@machinemetrics/mm-react-embeddable 2.0.0-0 → 2.0.0-2

package/README.md

@@ -1,3 +1,16 @@
 # mm-react-embeddable
 
 Components and hooks for embedding mm-apps into an interface. Primarily used for sandbox testing the creation of custom dashboard widgets.
+
+## Consent UI
+
+`useEmbeddedAuthorizations()` exposes the pending entries and the actions on them
+(`authorize` for the popup path, `approve`/`dismiss` for brokered entries). Every
+first-party host that passes a `credentialBroker` to `MMEmbeddableZoneProvider`
+renders its own consent UI over that hook (converge, OperatorView and operator-kiosk
+each have one).
+
+`EmbeddedAuthorizationPrompt` is the default **popup-only** prompt for hosts that
+cannot broker, such as an http development host (the mmdev playground). It renders
+legacy entries with an Authorize button that opens the OAuth popup, ignores brokered
+entries, and logs a one-time error in that case so the missing host UI is noticed.

package/dist/mm-react-embeddable.cjs.js

@@ -1,9 +1,9 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const n=require("react"),he=require("prop-types"),ge=require("styled-components"),Q=t=>t&&t.__esModule?t:{default:t},g=Q(n),C=Q(he),W=Q(ge),K=n.createContext(null),H=n.createContext({pending:[],authorize:()=>{},approve:()=>{},complete:()=>{},dismiss:()=>{},originEpochs:{},credentials:{},unsupported:{}}),re="access_token",J=t=>t?t.kind?t:t.accessToken?{kind:re,accessToken:t.accessToken,expiresAt:t.expiresAt||null}:null:null,me=new Set(["host_not_allowed","invalid_token","provider_unavailable"]),N=typeof window!="undefined"&&window.location.protocol==="https:",Ee=8e3,G=t=>{try{return new URL(t).origin}catch{return null}},ee=(t,o)=>{const u=o==null?void 0:o.origin;return!u||G(t==null?void 0:t.authUrl)!==u?null:u},te=t=>{if(!t||/^\d{1,3}(?:\.\d{1,3}){3}$/.test(t)||t.includes(":"))return t;const o=t.split(".");return o.length<=2?t:o.slice(-2).join(".")},se=(t,o)=>{try{const u=new URL(t),f=new URL(o);return u.protocol!==f.protocol?!0:te(u.hostname)!==te(f.hostname)}catch{return!0}},oe=(t,{onBlocked:o,onClosed:u})=>{const f=window.open(t.authUrl,"mm-embed-auth","popup,width=600,height=700");if(!f)return o(),()=>{};const p=setInterval(()=>{f.closed&&(clearInterval(p),u())},1e3);return()=>clearInterval(p)},ie=({children:t,launcher:o,broker:u})=>{const f=n.useContext(K),[p,m]=n.useState({}),[F,w]=n.useState({}),[I,z]=n.useState({}),[_,S]=n.useState({}),j=n.useRef(I);j.current=I;const E=n.useRef(p);E.current=p;const M=n.useRef(null),Z=n.useRef({}),U=n.useRef({}),v=n.useRef({}),$=n.useRef(u);$.current=u;const T=n.useCallback(e=>{const r=U.current[e];if(!r)return;const s=l=>!l[e]||l[e].clientId?l:{...l,[e]:{...l[e],clientId:r}};m(s),S(s)},[]),c=n.useCallback((e,r)=>{e&&(S(s=>s[e]?s:{...s,[e]:{origin:e,reason:r,clientId:U.current[e]||null}}),T(e))},[T]),a=n.useCallback((e,{v2:r=!1,origin:s=null}={})=>{s&&(r&&j.current[s]||(m(l=>l[s]?l:{...l,[s]:{origin:s,authUrl:e.authUrl,silentUrl:e.silentUrl||null,status:r&&$.current?"broker":r&&e.silentUrl&&N?"silent":"interactive",v2:r,scope:e.scope||null,acceptsCredentials:v.current[s]||null,consent:null,error:null,clientId:e.clientId||U.current[s]||null,popupBlocked:!1}}),T(s)))},[T]),i=n.useCallback(e=>{m(r=>{if(!r[e])return r;const s={...r};return delete s[e],s})},[]),d=n.useCallback(e=>{e&&(i(e),w(r=>({...r,[e]:(r[e]||0)+1})))},[i]),b=n.useCallback(e=>{m(r=>!r[e]||r[e].status==="interactive"?r:{...r,[e]:{...r[e],status:"interactive"}})},[]),k=n.useCallback(e=>{i(e.origin)},[i]),A=n.useCallback((e,r)=>{const s=ee(e,r);if(s){if(se(s,window.location.origin)){c(s,"cross-site-legacy");return}a(e,{origin:s})}},[a,c]);n.useEffect(()=>{if(!f)return;const e=[f.addListener("*","init",(r,s)=>{s!=null&&s.origin&&(r!=null&&r.clientId)&&(U.current[s.origin]=r.clientId,T(s.origin)),s!=null&&s.origin&&Array.isArray(r==null?void 0:r.acceptsCredentials)&&(v.current[s.origin]=r.acceptsCredentials)}),f.addListener("*","authorize",A),f.addListener("*","login",A),f.addListener("*","credential-request",(r,s)=>a(r,{v2:!0,origin:ee(r,s)}))];return()=>e.forEach(r=>r())},[f,A,a,T]),n.useEffect(()=>{const e=r=>{const s=r==null?void 0:r.data;if(!s||s.type!