@machinemetrics/mm-react-embeddable 1.4.0-8 → 2.0.0-1

package/dist/mm-react-embeddable.es.js

@@ -1,5 +1,5 @@
-import m, { createContext as oe, useContext as H, useState as U, useRef as R, useCallback as h, useEffect as k, useMemo as ue } from "react";
-import x from "prop-types";
+import g, { createContext as oe, useContext as K, useState as U, useRef as R, useCallback as h, useEffect as k, useMemo as ue } from "react";
+import T from "prop-types";
 import D from "styled-components";
 const Y = oe(null), J = oe({
   pending: [],
@@ -14,32 +14,32 @@ const Y = oe(null), J = oe({
   originEpochs: {},
   credentials: {},
   unsupported: {}
-}), le = "access_token", te = (r) => r ? r.kind ? r : r.accessToken ? {
-  kind: le,
+}), ae = "access_token", re = (r) => r ? r.kind ? r : r.accessToken ? {
+  kind: ae,
   accessToken: r.accessToken,
   expiresAt: r.expiresAt || null
-} : null : null, ae = /* @__PURE__ */ new Set(["host_not_allowed", "invalid_token", "provider_unavailable"]), X = typeof window != "undefined" && window.location.protocol === "https:", de = 8e3, Q = (r) => {
+} : null : null, le = /* @__PURE__ */ new Set(["host_not_allowed", "invalid_token", "provider_unavailable"]), X = typeof window != "undefined" && window.location.protocol === "https:", de = 8e3, Q = (r) => {
   try {
     return new URL(r).origin;
   } catch {
     return null;
   }
-}, re = (r, s) => {
-  const o = s == null ? void 0 : s.origin;
-  return !o || Q(r == null ? void 0 : r.authUrl) !== o ? null : o;
-}, ne = (r) => {
+}, ne = (r, s) => {
+  const c = s == null ? void 0 : s.origin;
+  return !c || Q(r == null ? void 0 : r.authUrl) !== c ? null : c;
+}, se = (r) => {
   if (!r || /^\d{1,3}(?:\.\d{1,3}){3}$/.test(r) || r.includes(":"))
     return r;
   const s = r.split(".");
   return s.length <= 2 ? r : s.slice(-2).join(".");
 }, fe = (r, s) => {
   try {
-    const o = new URL(r), d = new URL(s);
-    return o.protocol !== d.protocol ? !0 : ne(o.hostname) !== ne(d.hostname);
+    const c = new URL(r), d = new URL(s);
+    return c.protocol !== d.protocol ? !0 : se(c.hostname) !== se(d.hostname);
   } catch {
     return !0;
   }
-}, pe = (r, { onBlocked: s, onClosed: o }) => {
+}, pe = (r, { onBlocked: s, onClosed: c }) => {
   const d = window.open(
     r.authUrl,
     "mm-embed-auth",
@@ -48,33 +48,35 @@ const Y = oe(null), J = oe({
   if (!d)
     return s(), () => {
     };
-  const g = setInterval(() => {
-    d.closed && (clearInterval(g), o());
+  const p = setInterval(() => {
+    d.closed && (clearInterval(p), c());
   }, 1e3);
-  return () => clearInterval(g);
-}, ie = ({ children: r, launcher: s, broker: o }) => {
-  const d = H(Y), [g, w] = U({}), [P, z] = U({}), [C, M] = U({}), [_, L] = U({}), B = R(C);
-  B.current = C;
-  const f = R(null), q = R({}), S = R({}), j = R({}), O = R(o);
-  O.current = o;
-  const A = h((e) => {
-    const t = S.current[e];
+  return () => clearInterval(p);
+}, ie = ({ children: r, launcher: s, broker: c }) => {
+  const d = K(Y), [p, b] = U({}), [j, I] = U({}), [_, A] = U({}), [F, y] = U({}), H = R(_);
+  H.current = _;
+  const E = R(p);
+  E.current = p;
+  const O = R(null), G = R({}), C = R({}), v = R({}), S = R(c);
+  S.current = c;
+  const z = h((e) => {
+    const t = C.current[e];
     if (!t)
       return;
-    const n = (l) => !l[e] || l[e].clientId ? l : { ...l, [e]: { ...l[e], clientId: t } };
-    w(n), L(n);
-  }, []), v = h(
+    const n = (i) => !i[e] || i[e].clientId ? i : { ...i, [e]: { ...i[e], clientId: t } };
+    b(n), y(n);
+  }, []), u = h(
     (e, t) => {
-      e && (L((n) => n[e] ? n : {
+      e && (y((n) => n[e] ? n : {
         ...n,
-        [e]: { origin: e, reason: t, clientId: S.current[e] || null }
-      }), A(e));
+        [e]: { origin: e, reason: t, clientId: C.current[e] || null }
+      }), z(e));
     },
-    [A]
-  ), i = h(
+    [z]
+  ), a = h(
     (e, { v2: t = !1, origin: n = null } = {}) => {
-      n && (t && B.current[n] || (w((l) => l[n] ? l : {
-        ...l,
+      n && (t && H.current[n] || (b((i) => i[n] ? i : {
+        ...i,
         [n]: {
           origin: n,
           authUrl: e.authUrl,
@@ -82,58 +84,58 @@ const Y = oe(null), J = oe({
           // v2 entries try the invisible silent resolver first — but only on a host that can
           // frame login (https). Otherwise (and for legacy signals) go straight to interactive,
           // so an http host doesn't wait out a silent frame that can never load login.
