@haex-space/vault-sdk 2.9.3 → 3.1.0

package/dist/vite.js

@@ -225,7 +225,24 @@ var HAEXSPACE_MESSAGE_TYPES = {
   /** Debug message for development/troubleshooting */
   DEBUG: "haexspace:debug",
   /** Console forwarding from extension iframe */
-  CONSOLE_FORWARD: "console.forward"
+  CONSOLE_FORWARD: "console.forward",
+  /**
+   * Sent from main window to iframe on the shared window listener, carrying
+   * one `MessagePort` in `event.ports[0]`. Once received, the SDK switches
+   * to port-based messaging and never reads the window listener again.
+   *
+   * Payload: `{ type: PORT_INIT }` — no data. The port itself is the payload.
+   */
+  PORT_INIT: "haexspace:port:init",
+  /**
+   * Sent from SDK to main window *over the MessagePort* after the port is
+   * installed. Main uses this to mark the iframe as ready and flush any
+   * events buffered during the handshake window. Only valid on the port —
+   * a READY sent over window.postMessage is ignored.
+   *
+   * Payload: `{ type: PORT_READY }` — no data.
+   */
+  PORT_READY: "haexspace:port:ready"
 };
 
 // src/polyfills/debug.ts

package/dist/vite.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/polyfills/localStorage.ts","../src/polyfills/cookies.ts","../src/polyfills/history.ts","../src/messages.ts","../src/polyfills/debug.ts","../src/polyfills/standalone.ts","../src/cors.ts","../src/vite.ts"],"names":[],"mappings":";;;;;AAOO,SAAS,2BAAA,GAAoC;AAClD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,IAAI,kDAAkD,CAAA;AAG9D,EAAA,IAAI,iBAAA,GAAoB,KAAA;AACxB,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,aAAA;AAChB,IAAA,YAAA,CAAa,OAAA,CAAQ,SAAS,OAAO,CAAA;AACrC,IAAA,YAAA,CAAa,WAAW,OAAO,CAAA;AAC/B,IAAA,iBAAA,GAAoB,IAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,KAAK,kEAA6D,CAAA;AAAA,EAC5E;AAGA,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,IAAA,MAAM,SAAA,uBAAgB,GAAA,EAAoB;AAE1C,IAAA,MAAM,gBAAA,GAA4B;AAAA,MAChC,QAAQ,GAAA,EAA4B;AAClC,QAAA,OAAO,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA,IAAK,IAAA;AAAA,MAC/B,CAAA;AAAA,MACA,OAAA,CAAQ,KAAa,KAAA,EAAqB;AACxC,QAAA,SAAA,CAAU,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,MAClC,CAAA;AAAA,MACA,WAAW,GAAA,EAAmB;AAC5B,QAAA,SAAA,CAAU,OAAO,GAAG,CAAA;AAAA,MACtB,CAAA;AAAA,MACA,KAAA,GAAc;AACZ,QAAA,SAAA,CAAU,KAAA,EAAM;AAAA,MAClB,CAAA;AAAA,MACA,IAAI,MAAA,GAAiB;AACnB,QAAA,OAAO,SAAA,CAAU,IAAA;AAAA,MACnB,CAAA;AAAA,MACA,IAAI,KAAA,EAA8B;AAChC,QAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA,CAAE,KAAK,CAAA,IAAK,IAAA;AAAA,MAChD;AAAA,KACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,cAAA,EAAgB;AAAA,QAC5C,KAAA,EAAO,gBAAA;AAAA,QACP,QAAA,EAAU,IAAA;AAAA,QACV,YAAA,EAAc;AAAA,OACf,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAEN,MAAC,OAAgD,YAAA,GAAe,gBAAA;AAAA,IAClE;AAEA,IAAA,OAAA,CAAQ,IAAI,2DAA2D,CAAA;AAAA,EACzE;AACF;AAQO,SAAS,6BAAA,GAAsC;AACpD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,kBAAA,GAA8B;AAAA,MAClC,OAAA,GAAgB;AACd,QAAA,OAAO,IAAA;AAAA,MACT,CAAA;AAAA,MACA,OAAA,GAAgB;AAAA,MAAC,CAAA;AAAA,MACjB,UAAA,GAAmB;AAAA,MAAC,CAAA;AAAA,MACpB,KAAA,GAAc;AAAA,MAAC,CAAA;AAAA,MACf,IAAI,MAAA,GAAiB;AACnB,QAAA,OAAO,CAAA;AAAA,MACT,CAAA;AAAA,MACA,GAAA,GAAY;AACV,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,KACF;AAEA,IAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,gBAAA,EAAkB;AAAA,MAC9C,KAAA,EAAO,kBAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAEN,IAAC,OAAkD,cAAA,GAAiB;AAAA,MAClE,SAAS,MAAM,IAAA;AAAA,MACf,SAAS,MAAM;AAAA,MAAC,CAAA;AAAA,MAChB,YAAY,MAAM;AAAA,MAAC,CAAA;AAAA,MACnB,OAAO,MAAM;AAAA,MAAC,CAAA;AAAA,MACd,IAAI,MAAA,GAAS;AAAE,QAAA,OAAO,CAAA;AAAA,MAAG,CAAA;AAAA,MACzB,KAAK,MAAM;AAAA,KACb;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,IAAI,+CAA+C,CAAA;AAC7D;;;ACvGO,SAAS,qBAAA,GAA8B;AAC5C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,aAAa,WAAA,EAAa;AACpE,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,MAAA,GAAS,mBAAA;AAClB,IAAA,WAAA,GAAc,QAAA,CAAS,MAAA,CAAO,OAAA,CAAQ,iBAAiB,CAAA,KAAM,CAAA,CAAA;AAAA,EAC/D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,KAAK,6DAAwD,CAAA;AAAA,EACvE;AAEA,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,WAAA,uBAAkB,GAAA,EAAoB;AAE5C,IAAA,MAAA,CAAO,cAAA,CAAe,UAAU,QAAA,EAAU;AAAA,MACxC,GAAA,GAAc;AACZ,QAAA,MAAM,UAAoB,EAAC;AAC3B,QAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAClC,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AAAA,QAChC,CAAC,CAAA;AACD,QAAA,OAAO,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,MAC1B,CAAA;AAAA,MACA,IAAI,YAAA,EAA4B;AAC9B,QAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AACzD,QAAA,MAAM,CAAC,QAAQ,CAAA,GAAI,KAAA;AAEnB,QAAA,IAAI,CAAC,QAAA,EAAU;AAEf,QAAA,MAAM,CAAC,GAAA,EAAK,KAAK,CAAA,GAAI,QAAA,CAAS,MAAM,GAAG,CAAA;AACvC,QAAA,IAAI,CAAC,GAAA,EAAK;AAGV,QAAA,MAAM,UAA4C,EAAC;AACnD,QAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,UAAA,MAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AACpB,UAAA,IAAI,CAAC,IAAA,EAAM;AACX,UAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAClC,UAAA,MAAM,MAAA,GAAS,YAAY,CAAC,CAAA;AAC5B,UAAA,MAAM,QAAA,GAAW,YAAY,CAAC,CAAA;AAC9B,UAAA,IAAI,MAAA,EAAQ;AACV,YAAA,OAAA,CAAQ,MAAA,CAAO,WAAA,EAAa,CAAA,GAAI,QAAA,IAAY,IAAA;AAAA,UAC9C;AAAA,QACF;AAGA,QAAA,MAAM,eAAe,OAAA,CAAQ,OAAA;AAC7B,QAAA,IAAI,YAAA,IAAgB,OAAO,YAAA,KAAiB,QAAA,EAAU;AACpD,UAAA,MAAM,WAAA,GAAc,IAAI,IAAA,CAAK,YAAY,CAAA;AACzC,UAAA,IAAI,WAAA,mBAAc,IAAI,IAAA,EAAK,EAAG;AAC5B,YAAA,WAAA,CAAY,OAAO,GAAG,CAAA;AACtB,YAAA;AAAA,UACF;AAAA,QACF;AAGA,QAAA,MAAM,WAAA,GAAc,QAAQ,SAAS,CAAA;AACrC,QAAA,IAAI,OAAO,WAAA,KAAgB,QAAA,IAAY,WAAA,KAAgB,GAAA,EAAK;AAC1D,UAAA,WAAA,CAAY,OAAO,GAAG,CAAA;AACtB,UAAA;AAAA,QACF;AAGA,QAAA,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,KAAA,IAAS,EAAE,CAAA;AAAA,MAClC,CAAA;AAAA,MACA,YAAA,EAAc;AAAA,KACf,CAAA;AAED,IAAA,OAAA,CAAQ,IAAI,uCAAuC,CAAA;AAAA,EACrD;AACF;;;ACtEO,SAAS,sBAAA,GAA+B;AAC7C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,YAAY,WAAA,EAAa;AACnE,IAAA;AAAA,EACF;AAGA,EAAA,MAAM,UAAU,MAAM;AACpB,IAAA,OAAA,CAAQ,IAAI,mCAAmC,CAAA;AAE/C,IAAA,MAAM,oBAAoB,OAAA,CAAQ,SAAA;AAClC,IAAA,MAAM,uBAAuB,OAAA,CAAQ,YAAA;AACrC,IAAA,IAAI,YAAA,GAAe,KAAA;AACnB,IAAA,IAAI,eAAA,GAAkB,KAAA;AAGtB,IAAA,OAAA,CAAQ,SAAA,GAAY,SAClB,KAAA,EACA,KAAA,EACA,GAAA,EACM;AACN,MAAA,OAAA,CAAQ,GAAA,CAAI,+BAAA,EAAiC,GAAA,EAAK,OAAA,EAAS,YAAY,CAAA;AAEvE,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,YAAA,GAAe,KAAA;AACf,QAAA,OAAA,CAAQ,IAAI,+BAA+B,CAAA;AAC3C,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,OAAO,iBAAA,CAAkB,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,OAAO,GAAG,CAAA;AAAA,MACvD,SAAS,CAAA,EAAG;AACV,QAAA,IAAK,CAAA,CAAY,IAAA,KAAS,eAAA,IAAmB,GAAA,EAAK;AAEhD,UAAA,MAAM,SAAA,GAAY,IAAI,QAAA,EAAS;AAC/B,UAAA,IAAI,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC1C,UAAA,OAAA,GAAU,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,GAAI,UAAU,GAAA,GAAM,OAAA;AACpD,UAAA,OAAA,CAAQ,GAAA,CAAI,gDAAgD,OAAO,CAAA;AACnE,UAAA,YAAA,GAAe,IAAA;AACf,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAM,EAAE,CAAA;AAC/C,UAAA;AAAA,QACF;AACA,QAAA,MAAM,CAAA;AAAA,MACR;AAAA,IACF,CAAA;AAGA,IAAA,OAAA,CAAQ,YAAA,GAAe,SACrB,KAAA,EACA,KAAA,EACA,GAAA,EACM;AACN,MAAA,OAAA,CAAQ,GAAA,CAAI,kCAAA,EAAoC,GAAA,EAAK,OAAA,EAAS,eAAe,CAAA;AAE7E,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,eAAA,GAAkB,KAAA;AAClB,QAAA,OAAA,CAAQ,IAAI,kCAAkC,CAAA;AAC9C,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,OAAO,oBAAA,CAAqB,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,OAAO,GAAG,CAAA;AAAA,MAC1D,SAAS,CAAA,EAAG;AACV,QAAA,IAAK,CAAA,CAAY,IAAA,KAAS,eAAA,IAAmB,GAAA,EAAK;AAEhD,UAAA,MAAM,SAAA,GAAY,IAAI,QAAA,EAAS;AAC/B,UAAA,IAAI,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC1C,UAAA,OAAA,GAAU,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,GAAI,UAAU,GAAA,GAAM,OAAA;AACpD,UAAA,OAAA,CAAQ,GAAA,CAAI,gDAAgD,OAAO,CAAA;AACnE,UAAA,eAAA,GAAkB,IAAA;AAClB,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAM,EAAE,CAAA;AAC/C,UAAA;AAAA,QACF;AACA,QAAA,MAAM,CAAA;AAAA,MACR;AAAA,IACF,CAAA;AAEA,IAAA,OAAA,CAAQ,IAAI,iCAAiC,CAAA;AAAA,EAC/C,CAAA;AAGA,EAAA,IAAI,QAAA,CAAS,eAAe,SAAA,EAAW;AACrC,IAAA,QAAA,CAAS,iBAAiB,kBAAA,EAAoB,OAAA,EAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,EACvE,CAAA,MAAO;AAEL,IAAA,OAAA,EAAQ;AAAA,EACV;AACF;;;ACvFO,IAAM,uBAAA,GAA0B;AAAA;AAAA,EAErC,KAAA,EAAO,iBAAA;AAAA;AAAA,EAGP,eAAA,EAAiB;AACnB,CAAA;;;ACRO,SAAS,uBAAA,GAAgC;AAC9C,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,MAAA,KAAW,MAAA;AACrD,EAAA,OAAA,CAAQ,GAAA,CAAI,0BAA0B,SAAS,CAAA;AAE/C,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,OAAA,CAAQ,IAAI,2DAA2D,CAAA;AACvE,IAAA,MAAA,CAAO,OAAO,WAAA,CAAY;AAAA,MACxB,MAAM,uBAAA,CAAwB,KAAA;AAAA,MAC9B,IAAA,EAAM,CAAA,uCAAA,EAA0C,CAAC,CAAC,MAAA,CAAO,MAAM,CAAA,YAAA,EAAe,SAAS,CAAA,YAAA,EAAe,MAAA,CAAO,IAAA,KAAS,MAAA,CAAO,GAAG,CAAA;AAAA,OAC/H,GAAG,CAAA;AACN,IAAA,OAAA,CAAQ,IAAI,iCAAiC,CAAA;AAAA,EAC/C,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,IAAI,mDAAmD,CAAA;AAAA,EACjE;AACF;;;ACLO,SAAS,eAAA,GAA0B;AAGxC,EAAA,MAAM,IAAA,GAAO,CAAA;AAAA;;AAAA;AAAA,gCAAA,EAImB,IAAA,CAAK,SAAA,CAAU,uBAAuB,CAAC,CAAA;;AAAA;;AAAA;AAAA,GAAA,EAKpE,2BAAA,CAA4B,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGtC,6BAAA,CAA8B,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGxC,qBAAA,CAAsB,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGhC,sBAAA,CAAuB,UAAU,CAAA;;AAAA;;AAAA;;AAAA;AAAA,GAAA,EAOjC,uBAAA,CAAwB,UAAU,CAAA;AAAA,KAAA,CAAA;AAGrC,EAAA,OAAO,IAAA;AACT;;;AC1CO,IAAM,sBAAA,GAAyB;AAAA,EAEpC,8BAAA,EAAgC,wCAAA;AAAA,EAChC,8BAAA,EAAgC,GAAA;AAAA,EAChC,kCAAA,EAAoC;AACtC,CAAA;AAMO,SAAS,gBAAA,CACd,KACA,MAAA,EACA;AACA,EAAA,GAAA,CAAI,SAAA,CAAU,6BAAA,EAA+B,MAAA,IAAU,GAAG,CAAA;AAC1D,EAAA,GAAA,CAAI,SAAA,CAAU,8BAAA,EAAgC,sBAAA,CAAuB,8BAA8B,CAAC,CAAA;AACpG,EAAA,GAAA,CAAI,SAAA,CAAU,8BAAA,EAAgC,sBAAA,CAAuB,8BAA8B,CAAC,CAAA;AACpG,EAAA,GAAA,CAAI,SAAA,CAAU,kCAAA,EAAoC,sBAAA,CAAuB,kCAAkC,CAAC,CAAA;AAC9G;;;ACSO,SAAS,eAAA,CAAgB,OAAA,GAA6B,EAAC,EAAW;AACvE,EAAA,MAAM,EAAE,eAAA,GAAkB,IAAA,EAAM,aAAA,GAAgB,MAAK,GAAI,OAAA;AAEzD,EAAA,IAAI,YAAA,GAA8B,IAAA;AAElC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,uBAAA;AAAA,IACN,OAAA,EAAS,MAAA;AAAA;AAAA,IAET,eAAe,MAAA,EAAQ;AACrB,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,IAAI;AAEF,UAAA,YAAA,GAAe,eAAA,EAAgB;AAC/B,UAAA,OAAA,CAAQ,IAAI,sDAAiD,CAAA;AAAA,QAC/D,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,iDAAiD,KAAK,CAAA;AACpE,UAAA,MAAM,KAAA;AAAA,QACR;AAAA,MACF;AAGA,MAAA,IAAI,aAAA,IAAiB,MAAA,CAAO,OAAA,KAAY,OAAA,EAAS;AAC/C,QAAA,OAAA,CAAQ,IAAI,0EAAqE,CAAA;AACjF,QAAA,OAAA,CAAQ,IAAI,0DAA0D,CAAA;AACtE,QAAA,OAAA,CAAQ,IAAI,0BAA0B,CAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IAEA,gBAAgB,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAC,aAAA,EAAe;AAGpB,MAAA,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,GAAA,EAAK,KAAK,IAAA,KAAS;AAEzC,QAAA,gBAAA,CAAiB,GAAA,EAAK,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA;AAGxC,QAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAC5B,UAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,UAAA,GAAA,CAAI,GAAA,EAAI;AACR,UAAA;AAAA,QACF;AAEA,QAAA,IAAA,EAAK;AAAA,MACP,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,kBAAA,EAAoB;AAAA,MAClB,KAAA,EAAO,KAAA;AAAA;AAAA,MACP,QAAQ,IAAA,EAAc;AACpB,QAAA,IAAI,CAAC,eAAA,IAAmB,CAAC,YAAA,EAAc;AACrC,UAAA,OAAO,IAAA;AAAA,QACT;AAGA,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,QAAQ,CAAA;AACrC,QAAA,IAAI,YAAY,EAAA,EAAI;AAClB,UAAA,OAAA,CAAQ,KAAK,qDAAqD,CAAA;AAClE,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,MAAM,YAAY,OAAA,GAAU,CAAA;AAG5B,QAAA,MAAM,cAAA,GAAiB,WAAW,YAAY,CAAA,SAAA,CAAA;AAC9C,QAAA,MAAM,YAAA,GAAe,KAAK,KAAA,CAAM,CAAA,EAAG,SAAS,CAAA,GAAI,cAAA,GAAiB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAErF,QAAA,OAAA,CAAQ,IAAI,4DAAuD,CAAA;AAEnE,QAAA,OAAO,YAAA;AAAA,MACT;AAAA;AACF,GACF;AACF;AAGA,IAAO,YAAA,GAAQ","file":"vite.js","sourcesContent":["/**\n * localStorage Polyfill for HaexSpace Extensions\n *\n * Provides an in-memory fallback when localStorage is blocked\n * due to custom protocol restrictions (haex-extension://)\n */\n\nexport function installLocalStoragePolyfill(): void {\n  if (typeof window === 'undefined') {\n    return; // Skip in Node.js environment\n  }\n\n  console.log('[HaexSpace] Storage Polyfill loading immediately');\n\n  // Test if localStorage is available\n  let localStorageWorks = false;\n  try {\n    const testKey = '__ls_test__';\n    localStorage.setItem(testKey, testKey);\n    localStorage.removeItem(testKey);\n    localStorageWorks = true;\n  } catch {\n    console.warn('[HaexSpace] localStorage blocked – using in-memory fallback');\n  }\n\n  // If blocked: Replace with In-Memory Storage\n  if (!localStorageWorks) {\n    const lsStorage = new Map<string, string>();\n\n    const localStoragePoly: Storage = {\n      getItem(key: string): string | null {\n        return lsStorage.get(key) || null;\n      },\n      setItem(key: string, value: string): void {\n        lsStorage.set(key, String(value));\n      },\n      removeItem(key: string): void {\n        lsStorage.delete(key);\n      },\n      clear(): void {\n        lsStorage.clear();\n      },\n      get length(): number {\n        return lsStorage.size;\n      },\n      key(index: number): string | null {\n        return Array.from(lsStorage.keys())[index] || null;\n      }\n    };\n\n    try {\n      Object.defineProperty(window, 'localStorage', {\n        value: localStoragePoly,\n        writable: true,\n        configurable: true\n      });\n    } catch {\n      // Fallback: Direct assignment\n      (window as unknown as { localStorage: Storage }).localStorage = localStoragePoly;\n    }\n\n    console.log('[HaexSpace] localStorage replaced with in-memory polyfill');\n  }\n}\n\n/**\n * sessionStorage Polyfill for HaexSpace Extensions\n *\n * Provides a no-op implementation as session state doesn't work\n * reliably in custom protocol contexts\n */\nexport function installSessionStoragePolyfill(): void {\n  if (typeof window === 'undefined') {\n    return;\n  }\n\n  try {\n    const sessionStoragePoly: Storage = {\n      getItem(): null {\n        return null;\n      },\n      setItem(): void {},\n      removeItem(): void {},\n      clear(): void {},\n      get length(): number {\n        return 0;\n      },\n      key(): null {\n        return null;\n      }\n    };\n\n    Object.defineProperty(window, 'sessionStorage', {\n      value: sessionStoragePoly,\n      writable: true,\n      configurable: true\n    });\n  } catch {\n    // Fallback: Direct assignment\n    (window as unknown as { sessionStorage: Storage }).sessionStorage = {\n      getItem: () => null,\n      setItem: () => {},\n      removeItem: () => {},\n      clear: () => {},\n      get length() { return 0; },\n      key: () => null\n    };\n  }\n\n  console.log('[HaexSpace] sessionStorage polyfill installed');\n}\n","/**\n * Cookie Polyfill for HaexSpace Extensions\n *\n * Provides an in-memory cookie implementation when cookies are blocked\n * due to custom protocol restrictions (haex-extension://)\n */\n\nexport function installCookiePolyfill(): void {\n  if (typeof window === \"undefined\" || typeof document === \"undefined\") {\n    return; // Skip in Node.js environment\n  }\n\n  // Test if cookies are available\n  let cookiesWork = false;\n  try {\n    document.cookie = \"__cookie_test__=1\";\n    cookiesWork = document.cookie.indexOf(\"__cookie_test__\") !== -1;\n  } catch {\n    console.warn(\"[HaexSpace] Cookies blocked – using in-memory fallback\");\n  }\n\n  if (!cookiesWork) {\n    const cookieStore = new Map<string, string>();\n\n    Object.defineProperty(document, \"cookie\", {\n      get(): string {\n        const cookies: string[] = [];\n        cookieStore.forEach((value, key) => {\n          cookies.push(`${key}=${value}`);\n        });\n        return cookies.join(\"; \");\n      },\n      set(cookieString: string): void {\n        const parts = cookieString.split(\";\").map((p) => p.trim());\n        const [keyValue] = parts;\n\n        if (!keyValue) return;\n\n        const [key, value] = keyValue.split(\"=\");\n        if (!key) return;\n\n        // Parse options\n        const options: Record<string, string | boolean> = {};\n        for (let i = 1; i < parts.length; i++) {\n          const part = parts[i];\n          if (!part) continue;\n          const parts_split = part.split(\"=\");\n          const optKey = parts_split[0];\n          const optValue = parts_split[1];\n          if (optKey) {\n            options[optKey.toLowerCase()] = optValue || true;\n          }\n        }\n\n        // Check for deletion (expires in past)\n        const expiresValue = options.expires;\n        if (expiresValue && typeof expiresValue === \"string\") {\n          const expiresDate = new Date(expiresValue);\n          if (expiresDate < new Date()) {\n            cookieStore.delete(key);\n            return;\n          }\n        }\n\n        // Check for max-age=0 deletion\n        const maxAgeValue = options[\"max-age\"];\n        if (typeof maxAgeValue === \"string\" && maxAgeValue === \"0\") {\n          cookieStore.delete(key);\n          return;\n        }\n\n        // Store cookie\n        cookieStore.set(key, value || \"\");\n      },\n      configurable: true,\n    });\n\n    console.log(\"[HaexSpace] Cookie polyfill installed\");\n  }\n}\n","/**\n * History API Polyfill for HaexSpace Extensions\n *\n * Works around SecurityError when using pushState/replaceState\n * in custom protocol contexts (haex-extension://)\n *\n * Falls back to hash-based routing when necessary\n */\n\nexport function installHistoryPolyfill(): void {\n  if (typeof window === 'undefined' || typeof history === 'undefined') {\n    return; // Skip in Node.js environment\n  }\n\n  // Install after DOM is ready to avoid race conditions\n  const install = () => {\n    console.log('[HaexSpace] History Patch loading');\n\n    const originalPushState = history.pushState;\n    const originalReplaceState = history.replaceState;\n    let skipNextPush = false;\n    let skipNextReplace = false;\n\n    // Patch pushState\n    history.pushState = function(\n      state: any,\n      title: string,\n      url?: string | URL | null\n    ): void {\n      console.log('[HaexSpace] pushState called:', url, 'skip:', skipNextPush);\n\n      if (skipNextPush) {\n        skipNextPush = false;\n        console.log('[HaexSpace] pushState skipped');\n        return;\n      }\n\n      try {\n        return originalPushState.call(this, state, title, url);\n      } catch (e) {\n        if ((e as Error).name === 'SecurityError' && url) {\n          // Remove duplicate /#/ prefix\n          const urlString = url.toString();\n          let hashUrl = urlString.replace(/^\\/#/, '');\n          hashUrl = hashUrl.startsWith('#') ? hashUrl : '#' + hashUrl;\n          console.log('[HaexSpace] SecurityError - setting hash to:', hashUrl);\n          skipNextPush = true;\n          window.location.hash = hashUrl.replace(/^#/, '');\n          return; // Silent fallback\n        }\n        throw e;\n      }\n    };\n\n    // Patch replaceState\n    history.replaceState = function(\n      state: any,\n      title: string,\n      url?: string | URL | null\n    ): void {\n      console.log('[HaexSpace] replaceState called:', url, 'skip:', skipNextReplace);\n\n      if (skipNextReplace) {\n        skipNextReplace = false;\n        console.log('[HaexSpace] replaceState skipped');\n        return;\n      }\n\n      try {\n        return originalReplaceState.call(this, state, title, url);\n      } catch (e) {\n        if ((e as Error).name === 'SecurityError' && url) {\n          // Remove duplicate /#/ prefix\n          const urlString = url.toString();\n          let hashUrl = urlString.replace(/^\\/#/, '');\n          hashUrl = hashUrl.startsWith('#') ? hashUrl : '#' + hashUrl;\n          console.log('[HaexSpace] SecurityError - setting hash to:', hashUrl);\n          skipNextReplace = true;\n          window.location.hash = hashUrl.replace(/^#/, '');\n          return; // Silent fallback\n        }\n        throw e;\n      }\n    };\n\n    console.log('[HaexSpace] History API patched');\n  };\n\n  // Install after DOM is ready\n  if (document.readyState === 'loading') {\n    document.addEventListener('DOMContentLoaded', install, { once: true });\n  } else {\n    // DOM already loaded, install immediately\n    install();\n  }\n}\n","/**\n * Central message type definitions for HaexSpace SDK\n *\n * Message Naming Schema: haexspace:{subject}\n *\n * These are used for internal communication between extensions and HaexSpace\n */\n\nexport const HAEXSPACE_MESSAGE_TYPES = {\n  /** Debug message for development/troubleshooting */\n  DEBUG: 'haexspace:debug',\n\n  /** Console forwarding from extension iframe */\n  CONSOLE_FORWARD: 'console.forward',\n} as const;\n\nexport type HaexspaceMessageType =\n  (typeof HAEXSPACE_MESSAGE_TYPES)[keyof typeof HAEXSPACE_MESSAGE_TYPES];\n","import { HAEXSPACE_MESSAGE_TYPES } from '../messages';\n\n/**\n * Debug diagnostics for Android debugging\n * Tests window.parent availability and postMessage functionality\n */\nexport function installDebugDiagnostics(): void {\n  if (typeof window === 'undefined') {\n    return;\n  }\n\n  const hasParent = window.parent && window.parent !