@machinemetrics/mm-react-embeddable 2.0.0-0 → 2.0.0-2

package/dist/mm-react-embeddable.es.js

@@ -1,7 +1,7 @@
-import m, { createContext as ie, useContext as H, useState as C, useRef as R, useCallback as h, useEffect as k, useMemo as le } from "react";
-import T from "prop-types";
-import D from "styled-components";
-const Y = ie(null), J = ie({
+import E, { createContext as ce, useContext as Z, useState as M, useRef as R, useCallback as g, useEffect as w, useMemo as le } from "react";
+import U from "prop-types";
+import K from "styled-components";
+const Y = ce(null), J = ce({
   pending: [],
   authorize: () => {
   },
@@ -14,131 +14,131 @@ const Y = ie(null), J = ie({
   originEpochs: {},
   credentials: {},
   unsupported: {}
-}), ae = "access_token", ne = (t) => t ? t.kind ? t : t.accessToken ? {
-  kind: ae,
-  accessToken: t.accessToken,
-  expiresAt: t.expiresAt || null
-} : null : null, de = /* @__PURE__ */ new Set(["host_not_allowed", "invalid_token", "provider_unavailable"]), X = typeof window != "undefined" && window.location.protocol === "https:", fe = 8e3, Q = (t) => {
+}), de = "access_token", re = (r) => r ? r.kind ? r : r.accessToken ? {
+  kind: de,
+  accessToken: r.accessToken,
+  expiresAt: r.expiresAt || null
+} : null : null, fe = /* @__PURE__ */ new Set(["host_not_allowed", "invalid_token", "provider_unavailable"]), X = typeof window != "undefined" && window.location.protocol === "https:", pe = 8e3, Q = (r) => {
   try {
-    return new URL(t).origin;
+    return new URL(r).origin;
   } catch {
     return null;
   }
-}, re = (t, s) => {
-  const i = s == null ? void 0 : s.origin;
-  return !i || Q(t == null ? void 0 : t.authUrl) !== i ? null : i;
-}, se = (t) => {
-  if (!t || /^\d{1,3}(?:\.\d{1,3}){3}$/.test(t) || t.includes(":"))
-    return t;
-  const s = t.split(".");
-  return s.length <= 2 ? t : s.slice(-2).join(".");
-}, pe = (t, s) => {
+}, ne = (r, o) => {
+  const c = o == null ? void 0 : o.origin;
+  return !c || Q(r == null ? void 0 : r.authUrl) !== c ? null : c;
+}, oe = (r) => {
+  if (!r || /^\d{1,3}(?:\.\d{1,3}){3}$/.test(r) || r.includes(":"))
+    return r;
+  const o = r.split(".");
+  return o.length <= 2 ? r : o.slice(-2).join(".");
+}, me = (r, o) => {
   try {
-    const i = new URL(t), d = new URL(s);
-    return i.protocol !== d.protocol ? !0 : se(i.hostname) !== se(d.hostname);
+    const c = new URL(r), a = new URL(o);
+    return c.protocol !== a.protocol ? !0 : oe(c.hostname) !== oe(a.hostname);
   } catch {
     return !0;
   }
-}, ge = (t, { onBlocked: s, onClosed: i }) => {
-  const d = window.open(
-    t.authUrl,
+}, he = (r, { onBlocked: o, onClosed: c }) => {
+  const a = window.open(
+    r.authUrl,
     "mm-embed-auth",
     "popup,width=600,height=700"
   );
-  if (!d)
-    return s(), () => {
+  if (!a)
+    return o(), () => {
     };
-  const f = setInterval(() => {
-    d.closed && (clearInterval(f), i());
+  const p = setInterval(() => {
+    a.closed && (clearInterval(p), c());
   }, 1e3);
-  return () => clearInterval(f);
-}, ce = ({ children: t, launcher: s, broker: i }) => {
-  const d = H(Y), [f, b] = C({}), [B, I] = C({}), [M, _] = C({}), [A, y] = C({}), W = R(M);
-  W.current = M;
-  const E = R(f);
-  E.current = f;
-  const L = R(null), K = R({}), O = R({}), q = R({}), j = R(i);
-  j.current = i;
-  const z = h((e) => {
-    const n = O.current[e];
-    if (!n)
+  return () => clearInterval(p);
+}, ue = ({ children: r, launcher: o, broker: c }) => {
+  const a = Z(Y), [p, m] = M({}), [L, T] = M({}), [y, d] = M({}), [I, C] = M({}), v = R(y);
+  v.current = y;
+  const b = R(p);
+  b.current = p;
+  const $ = R(null), G = R({}), O = R({}), j = R({}), P = R(c);
+  P.current = c;
+  const A = g((e) => {
+    const t = O.current[e];
+    if (!t)
       return;
-    const r = (l) => !l[e] || l[e].clientId ? l : { ...l, [e]: { ...l[e], clientId: n } };
-    b(r), y(r);
-  }, []), c = h(
-    (e, n) => {
-      e && (y((r) => r[e] ? r : {
-        ...r,
-        [e]: { origin: e, reason: n, clientId: O.current[e] || null }
-      }), z(e));
+    const n = (i) => !i[e] || i[e].clientId ? i : { ...i, [e]: { ...i[e], clientId: t } };
+    m(n), C(n);
+  }, []), u = g(
+    (e, t) => {
+      e && (C((n) => n[e] ? n : {
+        ...n,
+        [e]: { origin: e, reason: t, clientId: O.current[e] || null }
+      }), A(e));
     },
-    [z]
-  ), u = h(
-    (e, { v2: n = !1, origin: r = null } = {}) => {
-      r && (n && W.current[r] || (b((l) => l[r] ? l : {
-        ...l,
-        [r]: {
-          origin: r,
+    [A]
+  ), l = g(
+    (e, { v2: t = !1, origin: n = null } = {}) => {
+      n && (t && v.current[n] || (m((i) => i[n] ? i : {
+        ...i,
+        [n]: {
+          origin: n,
           authUrl: e.authUrl,
           silentUrl: e.silentUrl || null,
           // v2 entries try the invisible silent resolver first — but only on a host that can
           // frame login (https). Otherwise (and for legacy signals) go straight to interactive,
           // so an http host doesn't wait out a silent frame that can never load login.