-          status: t && O.current ? "broker" : t && e.silentUrl && X ? "silent" : "interactive",
+          status: t && S.current ? "broker" : t && e.silentUrl && X ? "silent" : "interactive",
           v2: t,
           // v1.9: the scope the guest asked for; forwarded verbatim to the broker.
           scope: e.scope || null,
-          acceptsCredentials: j.current[n] || null,
+          acceptsCredentials: v.current[n] || null,
           consent: null,
           error: null,
           // clientId from the request payload (v2) or the cached init (legacy);
           // the host resolves the display name from it.
-          clientId: e.clientId || S.current[n] || null,
+          clientId: e.clientId || C.current[n] || null,
           popupBlocked: !1
         }
-      }), A(n)));
+      }), z(n)));
     },
-    [A]
-  ), u = h((e) => {
-    w((t) => {
+    [z]
+  ), o = h((e) => {
+    b((t) => {
       if (!t[e])
         return t;
       const n = { ...t };
       return delete n[e], n;
     });
-  }, []), c = h(
+  }, []), l = h(
     (e) => {
-      e && (u(e), z((t) => ({
+      e && (o(e), I((t) => ({
         ...t,
         [e]: (t[e] || 0) + 1
       })));
     },
-    [u]
-  ), a = h((e) => {
-    w((t) => !t[e] || t[e].status === "interactive" ? t : {
+    [o]
+  ), w = h((e) => {
+    b((t) => !t[e] || t[e].status === "interactive" ? t : {
       ...t,
       [e]: { ...t[e], status: "interactive" }
     });
-  }, []), b = h(
+  }, []), x = h(
     (e) => {
-      u(e.origin);
+      o(e.origin);
     },
-    [u]
-  ), E = h(
+    [o]
+  ), L = h(
     (e, t) => {
-      const n = re(e, t);
+      const n = ne(e, t);
       if (n) {
         if (fe(n, window.location.origin)) {
-          v(n, "cross-site-legacy");
+          u(n, "cross-site-legacy");
           return;
         }
-        i(e, { origin: n });
+        a(e, { origin: n });
       }
     },
-    [i, v]
+    [a, u]
   );
   k(() => {
     if (!d)
@@ -146,162 +148,167 @@ const Y = oe(null), J = oe({
       // clientId is only a lookup key: the host resolves the display name from
       // it, and a broker binds it to the attested origin server-side.
       d.addListener("*", "init", (t, n) => {
-        n != null && n.origin && (t != null && t.clientId) && (S.current[n.origin] = t.clientId, A(n.origin)), n != null && n.origin && Array.isArray(t == null ? void 0 : t.acceptsCredentials) && (j.current[n.origin] = t.acceptsCredentials);
+        n != null && n.origin && (t != null && t.clientId) && (C.current[n.origin] = t.clientId, z(n.origin)), n != null && n.origin && Array.isArray(t == null ? void 0 : t.acceptsCredentials) && (v.current[n.origin] = t.acceptsCredentials);
       }),
-      d.addListener("*", "authorize", E),
-      d.addListener("*", "login", E),
+      d.addListener("*", "authorize", L),
+      d.addListener("*", "login", L),
       d.addListener(
         "*",
         "credential-request",
-        (t, n) => i(t, { v2: !0, origin: re(t, n) })
+        (t, n) => a(t, { v2: !0, origin: ne(t, n) })
       )
     ];
     return () => e.forEach((t) => t());
-  }, [d, E, i, A]), k(() => {
+  }, [d, L, a, z]), k(() => {
     const e = (t) => {
       const n = t == null ? void 0 : t.data;
       if (!n || n.type !== "authorized" && n.type !== "authorize-failed")
         return;
-      const l = Q(n.authUrl);
-      if (!(!l || t.origin !== l)) {
+      const i = Q(n.authUrl);
+      if (!(!i || t.origin !== i)) {
         if (n.type === "authorized") {
-          n.accessToken ? (M((p) => ({
-            ...p,
-            [l]: te({ accessToken: n.accessToken })
-          })), u(l)) : c(l);
+          if (n.accessToken) {
+            if (!E.current[i])
+              return;
+            A((f) => ({
+              ...f,
+              [i]: re({ accessToken: n.accessToken })
+            })), o(i);
+          } else
+            l(i);
           return;
         }
-        a(l);
+        w(i);
       }
     };
     return window.addEventListener("message", e), () => window.removeEventListener("message", e);
-  }, [u, c, a]);
-  const y = h(
+  }, [o, l, w]);
+  const M = h(
     (e, t) => {
-      const n = e == null ? void 0 : e.origin, l = te(t);
-      !n || !l || (M((p) => ({ ...p, [n]: l })), u(n));
+      const n = e == null ? void 0 : e.origin, i = re(t);
+      !n || !i || (A((f) => ({ ...f, [n]: i })), o(n));
     },
-    [u]
-  ), T = h((e, t) => {
-    w((n) => n[e] ? { ...n, [e]: { ...n[e], ...t } } : n);
-  }, []), I = h(
+    [o]
+  ), m = h((e, t) => {
+    b((n) => n[e] ? { ...n, [e]: { ...n[e], ...t } } : n);
+  }, []), $ = h(
     async (e, { approve: t } = {}) => {
-      const n = O.current, { origin: l } = e;
-      let p;
+      const n = S.current, { origin: i } = e;