== window;\n  console.log('[HaexSpace] hasParent:', hasParent);\n\n  if (hasParent) {\n    console.log('[HaexSpace] Attempting to send debug message to parent...');\n    window.parent.postMessage({\n      type: HAEXSPACE_MESSAGE_TYPES.DEBUG,\n      data: `[Polyfills] window.parent test: exists=${!!window.parent}, different=${hasParent}, selfIsTop=${window.self === window.top}`\n    }, '*');\n    console.log('[HaexSpace] Debug message sent!');\n  } else {\n    console.log('[HaexSpace] No parent window or parent === window');\n  }\n}\n","/**\n * Generates standalone polyfill code for HTML injection\n * This wraps the modular polyfills into an IIFE for immediate execution\n */\nimport {\n  installLocalStoragePolyfill,\n  installSessionStoragePolyfill,\n} from './localStorage'\nimport { installCookiePolyfill } from './cookies'\nimport { installHistoryPolyfill } from './history'\nimport { installDebugDiagnostics } from './debug'\nimport { HAEXSPACE_MESSAGE_TYPES } from '../messages'\n\n/**\n * Get the standalone polyfill code as a string\n * This is used by the Nuxt and Vite plugins to inject polyfills into HTML\n *\n * Note: Base tag is injected statically by the Vite plugin, not at runtime\n */\nexport function getPolyfillCode(): string {\n  // Convert functions to string and wrap in IIFE\n  // We need to inject the HAEXSPACE_MESSAGE_TYPES constant since it's used by installDebugDiagnostics\n  const iife = `(function() {\n  'use strict';\n\n  // Message types constant (injected from HAEXSPACE_MESSAGE_TYPES)\n  var HAEXSPACE_MESSAGE_TYPES = ${JSON.stringify(HAEXSPACE_MESSAGE_TYPES)};\n\n  console.log('[HaexSpace] Storage Polyfill loading immediately');\n\n  // localStorage Polyfill\n  (${installLocalStoragePolyfill.toString()})();\n\n  // sessionStorage Polyfill\n  (${installSessionStoragePolyfill.toString()})();\n\n  // Cookie Polyfill\n  (${installCookiePolyfill.toString()})();\n\n  // History API Polyfill\n  (${installHistoryPolyfill.toString()})();\n\n  // Note: Base tag is injected at build-time by Vite plugin, not at runtime\n\n  console.log('[HaexSpace] All polyfills loaded successfully');\n\n  // Debug diagnostics for Android debugging\n  (${installDebugDiagnostics.toString()})();\n})();`\n\n  return iife\n}\n","/**\n * CORS Configuration for HaexSpace Extensions\n * Used by both Vite and Nuxt plugins to ensure consistent CORS headers\n */\n\n/**\n * Standard CORS headers for HaexSpace dev servers\n * Allows extensions to be loaded in custom protocol iframes (haex-extension://)\n */\nexport const HAEXSPACE_CORS_HEADERS = {\n  'Access-Control-Allow-Origin': '*',\n  'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, PATCH, OPTIONS',\n  'Access-Control-Allow-Headers': '*',\n  'Access-Control-Allow-Credentials': 'true',\n} as const\n\n/**\n * Apply CORS headers to a Node.js response object\n * Used in Vite middleware\n */\nexport function applyCorsHeaders(\n  res: { setHeader: (name: string, value: string) => void },\n  origin?: string\n) {\n  res.setHeader('Access-Control-Allow-Origin', origin || '*')\n  res.setHeader('Access-Control-Allow-Methods', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Methods'])\n  res.setHeader('Access-Control-Allow-Headers', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Headers'])\n  res.setHeader('Access-Control-Allow-Credentials', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Credentials'])\n}\n\n/**\n * Get CORS headers as a plain object\n * Used in Vite/Nuxt config\n */\nexport function getCorsHeaders(origin?: string): Record<string, string> {\n  return {\n    'Access-Control-Allow-Origin': origin || HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Origin'],\n    'Access-Control-Allow-Methods': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Methods'],\n    'Access-Control-Allow-Headers': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Headers'],\n    'Access-Control-Allow-Credentials': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Credentials'],\n  }\n}\n","/**\n * Vite Plugin for HaexSpace SDK\n * Automatically injects polyfills into HTML files\n * Works with React, Vue, Svelte, and any other Vite-based project\n */\nimport type { Plugin } from 'vite'\nimport { getPolyfillCode } from './polyfills/standalone'\nimport { applyCorsHeaders } from './cors'\n\nexport interface VitePluginOptions {\n  /**\n   * Enable/disable polyfill injection\n   * @default true\n   */\n  injectPolyfills?: boolean\n\n  /**\n   * Configure CORS for dev server\n   * @default true\n   */\n  configureCors?: boolean\n}\n\n/**\n * HaexSpace Vite Plugin\n * Injects browser API polyfills for extensions running in custom protocols\n *\n * @example\n * ```ts\n * // vite.config.ts\n * import { haexspacePlugin } from '@haex-space/vault-sdk/vite'\n *\n * export default {\n *   plugins: [haexspacePlugin()]\n * }\n * ```\n */\nexport function haexspacePlugin(options: VitePluginOptions = {}): Plugin {\n  const { injectPolyfills = true, configureCors = true } = options\n\n  let polyfillCode: string | null = null\n\n  return {\n    name: '@haex-space/vault-sdk',\n    enforce: 'post', // Run after other plugins\n\n    configResolved(config) {\n      if (injectPolyfills) {\n        try {\n          // Get polyfill code from modular polyfills\n          polyfillCode = getPolyfillCode()\n          console.log('✓ [@haex-space/vault-sdk] Polyfills initialized')\n        } catch (error) {\n          console.error('[@haex-space/vault-sdk] Failed to initialize:', error)\n          throw error\n        }\n      }\n\n      // Log CORS configuration\n      if (configureCors && config.command === 'serve') {\n        console.log('✓ [@haex-space/vault-sdk] CORS configured for HaexSpace development')\n        console.log('  - Allowing all origins (required for custom protocols)')\n        console.log('  - Allowing credentials')\n      }\n    },\n\n    configureServer(server) {\n      if (!configureCors) return\n\n      // Add CORS middleware for HaexSpace using shared CORS configuration\n      server.middlewares.use((req, res, next) => {\n        // Apply CORS headers (allows custom protocols like haex-extension://)\n        applyCorsHeaders(res, req.headers.origin)\n\n        // Handle preflight requests\n        if (req.method === 'OPTIONS') {\n          res.statusCode = 200\n          res.end()\n          return\n        }\n\n        next()\n      })\n    },\n\n    transformIndexHtml: {\n      order: 'pre', // Inject before other transformations\n      handler(html: string) {\n        if (!injectPolyfills || !polyfillCode) {\n          return html\n        }\n\n        // Inject polyfill script directly after <head>\n        const headPos = html.indexOf('<head>')\n        if (headPos === -1) {\n          console.warn('[@haex-space/vault-sdk] No <head> tag found in HTML')\n          return html\n        }\n\n        const insertPos = headPos + 6 // after <head>\n\n        // Inject polyfill only (no base tag needed)\n        const polyfillScript = `<script>${polyfillCode}</script>`\n        const modifiedHtml = html.slice(0, insertPos) + polyfillScript + html.slice(insertPos)\n\n        console.log('✓ [@haex-space/vault-sdk] Polyfill injected into HTML')\n\n        return modifiedHtml\n      }\n    }\n  }\n}\n\n// Default export for convenience\nexport default haexspacePlugin\n"]}
+{"version":3,"sources":["../src/polyfills/localStorage.ts","../src/polyfills/cookies.ts","../src/polyfills/history.ts","../src/messages.ts","../src/polyfills/debug.ts","../src/polyfills/standalone.ts","../src/cors.ts","../src/vite.ts"],"names":[],"mappings":";;;;;AAOO,SAAS,2BAAA,GAAoC;AAClD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,IAAI,kDAAkD,CAAA;AAG9D,EAAA,IAAI,iBAAA,GAAoB,KAAA;AACxB,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,aAAA;AAChB,IAAA,YAAA,CAAa,OAAA,CAAQ,SAAS,OAAO,CAAA;AACrC,IAAA,YAAA,CAAa,WAAW,OAAO,CAAA;AAC/B,IAAA,iBAAA,GAAoB,IAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,KAAK,kEAA6D,CAAA;AAAA,EAC5E;AAGA,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,IAAA,MAAM,SAAA,uBAAgB,GAAA,EAAoB;AAE1C,IAAA,MAAM,gBAAA,GAA4B;AAAA,MAChC,QAAQ,GAAA,EAA4B;AAClC,QAAA,OAAO,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA,IAAK,IAAA;AAAA,MAC/B,CAAA;AAAA,MACA,OAAA,CAAQ,KAAa,KAAA,EAAqB;AACxC,QAAA,SAAA,CAAU,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,MAClC,CAAA;AAAA,MACA,WAAW,GAAA,EAAmB;AAC5B,QAAA,SAAA,CAAU,OAAO,GAAG,CAAA;AAAA,MACtB,CAAA;AAAA,MACA,KAAA,GAAc;AACZ,QAAA,SAAA,CAAU,KAAA,EAAM;AAAA,MAClB,CAAA;AAAA,MACA,IAAI,MAAA,GAAiB;AACnB,QAAA,OAAO,SAAA,CAAU,IAAA;AAAA,MACnB,CAAA;AAAA,MACA,IAAI,KAAA,EAA8B;AAChC,QAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA,CAAE,KAAK,CAAA,IAAK,IAAA;AAAA,MAChD;AAAA,KACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,cAAA,EAAgB;AAAA,QAC5C,KAAA,EAAO,gBAAA;AAAA,QACP,QAAA,EAAU,IAAA;AAAA,QACV,YAAA,EAAc;AAAA,OACf,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAEN,MAAC,OAAgD,YAAA,GAAe,gBAAA;AAAA,IAClE;AAEA,IAAA,OAAA,CAAQ,IAAI,2DAA2D,CAAA;AAAA,EACzE;AACF;AAQO,SAAS,6BAAA,GAAsC;AACpD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,kBAAA,GAA8B;AAAA,MAClC,OAAA,GAAgB;AACd,QAAA,OAAO,IAAA;AAAA,MACT,CAAA;AAAA,MACA,OAAA,GAAgB;AAAA,MAAC,CAAA;AAAA,MACjB,UAAA,GAAmB;AAAA,MAAC,CAAA;AAAA,MACpB,KAAA,GAAc;AAAA,MAAC,CAAA;AAAA,MACf,IAAI,MAAA,GAAiB;AACnB,QAAA,OAAO,CAAA;AAAA,MACT,CAAA;AAAA,MACA,GAAA,GAAY;AACV,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,KACF;AAEA,IAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,gBAAA,EAAkB;AAAA,MAC9C,KAAA,EAAO,kBAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAEN,IAAC,OAAkD,cAAA,GAAiB;AAAA,MAClE,SAAS,MAAM,IAAA;AAAA,MACf,SAAS,MAAM;AAAA,MAAC,CAAA;AAAA,MAChB,YAAY,MAAM;AAAA,MAAC,CAAA;AAAA,MACnB,OAAO,MAAM;AAAA,MAAC,CAAA;AAAA,MACd,IAAI,MAAA,GAAS;AAAE,QAAA,OAAO,CAAA;AAAA,MAAG,CAAA;AAAA,MACzB,KAAK,MAAM;AAAA,KACb;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,IAAI,+CAA+C,CAAA;AAC7D;;;ACvGO,SAAS,qBAAA,GAA8B;AAC5C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,aAAa,WAAA,EAAa;AACpE,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,MAAA,GAAS,mBAAA;AAClB,IAAA,WAAA,GAAc,QAAA,CAAS,MAAA,CAAO,OAAA,CAAQ,iBAAiB,CAAA,KAAM,CAAA,CAAA;AAAA,EAC/D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,KAAK,6DAAwD,CAAA;AAAA,EACvE;AAEA,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,WAAA,uBAAkB,GAAA,EAAoB;AAE5C,IAAA,MAAA,CAAO,cAAA,CAAe,UAAU,QAAA,EAAU;AAAA,MACxC,GAAA,GAAc;AACZ,QAAA,MAAM,UAAoB,EAAC;AAC3B,QAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAClC,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AAAA,QAChC,CAAC,CAAA;AACD,QAAA,OAAO,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,MAC1B,CAAA;AAAA,MACA,IAAI,YAAA,EAA4B;AAC9B,QAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AACzD,QAAA,MAAM,CAAC,QAAQ,CAAA,GAAI,KAAA;AAEnB,QAAA,IAAI,CAAC,QAAA,EAAU;AAEf,QAAA,MAAM,CAAC,GAAA,EAAK,KAAK,CAAA,GAAI,QAAA,CAAS,MAAM,GAAG,CAAA;AACvC,QAAA,IAAI,CAAC,GAAA,EAAK;AAGV,QAAA,MAAM,UAA4C,EAAC;AACnD,QAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,UAAA,MAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AACpB,UAAA,IAAI,CAAC,IAAA,EAAM;AACX,UAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAClC,UAAA,MAAM,MAAA,GAAS,YAAY,CAAC,CAAA;AAC5B,UAAA,MAAM,QAAA,GAAW,YAAY,CAAC,CAAA;AAC9B,UAAA,IAAI,MAAA,EAAQ;AACV,YAAA,OAAA,CAAQ,MAAA,CAAO,WAAA,EAAa,CAAA,GAAI,QAAA,IAAY,IAAA;AAAA,UAC9C;AAAA,QACF;AAGA,QAAA,MAAM,eAAe,OAAA,CAAQ,OAAA;AAC7B,QAAA,IAAI,YAAA,IAAgB,OAAO,YAAA,KAAiB,QAAA,EAAU;AACpD,UAAA,MAAM,WAAA,GAAc,IAAI,IAAA,CAAK,YAAY,CAAA;AACzC,UAAA,IAAI,WAAA,mBAAc,IAAI,IAAA,EAAK,EAAG;AAC5B,YAAA,WAAA,CAAY,OAAO,GAAG,CAAA;AACtB,YAAA;AAAA,UACF;AAAA,QACF;AAGA,QAAA,MAAM,WAAA,GAAc,QAAQ,SAAS,CAAA;AACrC,QAAA,IAAI,OAAO,WAAA,KAAgB,QAAA,IAAY,WAAA,KAAgB,GAAA,EAAK;AAC1D,UAAA,WAAA,CAAY,OAAO,GAAG,CAAA;AACtB,UAAA;AAAA,QACF;AAGA,QAAA,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,KAAA,IAAS,EAAE,CAAA;AAAA,MAClC,CAAA;AAAA,MACA,YAAA,EAAc;AAAA,KACf,CAAA;AAED,IAAA,OAAA,CAAQ,IAAI,uCAAuC,CAAA;AAAA,EACrD;AACF;;;ACtEO,SAAS,sBAAA,GAA+B;AAC7C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,YAAY,WAAA,EAAa;AACnE,IAAA;AAAA,EACF;AAGA,EAAA,MAAM,UAAU,MAAM;AACpB,IAAA,OAAA,CAAQ,IAAI,mCAAmC,CAAA;AAE/C,IAAA,MAAM,oBAAoB,OAAA,CAAQ,SAAA;AAClC,IAAA,MAAM,uBAAuB,OAAA,CAAQ,YAAA;AACrC,IAAA,IAAI,YAAA,GAAe,KAAA;AACnB,IAAA,IAAI,eAAA,GAAkB,KAAA;AAGtB,IAAA,OAAA,CAAQ,SAAA,GAAY,SAClB,KAAA,EACA,KAAA,EACA,GAAA,EACM;AACN,MAAA,OAAA,CAAQ,GAAA,CAAI,+BAAA,EAAiC,GAAA,EAAK,OAAA,EAAS,YAAY,CAAA;AAEvE,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,YAAA,GAAe,KAAA;AACf,QAAA,OAAA,CAAQ,IAAI,+BAA+B,CAAA;AAC3C,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,OAAO,iBAAA,CAAkB,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,OAAO,GAAG,CAAA;AAAA,MACvD,SAAS,CAAA,EAAG;AACV,QAAA,IAAK,CAAA,CAAY,IAAA,KAAS,eAAA,IAAmB,GAAA,EAAK;AAEhD,UAAA,MAAM,SAAA,GAAY,IAAI,QAAA,EAAS;AAC/B,UAAA,IAAI,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC1C,UAAA,OAAA,GAAU,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,GAAI,UAAU,GAAA,GAAM,OAAA;AACpD,UAAA,OAAA,CAAQ,GAAA,CAAI,gDAAgD,OAAO,CAAA;AACnE,UAAA,YAAA,GAAe,IAAA;AACf,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAM,EAAE,CAAA;AAC/C,UAAA;AAAA,QACF;AACA,QAAA,MAAM,CAAA;AAAA,MACR;AAAA,IACF,CAAA;AAGA,IAAA,OAAA,CAAQ,YAAA,GAAe,SACrB,KAAA,EACA,KAAA,EACA,GAAA,EACM;AACN,MAAA,OAAA,CAAQ,GAAA,CAAI,kCAAA,EAAoC,GAAA,EAAK,OAAA,EAAS,eAAe,CAAA;AAE7E,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,eAAA,GAAkB,KAAA;AAClB,QAAA,OAAA,CAAQ,IAAI,kCAAkC,CAAA;AAC9C,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,OAAO,oBAAA,CAAqB,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,OAAO,GAAG,CAAA;AAAA,MAC1D,SAAS,CAAA,EAAG;AACV,QAAA,IAAK,CAAA,CAAY,IAAA,KAAS,eAAA,IAAmB,GAAA,EAAK;AAEhD,UAAA,MAAM,SAAA,GAAY,IAAI,QAAA,EAAS;AAC/B,UAAA,IAAI,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC1C,UAAA,OAAA,GAAU,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,GAAI,UAAU,GAAA,GAAM,OAAA;AACpD,UAAA,OAAA,CAAQ,GAAA,CAAI,gDAAgD,OAAO,CAAA;AACnE,UAAA,eAAA,GAAkB,IAAA;AAClB,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAM,EAAE,CAAA;AAC/C,UAAA;AAAA,QACF;AACA,QAAA,MAAM,CAAA;AAAA,MACR;AAAA,IACF,CAAA;AAEA,IAAA,OAAA,CAAQ,IAAI,iCAAiC,CAAA;AAAA,EAC/C,CAAA;AAGA,EAAA,IAAI,QAAA,CAAS,eAAe,SAAA,EAAW;AACrC,IAAA,QAAA,CAAS,iBAAiB,kBAAA,EAAoB,OAAA,EAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,EACvE,CAAA,MAAO;AAEL,IAAA,OAAA,EAAQ;AAAA,EACV;AACF;;;ACvFO,IAAM,uBAAA,GAA0B;AAAA;AAAA,EAErC,KAAA,EAAO,iBAAA;AAAA;AAAA,EAGP,eAAA,EAAiB,iBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASjB,SAAA,EAAW,qBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUX,UAAA,EAAY;AACd,CAAA;;;AC3BO,SAAS,uBAAA,GAAgC;AAC9C,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,MAAA,KAAW,MAAA;AACrD,EAAA,OAAA,CAAQ,GAAA,CAAI,0BAA0B,SAAS,CAAA;AAE/C,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,OAAA,CAAQ,IAAI,2DAA2D,CAAA;AACvE,IAAA,MAAA,CAAO,OAAO,WAAA,CAAY;AAAA,MACxB,MAAM,uBAAA,CAAwB,KAAA;AAAA,MAC9B,IAAA,EAAM,CAAA,uCAAA,EAA0C,CAAC,CAAC,MAAA,CAAO,MAAM,CAAA,YAAA,EAAe,SAAS,CAAA,YAAA,EAAe,MAAA,CAAO,IAAA,KAAS,MAAA,CAAO,GAAG,CAAA;AAAA,OAC/H,GAAG,CAAA;AACN,IAAA,OAAA,CAAQ,IAAI,iCAAiC,CAAA;AAAA,EAC/C,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,IAAI,mDAAmD,CAAA;AAAA,EACjE;AACF;;;ACLO,SAAS,eAAA,GAA0B;AAGxC,EAAA,MAAM,IAAA,GAAO,CAAA;AAAA;;AAAA;AAAA,gCAAA,EAImB,IAAA,CAAK,SAAA,CAAU,uBAAuB,CAAC,CAAA;;AAAA;;AAAA;AAAA,GAAA,EAKpE,2BAAA,CAA4B,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGtC,6BAAA,CAA8B,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGxC,qBAAA,CAAsB,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGhC,sBAAA,CAAuB,UAAU,CAAA;;AAAA;;AAAA;;AAAA;AAAA,GAAA,EAOjC,uBAAA,CAAwB,UAAU,CAAA;AAAA,KAAA,CAAA;AAGrC,EAAA,OAAO,IAAA;AACT;;;AC1CO,IAAM,sBAAA,GAAyB;AAAA,EAEpC,8BAAA,EAAgC,wCAAA;AAAA,EAChC,8BAAA,EAAgC,GAAA;AAAA,EAChC,kCAAA,EAAoC;AACtC,CAAA;AAMO,SAAS,gBAAA,CACd,KACA,MAAA,EACA;AACA,EAAA,GAAA,CAAI,SAAA,CAAU,6BAAA,EAA+B,MAAA,IAAU,GAAG,CAAA;AAC1D,EAAA,GAAA,CAAI,SAAA,CAAU,8BAAA,EAAgC,sBAAA,CAAuB,8BAA8B,CAAC,CAAA;AACpG,EAAA,GAAA,CAAI,SAAA,CAAU,8BAAA,EAAgC,sBAAA,CAAuB,8BAA8B,CAAC,CAAA;AACpG,EAAA,GAAA,CAAI,SAAA,CAAU,kCAAA,EAAoC,sBAAA,CAAuB,kCAAkC,CAAC,CAAA;AAC9G;;;ACSO,SAAS,eAAA,CAAgB,OAAA,GAA6B,EAAC,EAAW;AACvE,EAAA,MAAM,EAAE,eAAA,GAAkB,IAAA,EAAM,aAAA,GAAgB,MAAK,GAAI,OAAA;AAEzD,EAAA,IAAI,YAAA,GAA8B,IAAA;AAElC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,uBAAA;AAAA,IACN,OAAA,EAAS,MAAA;AAAA;AAAA,IAET,eAAe,MAAA,EAAQ;AACrB,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,IAAI;AAEF,UAAA,YAAA,GAAe,eAAA,EAAgB;AAC/B,UAAA,OAAA,CAAQ,IAAI,sDAAiD,CAAA;AAAA,QAC/D,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,iDAAiD,KAAK,CAAA;AACpE,UAAA,MAAM,KAAA;AAAA,QACR;AAAA,MACF;AAGA,MAAA,IAAI,aAAA,IAAiB,MAAA,CAAO,OAAA,KAAY,OAAA,EAAS;AAC/C,QAAA,OAAA,CAAQ,IAAI,0EAAqE,CAAA;AACjF,QAAA,OAAA,CAAQ,IAAI,0DAA0D,CAAA;AACtE,QAAA,OAAA,CAAQ,IAAI,0BAA0B,CAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IAEA,gBAAgB,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAC,aAAA,EAAe;AAGpB,MAAA,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,GAAA,EAAK,KAAK,IAAA,KAAS;AAEzC,QAAA,gBAAA,CAAiB,GAAA,EAAK,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA;AAGxC,QAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAC5B,UAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,UAAA,GAAA,CAAI,GAAA,EAAI;AACR,UAAA;AAAA,QACF;AAEA,QAAA,IAAA,EAAK;AAAA,MACP,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,kBAAA,EAAoB;AAAA,MAClB,KAAA,EAAO,KAAA;AAAA;AAAA,MACP,QAAQ,IAAA,EAAc;AACpB,QAAA,IAAI,CAAC,eAAA,IAAmB,CAAC,YAAA,EAAc;AACrC,UAAA,OAAO,IAAA;AAAA,QACT;AAGA,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,QAAQ,CAAA;AACrC,QAAA,IAAI,YAAY,EAAA,EAAI;AAClB,UAAA,OAAA,CAAQ,KAAK,qDAAqD,CAAA;AAClE,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,MAAM,YAAY,OAAA,GAAU,CAAA;AAG5B,QAAA,MAAM,cAAA,GAAiB,WAAW,YAAY,CAAA,SAAA,CAAA;AAC9C,QAAA,MAAM,YAAA,GAAe,KAAK,KAAA,CAAM,CAAA,EAAG,SAAS,CAAA,GAAI,cAAA,GAAiB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAErF,QAAA,OAAA,CAAQ,IAAI,4DAAuD,CAAA;AAEnE,QAAA,OAAO,YAAA;AAAA,MACT;AAAA;AACF,GACF;AACF;AAGA,IAAO,YAAA,GAAQ","file":"vite.js","sourcesContent":["/**\n * localStorage Polyfill for HaexSpace Extensions\n *\n * Provides an in-memory fallback when localStorage is blocked\n * due to custom protocol restrictions (haex-extension://)\n */\n\nexport function installLocalStoragePolyfill(): void {\n  if (typeof window === 'undefined') {\n    return; // Skip in Node.js environment\n  }\n\n  console.log('[HaexSpace] Storage Polyfill loading immediately');\n\n  // Test if localStorage is available\n  let localStorageWorks = false;\n  try {\n    const testKey = '__ls_test__';\n    localStorage.setItem(testKey, testKey);\n    localStorage.removeItem(testKey);\n    localStorageWorks = true;\n  } catch {\n    console.warn('[HaexSpace] localStorage blocked – using in-memory fallback');\n  }\n\n  // If blocked: Replace with In-Memory Storage\n  if (!localStorageWorks) {\n    const lsStorage = new Map<string, string>();\n\n    const localStoragePoly: Storage = {\n      getItem(key: string): string | null {\n        return lsStorage.get(key) || null;\n      },\n      setItem(key: string, value: string): void {\n        lsStorage.set(key, String(value));\n      },\n      removeItem(key: string): void {\n        lsStorage.delete(key);\n      },\n      clear(): void {\n        lsStorage.clear();\n      },\n      get length(): number {\n        return lsStorage.size;\n      },\n      key(index: number): string | null {\n        return Array.from(lsStorage.keys())[index] || null;\n      }\n    };\n\n    try {\n      Object.defineProperty(window, 'localStorage', {\n        value: localStoragePoly,\n        writable: true,\n        configurable: true\n      });\n    } catch {\n      // Fallback: Direct assignment\n      (window as unknown as { localStorage: Storage }).localStorage = localStoragePoly;\n    }\n\n    console.log('[HaexSpace] localStorage replaced with in-memory polyfill');\n  }\n}\n\n/**\n * sessionStorage Polyfill for HaexSpace Extensions\n *\n * Provides a no-op implementation as session state doesn't work\n * reliably in custom protocol contexts\n */\nexport function installSessionStoragePolyfill(): void {\n  if (typeof window === 'undefined') {\n    return;\n  }\n\n  try {\n    const sessionStoragePoly: Storage = {\n      getItem(): null {\n        return null;\n      },\n      setItem(): void {},\n      removeItem(): void {},\n      clear(): void {},\n      get length(): number {\n        return 0;\n      },\n      key(): null {\n        return null;\n      }\n    };\n\n    Object.defineProperty(window, 'sessionStorage', {\n      value: sessionStoragePoly,\n      writable: true,\n      configurable: true\n    });\n  } catch {\n    // Fallback: Direct assignment\n    (window as unknown as { sessionStorage: Storage }).sessionStorage = {\n      getItem: () => null,\n      setItem: () => {},\n      removeItem: () => {},\n      clear: () => {},\n      get length() { return 0; },\n      key: () => null\n    };\n  }\n\n  console.log('[HaexSpace] sessionStorage polyfill installed');\n}\n","/**\n * Cookie Polyfill for HaexSpace Extensions\n *\n * Provides an in-memory cookie implementation when cookies are blocked\n * due to custom protocol restrictions (haex-extension://)\n */\n\nexport function installCookiePolyfill(): void {\n  if (typeof window === \"undefined\" || typeof document === \"undefined\") {\n    return; // Skip in Node.js environment\n  }\n\n  // Test if cookies are available\n  let cookiesWork = false;\n  try {\n    document.cookie = \"__cookie_test__=1\";\n    cookiesWork = document.cookie.indexOf(\"__cookie_test__\") !== -1;\n  } catch {\n    console.warn(\"[HaexSpace] Cookies blocked – using in-memory fallback\");\n  }\n\n  if (!cookiesWork) {\n    const cookieStore = new Map<string, string>();\n\n    Object.defineProperty(document, \"cookie\", {\n      get(): string {\n        const cookies: string[] = [];\n        cookieStore.forEach((value, key) => {\n          cookies.push(`${key}=${value}`);\n        });\n        return cookies.join(\"; \");\n      },\n      set(cookieString: string): void {\n        const parts = cookieString.split(\";\").map((p) => p.trim());\n        const [keyValue] = parts;\n\n        if (!keyValue) return;\n\n        const [key, value] = keyValue.split(\"=\");\n        if (!key) return;\n\n        // Parse options\n        const options: Record<string, string | boolean> = {};\n        for (let i = 1; i < parts.length; i++) {\n          const part = parts[i];\n          if (!part) continue;\n          const parts_split = part.split(\"=\");\n          const optKey = parts_split[0];\n          const optValue = parts_split[1];\n          if (optKey) {\n            options[optKey.toLowerCase()] = optValue || true;\n          }\n        }\n\n        // Check for deletion (expires in past)\n        const expiresValue = options.expires;\n        if (expiresValue && typeof expiresValue === \"string\") {\n          const expiresDate = new Date(expiresValue);\n          if (expiresDate < new Date()) {\n            cookieStore.delete(key);\n            return;\n          }\n        }\n\n        // Check for max-age=0 deletion\n        const maxAgeValue = options[\"max-age\"];\n        if (typeof maxAgeValue === \"string\" && maxAgeValue === \"0\") {\n          cookieStore.delete(key);\n          return;\n        }\n\n        // Store cookie\n        cookieStore.set(key, value || \"\");\n      },\n      configurable: true,\n    });\n\n    console.log(\"[HaexSpace] Cookie polyfill installed\");\n  }\n}\n","/**\n * History API Polyfill for HaexSpace Extensions\n *\n * Works around SecurityError when using pushState/replaceState\n * in custom protocol contexts (haex-extension://)\n *\n * Falls back to hash-based routing when necessary\n */\n\nexport function installHistoryPolyfill(): void {\n  if (typeof window === 'undefined' || typeof history === 'undefined') {\n    return; // Skip in Node.js environment\n  }\n\n  // Install after DOM is ready to avoid race conditions\n  const install = () => {\n    console.log('[HaexSpace] History Patch loading');\n\n    const originalPushState = history.pushState;\n    const originalReplaceState = history.replaceState;\n    let skipNextPush = false;\n    let skipNextReplace = false;\n\n    // Patch pushState\n    history.pushState = function(\n      state: any,\n      title: string,\n      url?: string | URL | null\n    ): void {\n      console.log('[HaexSpace] pushState called:', url, 'skip:', skipNextPush);\n\n      if (skipNextPush) {\n        skipNextPush = false;\n        console.log('[HaexSpace] pushState skipped');\n        return;\n      }\n\n      try {\n        return originalPushState.call(this, state, title, url);\n      } catch (e) {\n        if ((e as Error).name === 'SecurityError' && url) {\n          // Remove duplicate /#/ prefix\n          const urlString = url.toString();\n          let hashUrl = urlString.replace(/^\\/#/, '');\n          hashUrl = hashUrl.startsWith('#') ? hashUrl : '#' + hashUrl;\n          console.log('[HaexSpace] SecurityError - setting hash to:', hashUrl);\n          skipNextPush = true;\n          window.location.hash = hashUrl.replace(/^#/, '');\n          return; // Silent fallback\n        }\n        throw e;\n      }\n    };\n\n    // Patch replaceState\n    history.replaceState = function(\n      state: any,\n      title: string,\n      url?: string | URL | null\n    ): void {\n      console.log('[HaexSpace] replaceState called:', url, 'skip:', skipNextReplace);\n\n      if (skipNextReplace) {\n        skipNextReplace = false;\n        console.log('[HaexSpace] replaceState skipped');\n        return;\n      }\n\n      try {\n        return originalReplaceState.call(this, state, title, url);\n      } catch (e) {\n        if ((e as Error).name === 'SecurityError' && url) {\n          // Remove duplicate /#/ prefix\n          const urlString = url.toString();\n          let hashUrl = urlString.replace(/^\\/#/, '');\n          hashUrl = hashUrl.startsWith('#') ? hashUrl : '#' + hashUrl;\n          console.log('[HaexSpace] SecurityError - setting hash to:', hashUrl);\n          skipNextReplace = true;\n          window.location.hash = hashUrl.replace(/^#/, '');\n          return; // Silent fallback\n        }\n        throw e;\n      }\n    };\n\n    console.log('[HaexSpace] History API patched');\n  };\n\n  // Install after DOM is ready\n  if (document.readyState === 'loading') {\n    document.addEventListener('DOMContentLoaded', install, { once: true });\n  } else {\n    // DOM already loaded, install immediately\n    install();\n  }\n}\n","/**\n * Central message type definitions for HaexSpace SDK\n *\n * Message Naming Schema: haexspace:{subject}\n *\n * These are used for internal communication between extensions and HaexSpace\n */\n\nexport const HAEXSPACE_MESSAGE_TYPES = {\n  /** Debug message for development/troubleshooting */\n  DEBUG: 'haexspace:debug',\n\n  /** Console forwarding from extension iframe */\n  CONSOLE_FORWARD: 'console.forward',\n\n  /**\n   * Sent from main window to iframe on the shared window listener, carrying\n   * one `MessagePort` in `event.ports[0]`. Once received, the SDK switches\n   * to port-based messaging and never reads the window listener again.\n   *\n   * Payload: `{ type: PORT_INIT }` — no data. The port itself is the payload.\n   */\n  PORT_INIT: 'haexspace:port:init',\n\n  /**\n   * Sent from SDK to main window *over the MessagePort* after the port is\n   * installed. Main uses this to mark the iframe as ready and flush any\n   * events buffered during the handshake window. Only valid on the port —\n   * a READY sent over window.postMessage is ignored.\n   *\n   * Payload: `{ type: PORT_READY }` — no data.\n   */\n  PORT_READY: 'haexspace:port:ready',\n} as const;\n\nexport type HaexspaceMessageType =\n  (typeof HAEXSPACE_MESSAGE_TYPES)[keyof typeof HAEXSPACE_MESSAGE_TYPES];\n","import { HAEXSPACE_MESSAGE_TYPES } from '../messages';\n\n/**\n * Debug diagnostics for Android debugging\n * Tests window.parent availability and postMessage functionality\n */\nexport function installDebugDiagnostics(): void {\n  if (typeof window === 'undefined') {\n    return;\n  }\n\n  const hasParent = window.parent && window.parent !== window;\n  console.log('[HaexSpace] hasParent:', hasParent);\n\n  if (hasParent) {\n    console.log('[HaexSpace] Attempting to send debug message to parent...');\n    window.parent.postMessage({\n      type: HAEXSPACE_MESSAGE_TYPES.DEBUG,\n      data: `[Polyfills] window.parent test: exists=${!!window.parent}, different=${hasParent}, selfIsTop=${window.self === window.top}`\n    }, '*');\n    console.log('[HaexSpace] Debug message sent!');\n  } else {\n    console.log('[HaexSpace] No parent window or parent === window');\n  }\n}\n","/**\n * Generates standalone polyfill code for HTML injection\n * This wraps the modular polyfills into an IIFE for immediate execution\n */\nimport {\n  installLocalStoragePolyfill,\n  installSessionStoragePolyfill,\n} from './localStorage'\nimport { installCookiePolyfill } from './cookies'\nimport { installHistoryPolyfill } from './history'\nimport { installDebugDiagnostics } from './debug'\nimport { HAEXSPACE_MESSAGE_TYPES } from '../messages'\n\n/**\n * Get the standalone polyfill code as a string\n * This is used by the Nuxt and Vite plugins to inject polyfills into HTML\n *\n * Note: Base tag is injected statically by the Vite plugin, not at runtime\n */\nexport function getPolyfillCode(): string {\n  // Convert functions to string and wrap in IIFE\n  // We need to inject the HAEXSPACE_MESSAGE_TYPES constant since it's used by installDebugDiagnostics\n  const iife = `(function() {\n  'use strict';\n\n  // Message types constant (injected from HAEXSPACE_MESSAGE_TYPES)\n  var HAEXSPACE_MESSAGE_TYPES = ${JSON.stringify(HAEXSPACE_MESSAGE_TYPES)};\n\n  console.log('[HaexSpace] Storage Polyfill loading immediately');\n\n  // localStorage Polyfill\n  (${installLocalStoragePolyfill.toString()})();\n\n  // sessionStorage Polyfill\n  (${installSessionStoragePolyfill.toString()})();\n\n  // Cookie Polyfill\n  (${installCookiePolyfill.toString()})();\n\n  // History API Polyfill\n  (${installHistoryPolyfill.toString()})();\n\n  // Note: Base tag is injected at build-time by Vite plugin, not at runtime\n\n  console.log('[HaexSpace] All polyfills loaded successfully');\n\n  // Debug diagnostics for Android debugging\n  (${installDebugDiagnostics.toString()})();\n})();`\n\n  return iife\n}\n","/**\n * CORS Configuration for HaexSpace Extensions\n * Used by both Vite and Nuxt plugins to ensure consistent CORS headers\n */\n\n/**\n * Standard CORS headers for HaexSpace dev servers\n * Allows extensions to be loaded in custom protocol iframes (haex-extension://)\n */\nexport const HAEXSPACE_CORS_HEADERS = {\n  'Access-Control-Allow-Origin': '*',\n  'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, PATCH, OPTIONS',\n  'Access-Control-Allow-Headers': '*',\n  'Access-Control-Allow-Credentials': 'true',\n} as const\n\n/**\n * Apply CORS headers to a Node.js response object\n * Used in Vite middleware\n */\nexport function applyCorsHeaders(\n  res: { setHeader: (name: string, value: string) => void },\n  origin?: string\n) {\n  res.setHeader('Access-Control-Allow-Origin', origin || '*')\n  res.setHeader('Access-Control-Allow-Methods', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Methods'])\n  res.setHeader('Access-Control-Allow-Headers', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Headers'])\n  res.setHeader('Access-Control-Allow-Credentials', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Credentials'])\n}\n\n/**\n * Get CORS headers as a plain object\n * Used in Vite/Nuxt config\n */\nexport function getCorsHeaders(origin?: string): Record<string, string> {\n  return {\n    'Access-Control-Allow-Origin': origin || HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Origin'],\n    'Access-Control-Allow-Methods': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Methods'],\n    'Access-Control-Allow-Headers': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Headers'],\n    'Access-Control-Allow-Credentials': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Credentials'],\n  }\n}\n","/**\n * Vite Plugin for HaexSpace SDK\n * Automatically injects polyfills into HTML files\n * Works with React, Vue, Svelte, and any other Vite-based project\n */\nimport type { Plugin } from 'vite'\nimport { getPolyfillCode } from './polyfills/standalone'\nimport { applyCorsHeaders } from './cors'\n\nexport interface VitePluginOptions {\n  /**\n   * Enable/disable polyfill injection\n   * @default true\n   */\n  injectPolyfills?: boolean\n\n  /**\n   * Configure CORS for dev server\n   * @default true\n   */\n  configureCors?: boolean\n}\n\n/**\n * HaexSpace Vite Plugin\n * Injects browser API polyfills for extensions running in custom protocols\n *\n * @example\n * ```ts\n * // vite.config.ts\n * import { haexspacePlugin } from '@haex-space/vault-sdk/vite'\n *\n * export default {\n *   plugins: [haexspacePlugin()]\n * }\n * ```\n */\nexport function haexspacePlugin(options: VitePluginOptions = {}): Plugin {\n  const { injectPolyfills = true, configureCors = true } = options\n\n  let polyfillCode: string | null = null\n\n  return {\n    name: '@haex-space/vault-sdk',\n    enforce: 'post', // Run after other plugins\n\n    configResolved(config) {\n      if (injectPolyfills) {\n        try {\n          // Get polyfill code from modular polyfills\n          polyfillCode = getPolyfillCode()\n          console.log('✓ [@haex-space/vault-sdk] Polyfills initialized')\n        } catch (error) {\n          console.error('[@haex-space/vault-sdk] Failed to initialize:', error)\n          throw error\n        }\n      }\n\n      // Log CORS configuration\n      if (configureCors && config.command === 'serve') {\n        console.log('✓ [@haex-space/vault-sdk] CORS configured for HaexSpace development')\n        console.log('  - Allowing all origins (required for custom protocols)')\n        console.log('  - Allowing credentials')\n      }\n    },\n\n    configureServer(server) {\n      if (!configureCors) return\n\n      // Add CORS middleware for HaexSpace using shared CORS configuration\n      server.middlewares.use((req, res, next) => {\n        // Apply CORS headers (allows custom protocols like haex-extension://)\n        applyCorsHeaders(res, req.headers.origin)\n\n        // Handle preflight requests\n        if (req.method === 'OPTIONS') {\n          res.statusCode = 200\n          res.end()\n          return\n        }\n\n        next()\n      })\n    },\n\n    transformIndexHtml: {\n      order: 'pre', // Inject before other transformations\n      handler(html: string) {\n        if (!injectPolyfills || !polyfillCode) {\n          return html\n        }\n\n        // Inject polyfill script directly after <head>\n        const headPos = html.indexOf('<head>')\n        if (headPos === -1) {\n          console.warn('[@haex-space/vault-sdk] No <head> tag found in HTML')\n          return html\n        }\n\n        const insertPos = headPos + 6 // after <head>\n\n        // Inject polyfill only (no base tag needed)\n        const polyfillScript = `<script>${polyfillCode}</script>`\n        const modifiedHtml = html.slice(0, insertPos) + polyfillScript + html.slice(insertPos)\n\n        console.log('✓ [@haex-space/vault-sdk] Polyfill injected into HTML')\n\n        return modifiedHtml\n      }\n    }\n  }\n}\n\n// Default export for convenience\nexport default haexspacePlugin\n"]}

