,EAAA,IAAI,CAAC,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,WAAW,MAAA,EAAQ;AAC5C,IAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,EAClD;AAEA,EAAA,MAAM,aAAA,GAAgB,EAAE,GAAG,eAAA,EAAiB,GAAG,OAAA,EAAQ;AACvD,EAAA,oBAAA,CAAqB,aAAa,CAAA;AAElC,EAAA,OAAO,YAAA;AAAA,IACH,MAAA,CAAO,MAAA;AAAA,IACP,QAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACJ;AACJ","file":"index.cjs","sourcesContent":["/**\r\n * Type-safe bidirectional RPC communication between parent window and iframe\r\n * \r\n * @example\r\n * // Define your API contract\r\n * type ParentMethods = {\r\n *   getUser: (id: string) => Promise<{ name: string; age: number }>;\r\n *   notify: (message: string) => void;\r\n * };\r\n * \r\n * type IframeMethods = {\r\n *   initialize: (config: { theme: string }) => Promise<void>;\r\n *   getStatus: () => Promise<'ready' | 'loading'>;\r\n * };\r\n * \r\n * // In parent\r\n * const bridge = createParentBridge<ParentMethods, IframeMethods>(iframe, {\r\n *   getUser: async (id) => ({ name: 'John', age: 30 }),\r\n *   notify: (message) => console.log(message),\r\n * });\r\n * const status = await bridge.call.getStatus();\r\n * \r\n * // In iframe\r\n * const bridge = createIframeBridge<IframeMethods, ParentMethods>({\r\n *   initialize: async (config) => { ... },\r\n *   getStatus: async () => 'ready',\r\n * });\r\n * const user = await bridge.call.getUser('123');\r\n */\r\n\r\n// ============================================================================\r\n// Type Utilities\r\n// ============================================================================\r\n\r\n/** Extract the return type, unwrapping Promise if needed */\r\ntype UnwrapPromise<T> = T extends Promise<infer U> ? U : T;\r\n\r\n/** Check if a type is a function */\r\ntype IsFunction<T> = T extends (...args: any[]) => any ? true : false;\r\n\r\n/** Method definition - can be sync or async */\r\ntype AnyMethod = (...args: any[]) => any;\r\n\r\n/** Contract for RPC methods */\r\ntype MethodContract = Record<string, AnyMethod>;\r\n\r\n/** Extract methods that return void (fire-and-forget) */\r\ntype VoidMethods<T extends MethodContract> = {\r\n    [K in keyof T]: UnwrapPromise<ReturnType<T[K]>> extends void ? K : never;\r\n}[keyof T];\r\n\r\n/** Extract methods that return a value (request-response) */\r\ntype ValueMethods<T extends MethodContract> = Exclude<keyof T, VoidMethods<T>>;\r\n\r\n// ============================================================================\r\n// Message Types\r\n// ============================================================================\r\n\r\nconst MESSAGE_TYPE = {\r\n    REQUEST: 'iframe-rpc:request',\r\n    RESPONSE: 'iframe-rpc:response',\r\n    ERROR: 'iframe-rpc:error',\r\n    FIRE_AND_FORGET: 'iframe-rpc:fire-and-forget',\r\n} as const;\r\n\r\ninterface BaseMessage {\r\n    __iframeRpc: true;\r\n    channel?: string;\r\n}\r\n\r\ninterface RequestMessage<T extends MethodContract = MethodContract> extends BaseMessage {\r\n    type: typeof MESSAGE_TYPE.REQUEST;\r\n    id: string;\r\n    method: keyof T & string;\r\n    args: unknown[];\r\n}\r\n\r\ninterface ResponseMessage extends BaseMessage {\r\n    type: typeof MESSAGE_TYPE.RESPONSE;\r\n    id: string;\r\n    result: unknown;\r\n}\r\n\r\ninterface ErrorMessage extends BaseMessage {\r\n    type: typeof MESSAGE_TYPE.ERROR;\r\n    id: string;\r\n    error: {\r\n        message: string;\r\n        code?: string;\r\n        stack?: string;\r\n    };\r\n}\r\n\r\ninterface FireAndForgetMessage<T extends MethodContract = MethodContract> extends BaseMessage {\r\n    type: typeof MESSAGE_TYPE.FIRE_AND_FORGET;\r\n    method: keyof T & string;\r\n    args: unknown[];\r\n}\r\n\r\ntype RpcMessage<T extends MethodContract = MethodContract> =\r\n    | RequestMessage<T>\r\n    | ResponseMessage\r\n    | ErrorMessage\r\n    | FireAndForgetMessage<T>;\r\n\r\n// ============================================================================\r\n// Error Types\r\n// ============================================================================\r\n\r\nexport class RpcError extends Error {\r\n    constructor(\r\n        message: string,\r\n        public readonly code?: string,\r\n        public readonly originalStack?: string\r\n    ) {\r\n        super(message);\r\n        this.name = 'RpcError';\r\n    }\r\n}\r\n\r\nexport class RpcTimeoutError extends RpcError {\r\n    constructor(method: string, timeout: number) {\r\n        super(`RPC call to \"${method}\" timed out after ${timeout}ms`, 'TIMEOUT');\r\n        this.name = 'RpcTimeoutError';\r\n    }\r\n}\r\n\r\nexport class RpcMethodNotFoundError extends RpcError {\r\n    constructor(method: string) {\r\n        super(`Method \"${method}\" not found`, 'METHOD_NOT_FOUND');\r\n        this.name = 'RpcMethodNotFoundError';\r\n    }\r\n}\r\n\r\n// ============================================================================\r\n// Configuration\r\n// ============================================================================\r\n\r\nexport interface BridgeOptions {\r\n    /** Timeout for RPC calls in milliseconds. Default: 30000 */\r\n    timeout?: number;\r\n    /** Target origin for postMessage. Default: '*' (consider security implications) */\r\n    targetOrigin?: string;\r\n    /** Optional channel name to isolate multiple bridges */\r\n    channel?: string;\r\n    /** Enable debug logging */\r\n    debug?: boolean;\r\n    /** Include stack traces in error responses. Default: false (security) */\r\n    includeStackTraces?: boolean;\r\n}\r\n\r\nconst DEFAULT_OPTIONS: Required<BridgeOptions> = {\r\n    timeout: 30000,\r\n    targetOrigin: '*',\r\n    channel: 'default',\r\n    debug: false,\r\n    includeStackTraces: false,\r\n};\r\n\r\n// ============================================================================\r\n// Utility Functions\r\n// ============================================================================\r\n\r\nfunction generateId(): string {\r\n    if (typeof crypto !== 'undefined' && crypto.randomUUID) {\r\n        return crypto.randomUUID();\r\n    }\r\n    // Fallback with better entropy using getRandomValues when available\r\n    if (typeof crypto !== 'undefined' && crypto.getRandomValues) {\r\n        const array = new Uint32Array(2);\r\n        crypto.getRandomValues(array);\r\n        return `${array[0].toString(16)}-${array[1].toString(16)}-${Date.now().toString(36)}`;\r\n    }\r\n    return `${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;\r\n}\r\n\r\n// Cache valid message types for performance\r\nconst VALID_MESSAGE_TYPES = new Set(Object.values(MESSAGE_TYPE));\r\n\r\nfunction isRpcMessage(data: unknown): data is RpcMessage {\r\n    return (\r\n        typeof data === 'object' &&\r\n        data !== null &&\r\n        '__iframeRpc' in data &&\r\n        (data as any).__iframeRpc === true &&\r\n        'type' in data &&\r\n        VALID_MESSAGE_TYPES.has((data as any).type)\r\n    );\r\n}\r\n\r\nfunction warnIfInsecureOrigin(options: Required<BridgeOptions>): void {\r\n    if (options.debug && options.targetOrigin === '*') {\r\n        console.warn('[iframe-rpc] Using targetOrigin:\"*\" is insecure for production. Consider specifying an exact origin.');\r\n    }\r\n}\r\n\r\nfunction createLogger(debug: boolean, prefix: string) {\r\n    return {\r\n        log: (...args: unknown[]) => {\r\n            if (debug) console.log(`[${prefix}]`, ...args);\r\n        },\r\n        error: (...args: unknown[]) => {\r\n            if (debug) console.error(`[${prefix}]`, ...args);\r\n        },\r\n    };\r\n}\r\n\r\n// ============================================================================\r\n// Core Bridge Implementation\r\n// ============================================================================\r\n\r\ninterface PendingRequest {\r\n    resolve: (value: unknown) => void;\r\n    reject: (error: Error) => void;\r\n    timeoutId: ReturnType<typeof setTimeout>;\r\n}\r\n\r\ntype CallProxy<T extends MethodContract> = {\r\n    [K in keyof T]: T[K] extends (...args: infer A) => infer R\r\n    ? (...args: A) => Promise<UnwrapPromise<R>>\r\n    : never;\r\n};\r\n\r\n/**\r\n * Bridge interface for bidirectional RPC communication\r\n * @typeParam _TLocal - Local method handlers (unused, retained for API symmetry)\r\n * @typeParam TRemote - Remote methods available to call\r\n */\r\nexport interface Bridge<\r\n    // eslint-disable-next-line @typescript-eslint/no-unused-vars\r\n    _TLocal extends MethodContract,\r\n    TRemote extends MethodContract\r\n> {\r\n    /** Proxy object to call remote methods with full type safety */\r\n    call: CallProxy<TRemote>;\r\n\r\n    /** Call remote method by name (for dynamic method calls) */\r\n    invoke: <K extends keyof TRemote>(\r\n        method: K,\r\n        ...args: Parameters<TRemote[K]>\r\n    ) => Promise<UnwrapPromise<ReturnType<TRemote[K]>>>;\r\n\r\n    /** Fire-and-forget call (no response expected) */\r\n    notify: <K extends VoidMethods<TRemote>>(\r\n        method: K,\r\n        ...args: Parameters<TRemote[K]>\r\n    ) => void;\r\n\r\n    /** Destroy the bridge and clean up resources */\r\n    destroy: () => void;\r\n\r\n    /** Check if the bridge is still active */\r\n    isActive: () => boolean;\r\n}\r\n\r\nfunction createBridge<\r\n    TLocal extends MethodContract,\r\n    TRemote extends MethodContract\r\n>(\r\n    target: Window,\r\n    handlers: TLocal,\r\n    options: Required<BridgeOptions>,\r\n    side: 'parent' | 'iframe'\r\n): Bridge<TLocal, TRemote> {\r\n    const pendingRequests = new Map<string, PendingRequest>();\r\n    let isDestroyed = false;\r\n    const logger = createLogger(options.debug, `iframe-rpc:${side}`);\r\n\r\n    // Handle incoming messages\r\n    const handleMessage = (event: MessageEvent) => {\r\n        if (isDestroyed) return;\r\n\r\n        // Validate origin when targetOrigin is specified\r\n        if (options.targetOrigin !