-          status: n && j.current ? "broker" : n && e.silentUrl && X ? "silent" : "interactive",
-          v2: n,
+          status: t && P.current ? "broker" : t && e.silentUrl && X ? "silent" : "interactive",
+          v2: t,
           // v1.9: the scope the guest asked for; forwarded verbatim to the broker.
           scope: e.scope || null,
-          acceptsCredentials: q.current[r] || null,
+          acceptsCredentials: j.current[n] || null,
           consent: null,
           error: null,
           // clientId from the request payload (v2) or the cached init (legacy);
           // the host resolves the display name from it.
-          clientId: e.clientId || O.current[r] || null,
+          clientId: e.clientId || O.current[n] || null,
           popupBlocked: !1
         }
-      }), z(r)));
+      }), A(n)));
     },
-    [z]
-  ), o = h((e) => {
-    b((n) => {
-      if (!n[e])
-        return n;
-      const r = { ...n };
-      return delete r[e], r;
+    [A]
+  ), s = g((e) => {
+    m((t) => {
+      if (!t[e])
+        return t;
+      const n = { ...t };
+      return delete n[e], n;
     });
-  }, []), a = h(
+  }, []), f = g(
     (e) => {
-      e && (o(e), I((n) => ({
-        ...n,
-        [e]: (n[e] || 0) + 1
+      e && (s(e), T((t) => ({
+        ...t,
+        [e]: (t[e] || 0) + 1
       })));
     },
-    [o]
-  ), p = h((e) => {
-    b((n) => !n[e] || n[e].status === "interactive" ? n : {
-      ...n,
-      [e]: { ...n[e], status: "interactive" }
+    [s]
+  ), x = g((e) => {
+    m((t) => !t[e] || t[e].status === "interactive" ? t : {
+      ...t,
+      [e]: { ...t[e], status: "interactive" }
     });
-  }, []), w = h(
+  }, []), z = g(
     (e) => {
-      o(e.origin);
+      s(e.origin);
     },
-    [o]
-  ), $ = h(
-    (e, n) => {
-      const r = re(e, n);
-      if (r) {
-        if (pe(r, window.location.origin)) {
-          c(r, "cross-site-legacy");
+    [s]
+  ), S = g(
+    (e, t) => {
+      const n = ne(e, t);
+      if (n) {
+        if (me(n, window.location.origin)) {
+          u(n, "cross-site-legacy");
           return;
         }
-        u(e, { origin: r });
+        l(e, { origin: n });
       }
     },
-    [u, c]
+    [l, u]
   );
-  k(() => {
-    if (!d)
+  w(() => {
+    if (!a)
       return;
     const e = [
       // `init` carries the app's OAuth clientId. Cache it by the ATTESTED app
@@ -147,168 +147,168 @@ const Y = ie(null), J = ie({
       // signals, so it is usually cached by the time an entry is created. The
       // clientId is only a lookup key: the host resolves the display name from
       // it, and a broker binds it to the attested origin server-side.
-      d.addListener("*", "init", (n, r) => {
-        r != null && r.origin && (n != null && n.clientId) && (O.current[r.origin] = n.clientId, z(r.origin)), r != null && r.origin && Array.isArray(n == null ? void 0 : n.acceptsCredentials) && (q.current[r.origin] = n.acceptsCredentials);
+      a.addListener("*", "init", (t, n) => {
+        n != null && n.origin && (t != null && t.clientId) && (O.current[n.origin] = t.clientId, A(n.origin)), n != null && n.origin && Array.isArray(t == null ? void 0 : t.acceptsCredentials) && (j.current[n.origin] = t.acceptsCredentials);
       }),
-      d.addListener("*", "authorize", $),
-      d.addListener("*", "login", $),
-      d.addListener(
+      a.addListener("*", "authorize", S),
+      a.addListener("*", "login", S),
+      a.addListener(
         "*",
         "credential-request",
-        (n, r) => u(n, { v2: !0, origin: re(n, r) })
+        (t, n) => l(t, { v2: !0, origin: ne(t, n) })
       )
     ];
-    return () => e.forEach((n) => n());
-  }, [d, $, u, z]), k(() => {
-    const e = (n) => {
-      const r = n == null ? void 0 : n.data;
-      if (!r || r.type !== "authorized" && r.type !== "authorize-failed")
+    return () => e.forEach((t) => t());
+  }, [a, S, l, A]), w(() => {
+    const e = (t) => {
+      const n = t == null ? void 0 : t.data;
+      if (!n || n.type !== "authorized" && n.type !== "authorize-failed")
         return;
-      const l = Q(r.authUrl);
-      if (!(!l || n.origin !== l)) {
-        if (r.type === "authorized") {
-          if (r.accessToken) {
-            if (!E.current[l])
+      const i = Q(n.authUrl);
+      if (!(!i || t.origin !== i)) {
+        if (n.type === "authorized") {
+          if (n.accessToken) {
+            if (!b.current[i])
               return;
-            _((g) => ({
-              ...g,
-              [l]: ne({ accessToken: r.accessToken })
-            })), o(l);
+            d((h) => ({
+              ...h,
+              [i]: re({ accessToken: n.accessToken })
+            })), s(i);
           } else
-            a(l);
+            f(i);
           return;
         }
-        p(l);
+        x(i);
       }
     };
     return window.addEventListener("message", e), () => window.removeEventListener("message", e);
-  }, [o, a, p]);
-  const U = h(
-    (e, n) => {
-      const r = e == null ? void 0 : e.origin, l = ne(n);
-      !r || !l || (_((g) => ({ ...g, [r]: l })), o(r));
+  }, [s, f, x]);
+  const _ = g(
+    (e, t) => {
+      const n = e == null ? void 0 : e.origin, i = re(t);
+      !n || !i || (d((h) => ({ ...h, [n]: i })), s(n));
     },
-    [o]
-  ), x = h((e, n) => {
-    b((r) => r[e] ? { ...r, [e]: { ...r[e], ...n } } : r);
-  }, []), S = h(
