@machinemetrics/mm-react-embeddable 2.0.0-1 → 2.0.0-2

package/README.md

@@ -1,3 +1,16 @@
 # mm-react-embeddable
 
 Components and hooks for embedding mm-apps into an interface. Primarily used for sandbox testing the creation of custom dashboard widgets.
+
+## Consent UI
+
+`useEmbeddedAuthorizations()` exposes the pending entries and the actions on them
+(`authorize` for the popup path, `approve`/`dismiss` for brokered entries). Every
+first-party host that passes a `credentialBroker` to `MMEmbeddableZoneProvider`
+renders its own consent UI over that hook (converge, OperatorView and operator-kiosk
+each have one).
+
+`EmbeddedAuthorizationPrompt` is the default **popup-only** prompt for hosts that
+cannot broker, such as an http development host (the mmdev playground). It renders
+legacy entries with an Authorize button that opens the OAuth popup, ignores brokered
+entries, and logs a one-time error in that case so the missing host UI is noticed.

package/dist/mm-react-embeddable.cjs.js

@@ -1,9 +1,9 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("react"),be=require("prop-types"),he=require("styled-components"),Q=n=>n&&n.__esModule?n:{default:n},h=Q(t),R=Q(be),Z=Q(he),K=t.createContext(null),H=t.createContext({pending:[],authorize:()=>{},approve:()=>{},complete:()=>{},dismiss:()=>{},originEpochs:{},credentials:{},unsupported:{}}),ne="access_token",J=n=>n?n.kind?n:n.accessToken?{kind:ne,accessToken:n.accessToken,expiresAt:n.expiresAt||null}:null:null,me=new Set(["host_not_allowed","invalid_token","provider_unavailable"]),N=typeof window!="undefined"&&window.location.protocol==="https:",ge=8e3,G=n=>{try{return new URL(n).origin}catch{return null}},ee=(n,o)=>{const c=o==null?void 0:o.origin;return!c||G(n==null?void 0:n.authUrl)!==c?null:c},te=n=>{if(!n||/^\d{1,3}(?:\.\d{1,3}){3}$/.test(n)||n.includes(":"))return n;const o=n.split(".");return o.length<=2?n:o.slice(-2).join(".")},re=(n,o)=>{try{const c=new URL(n),f=new URL(o);return c.protocol!==f.protocol?!0:te(c.hostname)!==te(f.hostname)}catch{return!0}},se=(n,{onBlocked:o,onClosed:c})=>{const f=window.open(n.authUrl,"mm-embed-auth","popup,width=600,height=700");if(!f)return o(),()=>{};const b=setInterval(()=>{f.closed&&(clearInterval(b),c())},1e3);return()=>clearInterval(b)},oe=({children:n,launcher:o,broker:c})=>{const f=t.useContext(K),[b,g]=t.useState({}),[$,w]=t.useState({}),[z,_]=t.useState({}),[y,A]=t.useState({}),q=t.useRef(z);q.current=z;const E=t.useRef(b);E.current=b;const M=t.useRef(null),D=t.useRef({}),T=t.useRef({}),P=t.useRef({}),O=t.useRef(c);O.current=c;const x=t.useCallback(e=>{const r=T.current[e];if(!r)return;const