+      let f;
       try {
-        p = await n(
-          { origin: l, clientId: e.clientId, scope: e.scope, authUrl: e.authUrl },
+        f = await n(
+          { origin: i, clientId: e.clientId, scope: e.scope, authUrl: e.authUrl },
           { approve: t }
         );
       } catch {
-        t ? T(l, { error: { reason: "broker_unavailable" } }) : T(l, {
+        t ? m(i, { error: { reason: "broker_unavailable" } }) : m(i, {
           status: e.silentUrl && X ? "silent" : "interactive"
         });
         return;
       }
-      if ((p == null ? void 0 : p.status) === 200 && p.credential) {
-        y(e, p.credential);
+      if ((f == null ? void 0 : f.status) === 200 && f.credential) {
+        M(e, f.credential);
         return;
       }
-      if ((p == null ? void 0 : p.status) === 409 && p.consentRequired) {
-        T(l, {
+      if ((f == null ? void 0 : f.status) === 409 && f.consentRequired) {
+        m(i, {
           status: "interactive",
           consent: {
-            client: p.client || null,
-            stepUp: !!p.stepUp,
-            scope: p.scope || e.scope
+            client: f.client || null,
+            stepUp: !!f.stepUp,
+            scope: f.scope || e.scope
           },
           error: null
         });
         return;
       }
-      const G = (p == null ? void 0 : p.error) || "broker_error";
-      if (!t && ae.has(G)) {
-        T(l, {
+      const N = (f == null ? void 0 : f.error) || "broker_error";
+      if (!t && le.has(N)) {
+        m(i, {
           status: e.silentUrl && X ? "silent" : "interactive"
         });
         return;
       }
-      if (t && G === "consent_denied") {
-        T(l, { error: null });
+      if (t && N === "consent_denied") {
+        m(i, { error: null });
         return;
       }
-      u(l), L((ee) => ({
-        ...ee,
-        [l]: {
-          origin: l,
-          reason: `broker:${G}`,
-          detail: p || null,
-          clientId: e.clientId || S.current[l] || null
+      o(i), y((te) => ({
+        ...te,
+        [i]: {
+          origin: i,
+          reason: `broker:${N}`,
+          detail: f || null,
+          clientId: e.clientId || C.current[i] || null
         }
       }));
     },
-    [y, T, u]
-  ), F = R({});
+    [M, m, o]
+  ), B = R({});
   k(() => {
-    Object.values(g).forEach((e) => {
-      e.status !== "broker" || F.current[e.origin] || (F.current[e.origin] = !0, I(e).finally(() => {
-        delete F.current[e.origin];
+    Object.values(p).forEach((e) => {
+      e.status !== "broker" || B.current[e.origin] || (B.current[e.origin] = !0, $(e).finally(() => {
+        delete B.current[e.origin];
       }));
     });
-  }, [g, I]);
-  const W = h(
-    (e) => !O.current || !(e != null && e.consent) ? Promise.resolve() : I(e, { approve: !0 }),
-    [I]
+  }, [p, $]);
+  const P = h(
+    (e) => !S.current || !(e != null && e.consent) ? Promise.resolve() : $(e, { approve: !0 }),
+    [$]
   );
   k(() => {
-    const e = q.current;
-    Object.values(g).forEach((t) => {
+    const e = G.current;
+    Object.values(p).forEach((t) => {
       t.status === "silent" && !e[t.origin] && (e[t.origin] = setTimeout(() => {
-        delete e[t.origin], a(t.origin);
+        delete e[t.origin], w(t.origin);
       }, de));
     }), Object.keys(e).forEach((t) => {
-      (!g[t] || g[t].status !== "silent") && (clearTimeout(e[t]), delete e[t]);
+      (!p[t] || p[t].status !== "silent") && (clearTimeout(e[t]), delete e[t]);
     });
-  }, [g, a]), k(() => () => {
-    f.current && f.current(), Object.values(q.current).forEach(clearTimeout);
+  }, [p, w]), k(() => () => {
+    O.current && O.current(), Object.values(G.current).forEach(clearTimeout);
   }, []);
-  const $ = h(
+  const q = h(
     (e) => {
-      f.current && (f.current(), f.current = null);
+      O.current && (O.current(), O.current = null);
       const t = s || pe;
-      f.current = t(e, {
+      O.current = t(e, {
         onBlocked: () => {
-          w((n) => n[e.origin] ? {
+          b((n) => n[e.origin] ? {
             ...n,
             [e.origin]: { ...n[e.origin], popupBlocked: !0 }
           } : n);
         },
         onClosed: () => {
           if (e.v2) {
-            X && w((n) => !n[e.origin] || !n[e.origin].silentUrl ? n : {
+            X && b((n) => !n[e.origin] || !n[e.origin].silentUrl ? n : {
               ...n,
               [e.origin]: { ...n[e.origin], status: "silent" }
             });
             return;
           }
-          c(e.origin);
+          l(e.origin);
         }
       });
     },
-    [s, c]
+    [s, l]
   ), Z = {
     // Hosts render UI for interactive entries only; silent resolution is
     // invisible by design.