-    async (e, { approve: n } = {}) => {
-      const r = j.current, { origin: l } = e;
-      let g;
+    [s]
+  ), k = g((e, t) => {
+    m((n) => n[e] ? { ...n, [e]: { ...n[e], ...t } } : n);
+  }, []), F = g(
+    async (e, { approve: t } = {}) => {
+      const n = P.current, { origin: i } = e;
+      let h;
       try {
-        g = await r(
-          { origin: l, clientId: e.clientId, scope: e.scope, authUrl: e.authUrl },
-          { approve: n }
+        h = await n(
+          { origin: i, clientId: e.clientId, scope: e.scope, authUrl: e.authUrl },
+          { approve: t }
         );
       } catch {
-        n ? x(l, { error: { reason: "broker_unavailable" } }) : x(l, {
+        t ? k(i, { error: { reason: "broker_unavailable" } }) : k(i, {
           status: e.silentUrl && X ? "silent" : "interactive"
         });
         return;
       }
-      if ((g == null ? void 0 : g.status) === 200 && g.credential) {
-        U(e, g.credential);
+      if ((h == null ? void 0 : h.status) === 200 && h.credential) {
+        _(e, h.credential);
         return;
       }
-      if ((g == null ? void 0 : g.status) === 409 && g.consentRequired) {
-        x(l, {
+      if ((h == null ? void 0 : h.status) === 409 && h.consentRequired) {
+        k(i, {
           status: "interactive",
           consent: {
-            client: g.client || null,
-            stepUp: !!g.stepUp,
-            scope: g.scope || e.scope
+            client: h.client || null,
+            stepUp: !!h.stepUp,
+            scope: h.scope || e.scope
           },
           error: null
         });
         return;
       }
-      const N = (g == null ? void 0 : g.error) || "broker_error";
-      if (!n && de.has(N)) {
-        x(l, {
+      const N = (h == null ? void 0 : h.error) || "broker_error";
+      if (!t && fe.has(N)) {
+        k(i, {
           status: e.silentUrl && X ? "silent" : "interactive"
         });
         return;
       }
-      if (n && N === "consent_denied") {
-        x(l, { error: null });
+      if (t && N === "consent_denied") {
+        k(i, { error: null });
         return;
       }
-      o(l), y((te) => ({
+      s(i), C((te) => ({
         ...te,
-        [l]: {
-          origin: l,
+        [i]: {
+          origin: i,
           reason: `broker:${N}`,
-          detail: g || null,
-          clientId: e.clientId || O.current[l] || null
+          detail: h || null,
+          clientId: e.clientId || O.current[i] || null
         }
       }));
     },
-    [U, x, o]
-  ), v = R({});
-  k(() => {
-    Object.values(f).forEach((e) => {
-      e.status !== "broker" || v.current[e.origin] || (v.current[e.origin] = !0, S(e).finally(() => {
-        delete v.current[e.origin];
+    [_, k, s]
+  ), q = R({});
+  w(() => {
+    Object.values(p).forEach((e) => {
+      e.status !== "broker" || q.current[e.origin] || (q.current[e.origin] = !0, F(e).finally(() => {
+        delete q.current[e.origin];
       }));
     });
-  }, [f, S]);
-  const F = h(
-    (e) => !j.current || !(e != null && e.consent) ? Promise.resolve() : S(e, { approve: !0 }),
-    [S]
+  }, [p, F]);
+  const B = g(
+    (e) => !P.current || !(e != null && e.consent) ? Promise.resolve() : F(e, { approve: !0 }),
+    [F]
   );
-  k(() => {
-    const e = K.current;
-    Object.values(f).forEach((n) => {
-      n.status === "silent" && !e[n.origin] && (e[n.origin] = setTimeout(() => {
-        delete e[n.origin], p(n.origin);
-      }, fe));
-    }), Object.keys(e).forEach((n) => {
-      (!f[n] || f[n].status !== "silent") && (clearTimeout(e[n]), delete e[n]);
+  w(() => {
+    const e = G.current;
+    Object.values(p).forEach((t) => {
+      t.status === "silent" && !e[t.origin] && (e[t.origin] = setTimeout(() => {
+        delete e[t.origin], x(t.origin);
+      }, pe));
+    }), Object.keys(e).forEach((t) => {
+      (!p[t] || p[t].status !== "silent") && (clearTimeout(e[t]), delete e[t]);
     });
-  }, [f, p]), k(() => () => {
-    L.current && L.current(), Object.values(K.current).forEach(clearTimeout);
+  }, [p, x]), w(() => () => {
+    $.current && $.current(), Object.values(G.current).forEach(clearTimeout);
   }, []);
-  const Z = h(
+  const D = g(
     (e) => {
-      L.current && (L.current(), L.current = null);
-      const n = s || ge;
-      L.current = n(e, {
+      $.current && ($.current(), $.current = null);
+      const t = o || he;
+      $.current = t(e, {
         onBlocked: () => {
-          b((r) => r[e.origin] ? {
-            ...r,
-            [e.origin]: { ...r[e.origin], popupBlocked: !0 }
-          } : r);
+          m((n) => n[e.origin] ? {
+            ...n,
+            [e.origin]: { ...n[e.origin], popupBlocked: !0 }
+          } : n);
         },
         onClosed: () => {
           if (e.v2) {
-            X && b((r) => !r[e.origin] || !r[e.origin].silentUrl ? r : {
-              ...r,
-              [e.origin]: { ...r[e.origin], status: "silent" }
+            X && m((n) => !n[e.origin] || !n[e.origin].silentUrl ? n : {
+              ...n,
+              [e.origin]: { ...n[e.origin], status: "silent" }
             });
             return;
           }
-          a(e.origin);
+          f(e.origin);
         }
       });
     },
-    [s, a]
-  ), G = {
+    [o, f]
+  ), H = {
     // Hosts render UI for interactive entries only; silent resolution is
     // invisible by design.