=="authorized"&&s.type!=="authorize-failed")return;const l=G(s.authUrl);if(!(!l||r.origin!==l)){if(s.type==="authorized"){if(s.accessToken){if(!E.current[l])return;z(h=>({...h,[l]:J({accessToken:s.accessToken})})),i(l)}else d(l);return}b(l)}};return window.addEventListener("message",e),()=>window.removeEventListener("message",e)},[i,d,b]);const x=n.useCallback((e,r)=>{const s=e==null?void 0:e.origin,l=J(r);!s||!l||(z(h=>({...h,[s]:l})),i(s))},[i]),R=n.useCallback((e,r)=>{m(s=>s[e]?{...s,[e]:{...s[e],...r}}:s)},[]),O=n.useCallback(async(e,{approve:r}={})=>{const s=$.current,{origin:l}=e;let h;try{h=await s({origin:l,clientId:e.clientId,scope:e.scope,authUrl:e.authUrl},{approve:r})}catch{r?R(l,{error:{reason:"broker_unavailable"}}):R(l,{status:e.silentUrl&&N?"silent":"interactive"});return}if((h==null?void 0:h.status)===200&&h.credential){x(e,h.credential);return}if((h==null?void 0:h.status)===409&&h.consentRequired){R(l,{status:"interactive",consent:{client:h.client||null,stepUp:!!h.stepUp,scope:h.scope||e.scope},error:null});return}const V=(h==null?void 0:h.error)||"broker_error";if(!r&&me.has(V)){R(l,{status:e.silentUrl&&N?"silent":"interactive"});return}if(r&&V==="consent_denied"){R(l,{error:null});return}i(l),S(Y=>({...Y,[l]:{origin:l,reason:`broker:${V}`,detail:h||null,clientId:e.clientId||U.current[l]||null}}))},[x,R,i]),P=n.useRef({});n.useEffect(()=>{Object.values(p).forEach(e=>{e.status!=="broker"||P.current[e.origin]||(P.current[e.origin]=!0,O(e).finally(()=>{delete P.current[e.origin]}))})},[p,O]);const y=n.useCallback(e=>!$.current||!(e!=null&&e.consent)?Promise.resolve():O(e,{approve:!0}),[O]);n.useEffect(()=>{const e=Z.current;Object.values(p).forEach(r=>{r.status==="silent"&&!e[r.origin]&&(e[r.origin]=setTimeout(()=>{delete e[r.origin],b(r.origin)},Ee))}),Object.keys(e).forEach(r=>{(!p[r]||p[r].status!=="silent")&&(clearTimeout(e[r]),delete e[r])})},[p,b]),n.useEffect(()=>()=>{M.current&&M.current(),Object.values(Z.current).forEach(clearTimeout)},[]);const q=n.useCallback(e=>{M.current&&(M.current(),M.current=null);const r=o||oe;M.current=r(e,{onBlocked:()=>{m(s=>s[e.origin]?{...s,[e.origin]:{...s[e.origin],popupBlocked:!0}}:s)},onClosed:()=>{if(e.v2){N&&m(s=>!s[e.origin]||!s[e.origin].silentUrl?s:{...s,[e.origin]:{...s[e.origin],status:"silent"}});return}d(e.origin)}})},[o,d]),D={pending:Object.values(p).filter(e=>e.status==="interactive"),authorize:q,approve:y,complete:x,dismiss:k,originEpochs:F,credentials:I,unsupported:_},L=Object.values(p).filter(e=>e.status==="silent"&&e.silentUrl);return g.default.createElement(H.Provider,{value:D},t,L.map(e=>g.default.createElement("iframe",{key:`mm-silent-auth-${e.origin}`,src:e.silentUrl,title:`MachineMetrics silent authorization (${e.origin})`,"aria-hidden":"true",tabIndex:-1,style:{display:"none"}})))};ie.propTypes={children:C.default.node,launcher:C.default.func,broker:C.default.func};const ue=()=>n.useContext(H),ce=t=>{const{originEpochs:o}=n.useContext(H),u=G(t);return u&&o[u]||0},ae=t=>{const{credentials:o}=n.useContext(H),u=G(t);return u&&o[u]||null},le=t=>{const{unsupported:o}=n.useContext(H),u=G(t);return u&&o[u]||null},de=({children:t,authorizationLauncher:o,credentialBroker:u})=>{const[f,p]=n.useState({}),[m,F]=n.useState({}),w=n.useRef({}),I=n.useRef({}),z=n.useRef({}),_=n.useCallback((c,a)=>{var i;return!!((i=z.current[c])!=null&&i.has(a))},[]),S=n.useCallback((c,a,i)=>{p(d=>({...d,[c]:{origin:a,frameRef:i}}))},[]),j=n.useCallback(c=>{p(a=>{const i={...a};return delete i[c],i}),F(a=>{const i={...a};return delete i[c],i}),delete z.current[c]},[]);n.useEffect(()=>{const c=(i=[],d,b)=>{i.forEach(k=>k(d,b))},a=i=>{var O,P,y,q,D,L,e;if(!((O=i==null?void 0:i.data)!=null&&O.instanceId))return;const{instanceId:d,type:b}=i.data,k=f[d],A=(y=(P=k==null?void 0:k.frameRef)==null?void 0:P.current)==null?void 0:y.contentWindow;if(!A||i.source!==A||i.origin!