@embarkai/ui-kit 0.4.32 → 0.4.33

package/dist/iframe/_headers

@@ -1,16 +1,16 @@
 # Cloudflare Pages Headers Configuration for Iframe Wallet
-# This file configures security headers for the iframe at auth.lumiapassport.com
+# This file configures security headers for the iframe at auth.embarkai.io
 
 /*
   # Content Security Policy - Strict security policy for iframe
   # IMPORTANT: frame-ancestors 'https:' allows embedding on any HTTPS site
   # Domain validation is performed via projectId check in JavaScript
-  # connect-src whitelist: only allowed TSS servers (where the second key share is stored) and lumiapassport.com subdomains
+  # connect-src whitelist: only allowed TSS servers (where the second key share is stored) and embarkai.io subdomains
   # script-src: Added https://telegram.org for Telegram Login Widget
   # script-src: Added 'unsafe-eval' required by Telegram Widget (uses eval for callbacks)
   # frame-src: Added https://oauth.telegram.org for Telegram OAuth iframe
   # NOTE: http://localhost:* in frame-ancestors is for development testing only
-  Content-Security-Policy: default-src 'self'; script-src 'self' 'wasm-unsafe-eval' 'unsafe-eval' https://telegram.org https://static.sumsub.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' https://*.lumiapassport.com https://*.sumsub.com; frame-src https://oauth.telegram.org https://*.sumsub.com; frame-ancestors https: http://localhost:*; base-uri 'self'; form-action 'self';
+  Content-Security-Policy: default-src 'self'; script-src 'self' 'wasm-unsafe-eval' 'unsafe-eval' https://telegram.org https://static.sumsub.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' https://*.embarkai.io https://*.sumsub.com; frame-src https://oauth.telegram.org https://*.sumsub.com; frame-ancestors https: http://localhost:*; base-uri 'self'; form-action 'self';
 
   # Allow iframe embedding from HTTPS sites (domain validation in JS)
   # X-Frame-Options is NOT set (CSP frame-ancestors takes precedence)

package/dist/iframe/index.html

@@ -10,12 +10,12 @@
     <!-- WARNING: localhost is allowed ONLY for local development, production CSP in _headers is stricter -->
     <meta
       http-equiv="Content-Security-Policy"
-      content="default-src 'self'; script-src 'self' 'wasm-unsafe-eval' 'unsafe-eval' https://telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' http://localhost:* https://*.lumiapassport.com https://*.embarkai.io; frame-src https://oauth.telegram.org; base-uri 'self'; form-action 'self';"
+      content="default-src 'self'; script-src 'self' 'wasm-unsafe-eval' 'unsafe-eval' https://telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' http://localhost:* https://*.embarkai.io; frame-src https://oauth.telegram.org; base-uri 'self'; form-action 'self';"
     />
     <meta http-equiv="X-Content-Type-Options" content="nosniff" />
     <meta http-equiv="Referrer-Policy" content="strict-origin-when-cross-origin" />
 
-    <title>EmbarkAI Secure Wallet - iframe version 0.4.32</title>
+    <title>EmbarkAI Secure Wallet - iframe version 0.4.33</title>
 
     <!-- Styles will be injected by build process -->
     <style>

package/dist/iframe/main.js

@@ -494,6 +494,7 @@ async function getShareVaultToken(scopes, accessToken) {
     body: JSON.stringify({
       scopes,
       audience: "lumia-passport-share-vault-service",
+      // TODO: embarkai audience ?
       ttl: 300
     })
   });
@@ -573,8 +574,8 @@ var SHARE_VAULT_URL, TSS_URL;
 var init_server_backup = __esm({
   "src/iframe/lib/backup/server-backup.ts"() {
     init_crypto_utils();
-    SHARE_VAULT_URL = "https://api.lumiapassport.com/vault";
-    TSS_URL = "https://api.lumiapassport.com/tss";
+    SHARE_VAULT_URL = "https://api.embarkai.io/vault";
+    TSS_URL = "https://api.embarkai.io/tss";
   }
 });
 
