@lympid/embed 0.0.0-stage → 1.0.0-rc.2

package/dist/browser/lympid-embed.min.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../cjs/protocol.js", "../cjs/bridge.js", "../cjs/modal.js", "../cjs/embed.js", "../cjs/index.js"],
+  "sourcesContent": ["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.WIDGET_TO_HOST_SOURCE = exports.HOST_TO_WIDGET_SOURCE = void 0;\nexports.isWidgetToHostMessage = isWidgetToHostMessage;\n/**\n * `postMessage` wire protocol between the host page (this SDK) and the\n * widget iframe (the whitelabel app running in embed mode \u2014 see\n * `whitelabel-embed-mode` in the Phase 1 plan).\n *\n * Both directions are only ever accepted/sent against the exact origin\n * configured via `InitOptions.baseUrl` \u2014 see `createBridge()` in\n * `./bridge.ts`. This file only defines the message *shapes*; it has\n * zero DOM/`window` dependencies so it can be unit-tested directly.\n */\n/** Discriminator so a `postMessage` listener can cheaply ignore every\n * unrelated message landing on the same `window` (browser extensions,\n * other SDKs, etc.) before even checking the origin. */\nexports.HOST_TO_WIDGET_SOURCE = 'lympid-embed-host';\nexports.WIDGET_TO_HOST_SOURCE = 'lympid-embed-widget';\n/** Narrows an arbitrary `MessageEvent.data` payload to a\n * `WidgetToHostMessage`, without throwing on malformed input \u2014 a\n * `postMessage` listener must never crash the host page just because\n * some unrelated script on the same window posted something shaped\n * differently. */\nfunction isWidgetToHostMessage(data) {\n    return (typeof data === 'object' &&\n        data !== null &&\n        data.source === exports.WIDGET_TO_HOST_SOURCE &&\n        typeof data.type === 'string');\n}\n", "\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createBridge = createBridge;\nconst protocol_1 = require(\"./protocol\");\n/**\n * @param iframe The widget iframe this bridge talks to.\n * @param targetOrigin The exact origin the iframe was loaded from\n *   (derived from `InitOptions.baseUrl`, never inferred from the\n *   iframe's `src` string, which a compromised/misconfigured iframe\n *   could have redirected away from).\n * @param onMessage Called for every well-formed `WidgetToHostMessage`\n *   received from exactly `targetOrigin`. Messages from any other\n *   origin, or that don't match the `WidgetToHostMessage` shape, are\n *   silently dropped.\n */\nfunction createBridge(iframe, targetOrigin, onMessage) {\n    const listener = (domEvent) => {\n        // Origin check FIRST, before touching `data` at all \u2014 this is the\n        // entire security boundary of the bridge. A mismatched origin is\n        // dropped unconditionally, regardless of how well-formed the\n        // payload looks.\n        if (domEvent.origin !== targetOrigin) {\n            return;\n        }\n        if (domEvent.source !== iframe.contentWindow) {\n            return;\n        }\n        if (!(0, protocol_1.isWidgetToHostMessage)(domEvent.data)) {\n            return;\n        }\n        onMessage(domEvent.data);\n    };\n    window.addEventListener('message', listener);\n    return {\n        send: (message) => {\n            if (!iframe.contentWindow) {\n                return;\n            }\n            iframe.contentWindow.postMessage({ ...message, source: protocol_1.HOST_TO_WIDGET_SOURCE }, targetOrigin);\n        },\n        teardown: () => {\n            window.removeEventListener('message', listener);\n        },\n    };\n}\n", "\"use strict\";\n/**\n * Modal overlay + iframe DOM construction for the widget.\n *\n * Deliberately framework-agnostic (no React) and dependency-free \u2014 a\n * handful of inline-styled `div`/`iframe` nodes is simpler, smaller, and\n * safer than reaching for a UI library inside a script a partner embeds\n * on their own page (no risk of CSS/class-name collisions with the\n * partner's own stylesheet).\n */\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.createModal = createModal;\nconst Z_INDEX = 2147483000; // Comfortably above virtually any host-page UI.\nconst DEFAULT_HEIGHT_PX = 600;\n/** Light/dark panel background, matching the whitelabel app's own\n * `LEDGER_PAPER` surface token (`packages/shared-types/src/\n * design-tokens.ts`) so the modal's own chrome doesn't flash a white\n * box around a dark-themed widget. The host page has no visibility\n * into the iframe's actual in-app theme setting (cross-origin, and the\n * whitelabel app can toggle independently of OS preference), so this\n * follows the OS-level `prefers-color-scheme` media query as the best\n * available signal without a cross-origin theme-sync protocol. */\nconst PANEL_BACKGROUND_LIGHT = '#ffffff';\nconst PANEL_BACKGROUND_DARK = '#161B22';\nfunction prefersDarkColorScheme() {\n    return (typeof window !== 'undefined' &&\n        typeof window.matchMedia === 'function' &&\n        window.matchMedia('(prefers-color-scheme: dark)').matches);\n}\n/** Close glyph centered in the 32px button. Path matches\n * `apps/whitelabel/src/assets/images/svg/24/close.svg`. */\nfunction createCloseIcon() {\n    const icon = document.createElementNS('http://www.w3.org/2000/svg', 'svg');\n    icon.setAttribute('viewBox', '0 0 24 24');\n    icon.setAttribute('width', '20');\n    icon.setAttribute('height', '20');\n    icon.setAttribute('fill', 'none');\n    icon.setAttribute('aria-hidden', 'true');\n    const path = document.createElementNS('http://www.w3.org/2000/svg', 'path');\n    path.setAttribute('d', 'M17 7 7 17M7 7l10 10');\n    path.setAttribute('stroke', 'currentColor');\n    path.setAttribute('stroke-width', '1.3');\n    path.setAttribute('stroke-linecap', 'round');\n    path.setAttribute('stroke-linejoin', 'round');\n    icon.appendChild(path);\n    return icon;\n}\n/**\n * Builds and appends the backdrop + iframe modal to `container`.\n *\n * @param container Parent node to append the overlay to.\n * @param src The widget iframe's `src` URL (the partner's whitelabel\n *   origin + `/embed` route + flow query param).\n * @param onBackdropClick Called when the end user clicks the backdrop\n *   or the close button \u2014 the caller decides whether that closes the\n *   modal (it always should; kept as a callback so `embed.ts` stays\n *   the single owner of close/`onClose` semantics).