==k.origin)return;const x={origin:i.origin},R=w.current;if(b==="response"){const{callbackId:r,response:s,error:l}=i.data,h=I.current[r];h&&(h(s,l),delete I.current[r]);return}if(b==="mark-registered"){const{requestType:r}=i.data;z.current[d]||(z.current[d]=new Set),z.current[d].add(r);return}b==="ready"&&F(r=>({...r,[d]:!0})),c((q=R[d])==null?void 0:q[b],i.data,x),c((D=R["*"])==null?void 0:D[b],i.data,x),c((L=R[d])==null?void 0:L["*"],i.data,x),c((e=R["*"])==null?void 0:e["*"],i.data,x)};return window.addEventListener("message",a),()=>{window.removeEventListener("message",a)}},[f]);const E=n.useCallback((c,a,i)=>{var b,k;const d=f[c];if(!d){console.warn(`Origin not set for id: ${c}. Unable to send message.`);return}(k=(b=d==null?void 0:d.frameRef)==null?void 0:b.current)!=null&&k.contentWindow&&d.frameRef.current.contentWindow.postMessage({type:a,...i,instanceId:c},d.origin)},[f]),M=n.useRef(0),Z=n.useCallback(()=>`${Date.now()}-${++M.current}`,[]),U=n.useCallback(async(c,a,i={})=>new Promise((d,b)=>{const k=Z(),A=(x,R)=>{delete I.current[k],R?b(R):d(x)};I.current[k]=A,E(c,"request",{callbackId:k,requestType:a,data:i})}),[E]),v=n.useCallback((c,a)=>{E(c,"load-options",a)},[E]),$=n.useCallback((c,a)=>{E(c,"validate",a)},[E]),T=n.useMemo(()=>({registerFrame:S,unregisterFrame:j,sendMessage:E,sendRequest:U,loadOptions:v,validate:$,hasHandler:_,readyFrames:m,addListener:(c,a,i)=>(w.current[c]||(w.current[c]={}),w.current[c][a]||(w.current[c][a]=[]),w.current[c][a].push(i),()=>{w.current[c][a]=w.current[c][a].filter(d=>d!==i)})}),[S,j,E,U,v,$,_,m]);return g.default.createElement(K.Provider,{value:T},g.default.createElement(ie,{launcher:o,broker:u},t))},B=(t,o,u)=>{const f=n.useContext(K);if(f===null)throw new Error("useEmbeddedEffect must be used within a MMEmbeddableZoneProvider");const p=n.useRef(u);n.useEffect(()=>{p.current=u},[u]),n.useEffect(()=>{if(!(!t||!o)){if(o.startsWith("key:")){const m=o.substring(4);return f.readyFrames[t]&&f.sendMessage(t,"subscribe-key",{keyChord:m}),f.addListener(t,`key-pressed:${m}`,(...w)=>p.current(...w))}return f.addListener(t,o,(...m)=>p.current(...m))}},[f,t,o])};de.propTypes={children:C.default.node.isRequired,authorizationLauncher:C.default.func,credentialBroker:C.default.func};const X=W.default.default||W.default,ke=1e4,Re="credentials",ne=(t,o)=>`${t}/mm-embedded-interop?id=${encodeURIComponent(o)}&origin=${encodeURIComponent(window.location.origin)}&caps=${Re}`,Ce=X.iframe`
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("react"),he=require("prop-types"),ge=require("styled-components"),Q=r=>r&&r.__esModule?r:{default:r},E=Q(t),T=Q(he),W=Q(ge),H=t.createContext(null),K=t.createContext({pending:[],authorize:()=>{},approve:()=>{},complete:()=>{},dismiss:()=>{},originEpochs:{},credentials:{},unsupported:{}}),se="access_token",J=r=>r?r.kind?r:r.accessToken?{kind:se,accessToken:r.accessToken,expiresAt:r.expiresAt||null}:null:null,Ee=new Set(["host_not_allowed","invalid_token","provider_unavailable"]),N=typeof window!="undefined"&&window.location.protocol==="https:",ke=8e3,G=r=>{try{return new URL(r).origin}catch{return null}},ee=(r,o)=>{const c=o==null?void 0:o.origin;return!c||G(r==null?void 0:r.authUrl)!==c?null:c},te=r=>{if(!r||/^\d{1,3}(?:\.\d{1,3}){3}$/.test(r)||r.includes(":"))return r;const o=r.split(".");return o.length<=2?r:o.slice(-2).join(".")},oe=(r,o)=>{try{const c=new URL(r),l=new URL(o);return c.protocol!==l.protocol?!0:te(c.hostname)!==te(l.hostname)}catch{return!0}},ue=(r,{onBlocked:o,onClosed:c})=>{const l=window.open(r.authUrl,"mm-embed-auth","popup,width=600,height=700");if(!l)return o(),()=>{};const b=setInterval(()=>{l.closed&&(clearInterval(b),c())},1e3);return()=>clearInterval(b)},ie=({children:r,launcher:o,broker:c})=>{const l=t.useContext(H),[b,m]=t.useState({}),[A,C]=t.useState({}),[z,f]=t.useState({}),[w,I]=t.useState({}),L=t.useRef(z);L.current=z;const g=t.useRef(b);g.current=b;const U=t.useRef(null),Z=t.useRef({}),S=t.useRef({}),F=t.useRef({}),$=t.useRef(c);$.current=c;const y=t.useCallback(e=>{const n=S.current[e];if(!n)return;const