@flamingo-stack/openframe-frontend-core 0.0.216 → 0.0.217-snapshot.20260601151546

package/dist/utils/index.cjs

@@ -2599,6 +2599,23 @@ function applyProxyAuth(url, baseHeaders = { "Content-Type": "application/json"
 }
 
 // src/utils/embed-authed-fetch.ts
+var ADAPTER_GLOBAL_KEY = "__embedAuthedFetchAdapter__";
+function getRegisteredAuthAdapter() {
+  if (typeof globalThis === "undefined") return null;
+  return globalThis[ADAPTER_GLOBAL_KEY] ?? null;
+}
+function storeRegisteredAuthAdapter(adapter2) {
+  if (typeof globalThis === "undefined") return;
+  globalThis[ADAPTER_GLOBAL_KEY] = adapter2;
+}
+function setEmbedAuthAdapter(adapter2) {
+  if (adapter2 && getRegisteredAuthAdapter() && process.env.NODE_ENV !== "production") {
+    console.warn(
+      "[setEmbedAuthAdapter] overwriting a previously-registered auth adapter. Two chat-runtime providers should not coexist \u2014 verify mount order and pass `null` from the unmounting provider."
+    );
+  }
+  storeRegisteredAuthAdapter(adapter2);
+}
 function embedAuthedFetch(url, init = {}) {
   assertSameOrigin(url);
   let baseHeaders;
@@ -2616,14 +2633,55 @@ function embedAuthedFetch(url, init = {}) {
       Object.assign(baseHeaders, init.headers);
     }
   }
-  const { url: authedUrl, headers } = applyProxyAuth(url, baseHeaders);
-  return fetch(authedUrl, {
+  return fetchWithRefresh(url, init, baseHeaders, false);
+}
+var IN_FLIGHT_REFRESH_GLOBAL_KEY = "__embedAuthedFetchInFlightRefresh__";
+function getInFlightRefresh() {
+  if (typeof globalThis === "undefined") return null;
+  return globalThis[IN_FLIGHT_REFRESH_GLOBAL_KEY] ?? null;
+}
+function setInFlightRefresh(refresh) {
+  if (typeof globalThis === "undefined") return;
+  globalThis[IN_FLIGHT_REFRESH_GLOBAL_KEY] = refresh;
+}
+function dedupedRefresh() {
+  const adapter2 = getRegisteredAuthAdapter();
+  if (!adapter2?.refresh) return Promise.resolve(false);
+  let inFlightRefresh = getInFlightRefresh();
+  if (!inFlightRefresh) {
+    inFlightRefresh = Promise.resolve().then(() => adapter2.refresh()).catch(() => false).finally(() => {
+      setInFlightRefresh(null);
+    });
+    setInFlightRefresh(inFlightRefresh);
+  }
+  return inFlightRefresh;
+}
+async function fetchWithRefresh(url, init, baseHeaders, isRetry) {
+  const { url: authedUrl, headers } = applyProxyAuth(url, { ...baseHeaders });
+  const adapter2 = getRegisteredAuthAdapter();
+  if (adapter2?.getHeaders) {
+    for (const [k, v] of Object.entries(adapter2.getHeaders())) {
+      if (v !== void 0) headers[k] = v;
+    }
+  }
+  const credentials = adapter2?.credentials ?? init.credentials ?? "same-origin";
+  const response = await fetch(authedUrl, {
     ...init,
     headers,
-    // Always include Supabase auth cookies. `applyProxyAuth` handles
-    // the bearer header layer; cookies are the session-tier carrier.
-    credentials: init.credentials ?? "same-origin"
+    // Default `same-origin` carries Supabase cookies for the MPH proxy-
+    // auth model. Hosts on different origins (openframe-frontend ↔
+    // openframe gateway) register `credentials: 'include'` via the
+    // adapter to make their own cookies travel cross-origin (CORS +
+    // `SameSite=None` must be configured server-side for that to work).
+    credentials
   });
+  if (response.status === 401 && !isRetry && adapter2?.refresh) {
+    const refreshed = await dedupedRefresh();
+    if (refreshed) {
+      return fetchWithRefresh(url, init, baseHeaders, true);
+    }
+  }
+  return response;
 }
 function assertSameOrigin(url) {
   if (typeof window === "undefined") return;
@@ -2641,6 +2699,12 @@ function assertSameOrigin(url) {
     );
   }
   if (target.origin !== pageOrigin) {
+    if (process.env.NODE_ENV !== "production") {
+      console.warn(
+        `[embedAuthedFetch] cross-origin fetch to ${target.origin} allowed in dev (NODE_ENV !== 'production'). Production builds will reject this \u2014 wire a same-origin proxy before shipping.`
+      );
+      return;
+    }
     throw new Error(
       `embedAuthedFetch: refusing cross-origin fetch to ${target.origin} \u2014 pass a relative /api/* path instead`
     );
@@ -3076,12 +3140,67 @@ var OPENFRAME_DEV_SECTIONS = {
 };
 