== '*' && event.origin !== options.targetOrigin) {\r\n            logger.log('Rejected message from untrusted origin:', event.origin);\r\n            return;\r\n        }\r\n\r\n        const data = event.data;\r\n        if (!isRpcMessage(data)) return;\r\n        if (data.channel !== options.channel) return;\r\n\r\n        logger.log('Received message:', data);\r\n\r\n        switch (data.type) {\r\n            case MESSAGE_TYPE.REQUEST:\r\n                if (!event.source) {\r\n                    logger.error('Request received with null source');\r\n                    return;\r\n                }\r\n                handleRequest(data as RequestMessage, event.source as Window);\r\n                break;\r\n            case MESSAGE_TYPE.RESPONSE:\r\n                handleResponse(data as ResponseMessage);\r\n                break;\r\n            case MESSAGE_TYPE.ERROR:\r\n                handleError(data as ErrorMessage);\r\n                break;\r\n            case MESSAGE_TYPE.FIRE_AND_FORGET:\r\n                handleFireAndForget(data as FireAndForgetMessage);\r\n                break;\r\n        }\r\n    };\r\n\r\n    const handleRequest = async (message: RequestMessage, source: Window) => {\r\n        const { id, method, args } = message;\r\n        const handler = handlers[method as keyof TLocal];\r\n\r\n        if (!handler) {\r\n            sendError(source, id, new RpcMethodNotFoundError(method));\r\n            return;\r\n        }\r\n\r\n        try {\r\n            const result = await (handler as AnyMethod)(...args);\r\n            sendResponse(source, id, result);\r\n        } catch (error) {\r\n            sendError(source, id, error instanceof Error ? error : new Error(String(error)));\r\n        }\r\n    };\r\n\r\n    const handleResponse = (message: ResponseMessage) => {\r\n        const pending = pendingRequests.get(message.id);\r\n        if (!pending) {\r\n            logger.error('No pending request for response:', message.id);\r\n            return;\r\n        }\r\n\r\n        clearTimeout(pending.timeoutId);\r\n        pendingRequests.delete(message.id);\r\n        pending.resolve(message.result);\r\n    };\r\n\r\n    const handleError = (message: ErrorMessage) => {\r\n        const pending = pendingRequests.get(message.id);\r\n        if (!pending) {\r\n            logger.error('No pending request for error:', message.id);\r\n            return;\r\n        }\r\n\r\n        clearTimeout(pending.timeoutId);\r\n        pendingRequests.delete(message.id);\r\n        pending.reject(\r\n            new RpcError(message.error.message, message.error.code, message.error.stack)\r\n        );\r\n    };\r\n\r\n    const handleFireAndForget = (message: FireAndForgetMessage) => {\r\n        const handler = handlers[message.method as keyof TLocal];\r\n        if (!handler) {\r\n            logger.error('Handler not found for fire-and-forget:', message.method);\r\n            return;\r\n        }\r\n\r\n        // Handle both sync and async handlers, catching any rejections\r\n        Promise.resolve()\r\n            .then(() => (handler as AnyMethod)(...message.args))\r\n            .catch((error) => logger.error('Error in fire-and-forget handler:', error));\r\n    };\r\n\r\n    const sendMessage = (targetWindow: Window, message: RpcMessage) => {\r\n        logger.log('Sending message:', message);\r\n        targetWindow.postMessage(message, options.targetOrigin);\r\n    };\r\n\r\n    const sendResponse = (targetWindow: Window, id: string, result: unknown) => {\r\n        const message: ResponseMessage = {\r\n            __iframeRpc: true,\r\n            type: MESSAGE_TYPE.RESPONSE,\r\n            channel: options.channel,\r\n            id,\r\n            result,\r\n        };\r\n        sendMessage(targetWindow, message);\r\n    };\r\n\r\n    const sendError = (targetWindow: Window, id: string, error: Error) => {\r\n        const message: ErrorMessage = {\r\n            __iframeRpc: true,\r\n            type: MESSAGE_TYPE.ERROR,\r\n            channel: options.channel,\r\n            id,\r\n            error: {\r\n                message: error.message,\r\n                ...(error instanceof RpcError && error.code ? { code: error.code } : {}),\r\n                // Only include stack traces if explicitly enabled (security consideration)\r\n                ...(options.includeStackTraces && error.stack ? { stack: error.stack } : {}),\r\n            },\r\n        };\r\n        sendMessage(targetWindow, message);\r\n    };\r\n\r\n    const callMethod = <K extends keyof TRemote>(\r\n        method: K,\r\n        args: unknown[]\r\n    ): Promise<UnwrapPromise<ReturnType<TRemote[K]>>> => {\r\n        if (isDestroyed) {\r\n            return Promise.reject(new RpcError('Bridge has been destroyed', 'DESTROYED'));\r\n        }\r\n\r\n        return new Promise((resolve, reject) => {\r\n            const id = generateId();\r\n\r\n            const timeoutId = setTimeout(() => {\r\n                pendingRequests.delete(id);\r\n                reject(new RpcTimeoutError(String(method), options.timeout));\r\n            }, options.timeout);\r\n\r\n            pendingRequests.set(id, {\r\n                resolve: resolve as (value: unknown) => void,\r\n                reject,\r\n                timeoutId\r\n            });\r\n\r\n            const message: RequestMessage = {\r\n                __iframeRpc: true,\r\n                type: MESSAGE_TYPE.REQUEST,\r\n                channel: options.channel,\r\n                id,\r\n                method: method as string,\r\n                args,\r\n            };\r\n\r\n            sendMessage(target, message);\r\n        });\r\n    };\r\n\r\n    const notify = <K extends VoidMethods<TRemote>>(\r\n        method: K,\r\n        ...args: Parameters<TRemote[K]>\r\n    ) => {\r\n        if (isDestroyed) {\r\n            logger.error('Cannot notify: bridge has been destroyed');\r\n            return;\r\n        }\r\n\r\n        const message: FireAndForgetMessage = {\r\n            __iframeRpc: true,\r\n            type: MESSAGE_TYPE.FIRE_AND_FORGET,\r\n            channel: options.channel,\r\n            method: method as string,\r\n            args,\r\n        };\r\n\r\n        sendMessage(target, message);\r\n    };\r\n\r\n    // Create call proxy with type safety\r\n    const call = new Proxy({} as CallProxy<TRemote>, {\r\n        get(_, prop) {\r\n            // Handle Symbol properties (e.g., Symbol.toStringTag, Symbol.iterator)\r\n            if (typeof prop === 'symbol') return undefined;\r\n            return (...args: unknown[]) => callMethod(prop as keyof TRemote, args);\r\n        },\r\n    });\r\n\r\n    // Set up message listener\r\n    window.addEventListener('message', handleMessage);\r\n\r\n    return {\r\n        call,\r\n        invoke: <K extends keyof TRemote>(method: K, ...args: Parameters<TRemote[K]>) =>\r\n            callMethod(method, args),\r\n        notify,\r\n        destroy: () => {\r\n            isDestroyed = true;\r\n            window.removeEventListener('message', handleMessage);\r\n\r\n            // Reject all pending requests\r\n            for (const [, pending] of pendingRequests) {\r\n                clearTimeout(pending.timeoutId);\r\n                pending.reject(new RpcError('Bridge destroyed', 'DESTROYED'));\r\n            }\r\n            pendingRequests.clear();\r\n\r\n            logger.log('Bridge destroyed');\r\n        },\r\n        isActive: () => !isDestroyed,\r\n    };\r\n}\r\n\r\n// ============================================================================\r\n// Public API\r\n// ============================================================================\r\n\r\n/**\r\n * Create a bridge in the parent window to communicate with an iframe\r\n * \r\n * @param iframe - The iframe element to communicate with\r\n * @param handlers - Object containing methods that the iframe can call\r\n * @param options - Bridge configuration options\r\n * @returns Bridge instance with type-safe call proxy\r\n * \r\n * @example\r\n * const bridge = createParentBridge<ParentMethods, IframeMethods>(\r\n *   document.getElementById('my-iframe') as HTMLIFrameElement,\r\n *   {\r\n *     getData: async (key) => localStorage.getItem(key),\r\n *     setData: async (key, value) => localStorage.setItem(key, value),\r\n *   }\r\n * );\r\n * \r\n * // Call iframe methods with full type safety\r\n * const result = await bridge.call.iframeMethod(arg1, arg2);\r\n */\r\nexport function createParentBridge<\r\n    TLocal extends MethodContract,\r\n    TRemote extends MethodContract\r\n>(\r\n    iframe: HTMLIFrameElement,\r\n    handlers: TLocal,\r\n    options: BridgeOptions = {}\r\n): Bridge<TLocal, TRemote> {\r\n    if (!iframe.contentWindow) {\r\n        throw new Error('Iframe contentWindow is not available. Make sure the iframe is loaded.');\r\n    }\r\n\r\n    const mergedOptions = { ...DEFAULT_OPTIONS, ...options };\r\n    warnIfInsecureOrigin(mergedOptions);\r\n\r\n    return createBridge<TLocal, TRemote>(\r\n        iframe.contentWindow,\r\n        handlers,\r\n        mergedOptions,\r\n        'parent'\r\n    );\r\n}\r\n\r\n/**\r\n * Create a bridge in the iframe to communicate with the parent window\r\n * \r\n * @param handlers - Object containing methods that the parent can call\r\n * @param options - Bridge configuration options\r\n * @returns Bridge instance with type-safe call proxy\r\n * \r\n * @example\r\n * const bridge = createIframeBridge<IframeMethods, ParentMethods>({\r\n *   getStatus: async () => 'ready',\r\n *   initialize: async (config) => {\r\n *     console.log('Initialized with:', config);\r\n *   },\r\n * });\r\n * \r\n * // Call parent methods with full type safety\r\n * const data = await bridge.call.getData('user');\r\n */\r\nexport function createIframeBridge<\r\n    TLocal extends MethodContract,\r\n    TRemote extends MethodContract\r\n>(\r\n    handlers: TLocal,\r\n    options: BridgeOptions = {}\r\n): Bridge<TLocal, TRemote> {\r\n    if (!window.parent || window.parent === window) {\r\n        throw new Error('Not running inside an iframe');\r\n    }\r\n\r\n    const mergedOptions = { ...DEFAULT_OPTIONS, ...options };\r\n    warnIfInsecureOrigin(mergedOptions);\r\n\r\n    return createBridge<TLocal, TRemote>(\r\n        window.parent,\r\n        handlers,\r\n        mergedOptions,\r\n        'iframe'\r\n    );\r\n}\r\n\r\n// ============================================================================\r\n// Type Helpers for Contract Definition\r\n// ============================================================================\r\n\r\n/**\r\n * Helper type to define RPC method contracts\r\n * Ensures all methods are properly typed\r\n */\r\nexport type DefineContract<T extends MethodContract> = T;\r\n\r\n/**\r\n * Extract parameter types from a method contract\r\n */\r\nexport type ParamsOf<T extends MethodContract, K extends keyof T> = Parameters<T[K]>;\r\n\r\n/**\r\n * Extract return type from a method contract\r\n */\r\nexport type ReturnOf<T extends MethodContract, K extends keyof T> = UnwrapPromise<ReturnType<T[K]>>;\r\n\r\n// ============================================================================\r\n// Re-exports\r\n// ============================================================================\r\n\r\nexport { MESSAGE_TYPE };\r\nexport type {\r\n    MethodContract,\r\n    CallProxy,\r\n    VoidMethods,\r\n    ValueMethods,\r\n    IsFunction,\r\n    RpcMessage,\r\n    RequestMessage,\r\n    ResponseMessage,\r\n    ErrorMessage,\r\n    FireAndForgetMessage,\r\n};"]}

package/dist/index.d.cts

@@ -0,0 +1,177 @@
+/**
+ * Type-safe bidirectional RPC communication between parent window and iframe
+ *
+ * @example
+ * // Define your API contract
+ * type ParentMethods = {
+ *   getUser: (id: string) => Promise<{ name: string; age: number }>;
+ *   notify: (message: string) => void;
+ * };
+ *
+ * type IframeMethods = {
+ *   initialize: (config: { theme: string }) => Promise<void>;
+ *   getStatus: () => Promise<'ready' | 'loading'>;
+ * };
+ *
+ * // In parent
+ * const bridge = createParentBridge<ParentMethods, IframeMethods>(iframe, {
+ *   getUser: async (id) => ({ name: 'John', age: 30 }),
+ *   notify: (message) => console.log(message),
+ * });
+ * const status = await bridge.call.getStatus();
+ *
+ * // In iframe
+ * const bridge = createIframeBridge<IframeMethods, ParentMethods>({
+ *   initialize: async (config) => { ... },
+ *   getStatus: async () => 'ready',
+ * });
+ * const user = await bridge.call.getUser('123');
+ */
+/** Extract the return type, unwrapping Promise if needed */
+type UnwrapPromise<T> = T extends Promise<infer U> ? U : T;
+/** Check if a type is a function */
+type IsFunction<T> = T extends (...args: any[]) => any ? true : false;
+/** Method definition - can be sync or async */
+type AnyMethod = (...args: any[]) => any;
+/** Contract for RPC methods */
+type MethodContract = Record<string, AnyMethod>;
+/** Extract methods that return void (fire-and-forget) */
+type VoidMethods<T extends MethodContract> = {
+    [K in keyof T]: UnwrapPromise<ReturnType<T[K]>> extends void ? K : never;
+}[keyof T];
+/** Extract methods that return a value (request-response) */
+type ValueMethods<T extends MethodContract> = Exclude<keyof T, VoidMethods<T>>;
+declare const MESSAGE_TYPE: {
+    readonly REQUEST: "iframe-rpc:request";
+    readonly RESPONSE: "iframe-rpc:response";
+    readonly ERROR: "iframe-rpc:error";
+    readonly FIRE_AND_FORGET: "iframe-rpc:fire-and-forget";
+};
+interface BaseMessage {
+    __iframeRpc: true;
+    channel?: string;
+}
+interface RequestMessage<T extends MethodContract = MethodContract> extends BaseMessage {
+    type: typeof MESSAGE_TYPE.REQUEST;
+    id: string;
+    method: keyof T & string;
+    args: unknown[];
+}
+interface ResponseMessage extends BaseMessage {
+    type: typeof MESSAGE_TYPE.RESPONSE;
+    id: string;
+    result: unknown;
+}
+interface ErrorMessage extends BaseMessage {
+    type: typeof MESSAGE_TYPE.ERROR;
+    id: string;
+    error: {
+        message: string;
+        code?: string;
+        stack?: string;
+    };
+}
+interface FireAndForgetMessage<T extends MethodContract = MethodContract> extends BaseMessage {
+    type: typeof MESSAGE_TYPE.FIRE_AND_FORGET;
+    method: keyof T & string;
+    args: unknown[];
+}
+type RpcMessage<T extends MethodContract = MethodContract> = RequestMessage<T> | ResponseMessage | ErrorMessage | FireAndForgetMessage<T>;
+declare class RpcError extends Error {
+    readonly code?: string | undefined;
+    readonly originalStack?: string | undefined;
+    constructor(message: string, code?: string | undefined, originalStack?: string | undefined);
+}
+declare class RpcTimeoutError extends RpcError {
+    constructor(method: string, timeout: number);
+}
+declare class RpcMethodNotFoundError extends RpcError {
+    constructor(method: string);
+}
+interface BridgeOptions {
+    /** Timeout for RPC calls in milliseconds. Default: 30000 */
+    timeout?: number;
+    /** Target origin for postMessage. Default: '*' (consider security implications) */
+    targetOrigin?: string;
+    /** Optional channel name to isolate multiple bridges */
+    channel?: string;
+    /** Enable debug logging */
+    debug?: boolean;
+    /** Include stack traces in error responses. Default: false (security) */
+    includeStackTraces?: boolean;
+}
+type CallProxy<T extends MethodContract> = {
+    [K in keyof T]: T[K] extends (...args: infer A) => infer R ? (...args: A) => Promise<UnwrapPromise<R>> : never;
+};
+/**
+ * Bridge interface for bidirectional RPC communication
+ * @typeParam _TLocal - Local method handlers (unused, retained for API symmetry)
+ * @typeParam TRemote - Remote methods available to call
+ */
+interface Bridge<_TLocal extends MethodContract, TRemote extends MethodContract> {
+    /** Proxy object to call remote methods with full type safety */
+    call: CallProxy<TRemote>;
+    /** Call remote method by name (for dynamic method calls) */
+    invoke: <K extends keyof TRemote>(method: K, ...args: Parameters<TRemote[K]>) => Promise<UnwrapPromise<ReturnType<TRemote[K]>>>;
+    /** Fire-and-forget call (no response expected) */
+    notify: <K extends VoidMethods<TRemote>>(method: K, ...args: Parameters<TRemote[K]>) => void;
+    /** Destroy the bridge and clean up resources */
+    destroy: () => void;
+    /** Check if the bridge is still active */
+    isActive: () => boolean;
+}
+/**
+ * Create a bridge in the parent window to communicate with an iframe
+ *
+ * @param iframe - The iframe element to communicate with
+ * @param handlers - Object containing methods that the iframe can call
+ * @param options - Bridge configuration options
+ * @returns Bridge instance with type-safe call proxy
+ *
+ * @example
+ * const bridge = createParentBridge<ParentMethods, IframeMethods>(
+ *   document.getElementById('my-iframe') as HTMLIFrameElement,
+ *   {
+ *     getData: async (key) => localStorage.getItem(key),
+ *     setData: async (key, value) => localStorage.setItem(key, value),
+ *   }
+ * );
+ *
+ * // Call iframe methods with full type safety
+ * const result = await bridge.call.iframeMethod(arg1, arg2);
+ */
+declare function createParentBridge<TLocal extends MethodContract, TRemote extends MethodContract>(iframe: HTMLIFrameElement, handlers: TLocal, options?: BridgeOptions): Bridge<TLocal, TRemote>;
+/**
+ * Create a bridge in the iframe to communicate with the parent window
+ *
+ * @param handlers - Object containing methods that the parent can call
+ * @param options - Bridge configuration options
+ * @returns Bridge instance with type-safe call proxy
+ *
+ * @example
+ * const bridge = createIframeBridge<IframeMethods, ParentMethods>({
+ *   getStatus: async () => 'ready',
+ *   initialize: async (config) => {
+ *     console.log('Initialized with:', config);
+ *   },
+ * });
+ *
+ * // Call parent methods with full type safety
+ * const data = await bridge.call.getData('user');
+ */
+declare function createIframeBridge<TLocal extends MethodContract, TRemote extends MethodContract>(handlers: TLocal, options?: BridgeOptions): Bridge<TLocal, TRemote>;
+/**
+ * Helper type to define RPC method contracts
+ * Ensures all methods are properly typed
+ */
+type DefineContract<T extends MethodContract> = T;
+/**
+ * Extract parameter types from a method contract
+ */
+type ParamsOf<T extends MethodContract, K extends keyof T> = Parameters<T[K]>;
+/**
+ * Extract return type from a method contract
+ */
+type ReturnOf<T extends MethodContract, K extends keyof T> = UnwrapPromise<ReturnType<T[K]>>;
+
+export { type Bridge, type BridgeOptions, type CallProxy, type DefineContract, type ErrorMessage, type FireAndForgetMessage, type IsFunction, MESSAGE_TYPE, type MethodContract, type ParamsOf, type RequestMessage, type ResponseMessage, type ReturnOf, RpcError, type RpcMessage, RpcMethodNotFoundError, RpcTimeoutError, type ValueMethods, type VoidMethods, createIframeBridge, createParentBridge };

