@final-commerce/command-frame 0.1.39 → 0.1.41

package/dist/CommonTypes.d.ts

@@ -475,6 +475,7 @@ export interface CFContextRender {
     buildVersion: string | null;
     buildSourceId: string | null;
     buildIsPremium: boolean;
+    isOffline: boolean;
     user: Record<string, any> | null;
     company: Omit<Record<string, any>, 'settings'> | null;
     station: Record<string, any> | null;

package/dist/actions/get-context/mock.js

@@ -16,6 +16,7 @@ export const mockGetContext = async () => {
         buildVersion: "1.0.0-mock",
         buildSourceId: "mock_source_id",
         buildIsPremium: true,
+        isOffline: false,
         user: null,
         company: null,
         station: null,

package/dist/projects/render/mocks.js

@@ -59,6 +59,8 @@ import { mockGetCustomExtensionCustomTables } from "../../actions/get-custom-ext
 import { mockGetSecretsKeys } from "../../actions/get-secrets-keys/mock";
 import { mockGetSecretVal } from "../../actions/get-secret-val/mock";
 import { mockSetSecretVal } from "../../actions/set-secret-val/mock";
+import { mockGetUsers } from "../../actions/get-users/mock";
+import { mockGetRoles } from "../../actions/get-roles/mock";
 export const RENDER_MOCKS = {
     addCartDiscount: mockAddCartDiscount,
     addCartFee: mockAddCartFee,
@@ -121,4 +123,6 @@ export const RENDER_MOCKS = {
     getSecretsKeys: mockGetSecretsKeys,
     getSecretVal: mockGetSecretVal,
     setSecretVal: mockSetSecretVal,
+    getUsers: mockGetUsers,
+    getRoles: mockGetRoles,
 };

package/dist/projects/render/types.d.ts

@@ -1,4 +1,4 @@
-import type { ExampleFunction, GetProducts, AddCustomSale, GetCustomers, AssignCustomer, AddCustomer, GetCategories, GetOrders, GetRefunds, AddProductDiscount, AddProductToCart, RemoveProductFromCart, UpdateCartItemQuantity, AddCartDiscount, GetContext, GetFinalContext, AddProductNote, AddProductFee, AdjustInventory, AddOrderNote, AddCartFee, ClearCart, ParkOrder, ResumeParkedOrder, DeleteParkedOrder, InitiateRefund, CashPayment, TapToPayPayment, TerminalPayment, VendaraPayment, AddCustomerNote, RemoveCustomerFromCart, GoToStationHome, OpenCashDrawer, ShowNotification, ShowConfirmation, AuthenticateUser, PartialPayment, SwitchUser, TriggerWebhook, TriggerZapierWebhook, SetRefundStockAction, SelectAllRefundItems, ResetRefundDetails, CalculateRefundTotal, GetRemainingRefundableQuantities, ProcessPartialRefund, GetCurrentCart, Print, SetActiveOrder, GetCustomTables, GetCustomTableData, UpsertCustomTableData, DeleteCustomTableData, GetCustomExtensions, GetCurrentCompanyCustomExtensions, GetCustomExtensionCustomTables, GetCustomTableFields, GetSecretsKeys, GetSecretVal, SetSecretVal } from "../../index";
+import type { ExampleFunction, GetProducts, AddCustomSale, GetCustomers, AssignCustomer, AddCustomer, GetCategories, GetOrders, GetRefunds, AddProductDiscount, AddProductToCart, RemoveProductFromCart, UpdateCartItemQuantity, AddCartDiscount, GetContext, GetFinalContext, AddProductNote, AddProductFee, AdjustInventory, AddOrderNote, AddCartFee, ClearCart, ParkOrder, ResumeParkedOrder, DeleteParkedOrder, InitiateRefund, CashPayment, TapToPayPayment, TerminalPayment, VendaraPayment, AddCustomerNote, RemoveCustomerFromCart, GoToStationHome, OpenCashDrawer, ShowNotification, ShowConfirmation, AuthenticateUser, PartialPayment, SwitchUser, TriggerWebhook, TriggerZapierWebhook, SetRefundStockAction, SelectAllRefundItems, ResetRefundDetails, CalculateRefundTotal, GetRemainingRefundableQuantities, ProcessPartialRefund, GetCurrentCart, Print, SetActiveOrder, GetCustomTables, GetCustomTableData, UpsertCustomTableData, DeleteCustomTableData, GetCustomExtensions, GetCurrentCompanyCustomExtensions, GetCustomExtensionCustomTables, GetCustomTableFields, GetSecretsKeys, GetSecretVal, SetSecretVal, GetUsers, GetRoles } from "../../index";
 export interface RenderProviderActions {
     exampleFunction: ExampleFunction;
     getProducts: GetProducts;
@@ -61,4 +61,6 @@ export interface RenderProviderActions {
     getSecretsKeys: GetSecretsKeys;
     getSecretVal: GetSecretVal;
     setSecretVal: SetSecretVal;
+    getUsers: GetUsers;
+    getRoles: GetRoles;
 }