@@ -1596,7 +1597,7 @@ function buildConfirmTxTemplateData(project, origin, transaction, risk, metadata
 var AuthorizationManager = class {
   constructor() {
     this.STORAGE_KEY_PREFIX = "auth";
-    this.METADATA_API_URL = "https://dashboard.lumiapassport.com/api/public/project";
+    this.METADATA_API_URL = "https://dashboard.embarkai.io/api/public/project";
     this.METADATA_CACHE_TTL = 36e5;
     // 1 hour in milliseconds
     this.metadataCache = /* @__PURE__ */ new Map();
@@ -2078,7 +2079,7 @@ init_server_backup();
 var TokenRefreshApiClient = class {
   constructor() {
     this.pendingTokenRefresh = null;
-    this.tssUrl = "https://api.lumiapassport.com/tss";
+    this.tssUrl = "https://api.embarkai.io/tss";
   }
   /**
    * Make API call with automatic token refresh on 401
@@ -3056,8 +3057,10 @@ var DKGManager = class extends TokenRefreshApiClient {
 };
 
 // src/iframe/lib/hyperlane/hyperlane.ts
-var BASE_API_URL = "https://api.embarkai.io";
-var API_URL = `${BASE_API_URL}/on-ramp`;
+var API_URL = (
+  // checks for custom service url
+  typeof window.__EMBARK_SERVICES__ !== "undefined" && window.__EMBARK_SERVICES__?.assetApiUrl || "https://api.embarkai.io/on-ramp/api"
+);
 var HyperlaneAPI = class {
   //   private sseAbortController: AbortController | null = null
   constructor(sendResponseFn) {
@@ -3066,7 +3069,7 @@ var HyperlaneAPI = class {
   // API METHODS
   /** available warp routes */
   async getHyperlaneWarpRoutes(accessToken) {
-    const result = await fetch(`${API_URL}/api/hyperlane/warp-routes`, {
+    const result = await fetch(`${API_URL}/hyperlane/warp-routes`, {
       method: "GET",
       headers: { Authorization: `Bearer ${accessToken}` }
     });
@@ -3075,7 +3078,7 @@ var HyperlaneAPI = class {
   }
   /** bridging quote */
   async estimateHyperlaneQuote(payload, accessToken) {
-    const result = await fetch(`${API_URL}/api/hyperlane/estimate-quote`, {
+    const result = await fetch(`${API_URL}/hyperlane/estimate-quote`, {
       method: "POST",
       body: JSON.stringify(payload),
       headers: { "Content-Type": "application/json", "Authorization": `Bearer ${accessToken}` }
@@ -3085,7 +3088,7 @@ var HyperlaneAPI = class {
   }
   /** list of pre-cooked TXs by Hyperlane SDK */
   async bridgeHyperlaneAsset(payload, accessToken) {
-    const result = await fetch(`${API_URL}/api/hyperlane/bridge-asset`, {
+    const result = await fetch(`${API_URL}/hyperlane/bridge-asset`, {
       method: "POST",
       body: JSON.stringify(payload),
       headers: { "Content-Type": "application/json", "Authorization": `Bearer ${accessToken}` }
@@ -3096,7 +3099,7 @@ var HyperlaneAPI = class {
   /** bridge history */
   async getHyperlaneBridgeHistory(pagination, accessToken) {
     const { page, pageSize } = pagination;
-    const url = new URL(`${API_URL}/api/hyperlane/bridge-history`);
+    const url = new URL(`${API_URL}/hyperlane/bridge-history`);
     if (page) url.searchParams.append("page", page.toString());
     if (pageSize) url.searchParams.append("pageSize", pageSize.toString());
     const result = await fetch(url.toString(), { method: "GET", headers: { Authorization: `Bearer ${accessToken}` } });
@@ -3105,7 +3108,7 @@ var HyperlaneAPI = class {
   }
   /** patch initiated bridge transaction */
   async patchInitiatedBridgeTxStatus(payload, accessToken) {
-    const result = await fetch(`${API_URL}/api/hyperlane/patch-bridge-tx-status`, {
+    const result = await fetch(`${API_URL}/hyperlane/patch-bridge-tx-status`, {
       method: "PATCH",
       body: JSON.stringify(payload),
       headers: { "Content-Type": "application/json", "Authorization": `Bearer ${accessToken}` }
@@ -3114,7 +3117,7 @@ var HyperlaneAPI = class {
     return response;
   }
   async patchInitiatedBridgeTxOpHashes(payload, accessToken) {
-    const result = await fetch(`${API_URL}/api/hyperlane/patch-bridge-op-hashes`, {
+    const result = await fetch(`${API_URL}/hyperlane/patch-bridge-op-hashes`, {
       method: "PATCH",
       body: JSON.stringify(payload),
       headers: { "Content-Type": "application/json", "Authorization": `Bearer ${accessToken}` }
@@ -4703,7 +4706,10 @@ var omit = flatRest_default(function(object, paths) {
 var omit_default = omit;
 