package/dist/index.d.ts

@@ -0,0 +1,177 @@
+/**
+ * Type-safe bidirectional RPC communication between parent window and iframe
+ *
+ * @example
+ * // Define your API contract
+ * type ParentMethods = {
+ *   getUser: (id: string) => Promise<{ name: string; age: number }>;
+ *   notify: (message: string) => void;
+ * };
+ *
+ * type IframeMethods = {
+ *   initialize: (config: { theme: string }) => Promise<void>;
+ *   getStatus: () => Promise<'ready' | 'loading'>;
+ * };
+ *
+ * // In parent
+ * const bridge = createParentBridge<ParentMethods, IframeMethods>(iframe, {
+ *   getUser: async (id) => ({ name: 'John', age: 30 }),
+ *   notify: (message) => console.log(message),
+ * });
+ * const status = await bridge.call.getStatus();
+ *
+ * // In iframe
+ * const bridge = createIframeBridge<IframeMethods, ParentMethods>({
+ *   initialize: async (config) => { ... },
+ *   getStatus: async () => 'ready',
+ * });
+ * const user = await bridge.call.getUser('123');
+ */
+/** Extract the return type, unwrapping Promise if needed */
+type UnwrapPromise<T> = T extends Promise<infer U> ? U : T;
+/** Check if a type is a function */
+type IsFunction<T> = T extends (...args: any[]) => any ? true : false;
+/** Method definition - can be sync or async */
+type AnyMethod = (...args: any[]) => any;
+/** Contract for RPC methods */
+type MethodContract = Record<string, AnyMethod>;
+/** Extract methods that return void (fire-and-forget) */
+type VoidMethods<T extends MethodContract> = {
+    [K in keyof T]: UnwrapPromise<ReturnType<T[K]>> extends void ? K : never;
+}[keyof T];
+/** Extract methods that return a value (request-response) */
+type ValueMethods<T extends MethodContract> = Exclude<keyof T, VoidMethods<T>>;
+declare const MESSAGE_TYPE: {
+    readonly REQUEST: "iframe-rpc:request";
+    readonly RESPONSE: "iframe-rpc:response";
+    readonly ERROR: "iframe-rpc:error";
+    readonly FIRE_AND_FORGET: "iframe-rpc:fire-and-forget";
+};
+interface BaseMessage {
+    __iframeRpc: true;
+    channel?: string;
+}
+interface RequestMessage<T extends MethodContract = MethodContract> extends BaseMessage {
+    type: typeof MESSAGE_TYPE.REQUEST;
+    id: string;
+    method: keyof T & string;
+    args: unknown[];
+}
+interface ResponseMessage extends BaseMessage {
+    type: typeof MESSAGE_TYPE.RESPONSE;
+    id: string;
+    result: unknown;
+}
+interface ErrorMessage extends BaseMessage {
+    type: typeof MESSAGE_TYPE.ERROR;
+    id: string;
+    error: {
+        message: string;
+        code?: string;
+        stack?: string;
+    };
+}
+interface FireAndForgetMessage<T extends MethodContract = MethodContract> extends BaseMessage {
+    type: typeof MESSAGE_TYPE.FIRE_AND_FORGET;
+    method: keyof T & string;
+    args: unknown[];
+}
+type RpcMessage<T extends MethodContract = MethodContract> = RequestMessage<T> | ResponseMessage | ErrorMessage | FireAndForgetMessage<T>;
+declare class RpcError extends Error {
+    readonly code?: string | undefined;
+    readonly originalStack?: string | undefined;
+    constructor(message: string, code?: string | undefined, originalStack?: string | undefined);
+}
+declare class RpcTimeoutError extends RpcError {
+    constructor(method: string, timeout: number);
+}
+declare class RpcMethodNotFoundError extends RpcError {
+    constructor(method: string);
+}
+interface BridgeOptions {
+    /** Timeout for RPC calls in milliseconds. Default: 30000 */
+    timeout?: number;
+    /** Target origin for postMessage. Default: '*' (consider security implications) */
+    targetOrigin?: string;
+    /** Optional channel name to isolate multiple bridges */
+    channel?: string;
+    /** Enable debug logging */
+    debug?: boolean;
+    /** Include stack traces in error responses. Default: false (security) */
+    includeStackTraces?: boolean;
+}
+type CallProxy<T extends MethodContract> = {
+    [K in keyof T]: T[K] extends (...args: infer A) => infer R ? (...args: A) => Promise<UnwrapPromise<R>> : never;
+};
+/**
+ * Bridge interface for bidirectional RPC communication
+ * @typeParam _TLocal - Local method handlers (unused, retained for API symmetry)
+ * @typeParam TRemote - Remote methods available to call
+ */
+interface Bridge<_TLocal extends MethodContract, TRemote extends MethodContract> {
+    /** Proxy object to call remote methods with full type safety */
+    call: CallProxy<TRemote>;
+    /** Call remote method by name (for dynamic method calls) */
+    invoke: <K extends keyof TRemote>(method: K, ...args: Parameters<TRemote[K]>) => Promise<UnwrapPromise<ReturnType<TRemote[K]>>>;
+    /** Fire-and-forget call (no response expected) */
+    notify: <K extends VoidMethods<TRemote>>(method: K, ...args: Parameters<TRemote[K]>) => void;
+    /** Destroy the bridge and clean up resources */
+    destroy: () => void;
+    /** Check if the bridge is still active */
+    isActive: () => boolean;
+}
+/**
+ * Create a bridge in the parent window to communicate with an iframe
+ *
+ * @param iframe - The iframe element to communicate with
+ * @param handlers - Object containing methods that the iframe can call
+ * @param options - Bridge configuration options
+ * @returns Bridge instance with type-safe call proxy
+ *
+ * @example
+ * const bridge = createParentBridge<ParentMethods, IframeMethods>(
+ *   document.getElementById('my-iframe') as HTMLIFrameElement,
+ *   {
+ *     getData: async (key) => localStorage.getItem(key),
+ *     setData: async (key, value) => localStorage.setItem(key, value),
+ *   }
+ * );
+ *
+ * // Call iframe methods with full type safety
+ * const result = await bridge.call.iframeMethod(arg1, arg2);
+ */
+declare function createParentBridge<TLocal extends MethodContract, TRemote extends MethodContract>(iframe: HTMLIFrameElement, handlers: TLocal, options?: BridgeOptions): Bridge<TLocal, TRemote>;
+/**
+ * Create a bridge in the iframe to communicate with the parent window
+ *
+ * @param handlers - Object containing methods that the parent can call
+ * @param options - Bridge configuration options
+ * @returns Bridge instance with type-safe call proxy
+ *
+ * @example
+ * const bridge = createIframeBridge<IframeMethods, ParentMethods>({
+ *   getStatus: async () => 'ready',
+ *   initialize: async (config) => {
+ *     console.log('Initialized with:', config);
+ *   },
+ * });
+ *
+ * // Call parent methods with full type safety
+ * const data = await bridge.call.getData('user');
+ */
+declare function createIframeBridge<TLocal extends MethodContract, TRemote extends MethodContract>(handlers: TLocal, options?: BridgeOptions): Bridge<TLocal, TRemote>;
+/**
+ * Helper type to define RPC method contracts
+ * Ensures all methods are properly typed
+ */
+type DefineContract<T extends MethodContract> = T;
+/**
+ * Extract parameter types from a method contract
+ */
+type ParamsOf<T extends MethodContract, K extends keyof T> = Parameters<T[K]>;
+/**
+ * Extract return type from a method contract
+ */
+type ReturnOf<T extends MethodContract, K extends keyof T> = UnwrapPromise<ReturnType<T[K]>>;
+
+export { type Bridge, type BridgeOptions, type CallProxy, type DefineContract, type ErrorMessage, type FireAndForgetMessage, type IsFunction, MESSAGE_TYPE, type MethodContract, type ParamsOf, type RequestMessage, type ResponseMessage, type ReturnOf, RpcError, type RpcMessage, RpcMethodNotFoundError, RpcTimeoutError, type ValueMethods, type VoidMethods, createIframeBridge, createParentBridge };

package/dist/index.js

@@ -0,0 +1,264 @@
+// src/index.ts
+var MESSAGE_TYPE = {
+  REQUEST: "iframe-rpc:request",
+  RESPONSE: "iframe-rpc:response",
+  ERROR: "iframe-rpc:error",
+  FIRE_AND_FORGET: "iframe-rpc:fire-and-forget"
+};
+var RpcError = class extends Error {
+  constructor(message, code, originalStack) {
+    super(message);
+    this.code = code;
+    this.originalStack = originalStack;
+    this.name = "RpcError";
+  }
+};
+var RpcTimeoutError = class extends RpcError {
+  constructor(method, timeout) {
+    super(`RPC call to "${method}" timed out after ${timeout}ms`, "TIMEOUT");
+    this.name = "RpcTimeoutError";
+  }
+};
+var RpcMethodNotFoundError = class extends RpcError {
+  constructor(method) {
+    super(`Method "${method}" not found`, "METHOD_NOT_FOUND");
+    this.name = "RpcMethodNotFoundError";
+  }
+};
+var DEFAULT_OPTIONS = {
+  timeout: 3e4,
+  targetOrigin: "*",
+  channel: "default",
+  debug: false,
+  includeStackTraces: false
+};
+function generateId() {
+  if (typeof crypto !== "undefined" && crypto.randomUUID) {
+    return crypto.randomUUID();
+  }
+  if (typeof crypto !== "undefined" && crypto.getRandomValues) {
+    const array = new Uint32Array(2);
+    crypto.getRandomValues(array);
+    return `${array[0].toString(16)}-${array[1].toString(16)}-${Date.now().toString(36)}`;
+  }
+  return `${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
+}
+var VALID_MESSAGE_TYPES = new Set(Object.values(MESSAGE_TYPE));
+function isRpcMessage(data) {
+  return typeof data === "object" && data !== null && "__iframeRpc" in data && data.__iframeRpc === true && "type" in data && VALID_MESSAGE_TYPES.has(data.type);
+}
+function warnIfInsecureOrigin(options) {
+  if (options.debug && options.targetOrigin === "*") {
+    console.warn('[iframe-rpc] Using targetOrigin:"*" is insecure for production. Consider specifying an exact origin.');
+  }
+}
+function createLogger(debug, prefix) {