-    pending: Object.values(g).filter(
+    pending: Object.values(p).filter(
       (e) => e.status === "interactive"
     ),
-    authorize: $,
-    approve: W,
-    complete: y,
-    dismiss: b,
-    originEpochs: P,
-    credentials: C,
-    unsupported: _
-  }, K = Object.values(g).filter(
+    authorize: q,
+    approve: P,
+    complete: M,
+    dismiss: x,
+    originEpochs: j,
+    credentials: _,
+    unsupported: F
+  }, W = Object.values(p).filter(
     (e) => e.status === "silent" && e.silentUrl
   );
-  return /* @__PURE__ */ m.createElement(J.Provider, { value: Z }, r, K.map((e) => /* @__PURE__ */ m.createElement(
+  return /* @__PURE__ */ g.createElement(J.Provider, { value: Z }, r, W.map((e) => /* @__PURE__ */ g.createElement(
     "iframe",
     {
       key: `mm-silent-auth-${e.origin}`,
@@ -314,8 +321,8 @@ const Y = oe(null), J = oe({
   )));
 };
 ie.propTypes = {
-  children: x.node,
-  launcher: x.func,
+  children: T.node,
+  launcher: T.func,
   /**
    * `async (request, { approve }) => result` where request =
    * `{ origin, clientId, scope, authUrl }` (origin is the zone-attested frame origin) and result
@@ -323,167 +330,169 @@ ie.propTypes = {
    * client }`, `{ status: 409, consentRequired: true, client: { name, hostname }, stepUp }`, or
    * `{ status, error }`. Provided only by hosts that are themselves first-party clients.
    */
-  broker: x.func
+  broker: T.func
 };
-const ge = () => H(J), he = (r) => {
-  const { originEpochs: s } = H(J), o = Q(r);
-  return o && s[o] || 0;
+const he = () => K(J), ge = (r) => {
+  const { originEpochs: s } = K(J), c = Q(r);
+  return c && s[c] || 0;
 }, me = (r) => {
-  const { credentials: s } = H(J), o = Q(r);
-  return o && s[o] || null;
+  const { credentials: s } = K(J), c = Q(r);
+  return c && s[c] || null;
 }, be = (r) => {
-  const { unsupported: s } = H(J), o = Q(r);
-  return o && s[o] || null;
-}, Ee = ({ children: r, authorizationLauncher: s, credentialBroker: o }) => {
-  const [d, g] = U({}), [w, P] = U({}), z = R({}), C = R({}), M = R({}), _ = h((i, u) => {
-    var c;
-    return !!((c = M.current[i]) != null && c.has(u));
-  }, []), L = h((i, u, c) => {
-    g((a) => ({ ...a, [i]: { origin: u, frameRef: c } }));
-  }, []), B = h((i) => {
-    g((u) => {
-      const c = { ...u };
-      return delete c[i], c;
-    }), P((u) => {
-      const c = { ...u };
-      return delete c[i], c;
-    }), delete M.current[i];
+  const { unsupported: s } = K(J), c = Q(r);
+  return c && s[c] || null;
+}, Ee = ({ children: r, authorizationLauncher: s, credentialBroker: c }) => {
+  const [d, p] = U({}), [b, j] = U({}), I = R({}), _ = R({}), A = R({}), F = h((u, a) => {
+    var o;
+    return !!((o = A.current[u]) != null && o.has(a));
+  }, []), y = h((u, a, o) => {
+    p((l) => ({ ...l, [u]: { origin: a, frameRef: o } }));
+  }, []), H = h((u) => {
+    p((a) => {
+      const o = { ...a };
+      return delete o[u], o;
+    }), j((a) => {
+      const o = { ...a };
+      return delete o[u], o;
+    }), delete A.current[u];
   }, []);
   k(() => {
-    const i = (c = [], a, b) => {
-      c.forEach((E) => E(a, b));
-    }, u = (c) => {
-      var F, W, $, Z, K, e, t;
-      if (!((F = c == null ? void 0 : c.data) != null && F.instanceId))
+    const u = (o = [], l, w) => {
+      o.forEach((x) => x(l, w));
+    }, a = (o) => {
+      var $, B, P, q, Z, W, e;
+      if (!(($ = o == null ? void 0 : o.data) != null && $.instanceId))
         return;
-      const { instanceId: a, type: b } = c.data, E = d[a], y = ($ = (W = E == null ? void 0 : E.frameRef) == null ? void 0 : W.current) == null ? void 0 : $.contentWindow;
-      if (!y || c.source !== y || c.origin !== E.origin)
+      const { instanceId: l, type: w } = o.data, x = d[l], L = (P = (B = x == null ? void 0 : x.frameRef) == null ? void 0 : B.current) == null ? void 0 : P.contentWindow;
+      if (!L || o.source !== L || o.origin !== x.origin)
         return;
-      const T = { origin: c.origin }, I = z.current;
-      if (b === "response") {
-        const { callbackId: n, response: l, error: p } = c.data, G = C.current[n];
-        G && (G(l, p), delete C.current[n]);
+      const M = { origin: o.origin }, m = I.current;
+      if (w === "response") {
+        const { callbackId: t, response: n, error: i } = o.data, f = _.current[t];
+        f && (f(n, i), delete _.current[t]);
         return;
       }
-      if (b === "mark-registered") {
-        const { requestType: n } = c.data;
-        M.current[a] || (M.current[a] = /* @__PURE__ */ new Set()), M.current[a].add(n);
+      if (w === "mark-registered") {
+        const { requestType: t } = o.data;
+        A.current[l] || (A.current[l] = /* @__PURE__ */ new Set()), A.current[l].add(t);
         return;
       }
-      b === "ready" && P((n) => ({ ...n, [a]: !0 })), i((Z = I[a]) == null ? void 0 : Z[b], c.data, T), i((K = I["*"]) == null ? void 0 : K[b], c.data, T), i((e = I[a]) == null ? void 0 : e["*"], c.data, T), i((t = I["*"]) == null ? void 0 : t["*"], c.data, T);