s=i=>!i[e]||i[e].clientId?i:{...i,[e]:{...i[e],clientId:n}};m(s),I(s)},[]),a=t.useCallback((e,n)=>{e&&(I(s=>s[e]?s:{...s,[e]:{origin:e,reason:n,clientId:S.current[e]||null}}),y(e))},[y]),d=t.useCallback((e,{v2:n=!1,origin:s=null}={})=>{s&&(n&&L.current[s]||(m(i=>i[s]?i:{...i,[s]:{origin:s,authUrl:e.authUrl,silentUrl:e.silentUrl||null,status:n&&$.current?"broker":n&&e.silentUrl&&N?"silent":"interactive",v2:n,scope:e.scope||null,acceptsCredentials:F.current[s]||null,consent:null,error:null,clientId:e.clientId||S.current[s]||null,popupBlocked:!1}}),y(s)))},[y]),u=t.useCallback(e=>{m(n=>{if(!n[e])return n;const s={...n};return delete s[e],s})},[]),p=t.useCallback(e=>{e&&(u(e),C(n=>({...n,[e]:(n[e]||0)+1})))},[u]),R=t.useCallback(e=>{m(n=>!n[e]||n[e].status==="interactive"?n:{...n,[e]:{...n[e],status:"interactive"}})},[]),x=t.useCallback(e=>{u(e.origin)},[u]),M=t.useCallback((e,n)=>{const s=ee(e,n);if(s){if(oe(s,window.location.origin)){a(s,"cross-site-legacy");return}d(e,{origin:s})}},[d,a]);t.useEffect(()=>{if(!l)return;const e=[l.addListener("*","init",(n,s)=>{s!=null&&s.origin&&(n!=null&&n.clientId)&&(S.current[s.origin]=n.clientId,y(s.origin)),s!=null&&s.origin&&Array.isArray(n==null?void 0:n.acceptsCredentials)&&(F.current[s.origin]=n.acceptsCredentials)}),l.addListener("*","authorize",M),l.addListener("*","login",M),l.addListener("*","credential-request",(n,s)=>d(n,{v2:!0,origin:ee(n,s)}))];return()=>e.forEach(n=>n())},[l,M,d,y]),t.useEffect(()=>{const e=n=>{const s=n==null?void 0:n.data;if(!s||s.type!=="authorized"&&s.type!=="authorize-failed")return;const i=G(s.authUrl);if(!(!i||n.origin!==i)){if(s.type==="authorized"){if(s.accessToken){if(!g.current[i])return;f(h=>({...h,[i]:J({accessToken:s.accessToken})})),u(i)}else p(i);return}R(i)}};return window.addEventListener("message",e),()=>window.removeEventListener("message",e)},[u,p,R]);const _=t.useCallback((e,n)=>{const s=e==null?void 0:e.origin,i=J(n);!s||!i||(f(h=>({...h,[s]:i})),u(s))},[u]),k=t.useCallback((e,n)=>{m(s=>s[e]?{...s,[e]:{...s[e],...n}}:s)},[]),O=t.useCallback(async(e,{approve:n}={})=>{const s=$.current,{origin:i}=e;let h;try{h=await s({origin:i,clientId:e.clientId,scope:e.scope,authUrl:e.authUrl},{approve:n})}catch{n?k(i,{error:{reason:"broker_unavailable"}}):k(i,{status:e.silentUrl&&N?"silent":"interactive"});return}if((h==null?void 0:h.status)===200&&h.credential){_(e,h.credential);return}if((h==null?void 0:h.status)===409&&h.consentRequired){k(i,{status:"interactive",consent:{client:h.client||null,stepUp:!!h.stepUp,scope:h.scope||e.scope},error:null});return}const V=(h==null?void 0:h.error)||"broker_error";if(!n&&Ee.has(V)){k(i,{status:e.silentUrl&&N?"silent":"interactive"});return}if(n&&V==="consent_denied"){k(i,{error:null});return}u(i),I(Y=>({...Y,[i]:{origin:i,reason:`broker:${V}`,detail:h||null,clientId:e.clientId||S.current[i]||null}}))},[_,k,u]),v=t.useRef({});t.useEffect(()=>{Object.values(b).forEach(e=>{e.status!=="broker"||v.current[e.origin]||(v.current[e.origin]=!0,O(e).finally(()=>{delete v.current[e.origin]}))})},[b,O]);const P=t.useCallback(e=>!$.current||!(e!=null&&e.consent)?Promise.resolve():O(e,{approve:!0}),[O]);t.useEffect(()=>{const e=Z.current;Object.values(b).forEach(n=>{n.status==="silent"&&!e[n.origin]&&(e[n.origin]=setTimeout(()=>{delete e[n.origin],R(n.origin)},ke))}),Object.keys(e).forEach(n=>{(!b[n]||b[n].status!=="silent")&&(clearTimeout(e[n]),delete e[n])})},[b,R]),t.useEffect(()=>()=>{U.current&&U.current(),Object.values(Z.current).forEach(clearTimeout)},[]);const q=t.useCallback(e=>{U.current&&(U.current(),U.current=null);const n=o||ue;U.current=n(e,{onBlocked:()=>{m(s=>s[e.origin]?