-    pending: Object.values(f).filter(
+    pending: Object.values(p).filter(
       (e) => e.status === "interactive"
     ),
-    authorize: Z,
-    approve: F,
-    complete: U,
-    dismiss: w,
-    originEpochs: B,
-    credentials: M,
-    unsupported: A
-  }, P = Object.values(f).filter(
+    authorize: D,
+    approve: B,
+    complete: _,
+    dismiss: z,
+    originEpochs: L,
+    credentials: y,
+    unsupported: I
+  }, W = Object.values(p).filter(
     (e) => e.status === "silent" && e.silentUrl
   );
-  return /* @__PURE__ */ m.createElement(J.Provider, { value: G }, t, P.map((e) => /* @__PURE__ */ m.createElement(
+  return /* @__PURE__ */ E.createElement(J.Provider, { value: H }, r, W.map((e) => /* @__PURE__ */ E.createElement(
     "iframe",
     {
       key: `mm-silent-auth-${e.origin}`,
@@ -320,9 +320,9 @@ const Y = ie(null), J = ie({
     }
   )));
 };
-ce.propTypes = {
-  children: T.node,
-  launcher: T.func,
+ue.propTypes = {
+  children: U.node,
+  launcher: U.func,
   /**
    * `async (request, { approve }) => result` where request =
    * `{ origin, clientId, scope, authUrl }` (origin is the zone-attested frame origin) and result
@@ -330,169 +330,169 @@ ce.propTypes = {
    * client }`, `{ status: 409, consentRequired: true, client: { name, hostname }, stepUp }`, or
    * `{ status, error }`. Provided only by hosts that are themselves first-party clients.
    */
-  broker: T.func
+  broker: U.func
 };
-const he = () => H(J), me = (t) => {
-  const { originEpochs: s } = H(J), i = Q(t);
-  return i && s[i] || 0;
-}, be = (t) => {
-  const { credentials: s } = H(J), i = Q(t);
-  return i && s[i] || null;
-}, Ee = (t) => {
-  const { unsupported: s } = H(J), i = Q(t);
-  return i && s[i] || null;
-}, we = ({ children: t, authorizationLauncher: s, credentialBroker: i }) => {
-  const [d, f] = C({}), [b, B] = C({}), I = R({}), M = R({}), _ = R({}), A = h((c, u) => {
-    var o;
-    return !!((o = _.current[c]) != null && o.has(u));
-  }, []), y = h((c, u, o) => {
-    f((a) => ({ ...a, [c]: { origin: u, frameRef: o } }));
-  }, []), W = h((c) => {
-    f((u) => {
-      const o = { ...u };
-      return delete o[c], o;
-    }), B((u) => {
-      const o = { ...u };
-      return delete o[c], o;
-    }), delete _.current[c];
+const ge = () => Z(J), be = (r) => {
+  const { originEpochs: o } = Z(J), c = Q(r);
+  return c && o[c] || 0;
+}, Ee = (r) => {
+  const { credentials: o } = Z(J), c = Q(r);
+  return c && o[c] || null;
+}, ke = (r) => {
+  const { unsupported: o } = Z(J), c = Q(r);
+  return c && o[c] || null;
+}, we = ({ children: r, authorizationLauncher: o, credentialBroker: c }) => {
+  const [a, p] = M({}), [m, L] = M({}), T = R({}), y = R({}), d = R({}), I = g((u, l) => {
+    var s;
+    return !!((s = d.current[u]) != null && s.has(l));
+  }, []), C = g((u, l, s) => {
+    p((f) => ({ ...f, [u]: { origin: l, frameRef: s } }));
+  }, []), v = g((u) => {
+    p((l) => {
+      const s = { ...l };
+      return delete s[u], s;
+    }), L((l) => {
+      const s = { ...l };
+      return delete s[u], s;
+    }), delete d.current[u];
   }, []);
-  k(() => {
-    const c = (o = [], a, p) => {
-      o.forEach((w) => w(a, p));
-    }, u = (o) => {
-      var S, v, F, Z, G, P, e;
-      if (!((S = o == null ? void 0 : o.data) != null && S.instanceId))
+  w(() => {
+    const u = (s = [], f, x) => {
+      s.forEach((z) => z(f, x));
+    }, l = (s) => {
+      var F, q, B, D, H, W, e;
+      if (!((F = s == null ? void 0 : s.data) != null && F.instanceId))
         return;
-      const { instanceId: a, type: p } = o.data, w = d[a], $ = (F = (v = w == null ? void 0 : w.frameRef) == null ? void 0 : v.current) == null ? void 0 : F.contentWindow;
-      if (!$ || o.source !== $ || o.origin !== w.origin)
+      const { instanceId: f, type: x } = s.data, z = a[f], S = (B = (q = z == null ? void 0 : z.frameRef) == null ? void 0 : q.current) == null ? void 0 : B.contentWindow;
+      if (!S || s.source !== S || s.origin !== z.origin)
         return;
-      const U = { origin: o.origin }, x = I.current;
-      if (p === "response") {
-        const { callbackId: n, response: r, error: l } = o.data, g = M.current[n];
-        g && (g(r, l), delete M.current[n]);
+      const _ = { origin: s.origin }, k = T.current;
+      if (x === "response") {
+        const { callbackId: t, response: n, error: i } = s.data, h = y.current[t];
+        h && (h(n, i), delete y.current[t]);
         return;
       }
-      if (p === "mark-registered") {
-        const { requestType: n } = o.data;
-        _.current[a] || (_.current[a] = /* @__PURE__ */ new Set()), _.current[a].add(n);
+      if (x === "mark-registered") {
+        const { requestType: t } = s.data;
+        d.current[f] || (d.current[f] = /* @__PURE__ */ new Set()), d.current[f].add(t);
         return;
       }
-      p === "ready" && B((n) => ({ ...n, [a]: !0 })), c((Z = x[a]) == null ? void 0 : Z[p], o.data, U), c((G = x["*"]) == null ? void 0 : G[p], o.data, U), c((P = x[a]) == null ? void 0 : P["*"], o.data, U), c((e = x["*"]) == null ? void 0 : e["*"], o.data, U);
+      x === "ready" && L((t) => ({ ...t, [f]: !0 })), u((D = k[f]) == null ? void 0 : D[x], s.data, _), u((H = k["*"]) == null ? void 0 : H[x], s.data, _), u((W = k[f]) == null ? void 0 : W["*"], s.data, _), u((e = k["*"]) == null ? void 0 : e["*"], s.data, _);