+      w === "ready" && j((t) => ({ ...t, [l]: !0 })), u((q = m[l]) == null ? void 0 : q[w], o.data, M), u((Z = m["*"]) == null ? void 0 : Z[w], o.data, M), u((W = m[l]) == null ? void 0 : W["*"], o.data, M), u((e = m["*"]) == null ? void 0 : e["*"], o.data, M);
     };
-    return window.addEventListener("message", u), () => {
-      window.removeEventListener("message", u);
+    return window.addEventListener("message", a), () => {
+      window.removeEventListener("message", a);
     };
   }, [d]);
-  const f = h(
-    (i, u, c) => {
-      var b, E;
-      const a = d[i];
-      if (!a) {
-        console.warn(`Origin not set for id: ${i}. Unable to send message.`);
+  const E = h(
+    (u, a, o) => {
+      var w, x;
+      const l = d[u];
+      if (!l) {
+        console.warn(`Origin not set for id: ${u}. Unable to send message.`);
         return;
       }
-      (E = (b = a == null ? void 0 : a.frameRef) == null ? void 0 : b.current) != null && E.contentWindow && a.frameRef.current.contentWindow.postMessage(
-        { type: u, ...c, instanceId: i },
-        a.origin
+      (x = (w = l == null ? void 0 : l.frameRef) == null ? void 0 : w.current) != null && x.contentWindow && l.frameRef.current.contentWindow.postMessage(
+        { type: a, ...o, instanceId: u },
+        l.origin
       );
     },
     [d]
-  ), q = R(0), S = h(() => `${Date.now()}-${++q.current}`, []), j = h(
-    async (i, u, c = {}) => new Promise((a, b) => {
-      const E = S(), y = (T, I) => {
-        delete C.current[E], I ? b(I) : a(T);
+  ), O = R(0), G = h(() => `${Date.now()}-${++O.current}`, []), C = h(
+    async (u, a, o = {}) => new Promise((l, w) => {
+      const x = G(), L = (M, m) => {
+        delete _.current[x], m ? w(m) : l(M);
       };
-      C.current[E] = y, f(i, "request", { callbackId: E, requestType: u, data: c });
+      _.current[x] = L, E(u, "request", { callbackId: x, requestType: a, data: o });
     }),
-    [f]
-  ), O = h(
-    (i, u) => {
-      f(i, "load-options", u);
+    [E]
+  ), v = h(
+    (u, a) => {
+      E(u, "load-options", a);
     },
-    [f]
-  ), A = h(
-    (i, u) => {
-      f(i, "validate", u);
+    [E]
+  ), S = h(
+    (u, a) => {
+      E(u, "validate", a);
     },
-    [f]
-  ), v = ue(
+    [E]
+  ), z = ue(
     () => ({
-      registerFrame: L,
-      unregisterFrame: B,
-      sendMessage: f,
-      sendRequest: j,
-      loadOptions: O,
-      validate: A,
-      hasHandler: _,
-      readyFrames: w,
-      addListener: (i, u, c) => (z.current[i] || (z.current[i] = {}), z.current[i][u] || (z.current[i][u] = []), z.current[i][u].push(c), () => {
-        z.current[i][u] = z.current[i][u].filter((a) => a !== c);
+      registerFrame: y,
+      unregisterFrame: H,
+      sendMessage: E,
+      sendRequest: C,
+      loadOptions: v,
+      validate: S,
+      hasHandler: F,
+      readyFrames: b,
+      addListener: (u, a, o) => (I.current[u] || (I.current[u] = {}), I.current[u][a] || (I.current[u][a] = []), I.current[u][a].push(o), () => {
+        I.current[u][a] = I.current[u][a].filter((l) => l !== o);
       })
     }),
     [
-      L,
-      B,
-      f,
-      j,
-      O,
-      A,
-      _,
-      w
+      y,
+      H,
+      E,
+      C,
+      v,
+      S,
+      F,
+      b
     ]
   );
-  return /* @__PURE__ */ m.createElement(Y.Provider, { value: v }, /* @__PURE__ */ m.createElement(ie, { launcher: s, broker: o }, r));
-}, V = (r, s, o) => {
-  const d = H(Y);
+  return /* @__PURE__ */ g.createElement(Y.Provider, { value: z }, /* @__PURE__ */ g.createElement(ie, { launcher: s, broker: c }, r));
+}, V = (r, s, c) => {
+  const d = K(Y);
   if (d === null)
     throw new Error(
       "useEmbeddedEffect must be used within a MMEmbeddableZoneProvider"
     );
-  const g = R(o);
+  const p = R(c);
   k(() => {
-    g.current = o;
-  }, [o]), k(() => {
+    p.current = c;
+  }, [c]), k(() => {
     if (!(!r || !s)) {
       if (s.startsWith("key:")) {
-        const w = s.substring(4);
-        return d.readyFrames[r] && d.sendMessage(r, "subscribe-key", { keyChord: w }), d.addListener(
+        const b = s.substring(4);
+        return d.readyFrames[r] && d.sendMessage(r, "subscribe-key", { keyChord: b }), d.addListener(
           r,
-          `key-pressed:${w}`,
-          (...z) => g.current(...z)
+          `key-pressed:${b}`,
+          (...I) => p.current(...I)
         );
       }
       return d.addListener(
         r,
         s,
-        (...w) => g.current(...w)
+        (...b) => p.current(...b)
       );
     }
   }, [d, r, s]);
 };
 Ee.propTypes = {
-  children: x.node.isRequired,
+  children: T.node.isRequired,
   /**
    * Optional interactive-step launcher for embedded authorizations,
    * `(entry, { onBlocked, onClosed }) => cleanup`. Defaults to a top-level
    * popup. Hosts that cannot open windows (Android WebView shells) drive
    * their own UI from useEmbeddedAuthorizations() instead.