package/dist/vite.mjs

@@ -221,7 +221,24 @@ var HAEXSPACE_MESSAGE_TYPES = {
   /** Debug message for development/troubleshooting */
   DEBUG: "haexspace:debug",
   /** Console forwarding from extension iframe */
-  CONSOLE_FORWARD: "console.forward"
+  CONSOLE_FORWARD: "console.forward",
+  /**
+   * Sent from main window to iframe on the shared window listener, carrying
+   * one `MessagePort` in `event.ports[0]`. Once received, the SDK switches
+   * to port-based messaging and never reads the window listener again.
+   *
+   * Payload: `{ type: PORT_INIT }` — no data. The port itself is the payload.
+   */
+  PORT_INIT: "haexspace:port:init",
+  /**
+   * Sent from SDK to main window *over the MessagePort* after the port is
+   * installed. Main uses this to mark the iframe as ready and flush any
+   * events buffered during the handshake window. Only valid on the port —
+   * a READY sent over window.postMessage is ignored.
+   *
+   * Payload: `{ type: PORT_READY }` — no data.
+   */
+  PORT_READY: "haexspace:port:ready"
 };
 
 // src/polyfills/debug.ts

package/dist/vite.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/polyfills/localStorage.ts","../src/polyfills/cookies.ts","../src/polyfills/history.ts","../src/messages.ts","../src/polyfills/debug.ts","../src/polyfills/standalone.ts","../src/cors.ts","../src/vite.ts"],"names":[],"mappings":";AAOO,SAAS,2BAAA,GAAoC;AAClD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,IAAI,kDAAkD,CAAA;AAG9D,EAAA,IAAI,iBAAA,GAAoB,KAAA;AACxB,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,aAAA;AAChB,IAAA,YAAA,CAAa,OAAA,CAAQ,SAAS,OAAO,CAAA;AACrC,IAAA,YAAA,CAAa,WAAW,OAAO,CAAA;AAC/B,IAAA,iBAAA,GAAoB,IAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,KAAK,kEAA6D,CAAA;AAAA,EAC5E;AAGA,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,IAAA,MAAM,SAAA,uBAAgB,GAAA,EAAoB;AAE1C,IAAA,MAAM,gBAAA,GAA4B;AAAA,MAChC,QAAQ,GAAA,EAA4B;AAClC,QAAA,OAAO,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA,IAAK,IAAA;AAAA,MAC/B,CAAA;AAAA,MACA,OAAA,CAAQ,KAAa,KAAA,EAAqB;AACxC,QAAA,SAAA,CAAU,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,MAClC,CAAA;AAAA,MACA,WAAW,GAAA,EAAmB;AAC5B,QAAA,SAAA,CAAU,OAAO,GAAG,CAAA;AAAA,MACtB,CAAA;AAAA,MACA,KAAA,GAAc;AACZ,QAAA,SAAA,CAAU,KAAA,EAAM;AAAA,MAClB,CAAA;AAAA,MACA,IAAI,MAAA,GAAiB;AACnB,QAAA,OAAO,SAAA,CAAU,IAAA;AAAA,MACnB,CAAA;AAAA,MACA,IAAI,KAAA,EAA8B;AAChC,QAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA,CAAE,KAAK,CAAA,IAAK,IAAA;AAAA,MAChD;AAAA,KACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,cAAA,EAAgB;AAAA,QAC5C,KAAA,EAAO,gBAAA;AAAA,QACP,QAAA,EAAU,IAAA;AAAA,QACV,YAAA,EAAc;AAAA,OACf,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAEN,MAAC,OAAgD,YAAA,GAAe,gBAAA;AAAA,IAClE;AAEA,IAAA,OAAA,CAAQ,IAAI,2DAA2D,CAAA;AAAA,EACzE;AACF;AAQO,SAAS,6BAAA,GAAsC;AACpD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,kBAAA,GAA8B;AAAA,MAClC,OAAA,GAAgB;AACd,QAAA,OAAO,IAAA;AAAA,MACT,CAAA;AAAA,MACA,OAAA,GAAgB;AAAA,MAAC,CAAA;AAAA,MACjB,UAAA,GAAmB;AAAA,MAAC,CAAA;AAAA,MACpB,KAAA,GAAc;AAAA,MAAC,CAAA;AAAA,MACf,IAAI,MAAA,GAAiB;AACnB,QAAA,OAAO,CAAA;AAAA,MACT,CAAA;AAAA,MACA,GAAA,GAAY;AACV,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,KACF;AAEA,IAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,gBAAA,EAAkB;AAAA,MAC9C,KAAA,EAAO,kBAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAEN,IAAC,OAAkD,cAAA,GAAiB;AAAA,MAClE,SAAS,MAAM,IAAA;AAAA,MACf,SAAS,MAAM;AAAA,MAAC,CAAA;AAAA,MAChB,YAAY,MAAM;AAAA,MAAC,CAAA;AAAA,MACnB,OAAO,MAAM;AAAA,MAAC,CAAA;AAAA,MACd,IAAI,MAAA,GAAS;AAAE,QAAA,OAAO,CAAA;AAAA,MAAG,CAAA;AAAA,MACzB,KAAK,MAAM;AAAA,KACb;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,IAAI,+CAA+C,CAAA;AAC7D;;;ACvGO,SAAS,qBAAA,GAA8B;AAC5C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,aAAa,WAAA,EAAa;AACpE,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,MAAA,GAAS,mBAAA;AAClB,IAAA,WAAA,GAAc,QAAA,CAAS,MAAA,CAAO,OAAA,CAAQ,iBAAiB,CAAA,KAAM,CAAA,CAAA;AAAA,EAC/D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,KAAK,6DAAwD,CAAA;AAAA,EACvE;AAEA,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,WAAA,uBAAkB,GAAA,EAAoB;AAE5C,IAAA,MAAA,CAAO,cAAA,CAAe,UAAU,QAAA,EAAU;AAAA,MACxC,GAAA,GAAc;AACZ,QAAA,MAAM,UAAoB,EAAC;AAC3B,QAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAClC,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AAAA,QAChC,CAAC,CAAA;AACD,QAAA,OAAO,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,MAC1B,CAAA;AAAA,MACA,IAAI,YAAA,EAA4B;AAC9B,QAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AACzD,QAAA,MAAM,CAAC,QAAQ,CAAA,GAAI,KAAA;AAEnB,QAAA,IAAI,CAAC,QAAA,EAAU;AAEf,QAAA,MAAM,CAAC,GAAA,EAAK,KAAK,CAAA,GAAI,QAAA,CAAS,MAAM,GAAG,CAAA;AACvC,QAAA,IAAI,CAAC,GAAA,EAAK;AAGV,QAAA,MAAM,UAA4C,EAAC;AACnD,QAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,UAAA,MAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AACpB,UAAA,IAAI,CAAC,IAAA,EAAM;AACX,UAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAClC,UAAA,MAAM,MAAA,GAAS,YAAY,CAAC,CAAA;AAC5B,UAAA,MAAM,QAAA,GAAW,YAAY,CAAC,CAAA;AAC9B,UAAA,IAAI,MAAA,EAAQ;AACV,YAAA,OAAA,CAAQ,MAAA,CAAO,WAAA,EAAa,CAAA,GAAI,QAAA,IAAY,IAAA;AAAA,UAC9C;AAAA,QACF;AAGA,QAAA,MAAM,eAAe,OAAA,CAAQ,OAAA;AAC7B,QAAA,IAAI,YAAA,IAAgB,OAAO,YAAA,KAAiB,QAAA,EAAU;AACpD,UAAA,MAAM,WAAA,GAAc,IAAI,IAAA,CAAK,YAAY,CAAA;AACzC,UAAA,IAAI,WAAA,mBAAc,IAAI,IAAA,EAAK,EAAG;AAC5B,YAAA,WAAA,CAAY,OAAO,GAAG,CAAA;AACtB,YAAA;AAAA,UACF;AAAA,QACF;AAGA,QAAA,MAAM,WAAA,GAAc,QAAQ,SAAS,CAAA;AACrC,QAAA,IAAI,OAAO,WAAA,KAAgB,QAAA,IAAY,WAAA,KAAgB,GAAA,EAAK;AAC1D,UAAA,WAAA,CAAY,OAAO,GAAG,CAAA;AACtB,UAAA;AAAA,QACF;AAGA,QAAA,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,KAAA,IAAS,EAAE,CAAA;AAAA,MAClC,CAAA;AAAA,MACA,YAAA,EAAc;AAAA,KACf,CAAA;AAED,IAAA,OAAA,CAAQ,IAAI,uCAAuC,CAAA;AAAA,EACrD;AACF;;;ACtEO,SAAS,sBAAA,GAA+B;AAC7C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,YAAY,WAAA,EAAa;AACnE,IAAA;AAAA,EACF;AAGA,EAAA,MAAM,UAAU,MAAM;AACpB,IAAA,OAAA,CAAQ,IAAI,mCAAmC,CAAA;AAE/C,IAAA,MAAM,oBAAoB,OAAA,CAAQ,SAAA;AAClC,IAAA,MAAM,uBAAuB,OAAA,CAAQ,YAAA;AACrC,IAAA,IAAI,YAAA,GAAe,KAAA;AACnB,IAAA,IAAI,eAAA,GAAkB,KAAA;AAGtB,IAAA,OAAA,CAAQ,SAAA,GAAY,SAClB,KAAA,EACA,KAAA,EACA,GAAA,EACM;AACN,MAAA,OAAA,CAAQ,GAAA,CAAI,+BAAA,EAAiC,GAAA,EAAK,OAAA,EAAS,YAAY,CAAA;AAEvE,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,YAAA,GAAe,KAAA;AACf,QAAA,OAAA,CAAQ,IAAI,+BAA+B,CAAA;AAC3C,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,OAAO,iBAAA,CAAkB,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,OAAO,GAAG,CAAA;AAAA,MACvD,SAAS,CAAA,EAAG;AACV,QAAA,IAAK,CAAA,CAAY,IAAA,KAAS,eAAA,IAAmB,GAAA,EAAK;AAEhD,UAAA,MAAM,SAAA,GAAY,IAAI,QAAA,EAAS;AAC/B,UAAA,IAAI,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC1C,UAAA,OAAA,GAAU,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,GAAI,UAAU,GAAA,GAAM,OAAA;AACpD,UAAA,OAAA,CAAQ,GAAA,CAAI,gDAAgD,OAAO,CAAA;AACnE,UAAA,YAAA,GAAe,IAAA;AACf,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAM,EAAE,CAAA;AAC/C,UAAA;AAAA,QACF;AACA,QAAA,MAAM,CAAA;AAAA,MACR;AAAA,IACF,CAAA;AAGA,IAAA,OAAA,CAAQ,YAAA,GAAe,SACrB,KAAA,EACA,KAAA,EACA,GAAA,EACM;AACN,MAAA,OAAA,CAAQ,GAAA,CAAI,kCAAA,EAAoC,GAAA,EAAK,OAAA,EAAS,eAAe,CAAA;AAE7E,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,eAAA,GAAkB,KAAA;AAClB,QAAA,OAAA,CAAQ,IAAI,kCAAkC,CAAA;AAC9C,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,OAAO,oBAAA,CAAqB,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,OAAO,GAAG,CAAA;AAAA,MAC1D,SAAS,CAAA,EAAG;AACV,QAAA,IAAK,CAAA,CAAY,IAAA,KAAS,eAAA,IAAmB,GAAA,EAAK;AAEhD,UAAA,MAAM,SAAA,GAAY,IAAI,QAAA,EAAS;AAC/B,UAAA,IAAI,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC1C,UAAA,OAAA,GAAU,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,GAAI,UAAU,GAAA,GAAM,OAAA;AACpD,UAAA,OAAA,CAAQ,GAAA,CAAI,gDAAgD,OAAO,CAAA;AACnE,UAAA,eAAA,GAAkB,IAAA;AAClB,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAM,EAAE,CAAA;AAC/C,UAAA;AAAA,QACF;AACA,QAAA,MAAM,CAAA;AAAA,MACR;AAAA,IACF,CAAA;AAEA,IAAA,OAAA,CAAQ,IAAI,iCAAiC,CAAA;AAAA,EAC/C,CAAA;AAGA,EAAA,IAAI,QAAA,CAAS,eAAe,SAAA,EAAW;AACrC,IAAA,QAAA,CAAS,iBAAiB,kBAAA,EAAoB,OAAA,EAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,EACvE,CAAA,MAAO;AAEL,IAAA,OAAA,EAAQ;AAAA,EACV;AACF;;;ACvFO,IAAM,uBAAA,GAA0B;AAAA;AAAA,EAErC,KAAA,EAAO,iBAAA;AAAA;AAAA,EAGP,eAAA,EAAiB;AACnB,CAAA;;;ACRO,SAAS,uBAAA,GAAgC;AAC9C,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,MAAA,KAAW,MAAA;AACrD,EAAA,OAAA,CAAQ,GAAA,CAAI,0BAA0B,SAAS,CAAA;AAE/C,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,OAAA,CAAQ,IAAI,2DAA2D,CAAA;AACvE,IAAA,MAAA,CAAO,OAAO,WAAA,CAAY;AAAA,MACxB,MAAM,uBAAA,CAAwB,KAAA;AAAA,MAC9B,IAAA,EAAM,CAAA,uCAAA,EAA0C,CAAC,CAAC,MAAA,CAAO,MAAM,CAAA,YAAA,EAAe,SAAS,CAAA,YAAA,EAAe,MAAA,CAAO,IAAA,KAAS,MAAA,CAAO,GAAG,CAAA;AAAA,OAC/H,GAAG,CAAA;AACN,IAAA,OAAA,CAAQ,IAAI,iCAAiC,CAAA;AAAA,EAC/C,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,IAAI,mDAAmD,CAAA;AAAA,EACjE;AACF;;;ACLO,SAAS,eAAA,GAA0B;AAGxC,EAAA,MAAM,IAAA,GAAO,CAAA;AAAA;;AAAA;AAAA,gCAAA,EAImB,IAAA,CAAK,SAAA,CAAU,uBAAuB,CAAC,CAAA;;AAAA;;AAAA;AAAA,GAAA,EAKpE,2BAAA,CAA4B,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGtC,6BAAA,CAA8B,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGxC,qBAAA,CAAsB,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGhC,sBAAA,CAAuB,UAAU,CAAA;;AAAA;;AAAA;;AAAA;AAAA,GAAA,EAOjC,uBAAA,CAAwB,UAAU,CAAA;AAAA,KAAA,CAAA;AAGrC,EAAA,OAAO,IAAA;AACT;;;AC1CO,IAAM,sBAAA,GAAyB;AAAA,EAEpC,8BAAA,EAAgC,wCAAA;AAAA,EAChC,8BAAA,EAAgC,GAAA;AAAA,EAChC,kCAAA,EAAoC;AACtC,CAAA;AAMO,SAAS,gBAAA,CACd,KACA,MAAA,EACA;AACA,EAAA,GAAA,CAAI,SAAA,CAAU,6BAAA,EAA+B,MAAA,IAAU,GAAG,CAAA;AAC1D,EAAA,GAAA,CAAI,SAAA,CAAU,8BAAA,EAAgC,sBAAA,CAAuB,8BAA8B,CAAC,CAAA;AACpG,EAAA,GAAA,CAAI,SAAA,CAAU,8BAAA,EAAgC,sBAAA,CAAuB,8BAA8B,CAAC,CAAA;AACpG,EAAA,GAAA,CAAI,SAAA,CAAU,kCAAA,EAAoC,sBAAA,CAAuB,kCAAkC,CAAC,CAAA;AAC9G;;;ACSO,SAAS,eAAA,CAAgB,OAAA,GAA6B,EAAC,EAAW;AACvE,EAAA,MAAM,EAAE,eAAA,GAAkB,IAAA,EAAM,aAAA,GAAgB,MAAK,GAAI,OAAA;AAEzD,EAAA,IAAI,YAAA,GAA8B,IAAA;AAElC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,uBAAA;AAAA,IACN,OAAA,EAAS,MAAA;AAAA;AAAA,IAET,eAAe,MAAA,EAAQ;AACrB,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,IAAI;AAEF,UAAA,YAAA,GAAe,eAAA,EAAgB;AAC/B,UAAA,OAAA,CAAQ,IAAI,sDAAiD,CAAA;AAAA,QAC/D,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,iDAAiD,KAAK,CAAA;AACpE,UAAA,MAAM,KAAA;AAAA,QACR;AAAA,MACF;AAGA,MAAA,IAAI,aAAA,IAAiB,MAAA,CAAO,OAAA,KAAY,OAAA,EAAS;AAC/C,QAAA,OAAA,CAAQ,IAAI,0EAAqE,CAAA;AACjF,QAAA,OAAA,CAAQ,IAAI,0DAA0D,CAAA;AACtE,QAAA,OAAA,CAAQ,IAAI,0BAA0B,CAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IAEA,gBAAgB,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAC,aAAA,EAAe;AAGpB,MAAA,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,GAAA,EAAK,KAAK,IAAA,KAAS;AAEzC,QAAA,gBAAA,CAAiB,GAAA,EAAK,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA;AAGxC,QAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAC5B,UAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,UAAA,GAAA,CAAI,GAAA,EAAI;AACR,UAAA;AAAA,QACF;AAEA,QAAA,IAAA,EAAK;AAAA,MACP,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,kBAAA,EAAoB;AAAA,MAClB,KAAA,EAAO,KAAA;AAAA;AAAA,MACP,QAAQ,IAAA,EAAc;AACpB,QAAA,IAAI,CAAC,eAAA,IAAmB,CAAC,YAAA,EAAc;AACrC,UAAA,OAAO,IAAA;AAAA,QACT;AAGA,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,QAAQ,CAAA;AACrC,QAAA,IAAI,YAAY,EAAA,EAAI;AAClB,UAAA,OAAA,CAAQ,KAAK,qDAAqD,CAAA;AAClE,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,MAAM,YAAY,OAAA,GAAU,CAAA;AAG5B,QAAA,MAAM,cAAA,GAAiB,WAAW,YAAY,CAAA,SAAA,CAAA;AAC9C,QAAA,MAAM,YAAA,GAAe,KAAK,KAAA,CAAM,CAAA,EAAG,SAAS,CAAA,GAAI,cAAA,GAAiB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAErF,QAAA,OAAA,CAAQ,IAAI,4DAAuD,CAAA;AAEnE,QAAA,OAAO,YAAA;AAAA,MACT;AAAA;AACF,GACF;AACF;AAGA,IAAO,YAAA,GAAQ","file":"vite.mjs","sourcesContent":["/**\n * localStorage Polyfill for HaexSpace Extensions\n *\n * Provides an in-memory fallback when localStorage is blocked\n * due to custom protocol restrictions (haex-extension://)\n */\n\nexport function installLocalStoragePolyfill(): void {\n  if (typeof window === 'undefined') {\n    return; // Skip in Node.js environment\n  }\n\n  console.log('[HaexSpace] Storage Polyfill loading immediately');\n\n  // Test if localStorage is available\n  let localStorageWorks = false;\n  try {\n    const testKey = '__ls_test__';\n    localStorage.setItem(testKey, testKey);\n    localStorage.removeItem(testKey);\n    localStorageWorks = true;\n  } catch {\n    console.warn('[HaexSpace] localStorage blocked – using in-memory fallback');\n  }\n\n  // If blocked: Replace with In-Memory Storage\n  if (!localStorageWorks) {\n    const lsStorage = new Map<string, string>();\n\n    const localStoragePoly: Storage = {\n      getItem(key: string): string | null {\n        return lsStorage.get(key) || null;\n      },\n      setItem(key: string, value: string): void {\n        lsStorage.set(key, String(value));\n      },\n      removeItem(key: string): void {\n        lsStorage.delete(key);\n      },\n      clear(): void {\n        lsStorage.clear();\n      },\n      get length(): number {\n        return lsStorage.size;\n      },\n      key(index: number): string | null {\n        return Array.from(lsStorage.keys())[index] || null;\n      }\n    };\n\n    try {\n      Object.defineProperty(window, 'localStorage', {\n        value: localStoragePoly,\n        writable: true,\n        configurable: true\n      });\n    } catch {\n      // Fallback: Direct assignment\n      (window as unknown as { localStorage: Storage }).localStorage = localStoragePoly;\n    }\n\n    console.log('[HaexSpace] localStorage replaced with in-memory polyfill');\n  }\n}\n\n/**\n * sessionStorage Polyfill for HaexSpace Extensions\n *\n * Provides a no-op implementation as session state doesn't work\n * reliably in custom protocol contexts\n */\nexport function installSessionStoragePolyfill(): void {\n  if (typeof window === 'undefined') {\n    return;\n  }\n\n  try {\n    const sessionStoragePoly: Storage = {\n      getItem(): null {\n        return null;\n      },\n      setItem(): void {},\n      removeItem(): void {},\n      clear(): void {},\n      get length(): number {\n        return 0;\n      },\n      key(): null {\n        return null;\n      }\n    };\n\n    Object.defineProperty(window, 'sessionStorage', {\n      value: sessionStoragePoly,\n      writable: true,\n      configurable: true\n    });\n  } catch {\n    // Fallback: Direct assignment\n    (window as unknown as { sessionStorage: Storage }).sessionStorage = {\n      getItem: () => null,\n      setItem: () => {},\n      removeItem: () => {},\n      clear: () => {},\n      get length() { return 0; },\n      key: () => null\n    };\n  }\n\n  console.log('[HaexSpace] sessionStorage polyfill installed');\n}\n","/**\n * Cookie Polyfill for HaexSpace Extensions\n *\n * Provides an in-memory cookie implementation when cookies are blocked\n * due to custom protocol restrictions (haex-extension://)\n */\n\nexport function installCookiePolyfill(): void {\n  if (typeof window === \"undefined\" || typeof document === \"undefined\") {\n    return; // Skip in Node.js environment\n  }\n\n  // Test if cookies are available\n  let cookiesWork = false;\n  try {\n    document.cookie = \"__cookie_test__=1\";\n    cookiesWork = document.cookie.indexOf(\"__cookie_test__\") !