package/dist/provider.d.ts

@@ -3,6 +3,7 @@ export type ActionHandlers = Map<string, ActionHandler>;
 export declare class CommandFrameProvider<TActions extends object = any> {
     private handlers;
     private origin;
+    private isWildcardPattern;
     private debug;
     private destroyed;
     private boundHandleMessage;
@@ -10,6 +11,11 @@ export declare class CommandFrameProvider<TActions extends object = any> {
         origin?: string;
         debug?: boolean;
     });
+    /**
+     * Supports "*" (allow all), exact match, and wildcard subdomain
+     * patterns like "https://*.example.com".
+     */
+    private isOriginAllowed;
     register<TParams = any, TResponse = any>(action: string, handler: ActionHandler<TParams, TResponse>): void;
     unregister(action: string): void;
     private handleMessage;

package/dist/provider.js

@@ -4,6 +4,7 @@ export class CommandFrameProvider {
         this.destroyed = false;
         this.origin = options.origin || "*";
         this.debug = options.debug || false;
+        this.isWildcardPattern = this.origin !== "*" && this.origin.includes("*");
         this.boundHandleMessage = this.handleMessage.bind(this);
         if (typeof window !== "undefined") {
             window.addEventListener("message", this.boundHandleMessage);
@@ -23,6 +24,22 @@ export class CommandFrameProvider {
             });
         }
     }
+    /**
+     * Supports "*" (allow all), exact match, and wildcard subdomain
+     * patterns like "https://*.example.com".
+     */
+    isOriginAllowed(eventOrigin) {
+        if (this.origin === "*")
+            return true;
+        if (!this.isWildcardPattern)
+            return eventOrigin === this.origin;
+        const wildcardIndex = this.origin.indexOf("*.");
+        const prefix = this.origin.slice(0, wildcardIndex);
+        const suffix = this.origin.slice(wildcardIndex + 1);
+        return (eventOrigin.startsWith(prefix) &&
+            eventOrigin.endsWith(suffix) &&
+            eventOrigin.length > prefix.length + suffix.length);
+    }
     register(action, handler) {
         if (this.destroyed) {
             if (this.debug) {
@@ -56,7 +73,7 @@ export class CommandFrameProvider {
         if (!request || typeof request !== "object" || !("action" in request)) {
             return;
         }
-        if (this.origin !== "*" && event.origin !== this.origin) {
+        if (!this.isOriginAllowed(event.origin)) {
             if (this.debug) {
                 console.warn("[CommandFrameProvider] Origin mismatch", {
                     expected: this.origin,
@@ -65,6 +82,7 @@ export class CommandFrameProvider {
             }
             return;
         }
+        const targetOrigin = this.isWildcardPattern ? event.origin : this.origin;
         if (!request.action || !request.requestId) {
             if (this.debug) {
                 console.warn("[CommandFrameProvider] Invalid request format", {
@@ -92,7 +110,7 @@ export class CommandFrameProvider {
                 this.sendResponse(event.source, request.requestId, {
                     success: false,
                     error: `Unknown action: ${request.action}`
-                });
+                }, targetOrigin);
             }
             return;
         }
@@ -103,7 +121,7 @@ export class CommandFrameProvider {
                 this.sendResponse(event.source, request.requestId, {
                     success: true,
                     data: result
-                });
+                }, targetOrigin);
                 if (this.debug) {
                     console.log("[CommandFrameProvider] Action executed", {
                         action: request.action,
@@ -125,7 +143,7 @@ export class CommandFrameProvider {
                 this.sendResponse(event.source, request.requestId, {
                     success: false,
                     error: errorMessage
-                });
+                }, targetOrigin);
                 if (this.debug) {
                     console.error("[CommandFrameProvider] Action failed", {
                         action: request.action,
@@ -143,7 +161,7 @@ export class CommandFrameProvider {
             }
         }
     }
-    sendResponse(target, requestId, response) {
+    sendResponse(target, requestId, response, targetOrigin) {
         const message = {
             requestId,
             ...response
@@ -151,10 +169,11 @@ export class CommandFrameProvider {
         if (this.debug) {
             console.log("[CommandFrameProvider] Sending response", {
                 requestId,
-                success: response.success
+                success: response.success,
+                targetOrigin
             });
         }
-        target.postMessage(message, this.origin);
+        target.postMessage(message, targetOrigin);
     }
     destroy() {
         if (this.destroyed) {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@final-commerce/command-frame",
-    "version": "0.1.39",
+    "version": "0.1.41",
     "description": "Commands Frame library",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",