 // src/iframe/lib/onramp/binance.ts
-var API_DOMAIN = "https://api.embarkai.io/on-ramp";
+var API_URL2 = (
+  // checks for custom service url
+  typeof window.__EMBARK_SERVICES__ !== "undefined" && window.__EMBARK_SERVICES__?.assetApiUrl || "https://api.embarkai.io/on-ramp/api"
+);
 var BinanceOnrampAPI = class {
   constructor(sendResponseFn, broadcastFn) {
     this.sseAbortController = null;
@@ -4714,7 +4720,7 @@ var BinanceOnrampAPI = class {
     this.disconnectSse();
     const controller = new AbortController();
     this.sseAbortController = controller;
-    const url = `${API_DOMAIN}/sse/events?walletAddress=${encodeURIComponent(walletAddress)}`;
+    const url = `${API_URL2}/sse/events?walletAddress=${encodeURIComponent(walletAddress)}`;
     const start = async () => {
       try {
         const response = await fetch(url, {
@@ -4766,7 +4772,7 @@ var BinanceOnrampAPI = class {
   // QUERIES & MUTATIONS
   async getTradingPairsQuery(accessToken) {
     try {
-      const response = await fetch(`${API_DOMAIN}/api/binance/pairs`, {
+      const response = await fetch(`${API_URL2}/binance/pairs`, {
         method: "POST",
         headers: { "Content-Type": "application/json", ...accessToken && { Authorization: `Bearer ${accessToken}` } }
       });
@@ -4778,7 +4784,7 @@ var BinanceOnrampAPI = class {
   }
   async getSupportedNetworksQuery(accessToken) {
     try {
-      const response = await fetch(`${API_DOMAIN}/api/binance/networks`, {
+      const response = await fetch(`${API_URL2}/binance/networks`, {
         method: "POST",
         headers: { "Content-Type": "application/json", ...accessToken && { Authorization: `Bearer ${accessToken}` } }
       });
@@ -4790,7 +4796,7 @@ var BinanceOnrampAPI = class {
   }
   async getPaymentMethodsQuery(payload, accessToken) {
     try {
-      const response = await fetch(`${API_DOMAIN}/api/binance/modes`, {
+      const response = await fetch(`${API_URL2}/binance/modes`, {
         method: "POST",
         headers: { "Content-Type": "application/json", ...accessToken && { Authorization: `Bearer ${accessToken}` } },
         body: JSON.stringify(payload)
@@ -4803,7 +4809,7 @@ var BinanceOnrampAPI = class {
   }
   async getQuoteQuery(payload, accessToken) {
     try {
-      const response = await fetch(`${API_DOMAIN}/api/binance/quote`, {
+      const response = await fetch(`${API_URL2}/binance/quote`, {
         method: "POST",
         headers: { "Content-Type": "application/json", ...accessToken && { Authorization: `Bearer ${accessToken}` } },
         body: JSON.stringify(payload)
@@ -4816,7 +4822,7 @@ var BinanceOnrampAPI = class {
   }
   async createPreorderMutation(payload, accessToken) {
     try {
-      const response = await fetch(`${API_DOMAIN}/api/binance/pre-order`, {
+      const response = await fetch(`${API_URL2}/binance/pre-order`, {
         method: "POST",
         headers: { "Content-Type": "application/json", ...accessToken && { Authorization: `Bearer ${accessToken}` } },
         body: JSON.stringify(payload)
@@ -4830,7 +4836,7 @@ var BinanceOnrampAPI = class {
   async getTransactionList(params, accessToken) {
     try {
       const txStatus = Array.isArray(params.txStatuses) ? (params.txStatuses || []).join(",") : null;
-      const apiUrl = new URL(`${API_DOMAIN}/api/binance/transactions`);
+      const apiUrl = new URL(`${API_URL2}/binance/transactions`);
       apiUrl.searchParams.append("walletAddress", params.walletAddress);
       if (!!txStatus?.length) apiUrl.searchParams.append("txStatus", txStatus);
       if (!!params.page) apiUrl.searchParams.append("page", params.page.toString());
@@ -4861,7 +4867,10 @@ var BinanceOnrampAPI = class {
         this.sendResponseFn(messageId, supportedNetworksResponse, origin);
         break;
       case "BINANCE_GET_PAYMENT_METHODS_QUERY":
-        const paymentMethodsResponse = await this.getPaymentMethodsQuery(payload, accessToken);
+        const paymentMethodsResponse = await this.getPaymentMethodsQuery(
+          payload,
+          accessToken
+        );
         this.sendResponseFn(messageId, paymentMethodsResponse, origin);
         break;
       case "BINANCE_GET_QUOTE_QUERY":
@@ -4891,18 +4900,22 @@ var BinanceOnrampAPI = class {
 };
 