    */
-  authorizationLauncher: x.func,
+  authorizationLauncher: T.func,
   /**
    * Optional credential broker for hosts that are first-party MachineMetrics clients
    * (`async (request, { approve }) => result`, see EmbeddedAuthorizationManager). When present,
    * v2 credential requests are brokered server-side (no popup, no hidden frame) and consent is
    * rendered natively by the host from the broker's `client` identity.
    */
-  credentialBroker: x.func
+  credentialBroker: T.func
 };
-const N = D.default || D, we = 1e4, ke = "credentials", se = (r, s) => `${r}/mm-embedded-interop?id=${s}&origin=${window.location.origin}&caps=${ke}`, Re = N.iframe`
+const ee = D.default || D, we = 1e4, ke = "credentials", Re = (r, s) => `${r}/mm-embedded-interop?id=${encodeURIComponent(s)}&origin=${encodeURIComponent(
+  window.location.origin
+)}&caps=${ke}`, xe = ee.iframe`
   width: 100%;
   height: 100%;
   border: none;
   visibility: ${(r) => r.$isReady ? "visible" : "hidden"};
-`, xe = N.div`
+`, Te = ee.div`
   width: 100%;
   height: 100%;
   display: flex;
@@ -496,9 +505,9 @@ const N = D.default || D, we = 1e4, ke = "credentials", se = (r, s) => `${r}/mm-
   text-align: center;
   color: #555;
   font-size: 14px;
-`, Te = (r) => {
-  const s = r && r.origin || "This app", o = r && r.reason || "";
-  switch (o) {
+`, Ie = (r) => {
+  const s = r && r.origin || "This app", c = r && r.reason || "";
+  switch (c) {
     case "broker:scope_above_ceiling":
       return {
         title: `${s} can’t be authorized here`,
@@ -516,7 +525,7 @@ const N = D.default || D, we = 1e4, ke = "credentials", se = (r, s) => `${r}/mm-
         detail: "It can’t be authorized for this account."
       };
     default:
-      return o.startsWith("broker:") ? {
+      return c.startsWith("broker:") ? {
         title: `${s} can’t be authorized here`,
         detail: "Authorization was refused."
       } : {
@@ -525,143 +534,141 @@ const N = D.default || D, we = 1e4, ke = "credentials", se = (r, s) => `${r}/mm-
       };
   }
 }, ce = ({ entry: r }) => {
-  const s = Te(r);
-  return /* @__PURE__ */ m.createElement(xe, { "data-reason": r && r.reason || void 0 }, /* @__PURE__ */ m.createElement("div", { style: { fontWeight: 600 } }, s.title), /* @__PURE__ */ m.createElement("div", { style: { fontSize: 12, color: "#888" } }, s.detail));
+  const s = Ie(r);
+  return /* @__PURE__ */ g.createElement(Te, { "data-reason": r && r.reason || void 0 }, /* @__PURE__ */ g.createElement("div", { style: { fontWeight: 600 } }, s.title), /* @__PURE__ */ g.createElement("div", { style: { fontSize: 12, color: "#888" } }, s.detail));
 };
 ce.propTypes = {
-  entry: x.shape({
-    origin: x.string,
-    name: x.string,
-    reason: x.string,
-    detail: x.object
+  entry: T.shape({
+    origin: T.string,
+    name: T.string,
+    reason: T.string,
+    detail: T.object
   })
 };
-const Ie = N.div`
+const ze = ee.div`
   height: 100%;
   display: flex;
   flex: 1;
   align-items: center;
   justify-content: center;
-`, ze = () => /* @__PURE__ */ m.createElement(Ie, null, /* @__PURE__ */ m.createElement("div", { style: { textAlign: "center" } }, "This app couldn’t be loaded as an embeddable widget.")), Ue = ({
+`, Ue = () => /* @__PURE__ */ g.createElement(ze, null, /* @__PURE__ */ g.createElement("div", { style: { textAlign: "center" } }, "This app couldn’t be loaded as an embeddable widget.")), Ce = ({
   id: r,
   src: s,
-  path: o,
+  path: c,
   onInit: d = () => {
   },
-  onTimeout: g,
-  context: w = {},
-  params: P = {},
-  renderUnsupported: z,
-  renderTimeout: C,
-  ...M
+  onTimeout: p,
+  context: b = {},
+  params: j = {},
+  renderUnsupported: I,
+  renderTimeout: _,
+  ...A
 }) => {
-  if ("isConfiguring" in M)
+  if ("isConfiguring" in A)
     return console.error(
       "isConfiguring must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  if ("colorMode" in w)
+  if ("colorMode" in b)
     return console.error(
       "colorMode must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  if ("isFullScreen" in w)
+  if ("isFullScreen" in b)
     return console.error(
       "isFullScreen must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  const _ = R(), [L, B] = U(), [f, q] = U(0), [S, j] = U(!1), [O, A] = U(!1), v = he(s), i = me(s), u = be(s);
-  k(() => {
-    v > 0 && q(0);
-  }, [v]);
-  const { registerFrame: c, unregisterFrame: a, sendMessage: b } = H(
+  const F = R(), [y, H] = U(), [E, O] = U(0), [G, C] = U(!1), [v, S] = U(!1), z = ge(s), u = me(s), a = be(s), [o, l] = U(0), [w, x] = U(null), { registerFrame: L, unregisterFrame: M, sendMessage: m } = K(
     Y