\n */\nfunction createModal(container, src, onBackdropClick) {\n    const overlay = document.createElement('div');\n    overlay.setAttribute('data-lympid-embed', 'overlay');\n    overlay.style.position = 'fixed';\n    overlay.style.inset = '0';\n    overlay.style.zIndex = String(Z_INDEX);\n    overlay.style.display = 'flex';\n    overlay.style.alignItems = 'center';\n    overlay.style.justifyContent = 'center';\n    overlay.style.backgroundColor = 'rgba(15, 23, 42, 0.6)';\n    const panel = document.createElement('div');\n    panel.setAttribute('data-lympid-embed', 'panel');\n    panel.style.position = 'relative';\n    panel.style.width = 'min(420px, calc(100vw - 32px))';\n    panel.style.height = `min(${DEFAULT_HEIGHT_PX}px, calc(100vh - 32px))`;\n    panel.style.maxHeight = 'calc(100vh - 32px)';\n    panel.style.borderRadius = '16px';\n    panel.style.overflow = 'hidden';\n    panel.style.boxShadow = '0 20px 60px rgba(0, 0, 0, 0.35)';\n    panel.style.backgroundColor = prefersDarkColorScheme()\n        ? PANEL_BACKGROUND_DARK\n        : PANEL_BACKGROUND_LIGHT;\n    panel.style.transition = 'height 0.2s ease';\n    // Keep the panel's background in step if the OS-level preference\n    // changes while the modal is open (e.g. a scheduled light/dark\n    // switch, or the user flips it in their OS settings mid-session).\n    let colorSchemeMedia = null;\n    let handleColorSchemeChange = null;\n    if (typeof window !== 'undefined' && typeof window.matchMedia === 'function') {\n        colorSchemeMedia = window.matchMedia('(prefers-color-scheme: dark)');\n        handleColorSchemeChange = (event) => {\n            panel.style.backgroundColor = event.matches\n                ? PANEL_BACKGROUND_DARK\n                : PANEL_BACKGROUND_LIGHT;\n        };\n        colorSchemeMedia.addEventListener('change', handleColorSchemeChange);\n    }\n    const closeButton = document.createElement('button');\n    closeButton.setAttribute('data-lympid-embed', 'close');\n    closeButton.setAttribute('aria-label', 'Close');\n    closeButton.type = 'button';\n    closeButton.style.position = 'absolute';\n    closeButton.style.top = '8px';\n    closeButton.style.right = '8px';\n    closeButton.style.zIndex = String(Z_INDEX + 1);\n    closeButton.style.display = 'flex';\n    closeButton.style.alignItems = 'center';\n    closeButton.style.justifyContent = 'center';\n    closeButton.style.width = '32px';\n    closeButton.style.height = '32px';\n    closeButton.style.margin = '0';\n    closeButton.style.padding = '0';\n    closeButton.style.border = 'none';\n    closeButton.style.borderRadius = '50%';\n    closeButton.style.backgroundColor = 'rgba(15, 23, 42, 0.06)';\n    closeButton.style.color = '#585858';\n    closeButton.style.cursor = 'pointer';\n    closeButton.style.appearance = 'none';\n    closeButton.style.setProperty('-webkit-appearance', 'none');\n    // Same stroke as the whitelabel `Icon` named `close`\n    // (`src/assets/images/svg/24/close.svg`), which every other modal\n    // uses. A text \"\u00D7\" sits on the font baseline, so it looks high, and\n    // a host `button { padding }` rule shifts it further. Flex + a reset\n    // padding keeps the glyph centered on the partner page.\n    closeButton.appendChild(createCloseIcon());\n    const iframe = document.createElement('iframe');\n    iframe.setAttribute('data-lympid-embed', 'iframe');\n    iframe.src = src;\n    iframe.style.width = '100%';\n    iframe.style.height = '100%';\n    iframe.style.border = 'none';\n    iframe.title = 'Lympid';\n    // Phase 1 flows (connect/sign-in, KYC) need neither top-level\n    // navigation nor same-origin escalation beyond what the whitelabel\n    // app itself needs to run (forms, scripts, camera for KYC).\n    iframe.setAttribute('allow', 'camera; microphone; clipboard-write');\n    iframe.setAttribute('sandbox', 'allow-scripts allow-same-origin allow-forms allow-popups');\n    closeButton.addEventListener('click', onBackdropClick);\n    overlay.addEventListener('click', (domEvent) => {\n        if (domEvent.target === overlay) {\n            onBackdropClick();\n        }\n    });\n    panel.appendChild(closeButton);\n    panel.appendChild(iframe);\n    overlay.appendChild(panel);\n    container.appendChild(overlay);\n    return {\n        iframe,\n        setHeight: (height) => {\n            const clamped = Math.max(240, Math.min(height, (typeof window !== 'undefined' ? window.innerHeight : height) - 32));\n            panel.style.height = `${clamped}px`;\n        },\n        remove: () => {\n            if (colorSchemeMedia && handleColorSchemeChange) {\n                colorSchemeMedia.removeEventListener('change', handleColorSchemeChange);\n            }\n            overlay.remove();\n        },\n    };\n}\n", "\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.init = init;\nconst bridge_1 = require(\"./bridge\");\nconst modal_1 = require(\"./modal\");\nconst protocol_1 = require(\"./protocol\");\n/** Normalises a configured `baseUrl` into a bare origin string\n * (`\"https://host:port\"`, no path/trailing slash) suitable both for\n * building the iframe `src` and for `postMessage` origin checks. Throws\n * early \u2014 at `init()` time, not at `open()` time \u2014 on a malformed URL,\n * since a bad `baseUrl` is a partner-integration mistake that should\n * fail loudly immediately rather than silently drop every widget\n * message later. */\nfunction normalizeOrigin(baseUrl) {\n    const url = new URL(baseUrl);\n    return url.origin;\n}\nfunction buildIframeSrc(origin, flow, partnerId, rwaId) {\n    const params = new URLSearchParams({ flow });\n    if (partnerId) {\n        params.set('partnerId', partnerId);\n    }\n    if (rwaId) {\n        params.set('rwaId', rwaId);\n    }\n    return `${origin}/embed?${params.toString()}`;\n}\n/**\n * Creates a `LympidEmbedInstance` bound to one partner's whitelabel\n * origin. See `InitOptions`/`OpenOptions` in `./types.ts` for the full\n * contract, and `apps/whitelabel/src/app/embed/` (whitelabel-embed-mode)\n * for the counterpart that runs inside the iframe.