 // src/iframe/lib/onramp/finchpay.ts
-var API_DOMAIN2 = "https://api.embarkai.io/on-ramp";
+var API_URL3 = (
+  // checks for custom service url
+  typeof window.__EMBARK_SERVICES__ !== "undefined" && window.__EMBARK_SERVICES__?.assetApiUrl || "https://api.embarkai.io/on-ramp/api"
+);
 var FinchPayRampAPI = class {
   constructor(sendResponseFn, broadcastFn) {
     this.sseAbortController = null;
     this.sendResponseFn = sendResponseFn;
     this.broadcastFn = broadcastFn;
   }
-  connectSseTxTracing(walletAddress, accessToken, origin) {
+  connectSseTxTracing(payload, accessToken, origin) {
+    const { walletAddress } = payload;
     this.disconnectSse();
     const controller = new AbortController();
     this.sseAbortController = controller;
-    const url = `${API_DOMAIN2}/sse/events?walletAddress=${encodeURIComponent(walletAddress)}`;
+    const url = `${API_URL3}/sse/events?walletAddress=${encodeURIComponent(walletAddress)}`;
     const start = async () => {
       try {
         const response = await fetch(url, {
@@ -4954,12 +4967,12 @@ var FinchPayRampAPI = class {
   // QUERIES & MUTATIONS
   async getCurrencies(accessToken) {
     try {
-      const response = await fetch(`${API_DOMAIN2}/finchpay/currencies`, {
+      const response = await fetch(`${API_URL3}/finchpay/currencies`, {
         method: "GET",
         headers: { ...accessToken && { Authorization: `Bearer ${accessToken}` } }
       });
       const data = await response.json();
-      if (!data.success) {
+      if (!data.length) {
         console.warn("[FINCHPAY] Failed to fetch currencies:", data);
         throw new Error(`${data.code}: ${data.message}`);
       }
@@ -4969,7 +4982,7 @@ var FinchPayRampAPI = class {
     }
   }
   async getLimits(payload, accessToken) {
-    const response = await fetch(`${API_DOMAIN2}/finchpay/limits`, {
+    const response = await fetch(`${API_URL3}/finchpay/limits`, {
       method: "POST",
       body: JSON.stringify(payload),
       headers: {
@@ -4978,14 +4991,14 @@ var FinchPayRampAPI = class {
       }
     });
     const data = await response.json();
-    if (!data.success) {
+    if (!data?.currency) {
       console.warn("[FINCHPAY] Failed to fetch limits:", data);
       throw new Error(`${data.code}: ${data.message}`);
     }
     return data;
   }
   async getLimitsSummary(payload, accessToken) {
-    const response = await fetch(`${API_DOMAIN2}/finchpay/limits/summary`, {
+    const response = await fetch(`${API_URL3}/finchpay/limits/summary`, {
       method: "POST",
       body: JSON.stringify(payload),
       headers: {
@@ -4994,14 +5007,14 @@ var FinchPayRampAPI = class {
       }
     });
     const data = await response.json();
-    if (!data.success) {
+    if (!data?.currency) {
       console.warn("[FINCHPAY] Failed to fetch limits summary:", data);
       throw new Error(`${data.code}: ${data.message}`);
     }
     return data;
   }
   async getEstimates(payload, accessToken) {
-    const response = await fetch(`${API_DOMAIN2}/finchpay/estimates`, {
+    const response = await fetch(`${API_URL3}/finchpay/estimates`, {
       method: "POST",
       body: JSON.stringify(payload),
       headers: {
@@ -5010,15 +5023,15 @@ var FinchPayRampAPI = class {
       }
     });
     const data = await response.json();
-    if (!data.success) {
+    if (!data) {
       console.warn("[FINCHPAY] Failed to fetch estimates:", data);
       throw new Error(`${data.code}: ${data.message}`);
     }
     return data;
   }
-  async getTransactionStatus(transactionId, accessToken) {
+  async getTransactionStatus(payload, accessToken) {