+  return {
+    log: (...args) => {
+      if (debug) console.log(`[${prefix}]`, ...args);
+    },
+    error: (...args) => {
+      if (debug) console.error(`[${prefix}]`, ...args);
+    }
+  };
+}
+function createBridge(target, handlers, options, side) {
+  const pendingRequests = /* @__PURE__ */ new Map();
+  let isDestroyed = false;
+  const logger = createLogger(options.debug, `iframe-rpc:${side}`);
+  const handleMessage = (event) => {
+    if (isDestroyed) return;
+    if (options.targetOrigin !== "*" && event.origin !== options.targetOrigin) {
+      logger.log("Rejected message from untrusted origin:", event.origin);
+      return;
+    }
+    const data = event.data;
+    if (!isRpcMessage(data)) return;
+    if (data.channel !== options.channel) return;
+    logger.log("Received message:", data);
+    switch (data.type) {
+      case MESSAGE_TYPE.REQUEST:
+        if (!event.source) {
+          logger.error("Request received with null source");
+          return;
+        }
+        handleRequest(data, event.source);
+        break;
+      case MESSAGE_TYPE.RESPONSE:
+        handleResponse(data);
+        break;
+      case MESSAGE_TYPE.ERROR:
+        handleError(data);
+        break;
+      case MESSAGE_TYPE.FIRE_AND_FORGET:
+        handleFireAndForget(data);
+        break;
+    }
+  };
+  const handleRequest = async (message, source) => {
+    const { id, method, args } = message;
+    const handler = handlers[method];
+    if (!handler) {
+      sendError(source, id, new RpcMethodNotFoundError(method));
+      return;
+    }
+    try {
+      const result = await handler(...args);
+      sendResponse(source, id, result);
+    } catch (error) {
+      sendError(source, id, error instanceof Error ? error : new Error(String(error)));
+    }
+  };
+  const handleResponse = (message) => {
+    const pending = pendingRequests.get(message.id);
+    if (!pending) {
+      logger.error("No pending request for response:", message.id);
+      return;
+    }
+    clearTimeout(pending.timeoutId);
+    pendingRequests.delete(message.id);
+    pending.resolve(message.result);
+  };
+  const handleError = (message) => {
+    const pending = pendingRequests.get(message.id);
+    if (!pending) {
+      logger.error("No pending request for error:", message.id);
+      return;
+    }
+    clearTimeout(pending.timeoutId);
+    pendingRequests.delete(message.id);
+    pending.reject(
+      new RpcError(message.error.message, message.error.code, message.error.stack)
+    );
+  };
+  const handleFireAndForget = (message) => {
+    const handler = handlers[message.method];
+    if (!handler) {
+      logger.error("Handler not found for fire-and-forget:", message.method);
+      return;
+    }
+    Promise.resolve().then(() => handler(...message.args)).catch((error) => logger.error("Error in fire-and-forget handler:", error));
+  };
+  const sendMessage = (targetWindow, message) => {
+    logger.log("Sending message:", message);
+    targetWindow.postMessage(message, options.targetOrigin);
+  };
+  const sendResponse = (targetWindow, id, result) => {
+    const message = {
+      __iframeRpc: true,
+      type: MESSAGE_TYPE.RESPONSE,
+      channel: options.channel,
+      id,
+      result
+    };
+    sendMessage(targetWindow, message);
+  };
+  const sendError = (targetWindow, id, error) => {
+    const message = {
+      __iframeRpc: true,
+      type: MESSAGE_TYPE.ERROR,
+      channel: options.channel,
+      id,
+      error: {
+        message: error.message,
+        ...error instanceof RpcError && error.code ? { code: error.code } : {},
+        // Only include stack traces if explicitly enabled (security consideration)
+        ...options.includeStackTraces && error.stack ? { stack: error.stack } : {}
+      }
+    };
+    sendMessage(targetWindow, message);
+  };
+  const callMethod = (method, args) => {
+    if (isDestroyed) {
+      return Promise.reject(new RpcError("Bridge has been destroyed", "DESTROYED"));
+    }
+    return new Promise((resolve, reject) => {
+      const id = generateId();
+      const timeoutId = setTimeout(() => {
+        pendingRequests.delete(id);
+        reject(new RpcTimeoutError(String(method), options.timeout));
+      }, options.timeout);
+      pendingRequests.set(id, {
+        resolve,
+        reject,
+        timeoutId
+      });
+      const message = {
+        __iframeRpc: true,
+        type: MESSAGE_TYPE.REQUEST,
+        channel: options.channel,
+        id,
+        method,
+        args
+      };
+      sendMessage(target, message);
+    });
+  };
+  const notify = (method, ...args) => {
+    if (isDestroyed) {
+      logger.error("Cannot notify: bridge has been destroyed");
+      return;
+    }
+    const message = {
+      __iframeRpc: true,
+      type: MESSAGE_TYPE.FIRE_AND_FORGET,
+      channel: options.channel,
+      method,
+      args
+    };
+    sendMessage(target, message);
+  };
+  const call = new Proxy({}, {
+    get(_, prop) {
+      if (typeof prop === "symbol") return void 0;
+      return (...args) => callMethod(prop, args);
+    }
+  });
+  window.addEventListener("message", handleMessage);
+  return {
+    call,
+    invoke: (method, ...args) => callMethod(method, args),
+    notify,
+    destroy: () => {
+      isDestroyed = true;
+      window.removeEventListener("message", handleMessage);
+      for (const [, pending] of pendingRequests) {
+        clearTimeout(pending.timeoutId);
+        pending.reject(new RpcError("Bridge destroyed", "DESTROYED"));
+      }
+      pendingRequests.clear();
+      logger.log("Bridge destroyed");
+    },
+    isActive: () => !isDestroyed
+  };
+}
+function createParentBridge(iframe, handlers, options = {}) {
+  if (!iframe.contentWindow) {
+    throw new Error("Iframe contentWindow is not available. Make sure the iframe is loaded.");
+  }
+  const mergedOptions = { ...DEFAULT_OPTIONS, ...options };
+  warnIfInsecureOrigin(mergedOptions);
+  return createBridge(
+    iframe.contentWindow,
+    handlers,
+    mergedOptions,
+    "parent"
+  );
+}
+function createIframeBridge(handlers, options = {}) {
+  if (!window.parent || window.parent === window) {
+    throw new Error("Not running inside an iframe");
+  }
+  const mergedOptions = { ...DEFAULT_OPTIONS, ...options };
+  warnIfInsecureOrigin(mergedOptions);
+  return createBridge(
+    window.parent,
+    handlers,
+    mergedOptions,
+    "iframe"
+  );
+}
+
+export { MESSAGE_TYPE, RpcError, RpcMethodNotFoundError, RpcTimeoutError, createIframeBridge, createParentBridge };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";AA0DA,IAAM,YAAA,GAAe;AAAA,EACjB,OAAA,EAAS,oBAAA;AAAA,EACT,QAAA,EAAU,qBAAA;AAAA,EACV,KAAA,EAAO,kBAAA;AAAA,EACP,eAAA,EAAiB;AACrB;AA8CO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EAChC,WAAA,CACI,OAAA,EACgB,IAAA,EACA,aAAA,EAClB;AACE,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,aAAA,GAAA,aAAA;AAGhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AAAA,EAChB;AACJ;AAEO,IAAM,eAAA,GAAN,cAA8B,QAAA,CAAS;AAAA,EAC1C,WAAA,CAAY,QAAgB,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,CAAA,aAAA,EAAgB,MAAM,CAAA,kBAAA,EAAqB,OAAO,MAAM,SAAS,CAAA;AACvE,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AAAA,EAChB;AACJ;AAEO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACjD,YAAY,MAAA,EAAgB;AACxB,IAAA,KAAA,CAAM,CAAA,QAAA,EAAW,MAAM,CAAA,WAAA,CAAA,EAAe,kBAAkB,CAAA;AACxD,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EAChB;AACJ;AAmBA,IAAM,eAAA,GAA2C;AAAA,EAC7C,OAAA,EAAS,GAAA;AAAA,EACT,YAAA,EAAc,GAAA;AAAA,EACd,OAAA,EAAS,SAAA;AAAA,EACT,KAAA,EAAO,KAAA;AAAA,EACP,kBAAA,EAAoB;AACxB,CAAA;AAMA,SAAS,UAAA,GAAqB;AAC1B,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACpD,IAAA,OAAO,OAAO,UAAA,EAAW;AAAA,EAC7B;AAEA,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,eAAA,EAAiB;AACzD,IAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,CAAY,CAAC,CAAA;AAC/B,IAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,IAAA,OAAO,CAAA,EAAG,MAAM,CAAC,CAAA,CAAE,SAAS,EAAE,CAAC,IAAI,KAAA,CAAM,CAAC,EAAE,QAAA,CAAS,EAAE,CAAC,CAAA,CAAA,EAAI,IAAA,CAAK,KAAI,CAAE,QAAA,CAAS,EAAE,CAAC,CAAA,CAAA;AAAA,EACvF;AACA,EAAA,OAAO,CAAA,EAAG,IAAA,CAAK,GAAA,EAAK,IAAI,IAAA,CAAK,MAAA,EAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA;AACnE;AAGA,IAAM,sBAAsB,IAAI,GAAA,CAAI,MAAA,CAAO,MAAA,CAAO,YAAY,CAAC,CAAA;AAE/D,SAAS,aAAa,IAAA,EAAmC;AACrD,EAAA,OACI,OAAO,IAAA,KAAS,QAAA,IAChB,IAAA,KAAS,QACT,aAAA,IAAiB,IAAA,IAChB,IAAA,CAAa,WAAA,KAAgB,QAC9B,MAAA,IAAU,IAAA,IACV,mBAAA,CAAoB,GAAA,CAAK,KAAa,IAAI,CAAA;AAElD;AAEA,SAAS,qBAAqB,OAAA,EAAwC;AAClE,EAAA,IAAI,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,YAAA,KAAiB,GAAA,EAAK;AAC/C,IAAA,OAAA,CAAQ,KAAK,sGAAsG,CAAA;AAAA,EACvH;AACJ;AAEA,SAAS,YAAA,CAAa,OAAgB,MAAA,EAAgB;AAClD,EAAA,OAAO;AAAA,IACH,GAAA,EAAK,IAAI,IAAA,KAAoB;AACzB,MAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,CAAI,IAAI,MAAM,CAAA,CAAA,CAAA,EAAK,GAAG,IAAI,CAAA;AAAA,IACjD,CAAA;AAAA,IACA,KAAA,EAAO,IAAI,IAAA,KAAoB;AAC3B,MAAA,IAAI,OAAO,OAAA,CAAQ,KAAA,CAAM,IAAI,MAAM,CAAA,CAAA,CAAA,EAAK,GAAG,IAAI,CAAA;AAAA,IACnD;AAAA,GACJ;AACJ;AAkDA,SAAS,YAAA,CAIL,MAAA,EACA,QAAA,EACA,OAAA,EACA,IAAA,EACuB;AACvB,EAAA,MAAM,eAAA,uBAAsB,GAAA,EAA4B;AACxD,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,MAAM,SAAS,YAAA,CAAa,OAAA,CAAQ,KAAA,EAAO,CAAA,WAAA,EAAc,IAAI,CAAA,CAAE,CAAA;AAG/D,EAAA,MAAM,aAAA,GAAgB,CAAC,KAAA,KAAwB;AAC3C,IAAA,IAAI,WAAA,EAAa;AAGjB,IAAA,IAAI,QAAQ,YAAA,KAAiB,GAAA,IAAO,KAAA,CAAM,MAAA,KAAW,QAAQ,YAAA,EAAc;AACvE,MAAA,MAAA,CAAO,GAAA,CAAI,yCAAA,EAA2C,KAAA,CAAM,MAAM,CAAA;AAClE,MAAA;AAAA,IACJ;AAEA,IAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,IAAA,IAAI,CAAC,YAAA,CAAa,IAAI,CAAA,EAAG;AACzB,IAAA,IAAI,IAAA,CAAK,OAAA,KAAY,OAAA,CAAQ,OAAA,EAAS;AAEtC,IAAA,MAAA,CAAO,GAAA,CAAI,qBAAqB,IAAI,CAAA;AAEpC,IAAA,QAAQ,KAAK,IAAA;AAAM,MACf,KAAK,YAAA,CAAa,OAAA;AACd,QAAA,IAAI,CAAC,MAAM,MAAA,EAAQ;AACf,UAAA,MAAA,CAAO,MAAM,mCAAmC,CAAA;AAChD,UAAA;AAAA,QACJ;AACA,QAAA,aAAA,CAAc,IAAA,EAAwB,MAAM,MAAgB,CAAA;AAC5D,QAAA;AAAA,MACJ,KAAK,YAAA,CAAa,QAAA;AACd,QAAA,cAAA,CAAe,IAAuB,CAAA;AACtC,QAAA;AAAA,MACJ,KAAK,YAAA,CAAa,KAAA;AACd,QAAA,WAAA,CAAY,IAAoB,CAAA;AAChC,QAAA;AAAA,MACJ,KAAK,YAAA,CAAa,eAAA;AACd,QAAA,mBAAA,CAAoB,IAA4B,CAAA;AAChD,QAAA;AAAA;AACR,EACJ,CAAA;AAEA,EAAA,MAAM,aAAA,GAAgB,OAAO,OAAA,EAAyB,MAAA,KAAmB;AACrE,IAAA,MAAM,EAAE,EAAA,EAAI,MAAA,EAAQ,IAAA,EAAK,GAAI,OAAA;AAC7B,IAAA,MAAM,OAAA,GAAU,SAAS,MAAsB,CAAA;AAE/C,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,SAAA,CAAU,MAAA,EAAQ,EAAA,EAAI,IAAI,sBAAA,CAAuB,MAAM,CAAC,CAAA;AACxD,MAAA;AAAA,IACJ;AAEA,IAAA,IAAI;AACA,MAAA,MAAM,MAAA,GAAS,MAAO,OAAA,CAAsB,GAAG,IAAI,CAAA;AACnD,MAAA,YAAA,CAAa,MAAA,EAAQ,IAAI,MAAM,CAAA;AAAA,IACnC,SAAS,KAAA,EAAO;AACZ,MAAA,SAAA,CAAU,MAAA,EAAQ,EAAA,EAAI,KAAA,YAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,IACnF;AAAA,EACJ,CAAA;AAEA,EAAA,MAAM,cAAA,GAAiB,CAAC,OAAA,KAA6B;AACjD,IAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,EAAE,CAAA;AAC9C,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,MAAA,CAAO,KAAA,CAAM,kCAAA,EAAoC,OAAA,CAAQ,EAAE,CAAA;AAC3D,MAAA;AAAA,IACJ;AAEA,IAAA,YAAA,CAAa,QAAQ,SAAS,CAAA;AAC9B,IAAA,eAAA,CAAgB,MAAA,CAAO,QAAQ,EAAE,CAAA;AACjC,IAAA,OAAA,CAAQ,OAAA,CAAQ,QAAQ,MAAM,CAAA;AAAA,EAClC,CAAA;AAEA,EAAA,MAAM,WAAA,GAAc,CAAC,OAAA,KAA0B;AAC3C,IAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,EAAE,CAAA;AAC9C,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,MAAA,CAAO,KAAA,CAAM,+BAAA,EAAiC,OAAA,CAAQ,EAAE,CAAA;AACxD,MAAA;AAAA,IACJ;AAEA,IAAA,YAAA,CAAa,QAAQ,SAAS,CAAA;AAC9B,IAAA,eAAA,CAAgB,MAAA,CAAO,QAAQ,EAAE,CAAA;AACjC,IAAA,OAAA,CAAQ,MAAA;AAAA,MACJ,IAAI,QAAA,CAAS,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,QAAQ,KAAA,CAAM,IAAA,EAAM,OAAA,CAAQ,KAAA,CAAM,KAAK;AAAA,KAC/E;AAAA,EACJ,CAAA;AAEA,EAAA,MAAM,mBAAA,GAAsB,CAAC,OAAA,KAAkC;AAC3D,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,OAAA,CAAQ,MAAsB,CAAA;AACvD,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,MAAA,CAAO,KAAA,CAAM,wCAAA,EAA0C,OAAA,CAAQ,MAAM,CAAA;AACrE,MAAA;AAAA,IACJ;AAGA,IAAA,OAAA,CAAQ,SAAQ,CACX,IAAA,CAAK,MAAO,OAAA,CAAsB,GAAG,OAAA,CAAQ,IAAI,CAAC,CAAA,CAClD,MAAM,CAAC,KAAA,KAAU,OAAO,KAAA,CAAM,mCAAA,EAAqC,KAAK,CAAC,CAAA;AAAA,EAClF,CAAA;AAEA,EAAA,MAAM,WAAA,GAAc,CAAC,YAAA,EAAsB,OAAA,KAAwB;AAC/D,IAAA,MAAA,CAAO,GAAA,CAAI,oBAAoB,OAAO,CAAA;AACtC,IAAA,YAAA,CAAa,WAAA,CAAY,OAAA,EAAS,OAAA,CAAQ,YAAY,CAAA;AAAA,EAC1D,CAAA;AAEA,EAAA,MAAM,YAAA,GAAe,CAAC,YAAA,EAAsB,EAAA,EAAY,MAAA,KAAoB;AACxE,IAAA,MAAM,OAAA,GAA2B;AAAA,MAC7B,WAAA,EAAa,IAAA;AAAA,MACb,MAAM,YAAA,CAAa,QAAA;AAAA,MACnB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,EAAA;AAAA,MACA;AAAA,KACJ;AACA,IAAA,WAAA,CAAY,cAAc,OAAO,CAAA;AAAA,EACrC,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,CAAC,YAAA,EAAsB,EAAA,EAAY,KAAA,KAAiB;AAClE,IAAA,MAAM,OAAA,GAAwB;AAAA,MAC1B,WAAA,EAAa,IAAA;AAAA,MACb,MAAM,YAAA,CAAa,KAAA;AAAA,MACnB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,EAAA;AAAA,MACA,KAAA,EAAO;AAAA,QACH,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,GAAI,KAAA,YAAiB,QAAA,IAAY,KAAA,CAAM,IAAA,GAAO,EAAE,IAAA,EAAM,KAAA,CAAM,IAAA,EAAK,GAAI,EAAC;AAAA;AAAA,QAEtE,GAAI,OAAA,CAAQ,kBAAA,IAAsB,KAAA,CAAM,KAAA,GAAQ,EAAE,KAAA,EAAO,KAAA,CAAM,KAAA,EAAM,GAAI;AAAC;AAC9E,KACJ;AACA,IAAA,WAAA,CAAY,cAAc,OAAO,CAAA;AAAA,EACrC,CAAA;AAEA,EAAA,MAAM,UAAA,GAAa,CACf,MAAA,EACA,IAAA,KACiD;AACjD,IAAA,IAAI,WAAA,EAAa;AACb,MAAA,OAAO,QAAQ,MAAA,CAAO,IAAI,QAAA,CAAS,2BAAA,EAA6B,WAAW,CAAC,CAAA;AAAA,IAChF;AAEA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACpC,MAAA,MAAM,KAAK,UAAA,EAAW;AAEtB,MAAA,MAAM,SAAA,GAAY,WAAW,MAAM;AAC/B,QAAA,eAAA,CAAgB,OAAO,EAAE,CAAA;AACzB,QAAA,MAAA,CAAO,IAAI,eAAA,CAAgB,MAAA,CAAO,MAAM,CAAA,EAAG,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA,MAC/D,CAAA,EAAG,QAAQ,OAAO,CAAA;AAElB,MAAA,eAAA,CAAgB,IAAI,EAAA,EAAI;AAAA,QACpB,OAAA;AAAA,QACA,MAAA;AAAA,QACA;AAAA,OACH,CAAA;AAED,MAAA,MAAM,OAAA,GAA0B;AAAA,QAC5B,WAAA,EAAa,IAAA;AAAA,QACb,MAAM,YAAA,CAAa,OAAA;AAAA,QACnB,SAAS,OAAA,CAAQ,OAAA;AAAA,QACjB,EAAA;AAAA,QACA,MAAA;AAAA,QACA;AAAA,OACJ;AAEA,MAAA,WAAA,CAAY,QAAQ,OAAO,CAAA;AAAA,IAC/B,CAAC,CAAA;AAAA,EACL,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,CACX,MAAA,EAAA,GACG,IAAA,KACF;AACD,IAAA,IAAI,WAAA,EAAa;AACb,MAAA,MAAA,CAAO,MAAM,0CAA0C,CAAA;AACvD,MAAA;AAAA,IACJ;AAEA,IAAA,MAAM,OAAA,GAAgC;AAAA,MAClC,WAAA,EAAa,IAAA;AAAA,MACb,MAAM,YAAA,CAAa,eAAA;AAAA,MACnB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,MAAA;AAAA,MACA;AAAA,KACJ;AAEA,IAAA,WAAA,CAAY,QAAQ,OAAO,CAAA;AAAA,EAC/B,CAAA;AAGA,EAAA,MAAM,IAAA,GAAO,IAAI,KAAA,CAAM,EAAC,EAAyB;AAAA,IAC7C,GAAA,CAAI,GAAG,IAAA,EAAM;AAET,MAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,OAAO,MAAA;AACrC,MAAA,OAAO,CAAA,GAAI,IAAA,KAAoB,UAAA,CAAW,IAAA,EAAuB,IAAI,CAAA;AAAA,IACzE;AAAA,GACH,CAAA;AAGD,EAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,aAAa,CAAA;AAEhD,EAAA,OAAO;AAAA,IACH,IAAA;AAAA,IACA,QAAQ,CAA0B,MAAA,EAAA,GAAc,IAAA,KAC5C,UAAA,CAAW,QAAQ,IAAI,CAAA;AAAA,IAC3B,MAAA;AAAA,IACA,SAAS,MAAM;AACX,MAAA,WAAA,GAAc,IAAA;AACd,MAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,aAAa,CAAA;AAGnD,MAAA,KAAA,MAAW,GAAG,OAAO,CAAA,IAAK,eAAA,EAAiB;AACvC,QAAA,YAAA,CAAa,QAAQ,SAAS,CAAA;AAC9B,QAAA,OAAA,CAAQ,MAAA,CAAO,IAAI,QAAA,CAAS,kBAAA,EAAoB,WAAW,CAAC,CAAA;AAAA,MAChE;AACA,MAAA,eAAA,CAAgB,KAAA,EAAM;AAEtB,MAAA,MAAA,CAAO,IAAI,kBAAkB,CAAA;AAAA,IACjC,CAAA;AAAA,IACA,QAAA,EAAU,MAAM,CAAC;AAAA,GACrB;AACJ;AA0BO,SAAS,kBAAA,CAIZ,MAAA,EACA,QAAA,EACA,OAAA,GAAyB,EAAC,EACH;AACvB,EAAA,IAAI,CAAC,OAAO,aAAA,EAAe;AACvB,IAAA,MAAM,IAAI,MAAM,wEAAwE,CAAA;AAAA,EAC5F;AAEA,EAAA,MAAM,aAAA,GAAgB,EAAE,GAAG,eAAA,EAAiB,GAAG,OAAA,EAAQ;AACvD,EAAA,oBAAA,CAAqB,aAAa,CAAA;AAElC,EAAA,OAAO,YAAA;AAAA,IACH,MAAA,CAAO,aAAA;AAAA,IACP,QAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACJ;AACJ;AAoBO,SAAS,kBAAA,CAIZ,QAAA,EACA,OAAA,GAAyB,EAAC,EACH;AACvB,EAAA,IAAI,CAAC,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,WAAW,MAAA,EAAQ;AAC5C,IAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,EAClD;AAEA,EAAA,MAAM,aAAA,GAAgB,EAAE,GAAG,eAAA,EAAiB,GAAG,OAAA,EAAQ;AACvD,EAAA,oBAAA,CAAqB,aAAa,CAAA;AAElC,EAAA,OAAO,YAAA;AAAA,IACH,MAAA,CAAO,MAAA;AAAA,IACP,QAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACJ;AACJ","file":"index.js","sourcesContent":["/**\r\n * Type-safe bidirectional RPC communication between parent window and iframe\r\n * \r\n * @example\r\n * // Define your API contract\r\n * type ParentMethods = {\r\n *   getUser: (id: string) => Promise<{ name: string; age: number }>;\r\n *   notify: (message: string) => void;\r\n * };\r\n * \r\n * type IframeMethods = {\r\n *   initialize: (config: { theme: string }) => Promise<void>;\r\n *   getStatus: () => Promise<'ready' | 'loading'>;\r\n * };\r\n * \r\n * // In parent\r\n * const bridge = createParentBridge<ParentMethods, IframeMethods>(iframe, {\r\n *   getUser: async (id) => ({ name: 'John', age: 30 }),\r\n *   notify: (message) => console.log(message),\r\n * });\r\n * const status = await bridge.call.getStatus();\r\n * \r\n * // In iframe\r\n * const bridge = createIframeBridge<IframeMethods, ParentMethods>({\r\n *   initialize: async (config) => { ... },\r\n *   getStatus: async () => 'ready',\r\n * });\r\n * const user = await bridge.call.getUser('123');\r\n */\r\n\r\n// ============================================================================\r\n// Type Utilities\r\n// ============================================================================\r\n\r\n/** Extract the return type, unwrapping Promise if needed */\r\ntype UnwrapPromise<T> = T extends Promise<infer U> ? U : T;\r\n\r\n/** Check if a type is a function */\r\ntype IsFunction<T> = T extends (...args: any[]) => any ? true : false;\r\n\r\n/** Method definition - can be sync or async */\r\ntype AnyMethod = (...args: any[]) => any;\r\n\r\n/** Contract for RPC methods */\r\ntype MethodContract = Record<string, AnyMethod>;\r\n\r\n/** Extract methods that return void (fire-and-forget) */\r\ntype VoidMethods<T extends MethodContract> = {\r\n    [K in keyof T]: UnwrapPromise<ReturnType<T[K]>> extends void ? K : never;\r\n}[keyof T];\r\n\r\n/** Extract methods that return a value (request-response) */\r\ntype ValueMethods<T extends MethodContract> = Exclude<keyof T, VoidMethods<T>>;\r\n\r\n// ============================================================================\r\n// Message Types\r\n// ============================================================================\r\n\r\nconst MESSAGE_TYPE = {\r\n    REQUEST: 'iframe-rpc:request',\r\n    RESPONSE: 'iframe-rpc:response',\r\n    ERROR: 'iframe-rpc:error',\r\n    FIRE_AND_FORGET: 'iframe-rpc:fire-and-forget',\r\n} as const;\r\n\r\ninterface BaseMessage {\r\n    __iframeRpc: true;\r\n    channel?: string;\r\n}\r\n\r\ninterface RequestMessage<T extends MethodContract = MethodContract> extends BaseMessage {\r\n    type: typeof MESSAGE_TYPE.REQUEST;\r\n    id: string;\r\n    method: keyof T & string;\r\n    args: unknown[];\r\n}\r\n\r\ninterface ResponseMessage extends BaseMessage {\r\n    type: typeof MESSAGE_TYPE.RESPONSE;\r\n    id: string;\r\n    result: unknown;\r\n}\r\n\r\ninterface ErrorMessage extends BaseMessage {\r\n    type: typeof MESSAGE_TYPE.ERROR;\r\n    id: string;\r\n    error: {\r\n        message: string;\r\n        code?: string;\r\n        stack?: string;\r\n    };\r\n}\r\n\r\ninterface FireAndForgetMessage<T extends MethodContract = MethodContract> extends BaseMessage {\r\n    type: typeof MESSAGE_TYPE.FIRE_AND_FORGET;\r\n    