\n */\nfunction init(options) {\n    const origin = normalizeOrigin(options.baseUrl);\n    const container = options.container ?? document.body;\n    let current = null;\n    let destroyed = false;\n    /** Tears down the currently-open modal/bridge, if any, optionally\n     * firing the `onClose` callback that was passed to the `open()` call\n     * being torn down. */\n    function teardownCurrent(fireOnClose) {\n        if (!current) {\n            return;\n        }\n        const { modal, bridge, onClose } = current;\n        bridge.teardown();\n        modal.remove();\n        current = null;\n        if (fireOnClose && onClose) {\n            onClose();\n        }\n    }\n    function open(openOptions) {\n        if (destroyed) {\n            throw new Error('This LympidEmbedInstance has been destroyed and cannot be reused \u2014 call init() again.');\n        }\n        // Replace any already-open modal from this instance first \u2014 only\n        // one widget flow can sensibly be open at a time per instance.\n        teardownCurrent(true);\n        const src = buildIframeSrc(origin, openOptions.flow, options.partnerId, openOptions.rwaId);\n        const modal = (0, modal_1.createModal)(container, src, () => teardownCurrent(true));\n        const bridge = (0, bridge_1.createBridge)(modal.iframe, origin, (message) => {\n            switch (message.type) {\n                case 'ready': {\n                    bridge.send({\n                        source: protocol_1.HOST_TO_WIDGET_SOURCE,\n                        type: 'init',\n                        flow: openOptions.flow,\n                        hasSessionCodeProvider: !!openOptions.getSessionCode,\n                        partnerId: options.partnerId,\n                        rwaId: openOptions.rwaId,\n                    });\n                    break;\n                }\n                case 'request-session-code': {\n                    void handleSessionCodeRequest(bridge, openOptions, message.requestId);\n                    break;\n                }\n                case 'resize': {\n                    modal.setHeight(message.height);\n                    break;\n                }\n                case 'event': {\n                    openOptions.onEvent?.(message.event);\n                    break;\n                }\n                case 'close': {\n                    teardownCurrent(true);\n                    break;\n                }\n                default:\n                    break;\n            }\n        });\n        current = { modal, bridge, onClose: openOptions.onClose };\n    }\n    function close() {\n        teardownCurrent(true);\n    }\n    function destroy() {\n        teardownCurrent(true);\n        destroyed = true;\n    }\n    return { open, close, destroy };\n}\n/**\n * Resolves `openOptions.getSessionCode()` (if configured) and relays\n * the result back to the widget as `session-code`/`session-code-error`.\n * Extracted so `init()`'s `open()` switch stays a flat dispatch table.\n *\n * @param requestId Correlation id the widget attached to its\n *   `request-session-code` message \u2014 echoed back unchanged so the\n *   widget can match the response to the right in-flight request even\n *   if several overlap.\n */\nasync function handleSessionCodeRequest(bridge, openOptions, requestId) {\n    const provider = openOptions.getSessionCode;\n    if (!provider) {\n        // The widget asked for a session code on a partner that never\n        // configured `getSessionCode` \u2014 this is an integration mistake\n        // (likely a `connected`-model partner whose host page forgot the\n        // callback). Surface it both as an event (for the host page's own\n        // logging/monitoring) and back to the widget (so it can show the\n        // end user a retry/contact-support state instead of hanging).\n        const error = 'getSessionCode was not provided to open()';\n        openOptions.onEvent?.({ type: 'session-code-error', requestId, error });\n        bridge.send({\n            source: protocol_1.HOST_TO_WIDGET_SOURCE,\n            type: 'session-code-error',\n            requestId,\n            error,\n        });\n        return;\n    }\n    try {\n        const code = await provider();\n        bridge.send({\n            source: protocol_1.HOST_TO_WIDGET_SOURCE,\n            type: 'session-code',\n            requestId,\n            code,\n        });\n    }\n    catch (error) {\n        const errorMessage = error instanceof Error ? error.message : String(error);\n        bridge.send({\n            source: protocol_1.HOST_TO_WIDGET_SOURCE,\n            type: 'session-code-error',\n            requestId,\n            error: errorMessage,\n        });\n    }\n}\n", "\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.init = void 0;\n/**\n * `@lympid/embed` \u2014 public entry point.\n *\n * ```ts\n * import { init } from '@lympid/embed';\n *\n * const widget = init({ baseUrl: 'https://invest.yourpartnerdomain.com' });\n *\n * widget.open({\n *   flow: 'connect',\n *   // Only needed for partners using the \"connected\" login model \u2014\n *   // call YOUR OWN backend here, which in turn calls\n *   // POST /api/v1/embed-sessions with your x-api-key.\n *   getSessionCode: async () => {\n *     const res = await fetch('/api/lympid/session-code', { method: 'POST' });\n *     const { handoffCode } = await res.json();\n *     return handoffCode;\n *   },\n *   onEvent: (event) => console.log('lympid event', event),\n *   onClose: () => console.log('lympid widget closed'),\n * });\n * ```\n */\nvar embed_1 = require(\"./embed\");\nObject.defineProperty(exports, \"init\", { enumerable: true, get: function () { return embed_1.init; } });\n"],