s=i=>!i[e]||i[e].clientId?i:{...i,[e]:{...i[e],clientId:r}};g(s),A(s)},[]),a=t.useCallback((e,r)=>{e&&(A(s=>s[e]?s:{...s,[e]:{origin:e,reason:r,clientId:T.current[e]||null}}),x(e))},[x]),l=t.useCallback((e,{v2:r=!1,origin:s=null}={})=>{s&&(r&&q.current[s]||(g(i=>i[s]?i:{...i,[s]:{origin:s,authUrl:e.authUrl,silentUrl:e.silentUrl||null,status:r&&O.current?"broker":r&&e.silentUrl&&N?"silent":"interactive",v2:r,scope:e.scope||null,acceptsCredentials:P.current[s]||null,consent:null,error:null,clientId:e.clientId||T.current[s]||null,popupBlocked:!1}}),x(s)))},[x]),u=t.useCallback(e=>{g(r=>{if(!r[e])return r;const s={...r};return delete s[e],s})},[]),d=t.useCallback(e=>{e&&(u(e),w(r=>({...r,[e]:(r[e]||0)+1})))},[u]),k=t.useCallback(e=>{g(r=>!r[e]||r[e].status==="interactive"?r:{...r,[e]:{...r[e],status:"interactive"}})},[]),C=t.useCallback(e=>{u(e.origin)},[u]),S=t.useCallback((e,r)=>{const s=ee(e,r);if(s){if(re(s,window.location.origin)){a(s,"cross-site-legacy");return}l(e,{origin:s})}},[l,a]);t.useEffect(()=>{if(!f)return;const e=[f.addListener("*","init",(r,s)=>{s!=null&&s.origin&&(r!=null&&r.clientId)&&(T.current[s.origin]=r.clientId,x(s.origin)),s!=null&&s.origin&&Array.isArray(r==null?void 0:r.acceptsCredentials)&&(P.current[s.origin]=r.acceptsCredentials)}),f.addListener("*","authorize",S),f.addListener("*","login",S),f.addListener("*","credential-request",(r,s)=>l(r,{v2:!0,origin:ee(r,s)}))];return()=>e.forEach(r=>r())},[f,S,l,x]),t.useEffect(()=>{const e=r=>{const s=r==null?void 0:r.data;if(!s||s.type!=="authorized"&&s.type!=="authorize-failed")return;const i=G(s.authUrl);if(!(!i||r.origin!==i)){if(s.type==="authorized"){if(s.accessToken){if(!E.current[i])return;_(p=>({...p,[i]:J({accessToken:s.accessToken})})),u(i)}else d(i);return}k(i)}};return window.addEventListener("message",e),()=>window.removeEventListener("message",e)},[u,d,k]);const I=t.useCallback((e,r)=>{const s=e==null?void 0:e.origin,i=J(r);!s||!i||(_(p=>({...p,[s]:i})),u(s))},[u]),m=t.useCallback((e,r)=>{g(s=>s[e]?{...s,[e]:{...s[e],...r}}:s)},[]),U=t.useCallback(async(e,{approve:r}={})=>{const s=O.current,{origin:i}=e;let p;try{p=await s({origin:i,clientId:e.clientId,scope:e.scope,authUrl:e.authUrl},{approve:r})}catch{r?m(i,{error:{reason:"broker_unavailable"}}):m(i,{status:e.silentUrl&&N?"silent":"interactive"});return}if((p==null?void 0:p.status)===200&&p.credential){I(e,p.credential);return}if((p==null?void 0:p.status)===409&&p.consentRequired){m(i,{status:"interactive",consent:{client:p.client||null,stepUp:!!p.stepUp,scope:p.scope||e.scope},error:null});return}const V=(p==null?void 0:p.error)||"broker_error";if(!r&&me.has(V)){m(i,{status:e.silentUrl&&N?"silent":"interactive"});return}if(r&&V==="consent_denied"){m(i,{error:null});return}u(i),A(Y=>({...Y,[i]:{origin:i,reason:`broker:${V}`,detail:p||null,clientId:e.clientId||T.current[i]||null}}))},[I,m,u]),F=t.useRef({});t.useEffect(()=>{Object.values(b).forEach(e=>{e.status!=="broker"||F.current[e.origin]||(F.current[e.origin]=!0,U(e).finally(()=>{delete F.current[e.origin]}))})},[b,U]);const L=t.useCallback(e=>!O.current||!(e!