method: keyof T & string;\r\n    args: unknown[];\r\n}\r\n\r\ntype RpcMessage<T extends MethodContract = MethodContract> =\r\n    | RequestMessage<T>\r\n    | ResponseMessage\r\n    | ErrorMessage\r\n    | FireAndForgetMessage<T>;\r\n\r\n// ============================================================================\r\n// Error Types\r\n// ============================================================================\r\n\r\nexport class RpcError extends Error {\r\n    constructor(\r\n        message: string,\r\n        public readonly code?: string,\r\n        public readonly originalStack?: string\r\n    ) {\r\n        super(message);\r\n        this.name = 'RpcError';\r\n    }\r\n}\r\n\r\nexport class RpcTimeoutError extends RpcError {\r\n    constructor(method: string, timeout: number) {\r\n        super(`RPC call to \"${method}\" timed out after ${timeout}ms`, 'TIMEOUT');\r\n        this.name = 'RpcTimeoutError';\r\n    }\r\n}\r\n\r\nexport class RpcMethodNotFoundError extends RpcError {\r\n    constructor(method: string) {\r\n        super(`Method \"${method}\" not found`, 'METHOD_NOT_FOUND');\r\n        this.name = 'RpcMethodNotFoundError';\r\n    }\r\n}\r\n\r\n// ============================================================================\r\n// Configuration\r\n// ============================================================================\r\n\r\nexport interface BridgeOptions {\r\n    /** Timeout for RPC calls in milliseconds. Default: 30000 */\r\n    timeout?: number;\r\n    /** Target origin for postMessage. Default: '*' (consider security implications) */\r\n    targetOrigin?: string;\r\n    /** Optional channel name to isolate multiple bridges */\r\n    channel?: string;\r\n    /** Enable debug logging */\r\n    debug?: boolean;\r\n    /** Include stack traces in error responses. Default: false (security) */\r\n    includeStackTraces?: boolean;\r\n}\r\n\r\nconst DEFAULT_OPTIONS: Required<BridgeOptions> = {\r\n    timeout: 30000,\r\n    targetOrigin: '*',\r\n    channel: 'default',\r\n    debug: false,\r\n    includeStackTraces: false,\r\n};\r\n\r\n// ============================================================================\r\n// Utility Functions\r\n// ============================================================================\r\n\r\nfunction generateId(): string {\r\n    if (typeof crypto !== 'undefined' && crypto.randomUUID) {\r\n        return crypto.randomUUID();\r\n    }\r\n    // Fallback with better entropy using getRandomValues when available\r\n    if (typeof crypto !== 'undefined' && crypto.getRandomValues) {\r\n        const array = new Uint32Array(2);\r\n        crypto.getRandomValues(array);\r\n        return `${array[0].toString(16)}-${array[1].toString(16)}-${Date.now().toString(36)}`;\r\n    }\r\n    return `${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;\r\n}\r\n\r\n// Cache valid message types for performance\r\nconst VALID_MESSAGE_TYPES = new Set(Object.values(MESSAGE_TYPE));\r\n\r\nfunction isRpcMessage(data: unknown): data is RpcMessage {\r\n    return (\r\n        typeof data === 'object' &&\r\n        data !== null &&\r\n        '__iframeRpc' in data &&\r\n        (data as any).__iframeRpc === true &&\r\n        'type' in data &&\r\n        VALID_MESSAGE_TYPES.has((data as any).type)\r\n    );\r\n}\r\n\r\nfunction warnIfInsecureOrigin(options: Required<BridgeOptions>): void {\r\n    if (options.debug && options.targetOrigin === '*') {\r\n        console.warn('[iframe-rpc] Using targetOrigin:\"*\" is insecure for production. Consider specifying an exact origin.');\r\n    }\r\n}\r\n\r\nfunction createLogger(debug: boolean, prefix: string) {\r\n    return {\r\n        log: (...args: unknown[]) => {\r\n            if (debug) console.log(`[${prefix}]`, ...args);\r\n        },\r\n        error: (...args: unknown[]) => {\r\n            if (debug) console.error(`[${prefix}]`, ...args);\r\n        },\r\n    };\r\n}\r\n\r\n// ============================================================================\r\n// Core Bridge Implementation\r\n// ============================================================================\r\n\r\ninterface PendingRequest {\r\n    resolve: (value: unknown) => void;\r\n    reject: (error: Error) => void;\r\n    timeoutId: ReturnType<typeof setTimeout>;\r\n}\r\n\r\ntype CallProxy<T extends MethodContract> = {\r\n    [K in keyof T]: T[K] extends (...args: infer A) => infer R\r\n    ? (...args: A) => Promise<UnwrapPromise<R>>\r\n    : never;\r\n};\r\n\r\n/**\r\n * Bridge interface for bidirectional RPC communication\r\n * @typeParam _TLocal - Local method handlers (unused, retained for API symmetry)\r\n * @typeParam TRemote - Remote methods available to call\r\n */\r\nexport interface Bridge<\r\n    // eslint-disable-next-line @typescript-eslint/no-unused-vars\r\n    _TLocal extends MethodContract,\r\n    TRemote extends MethodContract\r\n> {\r\n    /** Proxy object to call remote methods with full type safety */\r\n    call: CallProxy<TRemote>;\r\n\r\n    /** Call remote method by name (for dynamic method calls) */\r\n    invoke: <K extends keyof TRemote>(\r\n        method: K,\r\n        ...args: Parameters<TRemote[K]>\r\n    ) => Promise<UnwrapPromise<ReturnType<TRemote[K]>>>;\r\n\r\n    /** Fire-and-forget call (no response expected) */\r\n    notify: <K extends VoidMethods<TRemote>>(\r\n        method: K,\r\n        ...args: Parameters<TRemote[K]>\r\n    ) => void;\r\n\r\n    /** Destroy the bridge and clean up resources */\r\n    destroy: () => void;\r\n\r\n    /** Check if the bridge is still active */\r\n    isActive: () => boolean;\r\n}\r\n\r\nfunction createBridge<\r\n    TLocal extends MethodContract,\r\n    TRemote extends MethodContract\r\n>(\r\n    target: Window,\r\n    handlers: TLocal,\r\n    options: Required<BridgeOptions>,\r\n    side: 'parent' | 'iframe'\r\n): Bridge<TLocal, TRemote> {\r\n    const pendingRequests = new Map<string, PendingRequest>();\r\n    let isDestroyed = false;\r\n    const logger = createLogger(options.debug, `iframe-rpc:${side}`);\r\n\r\n    // Handle incoming messages\r\n    const handleMessage = (event: MessageEvent) => {\r\n        if (isDestroyed) return;\r\n\r\n        // Validate origin when targetOrigin is specified\r\n        if (options.targetOrigin !== '*' && event.origin !== options.targetOrigin) {\r\n            logger.log('Rejected message from untrusted origin:', event.origin);\r\n            return;\r\n        }\r\n\r\n        const data = event.data;\r\n        if (!isRpcMessage(data)) return;\r\n        if (data.channel !== options.channel) return;\r\n\r\n        logger.log('Received message:', data);\r\n\r\n        switch (data.type) {\r\n            case MESSAGE_TYPE.REQUEST:\r\n                if (!event.source) {\r\n                    logger.error('Request received with null source');\r\n                    return;\r\n                }\r\n                handleRequest(data as RequestMessage, event.source as Window);\r\n                break;\r\n            case MESSAGE_TYPE.RESPONSE:\r\n                handleResponse(data as ResponseMessage);\r\n                break;\r\n            case MESSAGE_TYPE.ERROR:\r\n                handleError(data as ErrorMessage);\r\n                break;\r\n            case MESSAGE_TYPE.FIRE_AND_FORGET:\r\n                handleFireAndForget(data as FireAndForgetMessage);\r\n                break;\r\n        }\r\n    };\r\n\r\n    const handleRequest = async (message: RequestMessage, source: Window) => {\r\n        const { id, method, args } = message;\r\n        const handler = handlers[method as keyof TLocal];\r\n\r\n        if (!handler) {\r\n            sendError(source, id, new RpcMethodNotFoundError(method));\r\n            return;\r\n        }\r\n\r\n        try {\r\n            const result = await (handler as AnyMethod)(...args);\r\n            sendResponse(source, id, result);\r\n        } catch (error) {\r\n            sendError(source, id, error instanceof Error ? error : new Error(String(error)));\r\n        }\r\n    };\r\n\r\n    const handleResponse = (message: ResponseMessage) => {\r\n        const pending = pendingRequests.get(message.id);\r\n        if (!pending) {\r\n            logger.error('No pending request for response:', message.id);\r\n            return;\r\n        }\r\n\r\n        clearTimeout(pending.timeoutId);\r\n        pendingRequests.delete(message.id);\r\n        pending.resolve(message.result);\r\n    };\r\n\r\n    const handleError = (message: ErrorMessage) => {\r\n        const pending = pendingRequests.get(message.id);\r\n        if (!pending) {\r\n            logger.error('No pending request for error:', message.id);\r\n            return;\r\n        }\r\n\r\n        clearTimeout(pending.timeoutId);\r\n        pendingRequests.delete(message.id);\r\n        pending.reject(\r\n            new RpcError(message.error.message, message.error.code, message.error.stack)\r\n        );\r\n    };\r\n\r\n    const handleFireAndForget = (message: FireAndForgetMessage) => {\r\n        const handler = handlers[message.method as keyof TLocal];\r\n        if (!handler) {\r\n            logger.error('Handler not found for fire-and-forget:', message.method);\r\n            return;\r\n        }\r\n\r\n        // Handle both sync and async handlers, catching any rejections\r\n        Promise.resolve()\r\n            .then(() => (handler as AnyMethod)(...message.args))\r\n            .catch((error) => logger.error('Error in fire-and-forget handler:', error));\r\n    };\r\n\r\n    const sendMessage = (targetWindow: Window, message: RpcMessage) => {\r\n        logger.log('Sending message:', message);\r\n        targetWindow.postMessage(message, options.targetOrigin);\r\n    };\r\n\r\n    const sendResponse = (targetWindow: Window, id: string, result: unknown) => {\r\n        const message: ResponseMessage = {\r\n            __iframeRpc: true,\r\n            type: MESSAGE_TYPE.RESPONSE,\r\n            channel: options.channel,\r\n            id,\r\n            result,\r\n        };\r\n        sendMessage(targetWindow, message);\r\n    };\r\n\r\n    const sendError = (targetWindow: Window, id: string, error: Error) => {\r\n        const message: ErrorMessage = {\r\n            __iframeRpc: true,\r\n            type: MESSAGE_TYPE.ERROR,\r\n            channel: options.channel,\r\n            id,\r\n            error: {\r\n                message: error.message,\r\n                ...