+  "mappings": "kIAAA,IAAAA,EAAAC,EAAAC,GAAA,cACA,OAAO,eAAeA,EAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EAC5DA,EAAQ,sBAAwBA,EAAQ,sBAAwB,OAChEA,EAAQ,sBAAwBC,EAchCD,EAAQ,sBAAwB,oBAChCA,EAAQ,sBAAwB,sBAMhC,SAASC,EAAsBC,EAAM,CACjC,OAAQ,OAAOA,GAAS,UACpBA,IAAS,MACTA,EAAK,SAAWF,EAAQ,uBACxB,OAAOE,EAAK,MAAS,QAC7B,IC7BA,IAAAC,EAAAC,EAAAC,GAAA,cACA,OAAO,eAAeA,EAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EAC5DA,EAAQ,aAAeC,EACvB,IAAMC,EAAa,IAYnB,SAASD,EAAaE,EAAQC,EAAcC,EAAW,CACnD,IAAMC,EAAYC,GAAa,CAKvBA,EAAS,SAAWH,GAGpBG,EAAS,SAAWJ,EAAO,kBAGtBD,EAAW,uBAAuBK,EAAS,IAAI,GAGxDF,EAAUE,EAAS,IAAI,CAC3B,EACA,cAAO,iBAAiB,UAAWD,CAAQ,EACpC,CACH,KAAOE,GAAY,CACVL,EAAO,eAGZA,EAAO,cAAc,YAAY,CAAE,GAAGK,EAAS,OAAQN,EAAW,qBAAsB,EAAGE,CAAY,CAC3G,EACA,SAAU,IAAM,CACZ,OAAO,oBAAoB,UAAWE,CAAQ,CAClD,CACJ,CACJ,IC5CA,IAAAG,EAAAC,EAAAC,GAAA,cAUA,OAAO,eAAeA,EAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EAC5DA,EAAQ,YAAcC,EACtB,IAAMC,EAAU,UACVC,EAAoB,IASpBC,EAAyB,UACzBC,EAAwB,UAC9B,SAASC,GAAyB,CAC9B,OAAQ,OAAO,OAAW,KACtB,OAAO,OAAO,YAAe,YAC7B,OAAO,WAAW,8BAA8B,EAAE,OAC1D,CAGA,SAASC,GAAkB,CACvB,IAAMC,EAAO,SAAS,gBAAgB,6BAA8B,KAAK,EACzEA,EAAK,aAAa,UAAW,WAAW,EACxCA,EAAK,aAAa,QAAS,IAAI,EAC/BA,EAAK,aAAa,SAAU,IAAI,EAChCA,EAAK,aAAa,OAAQ,MAAM,EAChCA,EAAK,aAAa,cAAe,MAAM,EACvC,IAAMC,EAAO,SAAS,gBAAgB,6BAA8B,MAAM,EAC1E,OAAAA,EAAK,aAAa,IAAK,sBAAsB,EAC7CA,EAAK,aAAa,SAAU,cAAc,EAC1CA,EAAK,aAAa,eAAgB,KAAK,EACvCA,EAAK,aAAa,iBAAkB,OAAO,EAC3CA,EAAK,aAAa,kBAAmB,OAAO,EAC5CD,EAAK,YAAYC,CAAI,EACdD,CACX,CAYA,SAASP,EAAYS,EAAWC,EAAKC,EAAiB,CAClD,IAAMC,EAAU,SAAS,cAAc,KAAK,EAC5CA,EAAQ,aAAa,oBAAqB,SAAS,EACnDA,EAAQ,MAAM,SAAW,QACzBA,EAAQ,MAAM,MAAQ,IACtBA,EAAQ,MAAM,OAAS,OAAOX,CAAO,EACrCW,EAAQ,MAAM,QAAU,OACxBA,EAAQ,MAAM,WAAa,SAC3BA,EAAQ,MAAM,eAAiB,SAC/BA,EAAQ,MAAM,gBAAkB,wBAChC,IAAMC,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,aAAa,oBAAqB,OAAO,EAC/CA,EAAM,MAAM,SAAW,WACvBA,EAAM,MAAM,MAAQ,iCACpBA,EAAM,MAAM,OAAS,OAAOX,CAAiB,0BAC7CW,EAAM,MAAM,UAAY,qBACxBA,EAAM,MAAM,aAAe,OAC3BA,EAAM,MAAM,SAAW,SACvBA,EAAM,MAAM,UAAY,kCACxBA,EAAM,MAAM,gBAAkBR,EAAuB,EAC/CD,EACAD,EACNU,EAAM,MAAM,WAAa,mBAIzB,IAAIC,EAAmB,KACnBC,EAA0B,KAC1B,OAAO,OAAW,KAAe,OAAO,OAAO,YAAe,aAC9DD,EAAmB,OAAO,WAAW,8BAA8B,EACnEC,EAA2BC,GAAU,CACjCH,EAAM,MAAM,gBAAkBG,EAAM,QAC9BZ,EACAD,CACV,EACAW,EAAiB,iBAAiB,SAAUC,CAAuB,GAEvE,IAAME,EAAc,SAAS,cAAc,QAAQ,EACnDA,EAAY,aAAa,oBAAqB,OAAO,EACrDA,EAAY,aAAa,aAAc,OAAO,EAC9CA,EAAY,KAAO,SACnBA,EAAY,MAAM,SAAW,WAC7BA,EAAY,MAAM,IAAM,MACxBA,EAAY,MAAM,MAAQ,MAC1BA,EAAY,MAAM,OAAS,OAAOhB,EAAU,CAAC,EAC7CgB,EAAY,MAAM,QAAU,OAC5BA,EAAY,MAAM,WAAa,SAC/BA,EAAY,MAAM,eAAiB,SACnCA,EAAY,MAAM,MAAQ,OAC1BA,EAAY,MAAM,OAAS,OAC3BA,EAAY,MAAM,OAAS,IAC3BA,EAAY,MAAM,QAAU,IAC5BA,EAAY,MAAM,OAAS,OAC3BA,EAAY,MAAM,aAAe,MACjCA,EAAY,MAAM,gBAAkB,yBACpCA,EAAY,MAAM,MAAQ,UAC1BA,EAAY,MAAM,OAAS,UAC3BA,EAAY,MAAM,WAAa,OAC/BA,EAAY,MAAM,YAAY,qBAAsB,MAAM,EAM1DA,EAAY,YAAYX,EAAgB,CAAC,EACzC,IAAMY,EAAS,SAAS,cAAc,QAAQ,EAC9C,OAAAA,EAAO,aAAa,oBAAqB,QAAQ,EACjDA,EAAO,IAAMR,EACbQ,EAAO,MAAM,MAAQ,OACrBA,EAAO,MAAM,OAAS,OACtBA,EAAO,MAAM,OAAS,OACtBA,EAAO,MAAQ,SAIfA,EAAO,aAAa,QAAS,qCAAqC,EAClEA,EAAO,aAAa,UAAW,0DAA0D,EACzFD,EAAY,iBAAiB,QAASN,CAAe,EACrDC,EAAQ,iBAAiB,QAAUO,GAAa,CACxCA,EAAS,SAAWP,GACpBD,EAAgB,CAExB,CAAC,EACDE,EAAM,YAAYI,CAAW,EAC7BJ,EAAM,YAAYK,CAAM,EACxBN,EAAQ,YAAYC,CAAK,EACzBJ,EAAU,YAAYG,CAAO,EACtB,CACH,OAAAM,EACA,UAAYE,GAAW,CACnB,IAAMC,EAAU,KAAK,IAAI,IAAK,KAAK,IAAID,GAAS,OAAO,OAAW,IAAc,OAAO,YAAcA,GAAU,EAAE,CAAC,EAClHP,EAAM,MAAM,OAAS,GAAGQ,CAAO,IACnC,EACA,OAAQ,IAAM,CACNP,GAAoBC,GACpBD,EAAiB,oBAAoB,SAAUC,CAAuB,EAE1EH,EAAQ,OAAO,CACnB,CACJ,CACJ,IC9JA,IAAAU,EAAAC,EAAAC,GAAA,cACA,OAAO,eAAeA,EAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EAC5DA,EAAQ,KAAOC,EACf,IAAMC,EAAW,IACXC,EAAU,IACVC,EAAa,IAQnB,SAASC,EAAgBC,EAAS,CAE9B,OADY,IAAI,IAAIA,CAAO,EAChB,MACf,CACA,SAASC,EAAeC,EAAQC,EAAMC,EAAWC,EAAO,CACpD,IAAMC,EAAS,IAAI,gBAAgB,CAAE,KAAAH,CAAK,CAAC,EAC3C,OAAIC,GACAE,EAAO,IAAI,YAAaF,CAAS,EAEjCC,GACAC,EAAO,IAAI,QAASD,CAAK,EAEtB,GAAGH,CAAM,UAAUI,EAAO,SAAS,CAAC,EAC/C,CAOA,SAASX,EAAKY,EAAS,CACnB,IAAML,EAASH,EAAgBQ,EAAQ,OAAO,EACxCC,EAAYD,EAAQ,WAAa,SAAS,KAC5CE,EAAU,KACVC,EAAY,GAIhB,SAASC,EAAgBC,EAAa,CAClC,GAAI,CAACH,EACD,OAEJ,GAAM,CAAE,MAAAI,EAAO,OAAAC,EAAQ,QAAAC,CAAQ,EAAIN,EACnCK,EAAO,SAAS,EAChBD,EAAM,OAAO,EACbJ,EAAU,KACNG,GAAeG,GACfA,EAAQ,CAEhB,CACA,SAASC,EAAKC,EAAa,CACvB,GAAIP,EACA,MAAM,IAAI,MAAM,4FAAuF,EAI3GC,EAAgB,EAAI,EACpB,IAAMO,EAAMjB,EAAeC,EAAQe,EAAY,KAAMV,EAAQ,UAAWU,EAAY,KAAK,EACnFJ,KAAYhB,EAAQ,aAAaW,EAAWU,EAAK,IAAMP,EAAgB,EAAI,CAAC,EAC5EG,KAAalB,EAAS,cAAciB,EAAM,OAAQX,EAASiB,GAAY,CACzE,OAAQA,EAAQ,KAAM,CAClB,IAAK,QAAS,CACVL,EAAO,KAAK,CACR,OAAQhB,EAAW,sBACnB,KAAM,OACN,KAAMmB,EAAY,KAClB,uBAAwB,CAAC,CAACA,EAAY,eACtC,UAAWV,EAAQ,UACnB,MAAOU,EAAY,KACvB,CAAC,EACD,KACJ,CACA,IAAK,uBAAwB,CACpBG,EAAyBN,EAAQG,EAAaE,EAAQ,SAAS,EACpE,KACJ,CACA,IAAK,SAAU,CACXN,EAAM,UAAUM,EAAQ,MAAM,EAC9B,KACJ,CACA,IAAK,QAAS,CACVF,EAAY,UAAUE,EAAQ,KAAK,EACnC,KACJ,CACA,IAAK,QAAS,CACVR,EAAgB,EAAI,EACpB,KACJ,CACA,QACI,KACR,CACJ,CAAC,EACDF,EAAU,CAAE,MAAAI,EAAO,OAAAC,EAAQ,QAASG,EAAY,OAAQ,CAC5D,CACA,SAASI,GAAQ,CACbV,EAAgB,EAAI,CACxB,CACA,SAASW,GAAU,CACfX,EAAgB,EAAI,EACpBD,EAAY,EAChB,CACA,MAAO,CAAE,KAAAM,EAAM,MAAAK,EAAO,QAAAC,CAAQ,CAClC,CAWA,eAAeF,EAAyBN,EAAQG,EAAaM,EAAW,CACpE,IAAMC,EAAWP,EAAY,eAC7B,GAAI,CAACO,EAAU,CAOX,IAAMC,EAAQ,4CACdR,EAAY,UAAU,CAAE,KAAM,qBAAsB,UAAAM,EAAW,MAAAE,CAAM,CAAC,EACtEX,EAAO,KAAK,CACR,OAAQhB,EAAW,sBACnB,KAAM,qBACN,UAAAyB,EACA,MAAAE,CACJ,CAAC,EACD,MACJ,CACA,GAAI,CACA,IAAMC,EAAO,MAAMF,EAAS,EAC5BV,EAAO,KAAK,CACR,OAAQhB,EAAW,sBACnB,KAAM,eACN,UAAAyB,EACA,KAAAG,CACJ,CAAC,CACL,OACOD,EAAO,CACV,IAAME,EAAeF,aAAiB,MAAQA,EAAM,QAAU,OAAOA,CAAK,EAC1EX,EAAO,KAAK,CACR,OAAQhB,EAAW,sBACnB,KAAM,qBACN,UAAAyB,EACA,MAAOI,CACX,CAAC,CACL,CACJ,ICzJA,IAAAC,EAAAC,EAAAC,GAAA,CACA,OAAO,eAAeA,EAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EAC5DA,EAAQ,KAAO,OAwBf,IAAIC,EAAU,IACd,OAAO,eAAeD,EAAS,OAAQ,CAAE,WAAY,GAAM,IAAK,UAAY,CAAE,OAAOC,EAAQ,IAAM,CAAE,CAAC",
+  "names": ["require_protocol", "__commonJSMin", "exports", "isWidgetToHostMessage", "data", "require_bridge", "__commonJSMin", "exports", "createBridge", "protocol_1", "iframe", "targetOrigin", "onMessage", "listener", "domEvent", "message", "require_modal", "__commonJSMin", "exports", "createModal", "Z_INDEX", "DEFAULT_HEIGHT_PX", "PANEL_BACKGROUND_LIGHT", "PANEL_BACKGROUND_DARK", "prefersDarkColorScheme", "createCloseIcon", "icon", "path", "container", "src", "onBackdropClick", "overlay", "panel", "colorSchemeMedia", "handleColorSchemeChange", "event", "closeButton", "iframe", "domEvent", "height", "clamped", "require_embed", "__commonJSMin", "exports", "init", "bridge_1", "modal_1", "protocol_1", "normalizeOrigin", "baseUrl", "buildIframeSrc", "origin", "flow", "partnerId", "rwaId", "params", "options", "container", "current", "destroyed", "teardownCurrent", "fireOnClose", "modal", "bridge", "onClose", "open", "openOptions", "src", "message", "handleSessionCodeRequest", "close", "destroy", "requestId", "provider", "error", "code", "errorMessage", "require_index", "__commonJSMin", "exports", "embed_1"]
+}