     };
-    return window.addEventListener("message", u), () => {
-      window.removeEventListener("message", u);
+    return window.addEventListener("message", l), () => {
+      window.removeEventListener("message", l);
     };
-  }, [d]);
-  const E = h(
-    (c, u, o) => {
-      var p, w;
-      const a = d[c];
-      if (!a) {
-        console.warn(`Origin not set for id: ${c}. Unable to send message.`);
+  }, [a]);
+  const b = g(
+    (u, l, s) => {
+      var x, z;
+      const f = a[u];
+      if (!f) {
+        console.warn(`Origin not set for id: ${u}. Unable to send message.`);
         return;
       }
-      (w = (p = a == null ? void 0 : a.frameRef) == null ? void 0 : p.current) != null && w.contentWindow && a.frameRef.current.contentWindow.postMessage(
-        { type: u, ...o, instanceId: c },
-        a.origin
+      (z = (x = f == null ? void 0 : f.frameRef) == null ? void 0 : x.current) != null && z.contentWindow && f.frameRef.current.contentWindow.postMessage(
+        { type: l, ...s, instanceId: u },
+        f.origin
       );
     },
-    [d]
-  ), L = R(0), K = h(() => `${Date.now()}-${++L.current}`, []), O = h(
-    async (c, u, o = {}) => new Promise((a, p) => {
-      const w = K(), $ = (U, x) => {
-        delete M.current[w], x ? p(x) : a(U);
+    [a]
+  ), $ = R(0), G = g(() => `${Date.now()}-${++$.current}`, []), O = g(
+    async (u, l, s = {}) => new Promise((f, x) => {
+      const z = G(), S = (_, k) => {
+        delete y.current[z], k ? x(k) : f(_);
       };
-      M.current[w] = $, E(c, "request", { callbackId: w, requestType: u, data: o });
+      y.current[z] = S, b(u, "request", { callbackId: z, requestType: l, data: s });
     }),
-    [E]
-  ), q = h(
-    (c, u) => {
-      E(c, "load-options", u);
+    [b]
+  ), j = g(
+    (u, l) => {
+      b(u, "load-options", l);
     },
-    [E]
-  ), j = h(
-    (c, u) => {
-      E(c, "validate", u);
+    [b]
+  ), P = g(
+    (u, l) => {
+      b(u, "validate", l);
     },
-    [E]
-  ), z = le(
+    [b]
+  ), A = le(
     () => ({
-      registerFrame: y,
-      unregisterFrame: W,
-      sendMessage: E,
+      registerFrame: C,
+      unregisterFrame: v,
+      sendMessage: b,
       sendRequest: O,
-      loadOptions: q,
-      validate: j,
-      hasHandler: A,
-      readyFrames: b,
-      addListener: (c, u, o) => (I.current[c] || (I.current[c] = {}), I.current[c][u] || (I.current[c][u] = []), I.current[c][u].push(o), () => {
-        I.current[c][u] = I.current[c][u].filter((a) => a !== o);
+      loadOptions: j,
+      validate: P,
+      hasHandler: I,
+      readyFrames: m,
+      addListener: (u, l, s) => (T.current[u] || (T.current[u] = {}), T.current[u][l] || (T.current[u][l] = []), T.current[u][l].push(s), () => {
+        T.current[u][l] = T.current[u][l].filter((f) => f !== s);
       })
     }),
     [
-      y,
-      W,
-      E,
+      C,
+      v,
+      b,
       O,
-      q,
       j,
-      A,
-      b
+      P,
+      I,
+      m
     ]
   );
-  return /* @__PURE__ */ m.createElement(Y.Provider, { value: z }, /* @__PURE__ */ m.createElement(ce, { launcher: s, broker: i }, t));
-}, V = (t, s, i) => {
-  const d = H(Y);
-  if (d === null)
+  return /* @__PURE__ */ E.createElement(Y.Provider, { value: A }, /* @__PURE__ */ E.createElement(ue, { launcher: o, broker: c }, r));
+}, V = (r, o, c) => {
+  const a = Z(Y);
+  if (a === null)
     throw new Error(
       "useEmbeddedEffect must be used within a MMEmbeddableZoneProvider"
     );
-  const f = R(i);
-  k(() => {
-    f.current = i;
-  }, [i]), k(() => {
-    if (!(!t || !s)) {
-      if (s.startsWith("key:")) {
-        const b = s.substring(4);
-        return d.readyFrames[t] && d.sendMessage(t, "subscribe-key", { keyChord: b }), d.addListener(
-          t,
-          `key-pressed:${b}`,
-          (...I) => f.current(...I)
+  const p = R(c);
+  w(() => {
+    p.current = c;
+  }, [c]), w(() => {
+    if (!(!r || !o)) {
+      if (o.startsWith("key:")) {
+        const m = o.substring(4);
+        return a.readyFrames[r] && a.sendMessage(r, "subscribe-key", { keyChord: m }), a.addListener(
+          r,
+          `key-pressed:${m}`,
+          (...T) => p.current(...T)
         );
       }
-      return d.addListener(
-        t,
-        s,
-        (...b) => f.current(...b)
+      return a.addListener(
+        r,
+        o,
+        (...m) => p.current(...m)
       );
     }
-  }, [d, t, s]);
+  }, [a, r, o]);
 };
 we.propTypes = {
-  children: T.node.isRequired,
+  children: U.node.isRequired,
   /**
    * Optional interactive-step launcher for embedded authorizations,
    * `(entry, { onBlocked, onClosed }) => cleanup`. Defaults to a top-level
    * popup. Hosts that cannot open windows (Android WebView shells) drive
    * their own UI from useEmbeddedAuthorizations() instead.
    */
-  authorizationLauncher: T.func,
+  authorizationLauncher: U.func,
   /**
    * Optional credential broker for hosts that are first-party MachineMetrics clients
    * (`async (request, { approve }) => result`, see EmbeddedAuthorizationManager). When present,
    * v2 credential requests are brokered server-side (no popup, no hidden frame) and consent is
    * rendered natively by the host from the broker's `client` identity.