=null&&e.consent)?Promise.resolve():U(e,{approve:!0}),[U]);t.useEffect(()=>{const e=D.current;Object.values(b).forEach(r=>{r.status==="silent"&&!e[r.origin]&&(e[r.origin]=setTimeout(()=>{delete e[r.origin],k(r.origin)},ge))}),Object.keys(e).forEach(r=>{(!b[r]||b[r].status!=="silent")&&(clearTimeout(e[r]),delete e[r])})},[b,k]),t.useEffect(()=>()=>{M.current&&M.current(),Object.values(D.current).forEach(clearTimeout)},[]);const v=t.useCallback(e=>{M.current&&(M.current(),M.current=null);const r=o||se;M.current=r(e,{onBlocked:()=>{g(s=>s[e.origin]?{...s,[e.origin]:{...s[e.origin],popupBlocked:!0}}:s)},onClosed:()=>{if(e.v2){N&&g(s=>!s[e.origin]||!s[e.origin].silentUrl?s:{...s,[e.origin]:{...s[e.origin],status:"silent"}});return}d(e.origin)}})},[o,d]),B={pending:Object.values(b).filter(e=>e.status==="interactive"),authorize:v,approve:L,complete:I,dismiss:C,originEpochs:$,credentials:z,unsupported:y},j=Object.values(b).filter(e=>e.status==="silent"&&e.silentUrl);return h.default.createElement(H.Provider,{value:B},n,j.map(e=>h.default.createElement("iframe",{key:`mm-silent-auth-${e.origin}`,src:e.silentUrl,title:`MachineMetrics silent authorization (${e.origin})`,"aria-hidden":"true",tabIndex:-1,style:{display:"none"}})))};oe.propTypes={children:R.default.node,launcher:R.default.func,broker:R.default.func};const ue=()=>t.useContext(H),ie=n=>{const{originEpochs:o}=t.useContext(H),c=G(n);return c&&o[c]||0},ce=n=>{const{credentials:o}=t.useContext(H),c=G(n);return c&&o[c]||null},ae=n=>{const{unsupported:o}=t.useContext(H),c=G(n);return c&&o[c]||null},le=({children:n,authorizationLauncher:o,credentialBroker:c})=>{const[f,b]=t.useState({}),[g,$]=t.useState({}),w=t.useRef({}),z=t.useRef({}),_=t.useRef({}),y=t.useCallback((a,l)=>{var u;return!!((u=_.current[a])!=null&&u.has(l))},[]),A=t.useCallback((a,l,u)=>{b(d=>({...d,[a]:{origin:l,frameRef:u}}))},[]),q=t.useCallback(a=>{b(l=>{const u={...l};return delete u[a],u}),$(l=>{const u={...l};return delete u[a],u}),delete _.current[a]},[]);t.useEffect(()=>{const a=(u=[],d,k)=>{u.forEach(C=>C(d,k))},l=u=>{var U,F,L,v,B,j,e;if(!((U=u==null?void 0:u.data)!=null&&U.instanceId))return;const{instanceId:d,type:k}=u.data,C=f[d],S=(L=(F=C==null?void 0:C.frameRef)==null?void 0:F.current)==null?void 0:L.contentWindow;if(!S||u.source!==S||u.origin!==C.origin)return;const I={origin:u.origin},m=w.current;if(k==="response"){const{callbackId:r,response:s,error:i}=u.data,p=z.current[r];p&&(p(s,i),delete z.current[r]);return}if(k==="mark-registered"){const{requestType:r}=u.data;_.current[d]||(_.current[d]=new Set),_.current[d].add(r);return}k==="ready"&&$(r=>({...r,[d]:!0})),a((v=m[d])==null?void 0:v[k],u.data,I),a((B=m["*"])==null?void 0:B[k],u.data,I),a((j=m[d])==null?void 0:j["*"],u.data,I),a((e=m["*"])==null?void 0:e["*"],u.data,I)};return window.addEventListener("message",l),()=>{window.removeEventListener("message",l)}},[f]);const E=t.useCallback((a,l,u)=>{var k,C;const d=f[a];if(!d){console.warn(`Origin not set for id: ${a}. Unable to send message.`);return}(C=(k=d==null?void 0:d.frameRef)==null?void 0:k.current)!