(error instanceof RpcError && error.code ? { code: error.code } : {}),\r\n                // Only include stack traces if explicitly enabled (security consideration)\r\n                ...(options.includeStackTraces && error.stack ? { stack: error.stack } : {}),\r\n            },\r\n        };\r\n        sendMessage(targetWindow, message);\r\n    };\r\n\r\n    const callMethod = <K extends keyof TRemote>(\r\n        method: K,\r\n        args: unknown[]\r\n    ): Promise<UnwrapPromise<ReturnType<TRemote[K]>>> => {\r\n        if (isDestroyed) {\r\n            return Promise.reject(new RpcError('Bridge has been destroyed', 'DESTROYED'));\r\n        }\r\n\r\n        return new Promise((resolve, reject) => {\r\n            const id = generateId();\r\n\r\n            const timeoutId = setTimeout(() => {\r\n                pendingRequests.delete(id);\r\n                reject(new RpcTimeoutError(String(method), options.timeout));\r\n            }, options.timeout);\r\n\r\n            pendingRequests.set(id, {\r\n                resolve: resolve as (value: unknown) => void,\r\n                reject,\r\n                timeoutId\r\n            });\r\n\r\n            const message: RequestMessage = {\r\n                __iframeRpc: true,\r\n                type: MESSAGE_TYPE.REQUEST,\r\n                channel: options.channel,\r\n                id,\r\n                method: method as string,\r\n                args,\r\n            };\r\n\r\n            sendMessage(target, message);\r\n        });\r\n    };\r\n\r\n    const notify = <K extends VoidMethods<TRemote>>(\r\n        method: K,\r\n        ...args: Parameters<TRemote[K]>\r\n    ) => {\r\n        if (isDestroyed) {\r\n            logger.error('Cannot notify: bridge has been destroyed');\r\n            return;\r\n        }\r\n\r\n        const message: FireAndForgetMessage = {\r\n            __iframeRpc: true,\r\n            type: MESSAGE_TYPE.FIRE_AND_FORGET,\r\n            channel: options.channel,\r\n            method: method as string,\r\n            args,\r\n        };\r\n\r\n        sendMessage(target, message);\r\n    };\r\n\r\n    // Create call proxy with type safety\r\n    const call = new Proxy({} as CallProxy<TRemote>, {\r\n        get(_, prop) {\r\n            // Handle Symbol properties (e.g., Symbol.toStringTag, Symbol.iterator)\r\n            if (typeof prop === 'symbol') return undefined;\r\n            return (...args: unknown[]) => callMethod(prop as keyof TRemote, args);\r\n        },\r\n    });\r\n\r\n    // Set up message listener\r\n    window.addEventListener('message', handleMessage);\r\n\r\n    return {\r\n        call,\r\n        invoke: <K extends keyof TRemote>(method: K, ...args: Parameters<TRemote[K]>) =>\r\n            callMethod(method, args),\r\n        notify,\r\n        destroy: () => {\r\n            isDestroyed = true;\r\n            window.removeEventListener('message', handleMessage);\r\n\r\n            // Reject all pending requests\r\n            for (const [, pending] of pendingRequests) {\r\n                clearTimeout(pending.timeoutId);\r\n                pending.reject(new RpcError('Bridge destroyed', 'DESTROYED'));\r\n            }\r\n            pendingRequests.clear();\r\n\r\n            logger.log('Bridge destroyed');\r\n        },\r\n        isActive: () => !isDestroyed,\r\n    };\r\n}\r\n\r\n// ============================================================================\r\n// Public API\r\n// ============================================================================\r\n\r\n/**\r\n * Create a bridge in the parent window to communicate with an iframe\r\n * \r\n * @param iframe - The iframe element to communicate with\r\n * @param handlers - Object containing methods that the iframe can call\r\n * @param options - Bridge configuration options\r\n * @returns Bridge instance with type-safe call proxy\r\n * \r\n * @example\r\n * const bridge = createParentBridge<ParentMethods, IframeMethods>(\r\n *   document.getElementById('my-iframe') as HTMLIFrameElement,\r\n *   {\r\n *     getData: async (key) => localStorage.getItem(key),\r\n *     setData: async (key, value) => localStorage.setItem(key, value),\r\n *   }\r\n * );\r\n * \r\n * // Call iframe methods with full type safety\r\n * const result = await bridge.call.iframeMethod(arg1, arg2);\r\n */\r\nexport function createParentBridge<\r\n    TLocal extends MethodContract,\r\n    TRemote extends MethodContract\r\n>(\r\n    iframe: HTMLIFrameElement,\r\n    handlers: TLocal,\r\n    options: BridgeOptions = {}\r\n): Bridge<TLocal, TRemote> {\r\n    if (!iframe.contentWindow) {\r\n        throw new Error('Iframe contentWindow is not available. Make sure the iframe is loaded.');\r\n    }\r\n\r\n    const mergedOptions = { ...DEFAULT_OPTIONS, ...options };\r\n    warnIfInsecureOrigin(mergedOptions);\r\n\r\n    return createBridge<TLocal, TRemote>(\r\n        iframe.contentWindow,\r\n        handlers,\r\n        mergedOptions,\r\n        'parent'\r\n    );\r\n}\r\n\r\n/**\r\n * Create a bridge in the iframe to communicate with the parent window\r\n * \r\n * @param handlers - Object containing methods that the parent can call\r\n * @param options - Bridge configuration options\r\n * @returns Bridge instance with type-safe call proxy\r\n * \r\n * @example\r\n * const bridge = createIframeBridge<IframeMethods, ParentMethods>({\r\n *   getStatus: async () => 'ready',\r\n *   initialize: async (config) => {\r\n *     console.log('Initialized with:', config);\r\n *   },\r\n * });\r\n * \r\n * // Call parent methods with full type safety\r\n * const data = await bridge.call.getData('user');\r\n */\r\nexport function createIframeBridge<\r\n    TLocal extends MethodContract,\r\n    TRemote extends MethodContract\r\n>(\r\n    handlers: TLocal,\r\n    options: BridgeOptions = {}\r\n): Bridge<TLocal, TRemote> {\r\n    if (!window.parent || window.parent === window) {\r\n        throw new Error('Not running inside an iframe');\r\n    }\r\n\r\n    const mergedOptions = { ...DEFAULT_OPTIONS, ...options };\r\n    warnIfInsecureOrigin(mergedOptions);\r\n\r\n    return createBridge<TLocal, TRemote>(\r\n        window.parent,\r\n        handlers,\r\n        mergedOptions,\r\n        'iframe'\r\n    );\r\n}\r\n\r\n// ============================================================================\r\n// Type Helpers for Contract Definition\r\n// ============================================================================\r\n\r\n/**\r\n * Helper type to define RPC method contracts\r\n * Ensures all methods are properly typed\r\n */\r\nexport type DefineContract<T extends MethodContract> = T;\r\n\r\n/**\r\n * Extract parameter types from a method contract\r\n */\r\nexport type ParamsOf<T extends MethodContract, K extends keyof T> = Parameters<T[K]>;\r\n\r\n/**\r\n * Extract return type from a method contract\r\n */\r\nexport type ReturnOf<T extends MethodContract, K extends keyof T> = UnwrapPromise<ReturnType<T[K]>>;\r\n\r\n// ============================================================================\r\n// Re-exports\r\n// ============================================================================\r\n\r\nexport { MESSAGE_TYPE };\r\nexport type {\r\n    MethodContract,\r\n    CallProxy,\r\n    VoidMethods,\r\n    ValueMethods,\r\n    IsFunction,\r\n    RpcMessage,\r\n    RequestMessage,\r\n    ResponseMessage,\r\n    ErrorMessage,\r\n    FireAndForgetMessage,\r\n};"]}

package/package.json

@@ -0,0 +1,75 @@
+{
+  "name": "@duyquangnvx/iframe-rpc",
+  "version": "0.1.0",
+  "description": "Type-safe bidirectional RPC communication between parent window and iframe",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest",
+    "test:run": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint src --ext .ts",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "pnpm run build",
+    "demo": "pnpm build && npx serve . -p 3000",
+    "demo:open": "pnpm build && npx serve . -p 3000 -o /examples/demo/parent.html"
+  },
+  "keywords": [
+    "iframe",
+    "postMessage",
+    "rpc",
+    "bridge",
+    "communication",
+    "type-safe",
+    "typescript",
+    "micro-frontend"
+  ],
+  "author": "duyquangnvx",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/duyquangnvx/iframe-rpc.git"
+  },
+  "bugs": {
+    "url": "https://github.com/duyquangnvx/iframe-rpc/issues"
+  },
+  "homepage": "https://github.com/duyquangnvx/iframe-rpc#readme",
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "@typescript-eslint/eslint-plugin": "^7.0.0",
+    "@typescript-eslint/parser": "^7.0.0",
+    "@vitest/coverage-v8": "^1.2.0",
+    "eslint": "^8.56.0",
+    "jsdom": "^24.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.3.0",
+    "vitest": "^1.2.0"
+  }
+}