package/dist/cjs/bridge.d.ts

@@ -0,0 +1,31 @@
+import { type HostToWidgetMessage, type WidgetToHostMessage } from './protocol';
+/**
+ * The `postMessage` bridge between the host page and one open widget
+ * iframe, restricted in both directions to the exact origin configured
+ * via `InitOptions.baseUrl`.
+ *
+ * This is the only place in the SDK that touches `window.postMessage`
+ * or `window.addEventListener('message', ...)` — keeping it isolated
+ * makes the origin-restriction invariant easy to audit in one file.
+ */
+export interface Bridge {
+    /** Sends a message to the widget iframe, targeted at `targetOrigin`
+     * only (never `'*'`). */
+    send: (message: HostToWidgetMessage) => void;
+    /** Tears down the `message` listener. Call once when the modal
+     * closes — a leaked listener would otherwise keep reacting to
+     * messages from a since-removed iframe. */
+    teardown: () => void;
+}
+/**
+ * @param iframe The widget iframe this bridge talks to.
+ * @param targetOrigin The exact origin the iframe was loaded from
+ *   (derived from `InitOptions.baseUrl`, never inferred from the
+ *   iframe's `src` string, which a compromised/misconfigured iframe
+ *   could have redirected away from).
+ * @param onMessage Called for every well-formed `WidgetToHostMessage`
+ *   received from exactly `targetOrigin`. Messages from any other
+ *   origin, or that don't match the `WidgetToHostMessage` shape, are
+ *   silently dropped.
+ */
+export declare function createBridge(iframe: HTMLIFrameElement, targetOrigin: string, onMessage: (message: WidgetToHostMessage) => void): Bridge;

package/dist/cjs/bridge.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createBridge = createBridge;
+const protocol_1 = require("./protocol");
+/**
+ * @param iframe The widget iframe this bridge talks to.
+ * @param targetOrigin The exact origin the iframe was loaded from
+ *   (derived from `InitOptions.baseUrl`, never inferred from the
+ *   iframe's `src` string, which a compromised/misconfigured iframe
+ *   could have redirected away from).
+ * @param onMessage Called for every well-formed `WidgetToHostMessage`
+ *   received from exactly `targetOrigin`. Messages from any other
+ *   origin, or that don't match the `WidgetToHostMessage` shape, are
+ *   silently dropped.
+ */
+function createBridge(iframe, targetOrigin, onMessage) {
+    const listener = (domEvent) => {
+        // Origin check FIRST, before touching `data` at all — this is the
+        // entire security boundary of the bridge. A mismatched origin is
+        // dropped unconditionally, regardless of how well-formed the
+        // payload looks.
+        if (domEvent.origin !== targetOrigin) {
+            return;
+        }
+        if (domEvent.source !== iframe.contentWindow) {
+            return;
+        }
+        if (!(0, protocol_1.isWidgetToHostMessage)(domEvent.data)) {
+            return;
+        }
+        onMessage(domEvent.data);
+    };
+    window.addEventListener('message', listener);
+    return {
+        send: (message) => {
+            if (!iframe.contentWindow) {
+                return;
+            }
+            iframe.contentWindow.postMessage({ ...message, source: protocol_1.HOST_TO_WIDGET_SOURCE }, targetOrigin);
+        },
+        teardown: () => {
+            window.removeEventListener('message', listener);
+        },
+    };
+}

package/dist/cjs/embed.d.ts

@@ -0,0 +1,8 @@
+import type { InitOptions, LympidEmbedInstance } from './types';
+/**
+ * Creates a `LympidEmbedInstance` bound to one partner's whitelabel
+ * origin. See `InitOptions`/`OpenOptions` in `./types.ts` for the full
+ * contract, and `apps/whitelabel/src/app/embed/` (whitelabel-embed-mode)
+ * for the counterpart that runs inside the iframe.
+ */
+export declare function init(options: InitOptions): LympidEmbedInstance;