{...s,[e.origin]:{...s[e.origin],popupBlocked:!0}}:s)},onClosed:()=>{if(e.v2){N&&m(s=>!s[e.origin]||!s[e.origin].silentUrl?s:{...s,[e.origin]:{...s[e.origin],status:"silent"}});return}p(e.origin)}})},[o,p]),j={pending:Object.values(b).filter(e=>e.status==="interactive"),authorize:q,approve:P,complete:_,dismiss:x,originEpochs:A,credentials:z,unsupported:w},B=Object.values(b).filter(e=>e.status==="silent"&&e.silentUrl);return E.default.createElement(K.Provider,{value:j},r,B.map(e=>E.default.createElement("iframe",{key:`mm-silent-auth-${e.origin}`,src:e.silentUrl,title:`MachineMetrics silent authorization (${e.origin})`,"aria-hidden":"true",tabIndex:-1,style:{display:"none"}})))};ie.propTypes={children:T.default.node,launcher:T.default.func,broker:T.default.func};const ce=()=>t.useContext(K),ae=r=>{const{originEpochs:o}=t.useContext(K),c=G(r);return c&&o[c]||0},le=r=>{const{credentials:o}=t.useContext(K),c=G(r);return c&&o[c]||null},de=r=>{const{unsupported:o}=t.useContext(K),c=G(r);return c&&o[c]||null},fe=({children:r,authorizationLauncher:o,credentialBroker:c})=>{const[l,b]=t.useState({}),[m,A]=t.useState({}),C=t.useRef({}),z=t.useRef({}),f=t.useRef({}),w=t.useCallback((a,d)=>{var u;return!!((u=f.current[a])!=null&&u.has(d))},[]),I=t.useCallback((a,d,u)=>{b(p=>({...p,[a]:{origin:d,frameRef:u}}))},[]),L=t.useCallback(a=>{b(d=>{const u={...d};return delete u[a],u}),A(d=>{const u={...d};return delete u[a],u}),delete f.current[a]},[]);t.useEffect(()=>{const a=(u=[],p,R)=>{u.forEach(x=>x(p,R))},d=u=>{var O,v,P,q,j,B,e;if(!((O=u==null?void 0:u.data)!=null&&O.instanceId))return;const{instanceId:p,type:R}=u.data,x=l[p],M=(P=(v=x==null?void 0:x.frameRef)==null?void 0:v.current)==null?void 0:P.contentWindow;if(!M||u.source!==M||u.origin!==x.origin)return;const _={origin:u.origin},k=C.current;if(R==="response"){const{callbackId:n,response:s,error:i}=u.data,h=z.current[n];h&&(h(s,i),delete z.current[n]);return}if(R==="mark-registered"){const{requestType:n}=u.data;f.current[p]||(f.current[p]=new Set),f.current[p].add(n);return}R==="ready"&&A(n=>({...n,[p]:!0})),a((q=k[p])==null?void 0:q[R],u.data,_),a((j=k["*"])==null?void 0:j[R],u.data,_),a((B=k[p])==null?void 0:B["*"],u.data,_),a((e=k["*"])==null?void 0:e["*"],u.data,_)};return window.addEventListener("message",d),()=>{window.removeEventListener("message",d)}},[l]);const g=t.useCallback((a,d,u)=>{var R,x;const p=l[a];if(!p){console.warn(`Origin not set for id: ${a}. Unable to send message.`);return}(x=(R=p==null?void 0:p.frameRef)==null?void 0:R.current)!=null&&x.contentWindow&&p.frameRef.current.contentWindow.postMessage({type:d,...u,instanceId:a},p.origin)},[l]),U=t.useRef(0),Z=t.useCallback(()=>`${Date.now()}-${++U.current}`,[]),S=t.useCallback(async(a,d,u={})=>new Promise((p,R)=>{const x=Z(),M=(_,k)=>{delete z.current[x],k?R(k):p(_)};z.current[x]=M,g(a,"request",{callbackId:x,requestType:d,data:u})}),[g]),F=t.useCallback((a,d)=>{g(a,"load-options",d)},[g]),$=t.useCallback((a,d)=>{g(a,"validate",d)},[g]),y=t.useMemo(()=>({registerFrame:I,unregisterFrame:L,sendMessage:g,sendRequest:S,loadOptions:F,validate:$,hasHandler:w,readyFrames:m,addListener:(a,d,u)=>(C.current[a]||(C.current[a]={}),C.current[a][d]||(C.current[a][d]=[]),C.current[a][d].push(u),()=>{C.current[a][d]=C.current[a][d].filter(p=>p!==u)})}),[I,L,g,S,F,$,w,m]);return E.default.createElement(H.Provider,{value:y},E.default.createElement(ie,{launcher:o,broker:c},r))},D=(r,o,c)=>{const l=t.useContext(H);if(l===null)throw new Error("useEmbeddedEffect must be used within a MMEmbeddableZoneProvider");const b=t.useRef(c);t.useEffect(()=>{b.current=c},[c]),t.useEffect(()=>{if(!(!r||!o)){if(o.startsWith("key:")){const m=o.substring(4);return l.readyFrames[r]&&l.sendMessage(r,"subscribe-key",{keyChord:m}),l.addListener(r,`key-pressed:${m}`,(...C)=>b.current(...C))}return l.addListener(r,o,(...m)=>b.current(...m))}},[l,r,o])};fe.propTypes={children:T.default.node.isRequired,authorizationLauncher:T.default.func,credentialBroker:T.default.func};const X=W.default.default||W.default,Re=1e4,Ce="credentials",we=(r,o)=>`${r}/mm-embedded-interop?id=${encodeURIComponent(o)}&origin=${encodeURIComponent(window.location.origin)}&caps=${Ce}`,xe=X.iframe`
   width: 100%;
   height: 100%;
   border: none;
-  visibility: ${t=>t.$isReady?"visible":"hidden"};
-`,we=X.div`
+  visibility: ${r=>r.$isReady?"visible":"hidden"};
+`,Te=X.div`
   width: 100%;
   height: 100%;
   display: flex;