    */
-  credentialBroker: T.func
+  credentialBroker: U.func
 };
-const ee = D.default || D, ke = 1e4, Re = "credentials", oe = (t, s) => `${t}/mm-embedded-interop?id=${encodeURIComponent(s)}&origin=${encodeURIComponent(
+const ee = K.default || K, Re = 1e4, xe = "credentials", Te = (r, o) => `${r}/mm-embedded-interop?id=${encodeURIComponent(o)}&origin=${encodeURIComponent(
   window.location.origin
-)}&caps=${Re}`, xe = ee.iframe`
+)}&caps=${xe}`, Ie = ee.iframe`
   width: 100%;
   height: 100%;
   border: none;
-  visibility: ${(t) => t.$isReady ? "visible" : "hidden"};
-`, Te = ee.div`
+  visibility: ${(r) => r.$isReady ? "visible" : "hidden"};
+`, ze = ee.div`
   width: 100%;
   height: 100%;
   display: flex;
@@ -505,172 +505,170 @@ const ee = D.default || D, ke = 1e4, Re = "credentials", oe = (t, s) => `${t}/mm
   text-align: center;
   color: #555;
   font-size: 14px;
-`, Ie = (t) => {
-  const s = t && t.origin || "This app", i = t && t.reason || "";
-  switch (i) {
+`, Ue = (r) => {
+  const o = r && r.origin || "This app", c = r && r.reason || "";
+  switch (c) {
     case "broker:scope_above_ceiling":
       return {
-        title: `${s} can’t be authorized here`,
+        title: `${o} can’t be authorized here`,
         detail: "It asks for permissions your role doesn’t have."
       };
     case "broker:origin_mismatch":
     case "broker:unknown_client":
       return {
-        title: `${s} can’t be authorized here`,
+        title: `${o} can’t be authorized here`,
         detail: "It isn’t registered to run at this address."
       };
     case "broker:cross_company_principal":
       return {
-        title: `${s} can’t be authorized here`,
+        title: `${o} can’t be authorized here`,
         detail: "It can’t be authorized for this account."
       };
     default:
-      return i.startsWith("broker:") ? {
-        title: `${s} can’t be authorized here`,
+      return c.startsWith("broker:") ? {
+        title: `${o} can’t be authorized here`,
         detail: "Authorization was refused."
       } : {
-        title: `${s} can’t be embedded here`,
+        title: `${o} can’t be embedded here`,
         detail: "It needs an update to support embedding from a different domain."
       };
   }
-}, ue = ({ entry: t }) => {
-  const s = Ie(t);
-  return /* @__PURE__ */ m.createElement(Te, { "data-reason": t && t.reason || void 0 }, /* @__PURE__ */ m.createElement("div", { style: { fontWeight: 600 } }, s.title), /* @__PURE__ */ m.createElement("div", { style: { fontSize: 12, color: "#888" } }, s.detail));
+}, ae = ({ entry: r }) => {
+  const o = Ue(r);
+  return /* @__PURE__ */ E.createElement(ze, { "data-reason": r && r.reason || void 0 }, /* @__PURE__ */ E.createElement("div", { style: { fontWeight: 600 } }, o.title), /* @__PURE__ */ E.createElement("div", { style: { fontSize: 12, color: "#888" } }, o.detail));
 };
-ue.propTypes = {
-  entry: T.shape({
-    origin: T.string,
-    name: T.string,
-    reason: T.string,
-    detail: T.object
+ae.propTypes = {
+  entry: U.shape({
+    origin: U.string,
+    name: U.string,
+    reason: U.string,
+    detail: U.object
   })
 };
-const Ue = ee.div`
+const ye = ee.div`
   height: 100%;
   display: flex;
   flex: 1;
   align-items: center;
   justify-content: center;
-`, ze = () => /* @__PURE__ */ m.createElement(Ue, null, /* @__PURE__ */ m.createElement("div", { style: { textAlign: "center" } }, "This app couldn’t be loaded as an embeddable widget.")), Ce = ({
-  id: t,
-  src: s,
-  path: i,
-  onInit: d = () => {
+`, Ce = () => /* @__PURE__ */ E.createElement(ye, null, /* @__PURE__ */ E.createElement("div", { style: { textAlign: "center" } }, "This app couldn’t be loaded as an embeddable widget.")), Ae = ({
+  id: r,
+  src: o,
+  path: c,
+  onInit: a = () => {
   },
-  onTimeout: f,
-  context: b = {},
-  params: B = {},
-  renderUnsupported: I,
-  renderTimeout: M,
-  ..._
+  onTimeout: p,
+  context: m = {},
+  params: L = {},
+  renderUnsupported: T,
+  renderTimeout: y,
+  ...d
 }) => {
-  if ("isConfiguring" in _)
+  if ("isConfiguring" in d)
     return console.error(
       "isConfiguring must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  if ("colorMode" in b)
+  if ("colorMode" in m)
     return console.error(
       "colorMode must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  if ("isFullScreen" in b)
+  if ("isFullScreen" in m)
     return console.error(
       "isFullScreen must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  const A = R(), [y, W] = C(), [E, L] = C(0), [K, O] = C(!1), [q, j] = C(!1), z = me(s), c = be(s), u = Ee(s);
-  k(() => {
-    z > 0 && L(0);
-  }, [z]);
-  const { registerFrame: o, unregisterFrame: a, sendMessage: p } = H(
+  const I = R(), [C, v] = M(), [b, $] = M(0), [G, O] = M(!1), [j, P] = M(!1), A = be(o), u = Ee(o), l = ke(o), [s, f] = M(0), [x, z] = M(null), { registerFrame: S, unregisterFrame: _, sendMessage: k } = Z(
     Y
-  ), [w, $] = C(), U = R(), x = R(f), S = R(d), v = R(!1);