 // src/utils/scroll-into-view.ts
+var activeRaf = 0;
+var teardownActive = null;
+function cancelActiveScroll() {
+  if (activeRaf) {
+    cancelAnimationFrame(activeRaf);
+    activeRaf = 0;
+  }
+  if (teardownActive) {
+    teardownActive();
+    teardownActive = null;
+  }
+}
+var easeOutCubic = (t) => 1 - Math.pow(1 - t, 3);
 function scrollElementIntoView(target, options = {}) {
   if (typeof window === "undefined" || !target) return;
-  const { headerOffset = 0, behavior = "smooth", adjustTargetY } = options;
-  const rawTargetY = target.getBoundingClientRect().top + window.scrollY - headerOffset;
-  const finalY = adjustTargetY ? adjustTargetY(rawTargetY) : rawTargetY;
-  window.scrollTo({ top: Math.max(0, finalY), behavior });
+  const { headerOffset = 0, behavior = "smooth", adjustTargetY, durationMs = 320 } = options;
+  const computeTarget = () => {
+    const raw = target.getBoundingClientRect().top + window.scrollY - headerOffset;
+    const adjusted = adjustTargetY ? adjustTargetY(raw) : raw;
+    const maxScroll = Math.max(
+      0,
+      document.documentElement.scrollHeight - window.innerHeight
+    );
+    return Math.min(Math.max(0, adjusted), maxScroll);
+  };
+  cancelActiveScroll();
+  const prefersReduced = typeof window.matchMedia === "function" && window.matchMedia("(prefers-reduced-motion: reduce)").matches;
+  if (behavior === "instant" || behavior === "auto" || prefersReduced) {
+    window.scrollTo(0, computeTarget());
+    return;
+  }
+  let startY = null;
+  let startTime = 0;
+  const onUserGesture = () => cancelActiveScroll();
+  window.addEventListener("wheel", onUserGesture, { passive: true });
+  window.addEventListener("touchmove", onUserGesture, { passive: true });
+  teardownActive = () => {
+    window.removeEventListener("wheel", onUserGesture);
+    window.removeEventListener("touchmove", onUserGesture);
+  };
+  const step = (now) => {
+    if (startY === null) {
+      startY = window.scrollY;
+      startTime = now;
+    }
+    const targetY = computeTarget();
+    const t = Math.min(1, (now - startTime) / durationMs);
+    const y = startY + (targetY - startY) * easeOutCubic(t);
+    window.scrollTo(0, y);
+    if (t < 1) {
+      activeRaf = requestAnimationFrame(step);
+    } else {
+      window.scrollTo(0, computeTarget());
+      activeRaf = 0;
+      if (teardownActive) {
+        teardownActive();
+        teardownActive = null;
+      }
+    }
+  };
+  activeRaf = requestAnimationFrame(step);
 }
 
 exports.ANTHROPIC_SUPPORTED_IMAGE_MIME = ANTHROPIC_SUPPORTED_IMAGE_MIME;
@@ -3236,6 +3355,7 @@ exports.platformSlogans = platformSlogans;
 exports.readLeadingDecisionFrame = readLeadingDecisionFrame;
 exports.sanitizeTitleForChat = sanitizeTitleForChat;
 exports.scrollElementIntoView = scrollElementIntoView;
+exports.setEmbedAuthAdapter = setEmbedAuthAdapter;
 exports.setEmbedProxyAuth = setEmbedProxyAuth;
 exports.shouldProxyImage = shouldProxyImage;
 exports.stripChatAttachmentMarkdown = stripChatAttachmentMarkdown;