@kookapp/web-bridge 0.0.1

package/dist/shared/OriginValidator.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Origin validator for security
+ */
+import { ValidationResult } from '@/types';
+export declare class OriginValidator {
+    private allowedOrigins;
+    private debug;
+    constructor(allowedOrigins: string[], debug?: boolean);
+    validate(messageOrigin: string): ValidationResult;
+    isOriginAllowed(messageOrigin: string): boolean;
+    updateAllowedOrigins(origins: string[]): void;
+    getAllowedOrigins(): string[];
+}
+//# sourceMappingURL=OriginValidator.d.ts.map

package/dist/shared/OriginValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OriginValidator.d.ts","sourceRoot":"","sources":["../../src/shared/OriginValidator.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAE1C,qBAAa,eAAe;IAC1B,OAAO,CAAC,cAAc,CAAU;IAChC,OAAO,CAAC,KAAK,CAAS;gBAEV,cAAc,EAAE,MAAM,EAAE,EAAE,KAAK,UAAQ;IAKnD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,gBAAgB;IAuCjD,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAI/C,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI;IAI7C,iBAAiB,IAAI,MAAM,EAAE;CAG9B"}

package/dist/shared/OriginValidator.js

@@ -0,0 +1,53 @@
+/**
+ * Origin validator for security
+ */
+export class OriginValidator {
+    constructor(allowedOrigins, debug = false) {
+        this.allowedOrigins = allowedOrigins;
+        this.debug = debug;
+    }
+    validate(messageOrigin) {
+        if (!messageOrigin) {
+            return { valid: false, error: 'Message origin is missing' };
+        }
+        for (const pattern of this.allowedOrigins) {
+            // Wildcard pattern (allow all - use for development only)
+            if (pattern === '*') {
+                if (this.debug) {
+                    console.warn('[WebBridge] Using wildcard origin validation - not recommended for production');
+                }
+                return { valid: true };
+            }
+            // Exact match
+            if (pattern === messageOrigin) {
+                return { valid: true };
+            }
+            // Regex pattern
+            try {
+                const regex = new RegExp(pattern);
+                if (regex.test(messageOrigin)) {
+                    return { valid: true };
+                }
+            }
+            catch (error) {
+                // If pattern is not a valid regex, skip
+                if (this.debug) {
+                    console.warn(`[WebBridge] Invalid regex pattern: ${pattern}`);
+                }
+            }
+        }
+        return {
+            valid: false,
+            error: `Origin "${messageOrigin}" is not allowed. Allowed origins: ${this.allowedOrigins.join(', ')}`
+        };
+    }
+    isOriginAllowed(messageOrigin) {
+        return this.validate(messageOrigin).valid;
+    }
+    updateAllowedOrigins(origins) {
+        this.allowedOrigins = origins;
+    }
+    getAllowedOrigins() {
+        return [...this.allowedOrigins];
+    }
+}

package/dist/types.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Core type definitions for WebBridge
+ */
+export type MessageType = 'call' | 'response' | 'register' | 'ready';
+export type Handler = (data?: any, callback?: (result: any) => void) => void | Promise<any>;
+/**
+ * Bridge configuration interface
+ */
+export interface BridgeConfig {
+    allowedOrigins: string[];
+    timeout?: number;
+    debug?: boolean;
+    maxRetries?: number;
+}
+/**
+ * Parent Bridge specific config
+ */
+export interface ParentBridgeConfig extends BridgeConfig {
+}
+/**
+ * Child Bridge specific config
+ */
+export interface ChildBridgeConfig extends BridgeConfig {
+}
+/**
+ * Bridge message structure
+ */
+export interface BridgeMessage {
+    type: MessageType;
+    id: string;
+    handlerName?: string;
+    data?: any;
+    error?: string;
+    _version?: string;
+}
+/**
+ * Internal pending request tracker
+ */
+export interface PendingRequest {
+    id: string;
+    timeout: NodeJS.Timeout;
+    resolve: (value: any) => void;
+    reject: (reason?: any) => void;
+}
+/**
+ * Handler registry
+ */
+export type HandlerRegistry = Map<string, Handler>;
+/**
+ * Event types for EventEmitter
+ */
+export type BridgeEventType = 'ready' | 'disconnect' | 'error' | 'message';
+export interface BridgeEvent {
+    type: BridgeEventType;
+    data?: any;
+}
+/**
+ * iframe Channel interface
+ */
+export interface IframeChannelInterface {
+    callHandler(handlerName: string, data?: any, callback?: (result: any) => void): Promise<any>;
+    getIframe(): HTMLIFrameElement;
+    isConnected(): boolean;
+    destroy(): void;
+}
+/**
+ * Validator result
+ */
+export interface ValidationResult {
+    valid: boolean;
+    error?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CAAA;AAGpE,MAAM,MAAM,OAAO,GAAG,CACpB,IAAI,CAAC,EAAE,GAAG,EACV,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,KAC7B,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;AAExB;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,YAAY;CAEvD;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,YAAY;CAEtD;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,CAAA;IACjB,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,GAAG,CAAA;IACV,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAC,OAAO,CAAA;IACvB,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,CAAA;IAC7B,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,IAAI,CAAA;CAC/B;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAElD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,YAAY,GAAG,OAAO,GAAG,SAAS,CAAA;AAE1E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAA;IACrB,IAAI,CAAC,EAAE,GAAG,CAAA;CACX;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,GAAG,EACV,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,GAC/B,OAAO,CAAC,GAAG,CAAC,CAAA;IACf,SAAS,IAAI,iBAAiB,CAAA;IAC9B,WAAW,IAAI,OAAO,CAAA;IACtB,OAAO,IAAI,IAAI,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf"}

package/dist/types.js

@@ -0,0 +1,4 @@
+/**
+ * Core type definitions for WebBridge
+ */
+export {};

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@kookapp/web-bridge",
+  "version": "0.0.1",
+  "description": "PostMessage-based bridge for iframe communication",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "jest",
+    "test:watch": "jest --watch"
+  },
+  "author": "",
+  "license": "MIT",
+  "devDependencies": {
+    "@types/jest": "^29.5.0",
+    "typescript": "^5.0.0",
+    "jest": "^29.5.0",
+    "jest-environment-jsdom": "^29.5.0",
+    "ts-jest": "^29.1.0"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org"
+  },
+  "exports": {
+    ".": "./dist/index.js"
+  }
+}