-  k(() => {
-    x.current = f;
-  }, [f]), k(() => {
-    S.current = d;
-  }, [d]), k(() => {
-    E && p(t, "set-context", {
+  ), [F, q] = M(), B = R(), D = R(p), H = R(a), W = R(!1), e = g(() => {
+    W.current = !1, clearTimeout(B.current), $(0), O(!1), P(!1), z(null);
+  }, []);
+  w(() => {
+    (A > 0 || s > 0) && e();
+  }, [A, s, e]), w(() => {
+    D.current = p;
+  }, [p]), w(() => {
+    H.current = a;
+  }, [a]), w(() => {
+    b && k(r, "set-context", {
       context: {
-        ...b
+        ...m
       }
     });
-  }, [b, t, E]), k(() => {
-    E && p(t, "set-params", { params: B });
-  }, [B, t, E]), k(() => {
-    i !== void 0 && $((i == null ? void 0 : i.indexOf("/")) === 0 ? i : `/${i}`);
-  }, [i]), k(() => {
-    w === void 0 || !E || p(t, "navigate", { path: w });
-  }, [w, E, t, p]), k(() => {
-    if (!s || !t || !A)
+  }, [m, r, b]), w(() => {
+    b && k(r, "set-params", { params: L });
+  }, [L, r, b]), w(() => {
+    c !== void 0 && q((c == null ? void 0 : c.indexOf("/")) === 0 ? c : `/${c}`);
+  }, [c]), w(() => {
+    F === void 0 || !b || k(r, "navigate", { path: F });
+  }, [F, b, r, k]), w(() => {
+    if (!o || !r || !I)
       return;
-    const e = new URL(s);
-    return o(t, e.origin, A), S.current(), W(oe(e.origin, t)), () => {
-      a(t);
+    e();
+    const i = new URL(o);
+    return S(r, i.origin, I), H.current(), v(Te(i.origin, r)), () => {
+      _(r);
     };
-  }, [s, t, o, A]), k(() => {
-    if (!(!y || v.current))
-      return U.current = setTimeout(() => {
-        O(!0), x.current && x.current();
-      }, ke), () => clearTimeout(U.current);
-  }, [y]);
-  const F = h(() => {
-    v.current = !0, clearTimeout(U.current), O(!1);
-  }, []), [Z, G] = C(null);
-  V(t, "init", (e) => {
-    F(), Array.isArray(e == null ? void 0 : e.acceptsCredentials) && G(e.acceptsCredentials);
-  }), V(t, "authorize", F), V(t, "login", F), V(t, "credential-request", () => {
-    F(), j(!0);
-  }), k(() => {
-    if (!q || !c)
+  }, [o, r, S, I, e]), w(() => {
+    if (!(!C || W.current))
+      return B.current = setTimeout(() => {
+        O(!0), D.current && D.current();
+      }, Re), () => clearTimeout(B.current);
+  }, [C, o, A, s]);
+  const t = g(() => {
+    W.current = !0, clearTimeout(B.current), O(!1);
+  }, []);
+  V(r, "init", (i) => {
+    t(), Array.isArray(i == null ? void 0 : i.acceptsCredentials) && z(i.acceptsCredentials);
+  }), V(r, "authorize", t), V(r, "login", t), V(r, "credential-request", () => {
+    t(), P(!0);
+  }), w(() => {
+    if (!j || !u)
       return;
-    const e = Z;
-    if (Array.isArray(e) && !e.includes(c.kind))
+    const i = x;
+    if (Array.isArray(i) && !i.includes(u.kind))
       return;
-    const n = c.kind === "access_token" ? { accessToken: c.accessToken } : {};
-    p(t, "credential", { ...n, credential: c });
-  }, [q, c, Z, t, p]), V(t, "ready", () => {
-    F(), L((e) => e + 1);
+    const h = u.kind === "access_token" ? { accessToken: u.accessToken } : {};
+    k(r, "credential", { ...h, credential: u });
+  }, [j, u, x, r, k]), V(r, "ready", () => {
+    t(), $((i) => i + 1);
   });
-  const P = R();
-  return V(t, "heartbeat", () => {
-    P.current && clearTimeout(P.current), P.current = setTimeout(() => {
-      if (A.current) {
-        const e = new URL(s);
-        A.current.src = oe(e.origin, t);
-      }
+  const n = R();
+  return V(r, "heartbeat", () => {
+    n.current && clearTimeout(n.current), n.current = setTimeout(() => {
+      f((i) => i + 1);
     }, 6e3);
-  }), k(() => () => {
-    P.current && clearTimeout(P.current);
-  }, []), u ? I ? I(u) : /* @__PURE__ */ m.createElement(ue, { entry: u }) : K && !E ? M ? M() : /* @__PURE__ */ m.createElement(ze, null) : /* @__PURE__ */ m.createElement(
-    xe,
+  }), w(() => () => {
+    n.current && clearTimeout(n.current);
+  }, []), l ? T ? T(l) : /* @__PURE__ */ E.createElement(ae, { entry: l }) : G && !b ? y ? y() : /* @__PURE__ */ E.createElement(Ce, null) : /* @__PURE__ */ E.createElement(
+    Ie,
     {
-      key: `auth-epoch-${z}`,
-      $isReady: E,
-      ref: A,
-      src: y,
-      ..._
+      key: `auth-epoch-${A}-frame-${s}`,
+      $isReady: b,
+      ref: I,
+      src: C,
+      ...d
     }
   );
 };
-Ce.propTypes = {
-  id: T.string,
-  src: T.string.isRequired,
-  path: T.string,
-  onInit: T.func,
-  onTimeout: T.func,
+Ae.propTypes = {
+  id: U.string,
+  src: U.string.isRequired,
+  path: U.string,
+  onInit: U.func,
+  onTimeout: U.func,
   /**
    * Optional host-styled renderer for the structurally-unsupported embed
    * state (legacy app on a cross-site origin), `(entry) => ReactNode`. Falls
    * back to a minimal built-in placeholder.
    */
-  renderUnsupported: T.func,
+  renderUnsupported: U.func,
   /**
    * Optional host-styled renderer for the handshake-timeout failure state
    * (the app is not embeddable / could not load), `() => ReactNode`. Falls
    * back to a minimal centered message.