=null&&C.contentWindow&&d.frameRef.current.contentWindow.postMessage({type:l,...u,instanceId:a},d.origin)},[f]),M=t.useRef(0),D=t.useCallback(()=>`${Date.now()}-${++M.current}`,[]),T=t.useCallback(async(a,l,u={})=>new Promise((d,k)=>{const C=D(),S=(I,m)=>{delete z.current[C],m?k(m):d(I)};z.current[C]=S,E(a,"request",{callbackId:C,requestType:l,data:u})}),[E]),P=t.useCallback((a,l)=>{E(a,"load-options",l)},[E]),O=t.useCallback((a,l)=>{E(a,"validate",l)},[E]),x=t.useMemo(()=>({registerFrame:A,unregisterFrame:q,sendMessage:E,sendRequest:T,loadOptions:P,validate:O,hasHandler:y,readyFrames:g,addListener:(a,l,u)=>(w.current[a]||(w.current[a]={}),w.current[a][l]||(w.current[a][l]=[]),w.current[a][l].push(u),()=>{w.current[a][l]=w.current[a][l].filter(d=>d!==u)})}),[A,q,E,T,P,O,y,g]);return h.default.createElement(K.Provider,{value:x},h.default.createElement(oe,{launcher:o,broker:c},n))},W=(n,o,c)=>{const f=t.useContext(K);if(f===null)throw new Error("useEmbeddedEffect must be used within a MMEmbeddableZoneProvider");const b=t.useRef(c);t.useEffect(()=>{b.current=c},[c]),t.useEffect(()=>{if(!(!n||!o)){if(o.startsWith("key:")){const g=o.substring(4);return f.readyFrames[n]&&f.sendMessage(n,"subscribe-key",{keyChord:g}),f.addListener(n,`key-pressed:${g}`,(...w)=>b.current(...w))}return f.addListener(n,o,(...g)=>b.current(...g))}},[f,n,o])};le.propTypes={children:R.default.node.isRequired,authorizationLauncher:R.default.func,credentialBroker:R.default.func};const X=Z.default.default||Z.default,Ee=1e4,ke="credentials",Ce=(n,o)=>`${n}/mm-embedded-interop?id=${encodeURIComponent(o)}&origin=${encodeURIComponent(window.location.origin)}&caps=${ke}`,Re=X.iframe`
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("react"),he=require("prop-types"),ge=require("styled-components"),Q=r=>r&&r.__esModule?r:{default:r},E=Q(t),T=Q(he),W=Q(ge),H=t.createContext(null),K=t.createContext({pending:[],authorize:()=>{},approve:()=>{},complete:()=>{},dismiss:()=>{},originEpochs:{},credentials:{},unsupported:{}}),se="access_token",J=r=>r?r.kind?r:r.accessToken?{kind:se,accessToken:r.accessToken,expiresAt:r.expiresAt||null}:null:null,Ee=new Set(["host_not_allowed","invalid_token","provider_unavailable"]),N=typeof window!="undefined"&&window.location.protocol==="https:",ke=8e3,G=r=>{try{return new URL(r).origin}catch{return null}},ee=(r,o)=>{const c=o==null?void 0:o.origin;return!c||G(r==null?void 0:r.authUrl)!==c?null:c},te=r=>{if(!r||/^\d{1,3}(?:\.\d{1,3}){3}$/.test(r)||r.includes(":"))return r;const o=r.split(".");return o.length<=2?r:o.slice(-2).join(".")},oe=(r,o)=>{try{const c=new URL(r),l=new URL(o);return c.protocol!==l.protocol?!0:te(c.hostname)!