package/dist/cjs/embed.js

@@ -0,0 +1,154 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.init = init;
+const bridge_1 = require("./bridge");
+const modal_1 = require("./modal");
+const protocol_1 = require("./protocol");
+/** Normalises a configured `baseUrl` into a bare origin string
+ * (`"https://host:port"`, no path/trailing slash) suitable both for
+ * building the iframe `src` and for `postMessage` origin checks. Throws
+ * early — at `init()` time, not at `open()` time — on a malformed URL,
+ * since a bad `baseUrl` is a partner-integration mistake that should
+ * fail loudly immediately rather than silently drop every widget
+ * message later. */
+function normalizeOrigin(baseUrl) {
+    const url = new URL(baseUrl);
+    return url.origin;
+}
+function buildIframeSrc(origin, flow, partnerId, rwaId) {
+    const params = new URLSearchParams({ flow });
+    if (partnerId) {
+        params.set('partnerId', partnerId);
+    }
+    if (rwaId) {
+        params.set('rwaId', rwaId);
+    }
+    return `${origin}/embed?${params.toString()}`;
+}
+/**
+ * Creates a `LympidEmbedInstance` bound to one partner's whitelabel
+ * origin. See `InitOptions`/`OpenOptions` in `./types.ts` for the full
+ * contract, and `apps/whitelabel/src/app/embed/` (whitelabel-embed-mode)
+ * for the counterpart that runs inside the iframe.
+ */
+function init(options) {
+    const origin = normalizeOrigin(options.baseUrl);
+    const container = options.container ?? document.body;
+    let current = null;
+    let destroyed = false;
+    /** Tears down the currently-open modal/bridge, if any, optionally
+     * firing the `onClose` callback that was passed to the `open()` call
+     * being torn down. */
+    function teardownCurrent(fireOnClose) {
+        if (!current) {
+            return;
+        }
+        const { modal, bridge, onClose } = current;
+        bridge.teardown();
+        modal.remove();
+        current = null;
+        if (fireOnClose && onClose) {
+            onClose();
+        }
+    }
+    function open(openOptions) {
+        if (destroyed) {
+            throw new Error('This LympidEmbedInstance has been destroyed and cannot be reused — call init() again.');
+        }
+        // Replace any already-open modal from this instance first — only
+        // one widget flow can sensibly be open at a time per instance.
+        teardownCurrent(true);
+        const src = buildIframeSrc(origin, openOptions.flow, options.partnerId, openOptions.rwaId);
+        const modal = (0, modal_1.createModal)(container, src, () => teardownCurrent(true));
+        const bridge = (0, bridge_1.createBridge)(modal.iframe, origin, (message) => {
+            switch (message.type) {
+                case 'ready': {
+                    bridge.send({
+                        source: protocol_1.HOST_TO_WIDGET_SOURCE,
+                        type: 'init',
+                        flow: openOptions.flow,
+                        hasSessionCodeProvider: !!openOptions.getSessionCode,
+                        partnerId: options.partnerId,
+                        rwaId: openOptions.rwaId,
+                    });
+                    break;
+                }
+                case 'request-session-code': {
+                    void handleSessionCodeRequest(bridge, openOptions, message.requestId);
+                    break;
+                }
+                case 'resize': {
+                    modal.setHeight(message.height);
+                    break;
+                }
+                case 'event': {
+                    openOptions.onEvent?.(message.event);
+                    break;
+                }
+                case 'close': {
+                    teardownCurrent(true);
+                    break;
+                }
+                default:
+                    break;
+            }
+        });
+        current = { modal, bridge, onClose: openOptions.onClose };
+    }
+    function close() {
+        teardownCurrent(true);
+    }
+    function destroy() {
+        teardownCurrent(true);
+        destroyed = true;
+    }
+    return { open, close, destroy };
+}
+/**
+ * Resolves `openOptions.getSessionCode()` (if configured) and relays
+ * the result back to the widget as `session-code`/`session-code-error`.
+ * Extracted so `init()`'s `open()` switch stays a flat dispatch table.
+ *
+ * @param requestId Correlation id the widget attached to its
+ *   `request-session-code` message — echoed back unchanged so the
+ *   widget can match the response to the right in-flight request even
+ *   if several overlap.
+ */
+async function handleSessionCodeRequest(bridge, openOptions, requestId) {
+    const provider = openOptions.getSessionCode;
+    if (!provider) {
+        // The widget asked for a session code on a partner that never
+        // configured `getSessionCode` — this is an integration mistake
+        // (likely a `connected`-model partner whose host page forgot the
+        // callback). Surface it both as an event (for the host page's own
+        // logging/monitoring) and back to the widget (so it can show the
+        // end user a retry/contact-support state instead of hanging).
+        const error = 'getSessionCode was not provided to open()';
+        openOptions.onEvent?.({ type: 'session-code-error', requestId, error });
+        bridge.send({
+            source: protocol_1.HOST_TO_WIDGET_SOURCE,
+            type: 'session-code-error',
+            requestId,
+            error,
+        });
+        return;
+    }
+    try {
+        const code = await provider();
+        bridge.send({
+            source: protocol_1.HOST_TO_WIDGET_SOURCE,
+            type: 'session-code',
+            requestId,
+            code,
+        });
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        bridge.send({
+            source: protocol_1.HOST_TO_WIDGET_SOURCE,
+            type: 'session-code-error',
+            requestId,
+            error: errorMessage,
+        });
+    }
+}

package/dist/cjs/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `@lympid/embed` — public entry point.
+ *
+ * ```ts
+ * import { init } from '@lympid/embed';
+ *
+ * const widget = init({ baseUrl: 'https://invest.yourpartnerdomain.com' });
+ *
+ * widget.open({
+ *   flow: 'connect',
+ *   // Only needed for partners using the "connected" login model —
+ *   // call YOUR OWN backend here, which in turn calls
+ *   // POST /api/v1/embed-sessions with your x-api-key.
+ *   getSessionCode: async () => {
+ *     const res = await fetch('/api/lympid/session-code', { method: 'POST' });
+ *     const { handoffCode } = await res.json();
+ *     return handoffCode;
+ *   },
+ *   onEvent: (event) => console.log('lympid event', event),
+ *   onClose: () => console.log('lympid widget closed'),
+ * });
+ * ```
+ */
+export { init } from './embed';
+export type { EmbedFlow, InitOptions, LympidEmbedEvent, LympidEmbedInstance, OpenOptions, } from './types';

package/dist/cjs/index.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.init = void 0;
+/**
+ * `@lympid/embed` — public entry point.
+ *
+ * ```ts
+ * import { init } from '@lympid/embed';
+ *
+ * const widget = init({ baseUrl: 'https://invest.yourpartnerdomain.com' });
+ *
+ * widget.open({
+ *   flow: 'connect',
+ *   // Only needed for partners using the "connected" login model —
+ *   // call YOUR OWN backend here, which in turn calls
+ *   // POST /api/v1/embed-sessions with your x-api-key.
+ *   getSessionCode: async () => {
+ *     const res = await fetch('/api/lympid/session-code', { method: 'POST' });
+ *     const { handoffCode } = await res.json();
+ *     return handoffCode;
+ *   },
+ *   onEvent: (event) => console.log('lympid event', event),
+ *   onClose: () => console.log('lympid widget closed'),
+ * });
+ * ```
+ */
+var embed_1 = require("./embed");
+Object.defineProperty(exports, "init", { enumerable: true, get: function () { return embed_1.init; } });