== -1;\n  } catch {\n    console.warn(\"[HaexSpace] Cookies blocked – using in-memory fallback\");\n  }\n\n  if (!cookiesWork) {\n    const cookieStore = new Map<string, string>();\n\n    Object.defineProperty(document, \"cookie\", {\n      get(): string {\n        const cookies: string[] = [];\n        cookieStore.forEach((value, key) => {\n          cookies.push(`${key}=${value}`);\n        });\n        return cookies.join(\"; \");\n      },\n      set(cookieString: string): void {\n        const parts = cookieString.split(\";\").map((p) => p.trim());\n        const [keyValue] = parts;\n\n        if (!keyValue) return;\n\n        const [key, value] = keyValue.split(\"=\");\n        if (!key) return;\n\n        // Parse options\n        const options: Record<string, string | boolean> = {};\n        for (let i = 1; i < parts.length; i++) {\n          const part = parts[i];\n          if (!part) continue;\n          const parts_split = part.split(\"=\");\n          const optKey = parts_split[0];\n          const optValue = parts_split[1];\n          if (optKey) {\n            options[optKey.toLowerCase()] = optValue || true;\n          }\n        }\n\n        // Check for deletion (expires in past)\n        const expiresValue = options.expires;\n        if (expiresValue && typeof expiresValue === \"string\") {\n          const expiresDate = new Date(expiresValue);\n          if (expiresDate < new Date()) {\n            cookieStore.delete(key);\n            return;\n          }\n        }\n\n        // Check for max-age=0 deletion\n        const maxAgeValue = options[\"max-age\"];\n        if (typeof maxAgeValue === \"string\" && maxAgeValue === \"0\") {\n          cookieStore.delete(key);\n          return;\n        }\n\n        // Store cookie\n        cookieStore.set(key, value || \"\");\n      },\n      configurable: true,\n    });\n\n    console.log(\"[HaexSpace] Cookie polyfill installed\");\n  }\n}\n","/**\n * History API Polyfill for HaexSpace Extensions\n *\n * Works around SecurityError when using pushState/replaceState\n * in custom protocol contexts (haex-extension://)\n *\n * Falls back to hash-based routing when necessary\n */\n\nexport function installHistoryPolyfill(): void {\n  if (typeof window === 'undefined' || typeof history === 'undefined') {\n    return; // Skip in Node.js environment\n  }\n\n  // Install after DOM is ready to avoid race conditions\n  const install = () => {\n    console.log('[HaexSpace] History Patch loading');\n\n    const originalPushState = history.pushState;\n    const originalReplaceState = history.replaceState;\n    let skipNextPush = false;\n    let skipNextReplace = false;\n\n    // Patch pushState\n    history.pushState = function(\n      state: any,\n      title: string,\n      url?: string | URL | null\n    ): void {\n      console.log('[HaexSpace] pushState called:', url, 'skip:', skipNextPush);\n\n      if (skipNextPush) {\n        skipNextPush = false;\n        console.log('[HaexSpace] pushState skipped');\n        return;\n      }\n\n      try {\n        return originalPushState.call(this, state, title, url);\n      } catch (e) {\n        if ((e as Error).name === 'SecurityError' && url) {\n          // Remove duplicate /#/ prefix\n          const urlString = url.toString();\n          let hashUrl = urlString.replace(/^\\/#/, '');\n          hashUrl = hashUrl.startsWith('#') ? hashUrl : '#' + hashUrl;\n          console.log('[HaexSpace] SecurityError - setting hash to:', hashUrl);\n          skipNextPush = true;\n          window.location.hash = hashUrl.replace(/^#/, '');\n          return; // Silent fallback\n        }\n        throw e;\n      }\n    };\n\n    // Patch replaceState\n    history.replaceState = function(\n      state: any,\n      title: string,\n      url?: string | URL | null\n    ): void {\n      console.log('[HaexSpace] replaceState called:', url, 'skip:', skipNextReplace);\n\n      if (skipNextReplace) {\n        skipNextReplace = false;\n        console.log('[HaexSpace] replaceState skipped');\n        return;\n      }\n\n      try {\n        return originalReplaceState.call(this, state, title, url);\n      } catch (e) {\n        if ((e as Error).name === 'SecurityError' && url) {\n          // Remove duplicate /#/ prefix\n          const urlString = url.toString();\n          let hashUrl = urlString.replace(/^\\/#/, '');\n          hashUrl = hashUrl.startsWith('#') ? hashUrl : '#' + hashUrl;\n          console.log('[HaexSpace] SecurityError - setting hash to:', hashUrl);\n          skipNextReplace = true;\n          window.location.hash = hashUrl.replace(/^#/, '');\n          return; // Silent fallback\n        }\n        throw e;\n      }\n    };\n\n    console.log('[HaexSpace] History API patched');\n  };\n\n  // Install after DOM is ready\n  if (document.readyState === 'loading') {\n    document.addEventListener('DOMContentLoaded', install, { once: true });\n  } else {\n    // DOM already loaded, install immediately\n    install();\n  }\n}\n","/**\n * Central message type definitions for HaexSpace SDK\n *\n * Message Naming Schema: haexspace:{subject}\n *\n * These are used for internal communication between extensions and HaexSpace\n */\n\nexport const HAEXSPACE_MESSAGE_TYPES = {\n  /** Debug message for development/troubleshooting */\n  DEBUG: 'haexspace:debug',\n\n  /** Console forwarding from extension iframe */\n  CONSOLE_FORWARD: 'console.forward',\n} as const;\n\nexport type HaexspaceMessageType =\n  (typeof HAEXSPACE_MESSAGE_TYPES)[keyof typeof HAEXSPACE_MESSAGE_TYPES];\n","import { HAEXSPACE_MESSAGE_TYPES } from '../messages';\n\n/**\n * Debug diagnostics for Android debugging\n * Tests window.parent availability and postMessage functionality\n */\nexport function installDebugDiagnostics(): void {\n  if (typeof window === 'undefined') {\n    return;\n  }\n\n  const hasParent = window.parent && window.parent !== window;\n  console.log('[HaexSpace] hasParent:', hasParent);\n\n  if (hasParent) {\n    console.log('[HaexSpace] Attempting to send debug message to parent...');\n    window.parent.postMessage({\n      type: HAEXSPACE_MESSAGE_TYPES.DEBUG,\n      data: `[Polyfills] window.parent test: exists=${!!window.parent}, different=${hasParent}, selfIsTop=${window.self === window.top}`\n    }, '*');\n    console.log('[HaexSpace] Debug message sent!');\n  } else {\n    console.log('[HaexSpace] No parent window or parent === window');\n  }\n}\n","/**\n * Generates standalone polyfill code for HTML injection\n * This wraps the modular polyfills into an IIFE for immediate execution\n */\nimport {\n  installLocalStoragePolyfill,\n  installSessionStoragePolyfill,\n} from './localStorage'\nimport { installCookiePolyfill } from './cookies'\nimport { installHistoryPolyfill } from './history'\nimport { installDebugDiagnostics } from './debug'\nimport { HAEXSPACE_MESSAGE_TYPES } from '../messages'\n\n/**\n * Get the standalone polyfill code as a string\n * This is used by the Nuxt and Vite plugins to inject polyfills into HTML\n *\n * Note: Base tag is injected statically by the Vite plugin, not at runtime\n */\nexport function getPolyfillCode(): string {\n  // Convert functions to string and wrap in IIFE\n  // We need to inject the HAEXSPACE_MESSAGE_TYPES constant since it's used by installDebugDiagnostics\n  const iife = `(function() {\n  'use strict';\n\n  // Message types constant (injected from HAEXSPACE_MESSAGE_TYPES)\n  var HAEXSPACE_MESSAGE_TYPES = ${JSON.stringify(HAEXSPACE_MESSAGE_TYPES)};\n\n  console.log('[HaexSpace] Storage Polyfill loading immediately');\n\n  // localStorage Polyfill\n  (${installLocalStoragePolyfill.toString()})();\n\n  // sessionStorage Polyfill\n  (${installSessionStoragePolyfill.toString()})();\n\n  // Cookie Polyfill\n  (${installCookiePolyfill.toString()})();\n\n  // History API Polyfill\n  (${installHistoryPolyfill.toString()})();\n\n  // Note: Base tag is injected at build-time by Vite plugin, not at runtime\n\n  console.log('[HaexSpace] All polyfills loaded successfully');\n\n  // Debug diagnostics for Android debugging\n  (${installDebugDiagnostics.toString()})();\n})();`\n\n  return iife\n}\n","/**\n * CORS Configuration for HaexSpace Extensions\n * Used by both Vite and Nuxt plugins to ensure consistent CORS headers\n */\n\n/**\n * Standard CORS headers for HaexSpace dev servers\n * Allows extensions to be loaded in custom protocol iframes (haex-extension://)\n */\nexport const HAEXSPACE_CORS_HEADERS = {\n  'Access-Control-Allow-Origin': '*',\n  'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, PATCH, OPTIONS',\n  'Access-Control-Allow-Headers': '*',\n  'Access-Control-Allow-Credentials': 'true',\n} as const\n\n/**\n * Apply CORS headers to a Node.js response object\n * Used in Vite middleware\n */\nexport function applyCorsHeaders(\n  res: { setHeader: (name: string, value: string) => void },\n  origin?: string\n) {\n  res.setHeader('Access-Control-Allow-Origin', origin || '*')\n  res.setHeader('Access-Control-Allow-Methods', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Methods'])\n  res.setHeader('Access-Control-Allow-Headers', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Headers'])\n  res.setHeader('Access-Control-Allow-Credentials', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Credentials'])\n}\n\n/**\n * Get CORS headers as a plain object\n * Used in Vite/Nuxt config\n */\nexport function getCorsHeaders(origin?: string): Record<string, string> {\n  return {\n    'Access-Control-Allow-Origin': origin || HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Origin'],\n    'Access-Control-Allow-Methods': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Methods'],\n    'Access-Control-Allow-Headers': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Headers'],\n    'Access-Control-Allow-Credentials': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Credentials'],\n  }\n}\n","/**\n * Vite Plugin for HaexSpace SDK\n * Automatically injects polyfills into HTML files\n * Works with React, Vue, Svelte, and any other Vite-based project\n */\nimport type { Plugin } from 'vite'\nimport { getPolyfillCode } from './polyfills/standalone'\nimport { applyCorsHeaders } from './cors'\n\nexport interface VitePluginOptions {\n  /**\n   * Enable/disable polyfill injection\n   * @default true\n   */\n  injectPolyfills?: boolean\n\n  /**\n   * Configure CORS for dev server\n   * @default true\n   */\n  configureCors?: boolean\n}\n\n/**\n * HaexSpace Vite Plugin\n * Injects browser API polyfills for extensions running in custom protocols\n *\n * @example\n * ```ts\n * // vite.config.ts\n * import { haexspacePlugin } from '@haex-space/vault-sdk/vite'\n *\n * export default {\n *   plugins: [haexspacePlugin()]\n * }\n * ```\n */\nexport function haexspacePlugin(options: VitePluginOptions = {}): Plugin {\n  const { injectPolyfills = true, configureCors = true } = options\n\n  let polyfillCode: string | null = null\n\n  return {\n    name: '@haex-space/vault-sdk',\n    enforce: 'post', // Run after other plugins\n\n    configResolved(config) {\n      if (injectPolyfills) {\n        try {\n          // Get polyfill code from modular polyfills\n          polyfillCode = getPolyfillCode()\n          console.log('✓ [@haex-space/vault-sdk] Polyfills initialized')\n        } catch (error) {\n          console.error('[@haex-space/vault-sdk] Failed to initialize:', error)\n          throw error\n        }\n      }\n\n      // Log CORS configuration\n      if (configureCors && config.command === 'serve') {\n        console.log('✓ [@haex-space/vault-sdk] CORS configured for HaexSpace development')\n        console.log('  - Allowing all origins (required for custom protocols)')\n        console.log('  - Allowing credentials')\n      }\n    },\n\n    configureServer(server) {\n      if (!configureCors) return\n\n      // Add CORS middleware for HaexSpace using shared CORS configuration\n      server.middlewares.use((req, res, next) => {\n        // Apply CORS headers (allows custom protocols like haex-extension://)\n        applyCorsHeaders(res, req.headers.origin)\n\n        // Handle preflight requests\n        if (req.method === 'OPTIONS') {\n          res.statusCode = 200\n          res.end()\n          return\n        }\n\n        next()\n      })\n    },\n\n    transformIndexHtml: {\n      order: 'pre', // Inject before other transformations\n      handler(html: string) {\n        if (!injectPolyfills || !polyfillCode) {\n          return html\n        }\n\n        // Inject polyfill script directly after <head>\n        const headPos = html.indexOf('<head>')\n        if (headPos === -1) {\n          console.warn('[@haex-space/vault-sdk] No <head> tag found in HTML')\n          return html\n        }\n\n        const insertPos = headPos + 6 // after <head>\n\n        // Inject polyfill only (no base tag needed)\n        const polyfillScript = `<script>${polyfillCode}</script>`\n        const modifiedHtml = html.slice(0, insertPos) + polyfillScript + html.slice(insertPos)\n\n        console.log('✓ [@haex-space/vault-sdk] Polyfill injected into HTML')\n\n        return modifiedHtml\n      }\n    }\n  }\n}\n\n// Default export for convenience\nexport default haexspacePlugin\n"]}