==te(l.hostname)}catch{return!0}},ue=(r,{onBlocked:o,onClosed:c})=>{const l=window.open(r.authUrl,"mm-embed-auth","popup,width=600,height=700");if(!l)return o(),()=>{};const b=setInterval(()=>{l.closed&&(clearInterval(b),c())},1e3);return()=>clearInterval(b)},ie=({children:r,launcher:o,broker:c})=>{const l=t.useContext(H),[b,m]=t.useState({}),[A,C]=t.useState({}),[z,f]=t.useState({}),[w,I]=t.useState({}),L=t.useRef(z);L.current=z;const g=t.useRef(b);g.current=b;const U=t.useRef(null),Z=t.useRef({}),S=t.useRef({}),F=t.useRef({}),$=t.useRef(c);$.current=c;const y=t.useCallback(e=>{const n=S.current[e];if(!n)return;const s=i=>!i[e]||i[e].clientId?i:{...i,[e]:{...i[e],clientId:n}};m(s),I(s)},[]),a=t.useCallback((e,n)=>{e&&(I(s=>s[e]?s:{...s,[e]:{origin:e,reason:n,clientId:S.current[e]||null}}),y(e))},[y]),d=t.useCallback((e,{v2:n=!1,origin:s=null}={})=>{s&&(n&&L.current[s]||(m(i=>i[s]?i:{...i,[s]:{origin:s,authUrl:e.authUrl,silentUrl:e.silentUrl||null,status:n&&$.current?"broker":n&&e.silentUrl&&N?"silent":"interactive",v2:n,scope:e.scope||null,acceptsCredentials:F.current[s]||null,consent:null,error:null,clientId:e.clientId||S.current[s]||null,popupBlocked:!1}}),y(s)))},[y]),u=t.useCallback(e=>{m(n=>{if(!n[e])return n;const s={...n};return delete s[e],s})},[]),p=t.useCallback(e=>{e&&(u(e),C(n=>({...n,[e]:(n[e]||0)+1})))},[u]),R=t.useCallback(e=>{m(n=>!n[e]||n[e].status==="interactive"?n:{...n,[e]:{...n[e],status:"interactive"}})},[]),x=t.useCallback(e=>{u(e.origin)},[u]),M=t.useCallback((e,n)=>{const s=ee(e,n);if(s){if(oe(s,window.location.origin)){a(s,"cross-site-legacy");return}d(e,{origin:s})}},[d,a]);t.useEffect(()=>{if(!l)return;const e=[l.addListener("*","init",(n,s)=>{s!=null&&s.origin&&(n!=null&&n.clientId)&&(S.current[s.origin]=n.clientId,y(s.origin)),s!=null&&s.origin&&Array.isArray(n==null?void 0:n.acceptsCredentials)&&(F.current[s.origin]=n.acceptsCredentials)}),l.addListener("*","authorize",M),l.addListener("*","login",M),l.addListener("*","credential-request",(n,s)=>d(n,{v2:!0,origin:ee(n,s)}))];return()=>e.forEach(n=>n())},[l,M,d,y]),t.useEffect(()=>{const e=n=>{const s=n==null?void 0:n.data;if(!s||s.type!=="authorized"&&s.type!=="authorize-failed")return;const i=G(s.authUrl);if(!(!i||n.origin!==i)){if(s.type==="authorized"){if(s.accessToken){if(!g.current[i])return;f(h=>({...h,[i]:J({accessToken:s.accessToken})})),u(i)}else p(i);return}R(i)}};return window.addEventListener("message",e),()=>window.removeEventListener("message",e)},[u,p,R]);const _=t.useCallback((e,n)=>{const s=e==null?void 0:e.origin,i=J(n);!s||!i||(f(h=>({...h,[s]:i})),u(s))},[u]),k=t.useCallback((e,n)=>{m(s=>s[e]?{...s,[e]:{...s[e],...n}}:s)},[]),O=t.useCallback(async(e,{approve:n}={})=>{const s=$.current,{origin:i}=e;let h;try{h=await s({origin:i,clientId:e.clientId,scope:e.scope,authUrl:e.authUrl},{approve:n})}catch{n?k(i,{error:{reason:"broker_unavailable"}}):k(i,{status:e.silentUrl&&N?"silent":"interactive"});return}if((h==null?void 0:h.status)===200&&h.credential){_(e,h.credential);return}if((h==null?void 0:h.status)===409&&h.consentRequired){k(i,{status:"interactive",consent:{client:h.client||null,stepUp:!!h.stepUp,scope:h.scope||e.scope},error:null});return}const V=(h==null?void 0:h.error)||"broker_error";if(!n&&Ee.has(V)){k(i,{status:e.silentUrl&&N?"silent":"interactive"});return}if(n&&V==="consent_denied"){k(i,{error:null});return}u(i),I(Y=>({...Y,[i]:{origin:i,reason:`broker:${V}`,detail:h||null,clientId:e.clientId||S.current[i]||null}}))},[_,k,u]),v=t.useRef({});t.useEffect(()=>{Object.values(b).forEach(e=>{e.status!