-  ), [E, y] = U(), T = R(), I = R(g), F = R(d), W = R(!1);
+  ), [$, B] = U(), P = R(), q = R(p), Z = R(d), W = R(!1), e = h(() => {
+    W.current = !1, clearTimeout(P.current), O(0), C(!1), S(!1), x(null);
+  }, []);
   k(() => {
-    I.current = g;
-  }, [g]), k(() => {
-    F.current = d;
+    (z > 0 || o > 0) && e();
+  }, [z, o, e]), k(() => {
+    q.current = p;
+  }, [p]), k(() => {
+    Z.current = d;
   }, [d]), k(() => {
-    f && b(r, "set-context", {
+    E && m(r, "set-context", {
       context: {
-        ...w
+        ...b
       }
     });
-  }, [w, r, f]), k(() => {
-    f && b(r, "set-params", { params: P });
-  }, [P, r, f]), k(() => {
-    o !== void 0 && y((o == null ? void 0 : o.indexOf("/")) === 0 ? o : `/${o}`);
-  }, [o]), k(() => {
-    E === void 0 || !f || b(r, "navigate", { path: E });
-  }, [E, f, r, b]), k(() => {
-    if (!s || !r || !_)
+  }, [b, r, E]), k(() => {
+    E && m(r, "set-params", { params: j });
+  }, [j, r, E]), k(() => {
+    c !== void 0 && B((c == null ? void 0 : c.indexOf("/")) === 0 ? c : `/${c}`);
+  }, [c]), k(() => {
+    $ === void 0 || !E || m(r, "navigate", { path: $ });
+  }, [$, E, r, m]), k(() => {
+    if (!s || !r || !F)
       return;
-    const t = new URL(s);
-    return c(r, t.origin, _), F.current(), B(se(t.origin, r)), () => {
-      a(r);
+    e();
+    const i = new URL(s);
+    return L(r, i.origin, F), Z.current(), H(Re(i.origin, r)), () => {
+      M(r);
     };
-  }, [s, r, c, _]), k(() => {
-    if (!(!L || W.current))
-      return T.current = setTimeout(() => {
-        j(!0), I.current && I.current();
-      }, we), () => clearTimeout(T.current);
-  }, [L]);
-  const $ = h(() => {
-    W.current = !0, clearTimeout(T.current), j(!1);
-  }, []), [Z, K] = U(null);
-  V(r, "init", (t) => {
-    $(), Array.isArray(t == null ? void 0 : t.acceptsCredentials) && K(t.acceptsCredentials);
-  }), V(r, "authorize", $), V(r, "login", $), V(r, "credential-request", () => {
-    $(), A(!0);
+  }, [s, r, L, F, e]), k(() => {
+    if (!(!y || W.current))
+      return P.current = setTimeout(() => {
+        C(!0), q.current && q.current();
+      }, we), () => clearTimeout(P.current);
+  }, [y, s, z, o]);
+  const t = h(() => {
+    W.current = !0, clearTimeout(P.current), C(!1);
+  }, []);
+  V(r, "init", (i) => {
+    t(), Array.isArray(i == null ? void 0 : i.acceptsCredentials) && x(i.acceptsCredentials);
+  }), V(r, "authorize", t), V(r, "login", t), V(r, "credential-request", () => {
+    t(), S(!0);
   }), k(() => {
-    if (!O || !i)
+    if (!v || !u)
       return;
-    const t = Z;
-    if (Array.isArray(t) && !t.includes(i.kind))
+    const i = w;
+    if (Array.isArray(i) && !i.includes(u.kind))
       return;
-    const n = i.kind === "access_token" ? { accessToken: i.accessToken } : {};
-    b(r, "credential", { ...n, credential: i });
-  }, [O, i, Z, r, b]), V(r, "ready", () => {
-    $(), q((t) => t + 1);
+    const f = u.kind === "access_token" ? { accessToken: u.accessToken } : {};
+    m(r, "credential", { ...f, credential: u });
+  }, [v, u, w, r, m]), V(r, "ready", () => {
+    t(), O((i) => i + 1);
   });
-  const e = R();
+  const n = R();
   return V(r, "heartbeat", () => {
-    e.current && clearTimeout(e.current), e.current = setTimeout(() => {
-      if (_.current) {
-        const t = new URL(s);
-        _.current.src = se(t.origin, r);
-      }
+    n.current && clearTimeout(n.current), n.current = setTimeout(() => {
+      l((i) => i + 1);
     }, 6e3);
   }), k(() => () => {
-    e.current && clearTimeout(e.current);
-  }, []), u ? z ? z(u) : /* @__PURE__ */ m.createElement(ce, { entry: u }) : S && !f ? C ? C() : /* @__PURE__ */ m.createElement(ze, null) : /* @__PURE__ */ m.createElement(
-    Re,
+    n.current && clearTimeout(n.current);
+  }, []), a ? I ? I(a) : /* @__PURE__ */ g.createElement(ce, { entry: a }) : G && !E ? _ ? _() : /* @__PURE__ */ g.createElement(Ue, null) : /* @__PURE__ */ g.createElement(
+    xe,
     {
-      key: `auth-epoch-${v}`,
-      $isReady: f,
-      ref: _,
-      src: L,
-      ...M
+      key: `auth-epoch-${z}-frame-${o}`,
+      $isReady: E,
+      ref: F,
+      src: y,
+      ...A
     }
   );
 };
-Ue.propTypes = {
-  id: x.string,
-  src: x.string.isRequired,
-  path: x.string,
-  onInit: x.func,
-  onTimeout: x.func,
+Ce.propTypes = {
+  id: T.string,
+  src: T.string.isRequired,
+  path: T.string,
+  onInit: T.func,
+  onTimeout: T.func,
   /**
    * Optional host-styled renderer for the structurally-unsupported embed
    * state (legacy app on a cross-site origin), `(entry) => ReactNode`. Falls
    * back to a minimal built-in placeholder.