@@ -16,13 +16,13 @@
   text-align: center;
   color: #555;
   font-size: 14px;
-`,fe=t=>{const o=t&&t.origin||"This app",u=t&&t.reason||"";switch(u){case"broker:scope_above_ceiling":return{title:`${o} can’t be authorized here`,detail:"It asks for permissions your role doesn’t have."};case"broker:origin_mismatch":case"broker:unknown_client":return{title:`${o} can’t be authorized here`,detail:"It isn’t registered to run at this address."};case"broker:cross_company_principal":return{title:`${o} can’t be authorized here`,detail:"It can’t be authorized for this account."};default:return u.startsWith("broker:")?{title:`${o} can’t be authorized here`,detail:"Authorization was refused."}:{title:`${o} can’t be embedded here`,detail:"It needs an update to support embedding from a different domain."}}},pe=({entry:t})=>{const o=fe(t);return g.default.createElement(we,{"data-reason":t&&t.reason||void 0},g.default.createElement("div",{style:{fontWeight:600}},o.title),g.default.createElement("div",{style:{fontSize:12,color:"#888"}},o.detail))};pe.propTypes={entry:C.default.shape({origin:C.default.string,name:C.default.string,reason:C.default.string,detail:C.default.object})};const xe=X.div`
+`,pe=r=>{const o=r&&r.origin||"This app",c=r&&r.reason||"";switch(c){case"broker:scope_above_ceiling":return{title:`${o} can’t be authorized here`,detail:"It asks for permissions your role doesn’t have."};case"broker:origin_mismatch":case"broker:unknown_client":return{title:`${o} can’t be authorized here`,detail:"It isn’t registered to run at this address."};case"broker:cross_company_principal":return{title:`${o} can’t be authorized here`,detail:"It can’t be authorized for this account."};default:return c.startsWith("broker:")?{title:`${o} can’t be authorized here`,detail:"Authorization was refused."}:{title:`${o} can’t be embedded here`,detail:"It needs an update to support embedding from a different domain."}}},be=({entry:r})=>{const o=pe(r);return E.default.createElement(Te,{"data-reason":r&&r.reason||void 0},E.default.createElement("div",{style:{fontWeight:600}},o.title),E.default.createElement("div",{style:{fontSize:12,color:"#888"}},o.detail))};be.propTypes={entry:T.default.shape({origin:T.default.string,name:T.default.string,reason:T.default.string,detail:T.default.object})};const ze=X.div`
   height: 100%;
   display: flex;
   flex: 1;
   align-items: center;
   justify-content: center;
-`,Te=()=>g.default.createElement(xe,null,g.default.createElement("div",{style:{textAlign:"center"}},"This app couldn’t be loaded as an embeddable widget.")),be=({id:t,src:o,path:u,onInit:f=()=>{},onTimeout:p,context:m={},params:F={},renderUnsupported:w,renderTimeout:I,...z})=>{if("isConfiguring"in z)return console.error("isConfiguring must be passed via the params prop to MMEmbeddableZone"),null;if("colorMode"in m)return console.error("colorMode must be passed via the params prop to MMEmbeddableZone"),null;if("isFullScreen"in m)return console.error("isFullScreen must be passed via the params prop to MMEmbeddableZone"),null;const _=n.useRef(),[S,j]=n.useState(),[E,M]=n.useState(0),[Z,U]=n.useState(!1),[v,$]=n.useState(!1),T=ce(o),c=ae(o),a=le(o);n.useEffect(()=>{T>0&&M(0)},[T]);const{registerFrame:i,unregisterFrame:d,sendMessage:b}=n.useContext(K),[k,A]=n.useState(),x=n.useRef(),R=n.useRef(p),O=n.useRef(f),P=n.useRef(!1);n.useEffect(()=>{R.current=p},[p]),n.useEffect(()=>{O.current=f},[f]),n.useEffect(()=>{E&&b(t,"set-context",{context:{...m}})},[m,t,E]),n.useEffect(()=>{E&&b(t,"set-params",{params:F})},[F,t,E]),n.useEffect(()=>{u!==void 0&&A((u==null?void 0:u.indexOf("/"))===0?u:`/${u}`)},[u]),n.useEffect(()=>{k===void 0||!E||b(t,"navigate",{path:k})},[k,E,t,b]),n.useEffect(()=>{if(!o||!t||!_)return;const e=new URL(o);return i(t,e.origin,_),O.current(),j(ne(e.origin,t)),()=>{d(t)}},[o,t,i,_]),n.useEffect(()=>{if(!