=="broker"||v.current[e.origin]||(v.current[e.origin]=!0,O(e).finally(()=>{delete v.current[e.origin]}))})},[b,O]);const P=t.useCallback(e=>!$.current||!(e!=null&&e.consent)?Promise.resolve():O(e,{approve:!0}),[O]);t.useEffect(()=>{const e=Z.current;Object.values(b).forEach(n=>{n.status==="silent"&&!e[n.origin]&&(e[n.origin]=setTimeout(()=>{delete e[n.origin],R(n.origin)},ke))}),Object.keys(e).forEach(n=>{(!b[n]||b[n].status!=="silent")&&(clearTimeout(e[n]),delete e[n])})},[b,R]),t.useEffect(()=>()=>{U.current&&U.current(),Object.values(Z.current).forEach(clearTimeout)},[]);const q=t.useCallback(e=>{U.current&&(U.current(),U.current=null);const n=o||ue;U.current=n(e,{onBlocked:()=>{m(s=>s[e.origin]?{...s,[e.origin]:{...s[e.origin],popupBlocked:!0}}:s)},onClosed:()=>{if(e.v2){N&&m(s=>!s[e.origin]||!s[e.origin].silentUrl?s:{...s,[e.origin]:{...s[e.origin],status:"silent"}});return}p(e.origin)}})},[o,p]),j={pending:Object.values(b).filter(e=>e.status==="interactive"),authorize:q,approve:P,complete:_,dismiss:x,originEpochs:A,credentials:z,unsupported:w},B=Object.values(b).filter(e=>e.status==="silent"&&e.silentUrl);return E.default.createElement(K.Provider,{value:j},r,B.map(e=>E.default.createElement("iframe",{key:`mm-silent-auth-${e.origin}`,src:e.silentUrl,title:`MachineMetrics silent authorization (${e.origin})`,"aria-hidden":"true",tabIndex:-1,style:{display:"none"}})))};ie.propTypes={children:T.default.node,launcher:T.default.func,broker:T.default.func};const ce=()=>t.useContext(K),ae=r=>{const{originEpochs:o}=t.useContext(K),c=G(r);return c&&o[c]||0},le=r=>{const{credentials:o}=t.useContext(K),c=G(r);return c&&o[c]||null},de=r=>{const{unsupported:o}=t.useContext(K),c=G(r);return c&&o[c]||null},fe=({children:r,authorizationLauncher:o,credentialBroker:c})=>{const[l,b]=t.useState({}),[m,A]=t.useState({}),C=t.useRef({}),z=t.useRef({}),f=t.useRef({}),w=t.useCallback((a,d)=>{var u;return!!((u=f.current[a])!=null&&u.has(d))},[]),I=t.useCallback((a,d,u)=>{b(p=>({...p,[a]:{origin:d,frameRef:u}}))},[]),L=t.useCallback(a=>{b(d=>{const u={...d};return delete u[a],u}),A(d=>{const u={...d};return delete u[a],u}),delete f.current[a]},[]);t.useEffect(()=>{const a=(u=[],p,R)=>{u.forEach(x=>x(p,R))},d=u=>{var O,v,P,q,j,B,e;if(!((O=u==null?void 0:u.data)!=null&&O.instanceId))return;const{instanceId:p,type:R}=u.data,x=l[p],M=(P=(v=x==null?void 0:x.frameRef)==null?void 0:v.current)==null?void 0:P.contentWindow;if(!M||u.source!==M||u.origin!