package/dist/cjs/modal.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Modal overlay + iframe DOM construction for the widget.
+ *
+ * Deliberately framework-agnostic (no React) and dependency-free — a
+ * handful of inline-styled `div`/`iframe` nodes is simpler, smaller, and
+ * safer than reaching for a UI library inside a script a partner embeds
+ * on their own page (no risk of CSS/class-name collisions with the
+ * partner's own stylesheet).
+ */
+export interface ModalHandle {
+    /** The widget's iframe element. */
+    iframe: HTMLIFrameElement;
+    /** Resizes the iframe (and its backdrop) to the widget's reported
+     * content height, clamped to the viewport. */
+    setHeight: (height: number) => void;
+    /** Removes every DOM node this modal created. */
+    remove: () => void;
+}
+/**
+ * Builds and appends the backdrop + iframe modal to `container`.
+ *
+ * @param container Parent node to append the overlay to.
+ * @param src The widget iframe's `src` URL (the partner's whitelabel
+ *   origin + `/embed` route + flow query param).
+ * @param onBackdropClick Called when the end user clicks the backdrop
+ *   or the close button — the caller decides whether that closes the
+ *   modal (it always should; kept as a callback so `embed.ts` stays
+ *   the single owner of close/`onClose` semantics).
+ */
+export declare function createModal(container: HTMLElement, src: string, onBackdropClick: () => void): ModalHandle;

package/dist/cjs/modal.js

@@ -0,0 +1,159 @@
+"use strict";
+/**
+ * Modal overlay + iframe DOM construction for the widget.
+ *
+ * Deliberately framework-agnostic (no React) and dependency-free — a
+ * handful of inline-styled `div`/`iframe` nodes is simpler, smaller, and
+ * safer than reaching for a UI library inside a script a partner embeds
+ * on their own page (no risk of CSS/class-name collisions with the
+ * partner's own stylesheet).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createModal = createModal;
+const Z_INDEX = 2147483000; // Comfortably above virtually any host-page UI.
+const DEFAULT_HEIGHT_PX = 600;
+/** Light/dark panel background, matching the whitelabel app's own
+ * `LEDGER_PAPER` surface token (`packages/shared-types/src/
+ * design-tokens.ts`) so the modal's own chrome doesn't flash a white
+ * box around a dark-themed widget. The host page has no visibility
+ * into the iframe's actual in-app theme setting (cross-origin, and the
+ * whitelabel app can toggle independently of OS preference), so this
+ * follows the OS-level `prefers-color-scheme` media query as the best
+ * available signal without a cross-origin theme-sync protocol. */
+const PANEL_BACKGROUND_LIGHT = '#ffffff';
+const PANEL_BACKGROUND_DARK = '#161B22';
+function prefersDarkColorScheme() {
+    return (typeof window !== 'undefined' &&
+        typeof window.matchMedia === 'function' &&
+        window.matchMedia('(prefers-color-scheme: dark)').matches);
+}
+/** Close glyph centered in the 32px button. Path matches
+ * `apps/whitelabel/src/assets/images/svg/24/close.svg`. */
+function createCloseIcon() {
+    const icon = document.createElementNS('http://www.w3.org/2000/svg', 'svg');
+    icon.setAttribute('viewBox', '0 0 24 24');
+    icon.setAttribute('width', '20');
+    icon.setAttribute('height', '20');
+    icon.setAttribute('fill', 'none');
+    icon.setAttribute('aria-hidden', 'true');
+    const path = document.createElementNS('http://www.w3.org/2000/svg', 'path');
+    path.setAttribute('d', 'M17 7 7 17M7 7l10 10');
+    path.setAttribute('stroke', 'currentColor');
+    path.setAttribute('stroke-width', '1.3');
+    path.setAttribute('stroke-linecap', 'round');
+    path.setAttribute('stroke-linejoin', 'round');
+    icon.appendChild(path);
+    return icon;
+}
+/**
+ * Builds and appends the backdrop + iframe modal to `container`.
+ *
+ * @param container Parent node to append the overlay to.
+ * @param src The widget iframe's `src` URL (the partner's whitelabel
+ *   origin + `/embed` route + flow query param).
+ * @param onBackdropClick Called when the end user clicks the backdrop
+ *   or the close button — the caller decides whether that closes the
+ *   modal (it always should; kept as a callback so `embed.ts` stays
+ *   the single owner of close/`onClose` semantics).
+ */
+function createModal(container, src, onBackdropClick) {
+    const overlay = document.createElement('div');
+    overlay.setAttribute('data-lympid-embed', 'overlay');
+    overlay.style.position = 'fixed';
+    overlay.style.inset = '0';
+    overlay.style.zIndex = String(Z_INDEX);
+    overlay.style.display = 'flex';
+    overlay.style.alignItems = 'center';
+    overlay.style.justifyContent = 'center';
+    overlay.style.backgroundColor = 'rgba(15, 23, 42, 0.6)';
+    const panel = document.createElement('div');
+    panel.setAttribute('data-lympid-embed', 'panel');
+    panel.style.position = 'relative';
+    panel.style.width = 'min(420px, calc(100vw - 32px))';
+    panel.style.height = `min(${DEFAULT_HEIGHT_PX}px, calc(100vh - 32px))`;
+    panel.style.maxHeight = 'calc(100vh - 32px)';
+    panel.style.borderRadius = '16px';
+    panel.style.overflow = 'hidden';
+    panel.style.boxShadow = '0 20px 60px rgba(0, 0, 0, 0.35)';
+    panel.style.backgroundColor = prefersDarkColorScheme()
+        ? PANEL_BACKGROUND_DARK
+        : PANEL_BACKGROUND_LIGHT;
+    panel.style.transition = 'height 0.2s ease';
+    // Keep the panel's background in step if the OS-level preference
+    // changes while the modal is open (e.g. a scheduled light/dark
+    // switch, or the user flips it in their OS settings mid-session).
+    let colorSchemeMedia = null;
+    let handleColorSchemeChange = null;
+    if (typeof window !== 'undefined' && typeof window.matchMedia === 'function') {
+        colorSchemeMedia = window.matchMedia('(prefers-color-scheme: dark)');
+        handleColorSchemeChange = (event) => {
+            panel.style.backgroundColor = event.matches
+                ? PANEL_BACKGROUND_DARK
+                : PANEL_BACKGROUND_LIGHT;
+        };
+        colorSchemeMedia.addEventListener('change', handleColorSchemeChange);
+    }
+    const closeButton = document.createElement('button');
+    closeButton.setAttribute('data-lympid-embed', 'close');
+    closeButton.setAttribute('aria-label', 'Close');
+    closeButton.type = 'button';
+    closeButton.style.position = 'absolute';
+    closeButton.style.top = '8px';
+    closeButton.style.right = '8px';
+    closeButton.style.zIndex = String(Z_INDEX + 1);
+    closeButton.style.display = 'flex';
+    closeButton.style.alignItems = 'center';
+    closeButton.style.justifyContent = 'center';
+    closeButton.style.width = '32px';
+    closeButton.style.height = '32px';
+    closeButton.style.margin = '0';
+    closeButton.style.padding = '0';
+    closeButton.style.border = 'none';
+    closeButton.style.borderRadius = '50%';
+    closeButton.style.backgroundColor = 'rgba(15, 23, 42, 0.06)';
+    closeButton.style.color = '#585858';
+    closeButton.style.cursor = 'pointer';
+    closeButton.style.appearance = 'none';
+    closeButton.style.setProperty('-webkit-appearance', 'none');
+    // Same stroke as the whitelabel `Icon` named `close`
+    // (`src/assets/images/svg/24/close.svg`), which every other modal
+    // uses. A text "×" sits on the font baseline, so it looks high, and
+    // a host `button { padding }` rule shifts it further. Flex + a reset
+    // padding keeps the glyph centered on the partner page.
+    closeButton.appendChild(createCloseIcon());
+    const iframe = document.createElement('iframe');
+    iframe.setAttribute('data-lympid-embed', 'iframe');
+    iframe.src = src;
+    iframe.style.width = '100%';
+    iframe.style.height = '100%';
+    iframe.style.border = 'none';
+    iframe.title = 'Lympid';
+    // Phase 1 flows (connect/sign-in, KYC) need neither top-level
+    // navigation nor same-origin escalation beyond what the whitelabel
+    // app itself needs to run (forms, scripts, camera for KYC).
+    iframe.setAttribute('allow', 'camera; microphone; clipboard-write');
+    iframe.setAttribute('sandbox', 'allow-scripts allow-same-origin allow-forms allow-popups');
+    closeButton.addEventListener('click', onBackdropClick);
+    overlay.addEventListener('click', (domEvent) => {
+        if (domEvent.target === overlay) {
+            onBackdropClick();
+        }
+    });
+    panel.appendChild(closeButton);
+    panel.appendChild(iframe);
+    overlay.appendChild(panel);
+    container.appendChild(overlay);
+    return {
+        iframe,
+        setHeight: (height) => {
+            const clamped = Math.max(240, Math.min(height, (typeof window !== 'undefined' ? window.innerHeight : height) - 32));
+            panel.style.height = `${clamped}px`;
+        },
+        remove: () => {
+            if (colorSchemeMedia && handleColorSchemeChange) {
+                colorSchemeMedia.removeEventListener('change', handleColorSchemeChange);
+            }
+            overlay.remove();
+        },
+    };
+}