(!S||P.current))return x.current=setTimeout(()=>{U(!0),R.current&&R.current()},ke),()=>clearTimeout(x.current)},[S]);const y=n.useCallback(()=>{P.current=!0,clearTimeout(x.current),U(!1)},[]),[q,D]=n.useState(null);B(t,"init",e=>{y(),Array.isArray(e==null?void 0:e.acceptsCredentials)&&D(e.acceptsCredentials)}),B(t,"authorize",y),B(t,"login",y),B(t,"credential-request",()=>{y(),$(!0)}),n.useEffect(()=>{if(!v||!c)return;const e=q;if(Array.isArray(e)&&!e.includes(c.kind))return;const r=c.kind==="access_token"?{accessToken:c.accessToken}:{};b(t,"credential",{...r,credential:c})},[v,c,q,t,b]),B(t,"ready",()=>{y(),M(e=>e+1)});const L=n.useRef();return B(t,"heartbeat",()=>{L.current&&clearTimeout(L.current),L.current=setTimeout(()=>{if(_.current){const e=new URL(o);_.current.src=ne(e.origin,t)}},6e3)}),n.useEffect(()=>()=>{L.current&&clearTimeout(L.current)},[]),a?w?w(a):g.default.createElement(pe,{entry:a}):Z&&!E?I?I():g.default.createElement(Te,null):g.default.createElement(Ce,{key:`auth-epoch-${T}`,$isReady:E,ref:_,src:S,...z})};be.propTypes={id:C.default.string,src:C.default.string.isRequired,path:C.default.string,onInit:C.default.func,onTimeout:C.default.func,renderUnsupported:C.default.func,renderTimeout:C.default.func};const Ie=W.default.div`
+`,Ie=()=>E.default.createElement(ze,null,E.default.createElement("div",{style:{textAlign:"center"}},"This app couldn’t be loaded as an embeddable widget.")),me=({id:r,src:o,path:c,onInit:l=()=>{},onTimeout:b,context:m={},params:A={},renderUnsupported:C,renderTimeout:z,...f})=>{if("isConfiguring"in f)return console.error("isConfiguring must be passed via the params prop to MMEmbeddableZone"),null;if("colorMode"in m)return console.error("colorMode must be passed via the params prop to MMEmbeddableZone"),null;if("isFullScreen"in m)return console.error("isFullScreen must be passed via the params prop to MMEmbeddableZone"),null;const w=t.useRef(),[I,L]=t.useState(),[g,U]=t.useState(0),[Z,S]=t.useState(!1),[F,$]=t.useState(!1),y=ae(o),a=le(o),d=de(o),[u,p]=t.useState(0),[R,x]=t.useState(null),{registerFrame:M,unregisterFrame:_,sendMessage:k}=t.useContext(H),[O,v]=t.useState(),P=t.useRef(),q=t.useRef(b),j=t.useRef(l),B=t.useRef(!1),e=t.useCallback(()=>{B.current=!1,clearTimeout(P.current),U(0),S(!1),$(!1),x(null)},[]);t.useEffect(()=>{(y>0||u>0)&&e()},[y,u,e]),t.useEffect(()=>{q.current=b},[b]),t.useEffect(()=>{j.current=l},[l]),t.useEffect(()=>{g&&k(r,"set-context",{context:{...m}})},[m,r,g]),t.useEffect(()=>{g&&k(r,"set-params",{params:A})},[A,r,g]),t.useEffect(()=>{c!==void 0&&v((c==null?void 0:c.indexOf("/"))===0?c:`/${c}`)},[c]),t.useEffect(()=>{O===void 0||!g||k(r,"navigate",{path:O})},[O,g,r,k]),t.useEffect(()=>{if(!o||!r||!w)return;e();const i=new URL(o);return M(r,i.origin,w),j.current(),L(we(i.origin,r)),()=>{_(r)}},[o,r,M,w,e]),t.useEffect(()=>{if(!(!I||B.current))return P.current=setTimeout(()=>{S(!0),q.current&&q.current()},Re),()=>clearTimeout(P.current)},[I,o,y,u]);const n=t.useCallback(()=>{B.current=!0,clearTimeout(P.current),S(!1)},[]);D(r,"init",i=>{n(),Array.isArray(i==null?void 0:i.acceptsCredentials)&&x(i.acceptsCredentials)}),D(r,"authorize",n),D(r,"login",n),D(r,"credential-request",()=>{n(),$(!0)}),t.useEffect(()=>{if(!F||!a)return;const i=R;if(Array.isArray(i)&&!i.includes(a.kind))return;const h=a.kind==="access_token"?{accessToken:a.accessToken}:{};k(r,"credential",{...h,credential:a})},[F,a,R,r,k]),D(r,"ready",()=>{n(),U(i=>i+1)});const s=t.useRef();return D(r,"heartbeat",()=>{s.current&&clearTimeout(s.current),s.current=setTimeout(()=>{p(i=>i+1)},6e3)}),t.useEffect(()=>()=>{s.current&&clearTimeout(s.current)},[]),d?C?C(d):E.default.createElement(be,{entry:d}):Z&&!g?z?z():E.default.createElement(Ie,null):E.default.createElement(xe,{key:`auth-epoch-${y}-frame-${u}`,$isReady:g,ref:w,src:I,...f})};me.propTypes={id:T.default.string,src:T.default.string.isRequired,path:T.default.string,onInit:T.default.func,onTimeout:T.default.func,renderUnsupported:T.default.func,renderTimeout:T.default.func};const ye=W.default.div`
   position: fixed;
   inset: 0;
   background: rgba(0, 0, 0, 0.45);
@@ -30,7 +30,7 @@
   align-items: center;
   justify-content: center;
   z-index: 10000;
-`,ze=W.default.div`
+`,Se=W.default.div`
   background: #fff;