     try {
-      const response = await fetch(`${API_DOMAIN2}/finchpay/transaction/${transactionId}`, {
+      const response = await fetch(`${API_URL3}/finchpay/transaction/${payload?.transactionId}`, {
         method: "GET",
         headers: {
           "Content-Type": "application/json",
@@ -5026,10 +5039,6 @@ var FinchPayRampAPI = class {
         }
       });
       const data = await response.json();
-      if (!data.success) {
-        console.warn("[FINCHPAY] Failed to fetch transaction status:", data);
-        throw new Error(`${data.code}: ${data.message}`);
-      }
       return data;
     } catch (error) {
       throw error;
@@ -5037,7 +5046,7 @@ var FinchPayRampAPI = class {
   }
   async getWidgetUrl(payload, accessToken) {
     try {
-      const response = await fetch(`${API_DOMAIN2}/finchpay/widget-url`, {
+      const response = await fetch(`${API_URL3}/finchpay/widget-url`, {
         method: "POST",
         body: JSON.stringify(payload),
         headers: {
@@ -5046,10 +5055,6 @@ var FinchPayRampAPI = class {
         }
       });
       const data = await response.json();
-      if (!data.success) {
-        console.warn("[FINCHPAY] Failed to fetch widget URL:", data);
-        throw new Error(`${data.code}: ${data.message}`);
-      }
       return data;
     } catch (error) {
       throw error;
@@ -5058,7 +5063,7 @@ var FinchPayRampAPI = class {
   async getTransactionList(params, accessToken) {
     try {
       const txStatus = Array.isArray(params.txStatuses) ? (params.txStatuses || []).join(",") : null;
-      const apiUrl = new URL(`${API_DOMAIN2}/finchpay/tx-trace`);
+      const apiUrl = new URL(`${API_URL3}/finchpay/tx-trace`);
       apiUrl.searchParams.append("walletAddress", params.walletAddress);
       if (!!txStatus?.length) apiUrl.searchParams.append("txStatus", txStatus);
       if (!!params.page) apiUrl.searchParams.append("page", params.page.toString());
@@ -5088,7 +5093,10 @@ var FinchPayRampAPI = class {
         this.sendResponseFn(messageId, limitsResponse, origin);
         break;
       case "FINCHPAY_GET_LIMITS_SUMMARY_QUERY":
-        const limitsSummaryResponse = await this.getLimitsSummary(data.payload, accessToken);
+        const limitsSummaryResponse = await this.getLimitsSummary(
+          data.payload,
+          accessToken
+        );
         this.sendResponseFn(messageId, limitsSummaryResponse, origin);
         break;
       case "FINCHPAY_GET_ESTIMATES_QUERY":
@@ -5096,7 +5104,10 @@ var FinchPayRampAPI = class {
         this.sendResponseFn(messageId, paymentMethodsResponse, origin);
         break;
       case "FINCHPAY_GET_TRANSACTION_STATUS_QUERY":
-        const transactionStatusResponse = await this.getTransactionStatus(data.transactionId, accessToken);
+        const transactionStatusResponse = await this.getTransactionStatus(
+          data.payload,
+          accessToken
+        );
         this.sendResponseFn(messageId, transactionStatusResponse, origin);
         break;
       case "FINCHPAY_GET_WIDGET_URL_QUERY":
@@ -5108,7 +5119,7 @@ var FinchPayRampAPI = class {
         this.sendResponseFn(messageId, txListResponse, origin);
         break;
       case "FINCHPAY_CONNECT_TX_TRACING":
-        this.connectSseTxTracing(data.payload.walletAddress, accessToken, origin);
+        this.connectSseTxTracing(data.payload, accessToken, origin);
         this.sendResponseFn(messageId, { connected: true }, origin);
         break;
       case "FINCHPAY_DISCONNECT_TX_TRACING":
@@ -5121,23 +5132,17 @@ var FinchPayRampAPI = class {
   }
 };
 