+{"version":3,"sources":["../src/polyfills/localStorage.ts","../src/polyfills/cookies.ts","../src/polyfills/history.ts","../src/messages.ts","../src/polyfills/debug.ts","../src/polyfills/standalone.ts","../src/cors.ts","../src/vite.ts"],"names":[],"mappings":";AAOO,SAAS,2BAAA,GAAoC;AAClD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,IAAI,kDAAkD,CAAA;AAG9D,EAAA,IAAI,iBAAA,GAAoB,KAAA;AACxB,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,aAAA;AAChB,IAAA,YAAA,CAAa,OAAA,CAAQ,SAAS,OAAO,CAAA;AACrC,IAAA,YAAA,CAAa,WAAW,OAAO,CAAA;AAC/B,IAAA,iBAAA,GAAoB,IAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,KAAK,kEAA6D,CAAA;AAAA,EAC5E;AAGA,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,IAAA,MAAM,SAAA,uBAAgB,GAAA,EAAoB;AAE1C,IAAA,MAAM,gBAAA,GAA4B;AAAA,MAChC,QAAQ,GAAA,EAA4B;AAClC,QAAA,OAAO,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA,IAAK,IAAA;AAAA,MAC/B,CAAA;AAAA,MACA,OAAA,CAAQ,KAAa,KAAA,EAAqB;AACxC,QAAA,SAAA,CAAU,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,MAClC,CAAA;AAAA,MACA,WAAW,GAAA,EAAmB;AAC5B,QAAA,SAAA,CAAU,OAAO,GAAG,CAAA;AAAA,MACtB,CAAA;AAAA,MACA,KAAA,GAAc;AACZ,QAAA,SAAA,CAAU,KAAA,EAAM;AAAA,MAClB,CAAA;AAAA,MACA,IAAI,MAAA,GAAiB;AACnB,QAAA,OAAO,SAAA,CAAU,IAAA;AAAA,MACnB,CAAA;AAAA,MACA,IAAI,KAAA,EAA8B;AAChC,QAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA,CAAE,KAAK,CAAA,IAAK,IAAA;AAAA,MAChD;AAAA,KACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,cAAA,EAAgB;AAAA,QAC5C,KAAA,EAAO,gBAAA;AAAA,QACP,QAAA,EAAU,IAAA;AAAA,QACV,YAAA,EAAc;AAAA,OACf,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAEN,MAAC,OAAgD,YAAA,GAAe,gBAAA;AAAA,IAClE;AAEA,IAAA,OAAA,CAAQ,IAAI,2DAA2D,CAAA;AAAA,EACzE;AACF;AAQO,SAAS,6BAAA,GAAsC;AACpD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,kBAAA,GAA8B;AAAA,MAClC,OAAA,GAAgB;AACd,QAAA,OAAO,IAAA;AAAA,MACT,CAAA;AAAA,MACA,OAAA,GAAgB;AAAA,MAAC,CAAA;AAAA,MACjB,UAAA,GAAmB;AAAA,MAAC,CAAA;AAAA,MACpB,KAAA,GAAc;AAAA,MAAC,CAAA;AAAA,MACf,IAAI,MAAA,GAAiB;AACnB,QAAA,OAAO,CAAA;AAAA,MACT,CAAA;AAAA,MACA,GAAA,GAAY;AACV,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,KACF;AAEA,IAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,gBAAA,EAAkB;AAAA,MAC9C,KAAA,EAAO,kBAAA;AAAA,MACP,QAAA,EAAU,IAAA;AAAA,MACV,YAAA,EAAc;AAAA,KACf,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAEN,IAAC,OAAkD,cAAA,GAAiB;AAAA,MAClE,SAAS,MAAM,IAAA;AAAA,MACf,SAAS,MAAM;AAAA,MAAC,CAAA;AAAA,MAChB,YAAY,MAAM;AAAA,MAAC,CAAA;AAAA,MACnB,OAAO,MAAM;AAAA,MAAC,CAAA;AAAA,MACd,IAAI,MAAA,GAAS;AAAE,QAAA,OAAO,CAAA;AAAA,MAAG,CAAA;AAAA,MACzB,KAAK,MAAM;AAAA,KACb;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,IAAI,+CAA+C,CAAA;AAC7D;;;ACvGO,SAAS,qBAAA,GAA8B;AAC5C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,aAAa,WAAA,EAAa;AACpE,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,MAAA,GAAS,mBAAA;AAClB,IAAA,WAAA,GAAc,QAAA,CAAS,MAAA,CAAO,OAAA,CAAQ,iBAAiB,CAAA,KAAM,CAAA,CAAA;AAAA,EAC/D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,KAAK,6DAAwD,CAAA;AAAA,EACvE;AAEA,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,WAAA,uBAAkB,GAAA,EAAoB;AAE5C,IAAA,MAAA,CAAO,cAAA,CAAe,UAAU,QAAA,EAAU;AAAA,MACxC,GAAA,GAAc;AACZ,QAAA,MAAM,UAAoB,EAAC;AAC3B,QAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAClC,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AAAA,QAChC,CAAC,CAAA;AACD,QAAA,OAAO,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,MAC1B,CAAA;AAAA,MACA,IAAI,YAAA,EAA4B;AAC9B,QAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AACzD,QAAA,MAAM,CAAC,QAAQ,CAAA,GAAI,KAAA;AAEnB,QAAA,IAAI,CAAC,QAAA,EAAU;AAEf,QAAA,MAAM,CAAC,GAAA,EAAK,KAAK,CAAA,GAAI,QAAA,CAAS,MAAM,GAAG,CAAA;AACvC,QAAA,IAAI,CAAC,GAAA,EAAK;AAGV,QAAA,MAAM,UAA4C,EAAC;AACnD,QAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,UAAA,MAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AACpB,UAAA,IAAI,CAAC,IAAA,EAAM;AACX,UAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAClC,UAAA,MAAM,MAAA,GAAS,YAAY,CAAC,CAAA;AAC5B,UAAA,MAAM,QAAA,GAAW,YAAY,CAAC,CAAA;AAC9B,UAAA,IAAI,MAAA,EAAQ;AACV,YAAA,OAAA,CAAQ,MAAA,CAAO,WAAA,EAAa,CAAA,GAAI,QAAA,IAAY,IAAA;AAAA,UAC9C;AAAA,QACF;AAGA,QAAA,MAAM,eAAe,OAAA,CAAQ,OAAA;AAC7B,QAAA,IAAI,YAAA,IAAgB,OAAO,YAAA,KAAiB,QAAA,EAAU;AACpD,UAAA,MAAM,WAAA,GAAc,IAAI,IAAA,CAAK,YAAY,CAAA;AACzC,UAAA,IAAI,WAAA,mBAAc,IAAI,IAAA,EAAK,EAAG;AAC5B,YAAA,WAAA,CAAY,OAAO,GAAG,CAAA;AACtB,YAAA;AAAA,UACF;AAAA,QACF;AAGA,QAAA,MAAM,WAAA,GAAc,QAAQ,SAAS,CAAA;AACrC,QAAA,IAAI,OAAO,WAAA,KAAgB,QAAA,IAAY,WAAA,KAAgB,GAAA,EAAK;AAC1D,UAAA,WAAA,CAAY,OAAO,GAAG,CAAA;AACtB,UAAA;AAAA,QACF;AAGA,QAAA,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,KAAA,IAAS,EAAE,CAAA;AAAA,MAClC,CAAA;AAAA,MACA,YAAA,EAAc;AAAA,KACf,CAAA;AAED,IAAA,OAAA,CAAQ,IAAI,uCAAuC,CAAA;AAAA,EACrD;AACF;;;ACtEO,SAAS,sBAAA,GAA+B;AAC7C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,YAAY,WAAA,EAAa;AACnE,IAAA;AAAA,EACF;AAGA,EAAA,MAAM,UAAU,MAAM;AACpB,IAAA,OAAA,CAAQ,IAAI,mCAAmC,CAAA;AAE/C,IAAA,MAAM,oBAAoB,OAAA,CAAQ,SAAA;AAClC,IAAA,MAAM,uBAAuB,OAAA,CAAQ,YAAA;AACrC,IAAA,IAAI,YAAA,GAAe,KAAA;AACnB,IAAA,IAAI,eAAA,GAAkB,KAAA;AAGtB,IAAA,OAAA,CAAQ,SAAA,GAAY,SAClB,KAAA,EACA,KAAA,EACA,GAAA,EACM;AACN,MAAA,OAAA,CAAQ,GAAA,CAAI,+BAAA,EAAiC,GAAA,EAAK,OAAA,EAAS,YAAY,CAAA;AAEvE,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,YAAA,GAAe,KAAA;AACf,QAAA,OAAA,CAAQ,IAAI,+BAA+B,CAAA;AAC3C,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,OAAO,iBAAA,CAAkB,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,OAAO,GAAG,CAAA;AAAA,MACvD,SAAS,CAAA,EAAG;AACV,QAAA,IAAK,CAAA,CAAY,IAAA,KAAS,eAAA,IAAmB,GAAA,EAAK;AAEhD,UAAA,MAAM,SAAA,GAAY,IAAI,QAAA,EAAS;AAC/B,UAAA,IAAI,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC1C,UAAA,OAAA,GAAU,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,GAAI,UAAU,GAAA,GAAM,OAAA;AACpD,UAAA,OAAA,CAAQ,GAAA,CAAI,gDAAgD,OAAO,CAAA;AACnE,UAAA,YAAA,GAAe,IAAA;AACf,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAM,EAAE,CAAA;AAC/C,UAAA;AAAA,QACF;AACA,QAAA,MAAM,CAAA;AAAA,MACR;AAAA,IACF,CAAA;AAGA,IAAA,OAAA,CAAQ,YAAA,GAAe,SACrB,KAAA,EACA,KAAA,EACA,GAAA,EACM;AACN,MAAA,OAAA,CAAQ,GAAA,CAAI,kCAAA,EAAoC,GAAA,EAAK,OAAA,EAAS,eAAe,CAAA;AAE7E,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,eAAA,GAAkB,KAAA;AAClB,QAAA,OAAA,CAAQ,IAAI,kCAAkC,CAAA;AAC9C,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,OAAO,oBAAA,CAAqB,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,OAAO,GAAG,CAAA;AAAA,MAC1D,SAAS,CAAA,EAAG;AACV,QAAA,IAAK,CAAA,CAAY,IAAA,KAAS,eAAA,IAAmB,GAAA,EAAK;AAEhD,UAAA,MAAM,SAAA,GAAY,IAAI,QAAA,EAAS;AAC/B,UAAA,IAAI,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC1C,UAAA,OAAA,GAAU,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,GAAI,UAAU,GAAA,GAAM,OAAA;AACpD,UAAA,OAAA,CAAQ,GAAA,CAAI,gDAAgD,OAAO,CAAA;AACnE,UAAA,eAAA,GAAkB,IAAA;AAClB,UAAA,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAM,EAAE,CAAA;AAC/C,UAAA;AAAA,QACF;AACA,QAAA,MAAM,CAAA;AAAA,MACR;AAAA,IACF,CAAA;AAEA,IAAA,OAAA,CAAQ,IAAI,iCAAiC,CAAA;AAAA,EAC/C,CAAA;AAGA,EAAA,IAAI,QAAA,CAAS,eAAe,SAAA,EAAW;AACrC,IAAA,QAAA,CAAS,iBAAiB,kBAAA,EAAoB,OAAA,EAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,EACvE,CAAA,MAAO;AAEL,IAAA,OAAA,EAAQ;AAAA,EACV;AACF;;;ACvFO,IAAM,uBAAA,GAA0B;AAAA;AAAA,EAErC,KAAA,EAAO,iBAAA;AAAA;AAAA,EAGP,eAAA,EAAiB,iBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASjB,SAAA,EAAW,qBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUX,UAAA,EAAY;AACd,CAAA;;;AC3BO,SAAS,uBAAA,GAAgC;AAC9C,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,MAAA,KAAW,MAAA;AACrD,EAAA,OAAA,CAAQ,GAAA,CAAI,0BAA0B,SAAS,CAAA;AAE/C,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,OAAA,CAAQ,IAAI,2DAA2D,CAAA;AACvE,IAAA,MAAA,CAAO,OAAO,WAAA,CAAY;AAAA,MACxB,MAAM,uBAAA,CAAwB,KAAA;AAAA,MAC9B,IAAA,EAAM,CAAA,uCAAA,EAA0C,CAAC,CAAC,MAAA,CAAO,MAAM,CAAA,YAAA,EAAe,SAAS,CAAA,YAAA,EAAe,MAAA,CAAO,IAAA,KAAS,MAAA,CAAO,GAAG,CAAA;AAAA,OAC/H,GAAG,CAAA;AACN,IAAA,OAAA,CAAQ,IAAI,iCAAiC,CAAA;AAAA,EAC/C,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,IAAI,mDAAmD,CAAA;AAAA,EACjE;AACF;;;ACLO,SAAS,eAAA,GAA0B;AAGxC,EAAA,MAAM,IAAA,GAAO,CAAA;AAAA;;AAAA;AAAA,gCAAA,EAImB,IAAA,CAAK,SAAA,CAAU,uBAAuB,CAAC,CAAA;;AAAA;;AAAA;AAAA,GAAA,EAKpE,2BAAA,CAA4B,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGtC,6BAAA,CAA8B,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGxC,qBAAA,CAAsB,UAAU,CAAA;;AAAA;AAAA,GAAA,EAGhC,sBAAA,CAAuB,UAAU,CAAA;;AAAA;;AAAA;;AAAA;AAAA,GAAA,EAOjC,uBAAA,CAAwB,UAAU,CAAA;AAAA,KAAA,CAAA;AAGrC,EAAA,OAAO,IAAA;AACT;;;AC1CO,IAAM,sBAAA,GAAyB;AAAA,EAEpC,8BAAA,EAAgC,wCAAA;AAAA,EAChC,8BAAA,EAAgC,GAAA;AAAA,EAChC,kCAAA,EAAoC;AACtC,CAAA;AAMO,SAAS,gBAAA,CACd,KACA,MAAA,EACA;AACA,EAAA,GAAA,CAAI,SAAA,CAAU,6BAAA,EAA+B,MAAA,IAAU,GAAG,CAAA;AAC1D,EAAA,GAAA,CAAI,SAAA,CAAU,8BAAA,EAAgC,sBAAA,CAAuB,8BAA8B,CAAC,CAAA;AACpG,EAAA,GAAA,CAAI,SAAA,CAAU,8BAAA,EAAgC,sBAAA,CAAuB,8BAA8B,CAAC,CAAA;AACpG,EAAA,GAAA,CAAI,SAAA,CAAU,kCAAA,EAAoC,sBAAA,CAAuB,kCAAkC,CAAC,CAAA;AAC9G;;;ACSO,SAAS,eAAA,CAAgB,OAAA,GAA6B,EAAC,EAAW;AACvE,EAAA,MAAM,EAAE,eAAA,GAAkB,IAAA,EAAM,aAAA,GAAgB,MAAK,GAAI,OAAA;AAEzD,EAAA,IAAI,YAAA,GAA8B,IAAA;AAElC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,uBAAA;AAAA,IACN,OAAA,EAAS,MAAA;AAAA;AAAA,IAET,eAAe,MAAA,EAAQ;AACrB,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,IAAI;AAEF,UAAA,YAAA,GAAe,eAAA,EAAgB;AAC/B,UAAA,OAAA,CAAQ,IAAI,sDAAiD,CAAA;AAAA,QAC/D,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,iDAAiD,KAAK,CAAA;AACpE,UAAA,MAAM,KAAA;AAAA,QACR;AAAA,MACF;AAGA,MAAA,IAAI,aAAA,IAAiB,MAAA,CAAO,OAAA,KAAY,OAAA,EAAS;AAC/C,QAAA,OAAA,CAAQ,IAAI,0EAAqE,CAAA;AACjF,QAAA,OAAA,CAAQ,IAAI,0DAA0D,CAAA;AACtE,QAAA,OAAA,CAAQ,IAAI,0BAA0B,CAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IAEA,gBAAgB,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAC,aAAA,EAAe;AAGpB,MAAA,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,GAAA,EAAK,KAAK,IAAA,KAAS;AAEzC,QAAA,gBAAA,CAAiB,GAAA,EAAK,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA;AAGxC,QAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAC5B,UAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,UAAA,GAAA,CAAI,GAAA,EAAI;AACR,UAAA;AAAA,QACF;AAEA,QAAA,IAAA,EAAK;AAAA,MACP,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,kBAAA,EAAoB;AAAA,MAClB,KAAA,EAAO,KAAA;AAAA;AAAA,MACP,QAAQ,IAAA,EAAc;AACpB,QAAA,IAAI,CAAC,eAAA,IAAmB,CAAC,YAAA,EAAc;AACrC,UAAA,OAAO,IAAA;AAAA,QACT;AAGA,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,QAAQ,CAAA;AACrC,QAAA,IAAI,YAAY,EAAA,EAAI;AAClB,UAAA,OAAA,CAAQ,KAAK,qDAAqD,CAAA;AAClE,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,MAAM,YAAY,OAAA,GAAU,CAAA;AAG5B,QAAA,MAAM,cAAA,GAAiB,WAAW,YAAY,CAAA,SAAA,CAAA;AAC9C,QAAA,MAAM,YAAA,GAAe,KAAK,KAAA,CAAM,CAAA,EAAG,SAAS,CAAA,GAAI,cAAA,GAAiB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAErF,QAAA,OAAA,CAAQ,IAAI,4DAAuD,CAAA;AAEnE,QAAA,OAAO,YAAA;AAAA,MACT;AAAA;AACF,GACF;AACF;AAGA,IAAO,YAAA,GAAQ","file":"vite.mjs","sourcesContent":["/**\n * localStorage Polyfill for HaexSpace Extensions\n *\n * Provides an in-memory fallback when localStorage is blocked\n * due to custom protocol restrictions (haex-extension://)\n */\n\nexport function installLocalStoragePolyfill(): void {\n  if (typeof window === 'undefined') {\n    return; // Skip in Node.js environment\n  }\n\n  console.log('[HaexSpace] Storage Polyfill loading immediately');\n\n  // Test if localStorage is available\n  let localStorageWorks = false;\n  try {\n    const testKey = '__ls_test__';\n    localStorage.setItem(testKey, testKey);\n    localStorage.removeItem(testKey);\n    localStorageWorks = true;\n  } catch {\n    console.warn('[HaexSpace] localStorage blocked – using in-memory fallback');\n  }\n\n  // If blocked: Replace with In-Memory Storage\n  if (!localStorageWorks) {\n    const lsStorage = new Map<string, string>();\n\n    const localStoragePoly: Storage = {\n      getItem(key: string): string | null {\n        return lsStorage.get(key) || null;\n      },\n      setItem(key: string, value: string): void {\n        lsStorage.set(key, String(value));\n      },\n      removeItem(key: string): void {\n        lsStorage.delete(key);\n      },\n      clear(): void {\n        lsStorage.clear();\n      },\n      get length(): number {\n        return lsStorage.size;\n      },\n      key(index: number): string | null {\n        return Array.from(lsStorage.keys())[index] || null;\n      }\n    };\n\n    try {\n      Object.defineProperty(window, 'localStorage', {\n        value: localStoragePoly,\n        writable: true,\n        configurable: true\n      });\n    } catch {\n      // Fallback: Direct assignment\n      (window as unknown as { localStorage: Storage }).localStorage = localStoragePoly;\n    }\n\n    console.log('[HaexSpace] localStorage replaced with in-memory polyfill');\n  }\n}\n\n/**\n * sessionStorage Polyfill for HaexSpace Extensions\n *\n * Provides a no-op implementation as session state doesn't work\n * reliably in custom protocol contexts\n */\nexport function installSessionStoragePolyfill(): void {\n  if (typeof window === 'undefined') {\n    return;\n  }\n\n  try {\n    const sessionStoragePoly: Storage = {\n      getItem(): null {\n        return null;\n      },\n      setItem(): void {},\n      removeItem(): void {},\n      clear(): void {},\n      get length(): number {\n        return 0;\n      },\n      key(): null {\n        return null;\n      }\n    };\n\n    Object.defineProperty(window, 'sessionStorage', {\n      value: sessionStoragePoly,\n      writable: true,\n      configurable: true\n    });\n  } catch {\n    // Fallback: Direct assignment\n    (window as unknown as { sessionStorage: Storage }).sessionStorage = {\n      getItem: () => null,\n      setItem: () => {},\n      removeItem: () => {},\n      clear: () => {},\n      get length() { return 0; },\n      key: () => null\n    };\n  }\n\n  console.log('[HaexSpace] sessionStorage polyfill installed');\n}\n","/**\n * Cookie Polyfill for HaexSpace Extensions\n *\n * Provides an in-memory cookie implementation when cookies are blocked\n * due to custom protocol restrictions (haex-extension://)\n */\n\nexport function installCookiePolyfill(): void {\n  if (typeof window === \"undefined\" || typeof document === \"undefined\") {\n    return; // Skip in Node.js environment\n  }\n\n  // Test if cookies are available\n  let cookiesWork = false;\n  try {\n    document.cookie = \"__cookie_test__=1\";\n    cookiesWork = document.cookie.indexOf(\"__cookie_test__\") !