   border-radius: 8px;
   box-shadow: 0 4px 24px rgba(0, 0, 0, 0.2);
@@ -45,7 +45,7 @@
   justify-content: space-between;
   padding: 10px 0;
   gap: 16px;
-`,Me=W.default.button`
+`,Ae=W.default.button`
   background: #16a500;
   color: #fff;
   border: none;
@@ -58,4 +58,4 @@
   color: #b3261e;
   font-size: 13px;
   margin: 4px 0 0;
-`,Se=()=>{const{pending:t,authorize:o}=ue();return t.length===0?null:g.default.createElement(Ie,null,g.default.createElement(ze,null,g.default.createElement("h3",{style:{margin:"0 0 8px"}},"Authorization Required"),g.default.createElement("p",{style:{margin:"0 0 12px",fontSize:14,color:"#555"}},"The following apps need you to sign in and authorize them before they can load."),t.map(u=>g.default.createElement("div",{key:u.origin},g.default.createElement(_e,null,g.default.createElement("div",null,g.default.createElement("div",{style:{fontWeight:600}},u.origin)),g.default.createElement(Me,{onClick:()=>o(u)},"Authorize")),u.popupBlocked&&g.default.createElement(Ue,null,"The sign-in window was blocked. Allow popups for this site, then try again.")))))};exports.CREDENTIAL_KIND_ACCESS_TOKEN=re;exports.EmbeddedAuthorizationContext=H;exports.EmbeddedAuthorizationPrompt=Se;exports.MMEmbeddableZone=be;exports.MMEmbeddableZoneContext=K;exports.MMEmbeddableZoneProvider=de;exports.isCrossSite=se;exports.normalizeCredential=J;exports.popupAuthorizationLauncher=oe;exports.unsupportedCopy=fe;exports.useEmbeddedAuthorizations=ue;exports.useEmbeddedCredential=ae;exports.useEmbeddedEffect=B;exports.useEmbeddedOriginEpoch=ce;exports.useEmbeddedUnsupported=le;
+`,re='button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])';let ne=!1;const Me=()=>{const{pending:r,authorize:o,dismiss:c}=ce(),l=r.filter(f=>!f.consent),b=r.length-l.length,m=t.useRef(null),A=t.useRef(null),C=l.length>0;if(t.useEffect(()=>{b>0&&!ne&&(ne=!0,console.error("[mm-react-embeddable] EmbeddedAuthorizationPrompt received a brokered consent entry. A host with a credentialBroker must render its own consent UI (useEmbeddedAuthorizations: approve/dismiss); this default prompt only handles the popup path."))},[b]),t.useEffect(()=>{if(!C||!m.current)return;A.current=document.activeElement;const f=m.current.querySelector(re);return f&&f.focus(),()=>{const w=A.current;w&&typeof w.focus=="function"&&w.focus()}},[C]),!C)return null;const z=f=>{if(f.key==="Escape"){f.preventDefault(),l.forEach(g=>c(g));return}if(f.key!=="Tab"||!m.current)return;const w=Array.from(m.current.querySelectorAll(re));if(w.length===0)return;const I=w[0],L=w[w.length-1];f.shiftKey&&document.activeElement===I?(f.preventDefault(),L.focus()):!f.shiftKey&&document.activeElement===L&&(f.preventDefault(),I.focus())};return E.default.createElement(ye,null,E.default.createElement(Se,{ref:m,role:"dialog","aria-modal":"true","aria-labelledby":"mm-embedded-authorization-title",onKeyDown:z},E.default.createElement("h3",{id:"mm-embedded-authorization-title",style:{margin:"0 0 8px"}},"Authorization Required"),E.default.createElement("p",{style:{margin:"0 0 12px",fontSize:14,color:"#555"}},"The following apps need you to sign in and authorize them before they can load."),l.map(f=>E.default.createElement("div",{key:f.origin},E.default.createElement(_e,null,E.default.createElement("div",null,E.default.createElement("div",{style:{fontWeight:600}},f.origin)),E.default.createElement(Ae,{onClick:()=>o(f)},"Authorize")),f.popupBlocked&&E.default.createElement(Ue,null,"The sign-in window was blocked. Allow popups for this site, then try again.")))))};exports.CREDENTIAL_KIND_ACCESS_TOKEN=se;exports.EmbeddedAuthorizationContext=K;exports.EmbeddedAuthorizationPrompt=Me;exports.MMEmbeddableZone=me;exports.MMEmbeddableZoneContext=H;exports.MMEmbeddableZoneProvider=fe;exports.isCrossSite=oe;exports.normalizeCredential=J;exports.popupAuthorizationLauncher=ue;exports.unsupportedCopy=pe;exports.useEmbeddedAuthorizations=ce;exports.useEmbeddedCredential=le;exports.useEmbeddedEffect=D;exports.useEmbeddedOriginEpoch=ae;exports.useEmbeddedUnsupported=de;