    */
-  renderUnsupported: x.func,
+  renderUnsupported: T.func,
   /**
    * Optional host-styled renderer for the handshake-timeout failure state
    * (the app is not embeddable / could not load), `() => ReactNode`. Falls
    * back to a minimal centered message.
    */
-  renderTimeout: x.func
+  renderTimeout: T.func
 };
-const Ce = D.div`
+const Me = D.div`
   position: fixed;
   inset: 0;
   background: rgba(0, 0, 0, 0.45);
@@ -669,7 +676,7 @@ const Ce = D.div`
   align-items: center;
   justify-content: center;
   z-index: 10000;
-`, Me = D.div`
+`, _e = D.div`
   background: #fff;
   border-radius: 8px;
   box-shadow: 0 4px 24px rgba(0, 0, 0, 0.2);
@@ -678,13 +685,13 @@ const Ce = D.div`
   max-width: calc(100vw - 32px);
   font-family: sans-serif;
   color: #222;
-`, _e = D.div`
+`, Ae = D.div`
   display: flex;
   align-items: center;
   justify-content: space-between;
   padding: 10px 0;
   gap: 16px;
-`, Ae = D.button`
+`, Oe = D.button`
   background: #16a500;
   color: #fff;
   border: none;
@@ -697,24 +704,24 @@ const Ce = D.div`
   color: #b3261e;
   font-size: 13px;
   margin: 4px 0 0;
-`, Se = () => {
-  const { pending: r, authorize: s } = ge();
-  return r.length === 0 ? null : /* @__PURE__ */ m.createElement(Ce, null, /* @__PURE__ */ m.createElement(Me, null, /* @__PURE__ */ m.createElement("h3", { style: { margin: "0 0 8px" } }, "Authorization Required"), /* @__PURE__ */ m.createElement("p", { style: { margin: "0 0 12px", fontSize: 14, color: "#555" } }, "The following apps need you to sign in and authorize them before they can load."), r.map((o) => /* @__PURE__ */ m.createElement("div", { key: o.origin }, /* @__PURE__ */ m.createElement(_e, null, /* @__PURE__ */ m.createElement("div", null, /* @__PURE__ */ m.createElement("div", { style: { fontWeight: 600 } }, o.origin)), /* @__PURE__ */ m.createElement(Ae, { onClick: () => s(o) }, "Authorize")), o.popupBlocked && /* @__PURE__ */ m.createElement(Le, null, "The sign-in window was blocked. Allow popups for this site, then try again.")))));
+`, Fe = () => {
+  const { pending: r, authorize: s } = he();
+  return r.length === 0 ? null : /* @__PURE__ */ g.createElement(Me, null, /* @__PURE__ */ g.createElement(_e, null, /* @__PURE__ */ g.createElement("h3", { style: { margin: "0 0 8px" } }, "Authorization Required"), /* @__PURE__ */ g.createElement("p", { style: { margin: "0 0 12px", fontSize: 14, color: "#555" } }, "The following apps need you to sign in and authorize them before they can load."), r.map((c) => /* @__PURE__ */ g.createElement("div", { key: c.origin }, /* @__PURE__ */ g.createElement(Ae, null, /* @__PURE__ */ g.createElement("div", null, /* @__PURE__ */ g.createElement("div", { style: { fontWeight: 600 } }, c.origin)), /* @__PURE__ */ g.createElement(Oe, { onClick: () => s(c) }, "Authorize")), c.popupBlocked && /* @__PURE__ */ g.createElement(Le, null, "The sign-in window was blocked. Allow popups for this site, then try again.")))));
 };
 export {
-  le as CREDENTIAL_KIND_ACCESS_TOKEN,
+  ae as CREDENTIAL_KIND_ACCESS_TOKEN,
   J as EmbeddedAuthorizationContext,
-  Se as EmbeddedAuthorizationPrompt,
-  Ue as MMEmbeddableZone,
+  Fe as EmbeddedAuthorizationPrompt,
+  Ce as MMEmbeddableZone,
   Y as MMEmbeddableZoneContext,
   Ee as MMEmbeddableZoneProvider,
   fe as isCrossSite,
-  te as normalizeCredential,
+  re as normalizeCredential,
   pe as popupAuthorizationLauncher,
-  Te as unsupportedCopy,
-  ge as useEmbeddedAuthorizations,
+  Ie as unsupportedCopy,
+  he as useEmbeddedAuthorizations,
   me as useEmbeddedCredential,
   V as useEmbeddedEffect,
-  he as useEmbeddedOriginEpoch,
+  ge as useEmbeddedOriginEpoch,
   be as useEmbeddedUnsupported
 };