== -1;\n  } catch {\n    console.warn(\"[HaexSpace] Cookies blocked – using in-memory fallback\");\n  }\n\n  if (!cookiesWork) {\n    const cookieStore = new Map<string, string>();\n\n    Object.defineProperty(document, \"cookie\", {\n      get(): string {\n        const cookies: string[] = [];\n        cookieStore.forEach((value, key) => {\n          cookies.push(`${key}=${value}`);\n        });\n        return cookies.join(\"; \");\n      },\n      set(cookieString: string): void {\n        const parts = cookieString.split(\";\").map((p) => p.trim());\n        const [keyValue] = parts;\n\n        if (!keyValue) return;\n\n        const [key, value] = keyValue.split(\"=\");\n        if (!key) return;\n\n        // Parse options\n        const options: Record<string, string | boolean> = {};\n        for (let i = 1; i < parts.length; i++) {\n          const part = parts[i];\n          if (!part) continue;\n          const parts_split = part.split(\"=\");\n          const optKey = parts_split[0];\n          const optValue = parts_split[1];\n          if (optKey) {\n            options[optKey.toLowerCase()] = optValue || true;\n          }\n        }\n\n        // Check for deletion (expires in past)\n        const expiresValue = options.expires;\n        if (expiresValue && typeof expiresValue === \"string\") {\n          const expiresDate = new Date(expiresValue);\n          if (expiresDate < new Date()) {\n            cookieStore.delete(key);\n            return;\n          }\n        }\n\n        // Check for max-age=0 deletion\n        const maxAgeValue = options[\"max-age\"];\n        if (typeof maxAgeValue === \"string\" && maxAgeValue === \"0\") {\n          cookieStore.delete(key);\n          return;\n        }\n\n        // Store cookie\n        cookieStore.set(key, value || \"\");\n      },\n      configurable: true,\n    });\n\n    console.log(\"[HaexSpace] Cookie polyfill installed\");\n  }\n}\n","/**\n * History API Polyfill for HaexSpace Extensions\n *\n * Works around SecurityError when using pushState/replaceState\n * in custom protocol contexts (haex-extension://)\n *\n * Falls back to hash-based routing when necessary\n */\n\nexport function installHistoryPolyfill(): void {\n  if (typeof window === 'undefined' || typeof history === 'undefined') {\n    return; // Skip in Node.js environment\n  }\n\n  // Install after DOM is ready to avoid race conditions\n  const install = () => {\n    console.log('[HaexSpace] History Patch loading');\n\n    const originalPushState = history.pushState;\n    const originalReplaceState = history.replaceState;\n    let skipNextPush = false;\n    let skipNextReplace = false;\n\n    // Patch pushState\n    history.pushState = function(\n      state: any,\n      title: string,\n      url?: string | URL | null\n    ): void {\n      console.log('[HaexSpace] pushState called:', url, 'skip:', skipNextPush);\n\n      if (skipNextPush) {\n        skipNextPush = false;\n        console.log('[HaexSpace] pushState skipped');\n        return;\n      }\n\n      try {\n        return originalPushState.call(this, state, title, url);\n      } catch (e) {\n        if ((e as Error).name === 'SecurityError' && url) {\n          // Remove duplicate /#/ prefix\n          const urlString = url.toString();\n          let hashUrl = urlString.replace(/^\\/#/, '');\n          hashUrl = hashUrl.startsWith('#') ? hashUrl : '#' + hashUrl;\n          console.log('[HaexSpace] SecurityError - setting hash to:', hashUrl);\n          skipNextPush = true;\n          window.location.hash = hashUrl.replace(/^#/, '');\n          return; // Silent fallback\n        }\n        throw e;\n      }\n    };\n\n    // Patch replaceState\n    history.replaceState = function(\n      state: any,\n      title: string,\n      url?: string | URL | null\n    ): void {\n      console.log('[HaexSpace] replaceState called:', url, 'skip:', skipNextReplace);\n\n      if (skipNextReplace) {\n        skipNextReplace = false;\n        console.log('[HaexSpace] replaceState skipped');\n        return;\n      }\n\n      try {\n        return originalReplaceState.call(this, state, title, url);\n      } catch (e) {\n        if ((e as Error).name === 'SecurityError' && url) {\n          // Remove duplicate /#/ prefix\n          const urlString = url.toString();\n          let hashUrl = urlString.replace(/^\\/#/, '');\n          hashUrl = hashUrl.startsWith('#') ? hashUrl : '#' + hashUrl;\n          console.log('[HaexSpace] SecurityError - setting hash to:', hashUrl);\n          skipNextReplace = true;\n          window.location.hash = hashUrl.replace(/^#/, '');\n          return; // Silent fallback\n        }\n        throw e;\n      }\n    };\n\n    console.log('[HaexSpace] History API patched');\n  };\n\n  // Install after DOM is ready\n  if (document.readyState === 'loading') {\n    document.addEventListener('DOMContentLoaded', install, { once: true });\n  } else {\n    // DOM already loaded, install immediately\n    install();\n  }\n}\n","/**\n * Central message type definitions for HaexSpace SDK\n *\n * Message Naming Schema: haexspace:{subject}\n *\n * These are used for internal communication between extensions and HaexSpace\n */\n\nexport const HAEXSPACE_MESSAGE_TYPES = {\n  /** Debug message for development/troubleshooting */\n  DEBUG: 'haexspace:debug',\n\n  /** Console forwarding from extension iframe */\n  CONSOLE_FORWARD: 'console.forward',\n\n  /**\n   * Sent from main window to iframe on the shared window listener, carrying\n   * one `MessagePort` in `event.ports[0]`. Once received, the SDK switches\n   * to port-based messaging and never reads the window listener again.\n   *\n   * Payload: `{ type: PORT_INIT }` — no data. The port itself is the payload.\n   */\n  PORT_INIT: 'haexspace:port:init',\n\n  /**\n   * Sent from SDK to main window *over the MessagePort* after the port is\n   * installed. Main uses this to mark the iframe as ready and flush any\n   * events buffered during the handshake window. Only valid on the port —\n   * a READY sent over window.postMessage is ignored.\n   *\n   * Payload: `{ type: PORT_READY }` — no data.\n   */\n  PORT_READY: 'haexspace:port:ready',\n} as const;\n\nexport type HaexspaceMessageType =\n  (typeof HAEXSPACE_MESSAGE_TYPES)[keyof typeof HAEXSPACE_MESSAGE_TYPES];\n","import { HAEXSPACE_MESSAGE_TYPES } from '../messages';\n\n/**\n * Debug diagnostics for Android debugging\n * Tests window.parent availability and postMessage functionality\n */\nexport function installDebugDiagnostics(): void {\n  if (typeof window === 'undefined') {\n    return;\n  }\n\n  const hasParent = window.parent && window.parent !== window;\n  console.log('[HaexSpace] hasParent:', hasParent);\n\n  if (hasParent) {\n    console.log('[HaexSpace] Attempting to send debug message to parent...');\n    window.parent.postMessage({\n      type: HAEXSPACE_MESSAGE_TYPES.DEBUG,\n      data: `[Polyfills] window.parent test: exists=${!!window.parent}, different=${hasParent}, selfIsTop=${window.self === window.top}`\n    }, '*');\n    console.log('[HaexSpace] Debug message sent!');\n  } else {\n    console.log('[HaexSpace] No parent window or parent === window');\n  }\n}\n","/**\n * Generates standalone polyfill code for HTML injection\n * This wraps the modular polyfills into an IIFE for immediate execution\n */\nimport {\n  installLocalStoragePolyfill,\n  installSessionStoragePolyfill,\n} from './localStorage'\nimport { installCookiePolyfill } from './cookies'\nimport { installHistoryPolyfill } from './history'\nimport { installDebugDiagnostics } from './debug'\nimport { HAEXSPACE_MESSAGE_TYPES } from '../messages'\n\n/**\n * Get the standalone polyfill code as a string\n * This is used by the Nuxt and Vite plugins to inject polyfills into HTML\n *\n * Note: Base tag is injected statically by the Vite plugin, not at runtime\n */\nexport function getPolyfillCode(): string {\n  // Convert functions to string and wrap in IIFE\n  // We need to inject the HAEXSPACE_MESSAGE_TYPES constant since it's used by installDebugDiagnostics\n  const iife = `(function() {\n  'use strict';\n\n  // Message types constant (injected from HAEXSPACE_MESSAGE_TYPES)\n  var HAEXSPACE_MESSAGE_TYPES = ${JSON.stringify(HAEXSPACE_MESSAGE_TYPES)};\n\n  console.log('[HaexSpace] Storage Polyfill loading immediately');\n\n  // localStorage Polyfill\n  (${installLocalStoragePolyfill.toString()})();\n\n  // sessionStorage Polyfill\n  (${installSessionStoragePolyfill.toString()})();\n\n  // Cookie Polyfill\n  (${installCookiePolyfill.toString()})();\n\n  // History API Polyfill\n  (${installHistoryPolyfill.toString()})();\n\n  // Note: Base tag is injected at build-time by Vite plugin, not at runtime\n\n  console.log('[HaexSpace] All polyfills loaded successfully');\n\n  // Debug diagnostics for Android debugging\n  (${installDebugDiagnostics.toString()})();\n})();`\n\n  return iife\n}\n","/**\n * CORS Configuration for HaexSpace Extensions\n * Used by both Vite and Nuxt plugins to ensure consistent CORS headers\n */\n\n/**\n * Standard CORS headers for HaexSpace dev servers\n * Allows extensions to be loaded in custom protocol iframes (haex-extension://)\n */\nexport const HAEXSPACE_CORS_HEADERS = {\n  'Access-Control-Allow-Origin': '*',\n  'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, PATCH, OPTIONS',\n  'Access-Control-Allow-Headers': '*',\n  'Access-Control-Allow-Credentials': 'true',\n} as const\n\n/**\n * Apply CORS headers to a Node.js response object\n * Used in Vite middleware\n */\nexport function applyCorsHeaders(\n  res: { setHeader: (name: string, value: string) => void },\n  origin?: string\n) {\n  res.setHeader('Access-Control-Allow-Origin', origin || '*')\n  res.setHeader('Access-Control-Allow-Methods', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Methods'])\n  res.setHeader('Access-Control-Allow-Headers', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Headers'])\n  res.setHeader('Access-Control-Allow-Credentials', HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Credentials'])\n}\n\n/**\n * Get CORS headers as a plain object\n * Used in Vite/Nuxt config\n */\nexport function getCorsHeaders(origin?: string): Record<string, string> {\n  return {\n    'Access-Control-Allow-Origin': origin || HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Origin'],\n    'Access-Control-Allow-Methods': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Methods'],\n    'Access-Control-Allow-Headers': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Headers'],\n    'Access-Control-Allow-Credentials': HAEXSPACE_CORS_HEADERS['Access-Control-Allow-Credentials'],\n  }\n}\n","/**\n * Vite Plugin for HaexSpace SDK\n * Automatically injects polyfills into HTML files\n * Works with React, Vue, Svelte, and any other Vite-based project\n */\nimport type { Plugin } from 'vite'\nimport { getPolyfillCode } from './polyfills/standalone'\nimport { applyCorsHeaders } from './cors'\n\nexport interface VitePluginOptions {\n  /**\n   * Enable/disable polyfill injection\n   * @default true\n   */\n  injectPolyfills?: boolean\n\n  /**\n   * Configure CORS for dev server\n   * @default true\n   */\n  configureCors?: boolean\n}\n\n/**\n * HaexSpace Vite Plugin\n * Injects browser API polyfills for extensions running in custom protocols\n *\n * @example\n * ```ts\n * // vite.config.ts\n * import { haexspacePlugin } from '@haex-space/vault-sdk/vite'\n *\n * export default {\n *   plugins: [haexspacePlugin()]\n * }\n * ```\n */\nexport function haexspacePlugin(options: VitePluginOptions = {}): Plugin {\n  const { injectPolyfills = true, configureCors = true } = options\n\n  let polyfillCode: string | null = null\n\n  return {\n    name: '@haex-space/vault-sdk',\n    enforce: 'post', // Run after other plugins\n\n    configResolved(config) {\n      if (injectPolyfills) {\n        try {\n          // Get polyfill code from modular polyfills\n          polyfillCode = getPolyfillCode()\n          console.log('✓ [@haex-space/vault-sdk] Polyfills initialized')\n        } catch (error) {\n          console.error('[@haex-space/vault-sdk] Failed to initialize:', error)\n          throw error\n        }\n      }\n\n      // Log CORS configuration\n      if (configureCors && config.command === 'serve') {\n        console.log('✓ [@haex-space/vault-sdk] CORS configured for HaexSpace development')\n        console.log('  - Allowing all origins (required for custom protocols)')\n        console.log('  - Allowing credentials')\n      }\n    },\n\n    configureServer(server) {\n      if (!configureCors) return\n\n      // Add CORS middleware for HaexSpace using shared CORS configuration\n      server.middlewares.use((req, res, next) => {\n        // Apply CORS headers (allows custom protocols like haex-extension://)\n        applyCorsHeaders(res, req.headers.origin)\n\n        // Handle preflight requests\n        if (req.method === 'OPTIONS') {\n          res.statusCode = 200\n          res.end()\n          return\n        }\n\n        next()\n      })\n    },\n\n    transformIndexHtml: {\n      order: 'pre', // Inject before other transformations\n      handler(html: string) {\n        if (!injectPolyfills || !polyfillCode) {\n          return html\n        }\n\n        // Inject polyfill script directly after <head>\n        const headPos = html.indexOf('<head>')\n        if (headPos === -1) {\n          console.warn('[@haex-space/vault-sdk] No <head> tag found in HTML')\n          return html\n        }\n\n        const insertPos = headPos + 6 // after <head>\n\n        // Inject polyfill only (no base tag needed)\n        const polyfillScript = `<script>${polyfillCode}</script>`\n        const modifiedHtml = html.slice(0, insertPos) + polyfillScript + html.slice(insertPos)\n\n        console.log('✓ [@haex-space/vault-sdk] Polyfill injected into HTML')\n\n        return modifiedHtml\n      }\n    }\n  }\n}\n\n// Default export for convenience\nexport default haexspacePlugin\n"]}