-// src/iframe/lib/onramp/utils.ts
-function omit2(object, ...keys2) {
-  const result = { ...object };
-  for (const key of keys2) {
-    delete result[key];
-  }
-  return result;
-}
-
 // src/iframe/lib/onramp/rampnow.ts
-var API_DOMAIN3 = "https://api.embarkai.io/on-ramp";
+var API_DOMAIN = (
+  // checks for custom service url
+  typeof window.__EMBARK_SERVICES__ !== "undefined" && window.__EMBARK_SERVICES__?.assetApiUrl || "https://api.embarkai.io/on-ramp/api"
+);
 var RampnowOnrampAPI = class {
   constructor(sendResponseFn) {
     this.sendResponseFn = sendResponseFn;
   }
   async getRampnowConfigQuery(accessToken) {
-    const response = await fetch(`${API_DOMAIN3}/api/rampnow/cfg`, {
+    const response = await fetch(`${API_DOMAIN}/rampnow/cfg`, {
       method: "GET",
       headers: { ...accessToken && { Authorization: `Bearer ${accessToken}` } }
     });
@@ -5145,7 +5150,7 @@ var RampnowOnrampAPI = class {
     return data;
   }
   async getRampOrderQuoteQuery(payload, accessToken) {
-    const response = await fetch(`${API_DOMAIN3}/api/rampnow/quote`, {
+    const response = await fetch(`${API_DOMAIN}/rampnow/quote`, {
       method: "POST",
       headers: { "Content-Type": "application/json", ...accessToken && { Authorization: `Bearer ${accessToken}` } },
       body: JSON.stringify(payload)
@@ -5160,7 +5165,7 @@ var RampnowOnrampAPI = class {
     if (typeof payload !== "object" || payload === null || typeof payload?.paymentMode !== "string" || typeof payload?.srcAmount !== "number" || typeof payload?.walletAddress !== "string") {
       throw new Error("Invalid Ramp order quote payload");
     }
-    return omit2(payload, "accessToken");
+    return omit_default(payload, "accessToken");
   }
   // UNUSED due to Rampnow APP redirect order flow
   //   async ctreateChekoutOrderMutation(payload: CreateCheckoutOrderMutationPayload) {
@@ -5938,7 +5943,7 @@ var SigningManager = class extends TokenRefreshApiClient {
     super();
     this.wasmLoaded = false;
     this.explorerUrl = "https://beam-explorer.lumia.org";
-    this.METADATA_API_URL = "https://dashboard.lumiapassport.com/api/public/project";
+    this.METADATA_API_URL = "https://dashboard.embarkai.io/api/public/project";
     this.METADATA_CACHE_TTL = 36e5;
     // 1 hour in milliseconds
     this.metadataCache = /* @__PURE__ */ new Map();
@@ -6384,7 +6389,7 @@ var SigningManager = class extends TokenRefreshApiClient {
 };
 
 // src/iframe/main.ts
-var IFRAME_VERSION = "0.4.32";
+var IFRAME_VERSION = "0.4.33";
 var IframeWallet = class {
   constructor() {
     console.log("=".repeat(60));
@@ -6429,8 +6434,8 @@ var IframeWallet = class {
     this.rampnow = new RampnowOnrampAPI(this.messenger.sendResponse.bind(this.messenger));
   }
   async initialize() {
-    if (window.location.hostname !== "localhost" && window.location.hostname !== "127.0.0.1" && !window.location.hostname.includes("lumiapassport.com")) {
-      console.warn("[iframe] \u26A0\uFE0F Running on unexpected origin!");
+    if (window.location.hostname !== "localhost" && window.location.hostname !== "127.0.0.1" && !window.location.hostname.includes("embarkai.com")) {
+      console.warn("[iframe] \u26A0\uFE0F Running on unexpected origin!: ", window.location.hostname);
     }
     await Promise.all([this.dkgManager.initialize(), this.signingManager.initialize()]);
     this.messenger.setupListener(async (message, origin) => {