    */
-  renderTimeout: T.func
+  renderTimeout: U.func
 };
-const Me = D.div`
+const Me = K.div`
   position: fixed;
   inset: 0;
   background: rgba(0, 0, 0, 0.45);
@@ -678,7 +676,7 @@ const Me = D.div`
   align-items: center;
   justify-content: center;
   z-index: 10000;
-`, _e = D.div`
+`, Oe = K.div`
   background: #fff;
   border-radius: 8px;
   box-shadow: 0 4px 24px rgba(0, 0, 0, 0.2);
@@ -687,13 +685,13 @@ const Me = D.div`
   max-width: calc(100vw - 32px);
   font-family: sans-serif;
   color: #222;
-`, Ae = D.div`
+`, _e = K.div`
   display: flex;
   align-items: center;
   justify-content: space-between;
   padding: 10px 0;
   gap: 16px;
-`, Le = D.button`
+`, Le = K.button`
   background: #16a500;
   color: #fff;
   border: none;
@@ -702,28 +700,70 @@ const Me = D.div`
   font-size: 14px;
   cursor: pointer;
   white-space: nowrap;
-`, Oe = D.p`
+`, $e = K.p`
   color: #b3261e;
   font-size: 13px;
   margin: 4px 0 0;
-`, Fe = () => {
-  const { pending: t, authorize: s } = he();
-  return t.length === 0 ? null : /* @__PURE__ */ m.createElement(Me, null, /* @__PURE__ */ m.createElement(_e, null, /* @__PURE__ */ m.createElement("h3", { style: { margin: "0 0 8px" } }, "Authorization Required"), /* @__PURE__ */ m.createElement("p", { style: { margin: "0 0 12px", fontSize: 14, color: "#555" } }, "The following apps need you to sign in and authorize them before they can load."), t.map((i) => /* @__PURE__ */ m.createElement("div", { key: i.origin }, /* @__PURE__ */ m.createElement(Ae, null, /* @__PURE__ */ m.createElement("div", null, /* @__PURE__ */ m.createElement("div", { style: { fontWeight: 600 } }, i.origin)), /* @__PURE__ */ m.createElement(Le, { onClick: () => s(i) }, "Authorize")), i.popupBlocked && /* @__PURE__ */ m.createElement(Oe, null, "The sign-in window was blocked. Allow popups for this site, then try again.")))));
+`, se = 'button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])';
+let ie = !1;
+const Pe = () => {
+  const { pending: r, authorize: o, dismiss: c } = ge(), a = r.filter((d) => !d.consent), p = r.length - a.length, m = R(null), L = R(null), T = a.length > 0;
+  if (w(() => {
+    p > 0 && !ie && (ie = !0, console.error(
+      "[mm-react-embeddable] EmbeddedAuthorizationPrompt received a brokered consent entry. A host with a credentialBroker must render its own consent UI (useEmbeddedAuthorizations: approve/dismiss); this default prompt only handles the popup path."
+    ));
+  }, [p]), w(() => {
+    if (!T || !m.current)
+      return;
+    L.current = document.activeElement;
+    const d = m.current.querySelector(se);
+    return d && d.focus(), () => {
+      const I = L.current;
+      I && typeof I.focus == "function" && I.focus();
+    };
+  }, [T]), !T)
+    return null;
+  const y = (d) => {
+    if (d.key === "Escape") {
+      d.preventDefault(), a.forEach((b) => c(b));
+      return;
+    }
+    if (d.key !== "Tab" || !m.current)
+      return;
+    const I = Array.from(m.current.querySelectorAll(se));
+    if (I.length === 0)
+      return;
+    const C = I[0], v = I[I.length - 1];
+    d.shiftKey && document.activeElement === C ? (d.preventDefault(), v.focus()) : !d.shiftKey && document.activeElement === v && (d.preventDefault(), C.focus());
+  };
+  return /* @__PURE__ */ E.createElement(Me, null, /* @__PURE__ */ E.createElement(
+    Oe,
+    {
+      ref: m,
+      role: "dialog",
+      "aria-modal": "true",
+      "aria-labelledby": "mm-embedded-authorization-title",
+      onKeyDown: y
+    },
+    /* @__PURE__ */ E.createElement("h3", { id: "mm-embedded-authorization-title", style: { margin: "0 0 8px" } }, "Authorization Required"),
+    /* @__PURE__ */ E.createElement("p", { style: { margin: "0 0 12px", fontSize: 14, color: "#555" } }, "The following apps need you to sign in and authorize them before they can load."),
+    a.map((d) => /* @__PURE__ */ E.createElement("div", { key: d.origin }, /* @__PURE__ */ E.createElement(_e, null, /* @__PURE__ */ E.createElement("div", null, /* @__PURE__ */ E.createElement("div", { style: { fontWeight: 600 } }, d.origin)), /* @__PURE__ */ E.createElement(Le, { onClick: () => o(d) }, "Authorize")), d.popupBlocked && /* @__PURE__ */ E.createElement($e, null, "The sign-in window was blocked. Allow popups for this site, then try again.")))
+  ));
 };
 export {
-  ae as CREDENTIAL_KIND_ACCESS_TOKEN,
+  de as CREDENTIAL_KIND_ACCESS_TOKEN,
   J as EmbeddedAuthorizationContext,
-  Fe as EmbeddedAuthorizationPrompt,
-  Ce as MMEmbeddableZone,
+  Pe as EmbeddedAuthorizationPrompt,
+  Ae as MMEmbeddableZone,
   Y as MMEmbeddableZoneContext,
   we as MMEmbeddableZoneProvider,
-  pe as isCrossSite,
-  ne as normalizeCredential,
-  ge as popupAuthorizationLauncher,
-  Ie as unsupportedCopy,
-  he as useEmbeddedAuthorizations,
-  be as useEmbeddedCredential,
+  me as isCrossSite,
+  re as normalizeCredential,
+  he as popupAuthorizationLauncher,
+  Ue as unsupportedCopy,
+  ge as useEmbeddedAuthorizations,
+  Ee as useEmbeddedCredential,
   V as useEmbeddedEffect,
-  me as useEmbeddedOriginEpoch,
-  Ee as useEmbeddedUnsupported
+  be as useEmbeddedOriginEpoch,
+  ke as useEmbeddedUnsupported
 };