package/dist/vue.d.mts

@@ -1,4 +1,4 @@
-import { H as HaexVaultSdk, S as StorageAPI } from './client-CUZX5oKJ.mjs';
+import { H as HaexVaultSdk, S as StorageAPI } from './client-C0DPNG62.mjs';
 import * as drizzle_orm_sqlite_proxy from 'drizzle-orm/sqlite-proxy';
 import { Ref } from 'vue';
 import { H as HaexHubConfig } from './types-DmCSegdY.mjs';

package/dist/vue.d.ts

@@ -1,4 +1,4 @@
-import { H as HaexVaultSdk, S as StorageAPI } from './client-BRsLRztg.js';
+import { H as HaexVaultSdk, S as StorageAPI } from './client-B_B6rLIw.js';
 import * as drizzle_orm_sqlite_proxy from 'drizzle-orm/sqlite-proxy';
 import { Ref } from 'vue';
 import { H as HaexHubConfig } from './types-DmCSegdY.js';

package/dist/vue.js

@@ -269,7 +269,24 @@ var HAEXSPACE_MESSAGE_TYPES = {
   /** Debug message for development/troubleshooting */
   DEBUG: "haexspace:debug",
   /** Console forwarding from extension iframe */
-  CONSOLE_FORWARD: "console.forward"
+  CONSOLE_FORWARD: "console.forward",
+  /**
+   * Sent from main window to iframe on the shared window listener, carrying
+   * one `MessagePort` in `event.ports[0]`. Once received, the SDK switches
+   * to port-based messaging and never reads the window listener again.
+   *
+   * Payload: `{ type: PORT_INIT }` — no data. The port itself is the payload.
+   */
+  PORT_INIT: "haexspace:port:init",
+  /**
+   * Sent from SDK to main window *over the MessagePort* after the port is
+   * installed. Main uses this to mark the iframe as ready and flush any
+   * events buffered during the handshake window. Only valid on the port —
+   * a READY sent over window.postMessage is ignored.
+   *
+   * Payload: `{ type: PORT_READY }` — no data.
+   */
+  PORT_READY: "haexspace:port:ready"
 };
 
 // src/polyfills/debug.ts
@@ -682,7 +699,7 @@ var DatabaseAPI = class {
   }
   async transaction(statements) {
     await this.client.request(DATABASE_COMMANDS.transaction, {
-      statements
+      statements: statements.map((s) => [s.sql, s.params || []])
     });
   }
   async createTable(tableName, columns) {
@@ -1651,6 +1668,7 @@ function parseTableName(fullTableName) {
 }
 
 // src/client/init.ts
+var PORT_HANDSHAKE_TIMEOUT_MS = 1e4;
 function isInIframe() {
   return window.self !== window.top;
 }
@@ -1907,11 +1925,14 @@ async function initIframeMode(ctx, log, messageHandler, request) {
   if (!isInIframe()) {
     throw new HaexVaultSdkError("NOT_IN_IFRAME" /* NOT_IN_IFRAME */, "errors.not_in_iframe");
   }
+  const port = await waitForHostPortAsync(log);
   ctx.handlers.messageHandler = messageHandler;
-  window.addEventListener("message", messageHandler);
+  port.addEventListener("message", messageHandler);
+  port.start();
+  port.postMessage({ type: HAEXSPACE_MESSAGE_TYPES.PORT_READY });
   ctx.state.isNativeWindow = false;
   ctx.state.initialized = true;
-  log("HaexVault SDK initialized in iframe mode");
+  log("HaexVault SDK initialized in iframe mode (MessagePort transport)");
   if (ctx.config.manifest) {
     ctx.state.extensionInfo = {
       publicKey: ctx.config.manifest.publicKey,
@@ -1925,7 +1946,42 @@ async function initIframeMode(ctx, log, messageHandler, request) {
   const context2 = await request(EXTENSION_COMMANDS.getContext);
   ctx.state.context = context2;
   log("Application context received:", context2);
-  return { context: context2 };
+  return { context: context2, port };
+}
+function waitForHostPortAsync(log) {
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    const cleanup = () => {
+      window.removeEventListener("message", handler);
+    };
+    const timeoutId = setTimeout(() => {
+      if (settled) return;
+      settled = true;
+      cleanup();
+      reject(
+        new HaexVaultSdkError(
+          "TIMEOUT" /* TIMEOUT */,
+          "errors.port_handshake_timeout",
+          { timeout: PORT_HANDSHAKE_TIMEOUT_MS }
+        )
+      );
+    }, PORT_HANDSHAKE_TIMEOUT_MS);
+    const handler = (event) => {
+      const type = event.data?.type;
+      if (type !== HAEXSPACE_MESSAGE_TYPES.PORT_INIT) return;
+      const port = event.ports[0];
+      if (!port) {
+        log("PORT_INIT received but event.ports is empty \u2014 ignoring");
+        return;
+      }
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeoutId);
+      cleanup();
+      resolve(port);
+    };
+    window.addEventListener("message", handler);
+  });
 }
 function sendDebugInfo(config) {
   if (!config.debug) return;
@@ -1949,7 +2005,15 @@ postMessage error: ${e}`);
 function generateRequestId(counter) {
   return `req_${counter}`;
 }
-function sendPostMessage(method, params, requestId, config, extensionInfo2, pendingRequests) {
+function sendPostMessage(method, params, requestId, config, extensionInfo2, pendingRequests, port) {
+  if (!port) {
+    return Promise.reject(
+      new HaexVaultSdkError(
+        "EXTENSION_NOT_INITIALIZED" /* EXTENSION_NOT_INITIALIZED */,
+        "errors.port_not_connected"
+      )
+    );
+  }
   const request = {
     method,
     params,
@@ -1965,17 +2029,16 @@ function sendPostMessage(method, params, requestId, config, extensionInfo2, pend
       );
     }, config.timeout);
     pendingRequests.set(requestId, { resolve, reject, timeout });
-    const targetOrigin = "*";
     if (config.debug) {
       console.log("[SDK Debug] ========== Sending Request ==========");
       console.log("[SDK Debug] Request ID:", requestId);
       console.log("[SDK Debug] Method:", request.method);
       console.log("[SDK Debug] Params:", request.params);
-      console.log("[SDK Debug] Target origin:", targetOrigin);
+      console.log("[SDK Debug] Transport: MessagePort");
       console.log("[SDK Debug] Extension info:", extensionInfo2);
       console.log("[SDK Debug] ========================================");
     }
-    window.parent.postMessage({ id: requestId, ...request }, targetOrigin);
+    port.postMessage({ id: requestId, ...request });
   });
 }
 async function sendInvoke(method, params, config, _log) {
@@ -1994,11 +2057,6 @@ function createMessageHandler(config, pendingRequests, extensionInfo2, onEvent)
   return (event) => {
     if (config.debug) {
       console.log("[SDK Debug] ========== Message Received ==========");
-      console.log("[SDK Debug] Event origin:", event.origin);
-      console.log(
-        "[SDK Debug] Event source:",
-        event.source === window.parent ? "parent window" : "unknown"
-      );
       console.log("[SDK Debug] Event data:", event.data);
       console.log("[SDK Debug] Extension info loaded:", !!extensionInfo2());
       console.log(
@@ -2006,12 +2064,6 @@ function createMessageHandler(config, pendingRequests, extensionInfo2, onEvent)
         pendingRequests.size
       );
     }
-    if (event.source !== window.parent) {
-      if (config.debug) {
-        console.error("[SDK Debug] \u274C REJECTED: Message not from parent window!");
-      }
-      return;
-    }
     const data = event.data;
     if ("id" in data && pendingRequests.has(data.id)) {
       if (config.debug) {
@@ -2233,6 +2285,13 @@ var HaexVaultSdk = class {
     this.reactiveSubscribers = /* @__PURE__ */ new Set();
     // Handlers
     this.messageHandler = null;
+    /**
+     * MessagePort obtained from the main window during iframe-mode handshake.
+     * `null` until `initIframe()` completes successfully. Every outbound
+     * request in iframe mode flows through this port; `sendPostMessage` rejects
+     * if called before the handshake finishes.
+     */
+    this.hostPort = null;
     this.setupPromise = null;
     this.setupHook = null;
     // Public APIs
@@ -2406,7 +2465,15 @@ var HaexVaultSdk = class {
       return sendInvoke(method, paramsWithCredentials, this.config, this.log.bind(this));
     }
     const requestId = generateRequestId(++this.requestCounter);
-    return sendPostMessage(method, resolvedParams, requestId, this.config, this._extensionInfo, this.pendingRequests);
+    return sendPostMessage(
+      method,
+      resolvedParams,
+      requestId,
+      this.config,
+      this._extensionInfo,
+      this.pendingRequests,
+      this.hostPort
+    );
   }
   // ==========================================================================
   // Private: Initialization
@@ -2473,7 +2540,7 @@ var HaexVaultSdk = class {
       () => this._extensionInfo,
       this.handleEvent.bind(this)
     );
-    const { context: context2 } = await initIframeMode(
+    const { context: context2, port } = await initIframeMode(
       {
         config: this.config,
         state: {
@@ -2505,6 +2572,7 @@ var HaexVaultSdk = class {
       this.messageHandler,
       this.request.bind(this)
     );
+    this.hostPort = port;
     if (this.config.manifest) {
       this._extensionInfo = {
         publicKey: this.config.manifest.publicKey,