package/dist/cjs/protocol.d.ts

@@ -0,0 +1,71 @@
+import type { EmbedFlow, LympidEmbedEvent } from './types';
+/**
+ * `postMessage` wire protocol between the host page (this SDK) and the
+ * widget iframe (the whitelabel app running in embed mode — see
+ * `whitelabel-embed-mode` in the Phase 1 plan).
+ *
+ * Both directions are only ever accepted/sent against the exact origin
+ * configured via `InitOptions.baseUrl` — see `createBridge()` in
+ * `./bridge.ts`. This file only defines the message *shapes*; it has
+ * zero DOM/`window` dependencies so it can be unit-tested directly.
+ */
+/** Discriminator so a `postMessage` listener can cheaply ignore every
+ * unrelated message landing on the same `window` (browser extensions,
+ * other SDKs, etc.) before even checking the origin. */
+export declare const HOST_TO_WIDGET_SOURCE = "lympid-embed-host";
+export declare const WIDGET_TO_HOST_SOURCE = "lympid-embed-widget";
+export type HostToWidgetMessage = {
+    source: typeof HOST_TO_WIDGET_SOURCE;
+    type: 'init';
+    flow: EmbedFlow;
+    /** True when the host page supplied a `getSessionCode` callback,
+     * i.e. this partner uses the `connected` login model. The widget
+     * uses this to decide whether to request a session code or run
+     * its own `lympid-code` email/phone + OTP UI. */
+    hasSessionCodeProvider: boolean;
+    /** `InitOptions.partnerId`, if the host page supplied one. Only
+     * required for `flow: 'register'` — see that field's own doc
+     * comment in `types.ts` for why registration needs this and the
+     * other flows don't. An untrusted hint, like the iframe URL's own
+     * `partnerId` query param; the widget's registration calls carry
+     * it to the API, which re-validates it server-side. */
+    partnerId?: string;
+    /** `OpenOptions.rwaId`, if the host page supplied one. Only
+     * meaningful for `flow: 'invest'`. */
+    rwaId?: string;
+} | {
+    source: typeof HOST_TO_WIDGET_SOURCE;
+    type: 'session-code';
+    requestId: string;
+    code: string;
+} | {
+    source: typeof HOST_TO_WIDGET_SOURCE;
+    type: 'session-code-error';
+    requestId: string;
+    error: string;
+};
+export type WidgetToHostMessage = {
+    source: typeof WIDGET_TO_HOST_SOURCE;
+    type: 'ready';
+} | {
+    source: typeof WIDGET_TO_HOST_SOURCE;
+    type: 'request-session-code';
+    requestId: string;
+} | {
+    source: typeof WIDGET_TO_HOST_SOURCE;
+    type: 'resize';
+    height: number;
+} | {
+    source: typeof WIDGET_TO_HOST_SOURCE;
+    type: 'event';
+    event: LympidEmbedEvent;
+} | {
+    source: typeof WIDGET_TO_HOST_SOURCE;
+    type: 'close';
+};
+/** Narrows an arbitrary `MessageEvent.data` payload to a
+ * `WidgetToHostMessage`, without throwing on malformed input — a
+ * `postMessage` listener must never crash the host page just because
+ * some unrelated script on the same window posted something shaped
+ * differently. */
+export declare function isWidgetToHostMessage(data: unknown): data is WidgetToHostMessage;

package/dist/cjs/protocol.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WIDGET_TO_HOST_SOURCE = exports.HOST_TO_WIDGET_SOURCE = void 0;
+exports.isWidgetToHostMessage = isWidgetToHostMessage;
+/**
+ * `postMessage` wire protocol between the host page (this SDK) and the
+ * widget iframe (the whitelabel app running in embed mode — see
+ * `whitelabel-embed-mode` in the Phase 1 plan).
+ *
+ * Both directions are only ever accepted/sent against the exact origin
+ * configured via `InitOptions.baseUrl` — see `createBridge()` in
+ * `./bridge.ts`. This file only defines the message *shapes*; it has
+ * zero DOM/`window` dependencies so it can be unit-tested directly.
+ */
+/** Discriminator so a `postMessage` listener can cheaply ignore every
+ * unrelated message landing on the same `window` (browser extensions,
+ * other SDKs, etc.) before even checking the origin. */
+exports.HOST_TO_WIDGET_SOURCE = 'lympid-embed-host';
+exports.WIDGET_TO_HOST_SOURCE = 'lympid-embed-widget';
+/** Narrows an arbitrary `MessageEvent.data` payload to a
+ * `WidgetToHostMessage`, without throwing on malformed input — a
+ * `postMessage` listener must never crash the host page just because
+ * some unrelated script on the same window posted something shaped
+ * differently. */
+function isWidgetToHostMessage(data) {
+    return (typeof data === 'object' &&
+        data !== null &&
+        data.source === exports.WIDGET_TO_HOST_SOURCE &&
+        typeof data.type === 'string');
+}