==x.origin)return;const _={origin:u.origin},k=C.current;if(R==="response"){const{callbackId:n,response:s,error:i}=u.data,h=z.current[n];h&&(h(s,i),delete z.current[n]);return}if(R==="mark-registered"){const{requestType:n}=u.data;f.current[p]||(f.current[p]=new Set),f.current[p].add(n);return}R==="ready"&&A(n=>({...n,[p]:!0})),a((q=k[p])==null?void 0:q[R],u.data,_),a((j=k["*"])==null?void 0:j[R],u.data,_),a((B=k[p])==null?void 0:B["*"],u.data,_),a((e=k["*"])==null?void 0:e["*"],u.data,_)};return window.addEventListener("message",d),()=>{window.removeEventListener("message",d)}},[l]);const g=t.useCallback((a,d,u)=>{var R,x;const p=l[a];if(!p){console.warn(`Origin not set for id: ${a}. Unable to send message.`);return}(x=(R=p==null?void 0:p.frameRef)==null?void 0:R.current)!=null&&x.contentWindow&&p.frameRef.current.contentWindow.postMessage({type:d,...u,instanceId:a},p.origin)},[l]),U=t.useRef(0),Z=t.useCallback(()=>`${Date.now()}-${++U.current}`,[]),S=t.useCallback(async(a,d,u={})=>new Promise((p,R)=>{const x=Z(),M=(_,k)=>{delete z.current[x],k?R(k):p(_)};z.current[x]=M,g(a,"request",{callbackId:x,requestType:d,data:u})}),[g]),F=t.useCallback((a,d)=>{g(a,"load-options",d)},[g]),$=t.useCallback((a,d)=>{g(a,"validate",d)},[g]),y=t.useMemo(()=>({registerFrame:I,unregisterFrame:L,sendMessage:g,sendRequest:S,loadOptions:F,validate:$,hasHandler:w,readyFrames:m,addListener:(a,d,u)=>(C.current[a]||(C.current[a]={}),C.current[a][d]||(C.current[a][d]=[]),C.current[a][d].push(u),()=>{C.current[a][d]=C.current[a][d].filter(p=>p!==u)})}),[I,L,g,S,F,$,w,m]);return E.default.createElement(H.Provider,{value:y},E.default.createElement(ie,{launcher:o,broker:c},r))},D=(r,o,c)=>{const l=t.useContext(H);if(l===null)throw new Error("useEmbeddedEffect must be used within a MMEmbeddableZoneProvider");const b=t.useRef(c);t.useEffect(()=>{b.current=c},[c]),t.useEffect(()=>{if(!(!r||!o)){if(o.startsWith("key:")){const m=o.substring(4);return l.readyFrames[r]&&l.sendMessage(r,"subscribe-key",{keyChord:m}),l.addListener(r,`key-pressed:${m}`,(...C)=>b.current(...C))}return l.addListener(r,o,(...m)=>b.current(...m))}},[l,r,o])};fe.propTypes={children:T.default.node.isRequired,authorizationLauncher:T.default.func,credentialBroker:T.default.func};const X=W.default.default||W.default,Re=1e4,Ce="credentials",we=(r,o)=>`${r}/mm-embedded-interop?id=${encodeURIComponent(o)}&origin=${encodeURIComponent(window.location.origin)}&caps=${Ce}`,xe=X.iframe`
   width: 100%;
   height: 100%;
   border: none;
-  visibility: ${n=>n.$isReady?"visible":"hidden"};
-`,we=X.div`
+  visibility: ${r=>r.$isReady?"visible":"hidden"};
+`,Te=X.div`
   width: 100%;
   height: 100%;
   display: flex;
@@ -16,13 +16,13 @@
   text-align: center;
   color: #555;
   font-size: 14px;
-`,de=n=>{const o=n&&n.origin||"This app",c=n&&n.reason||"";switch(c){case"broker:scope_above_ceiling":return{title:`${o} can’t be authorized here`,detail:"It asks for permissions your role doesn’t have."};case"broker:origin_mismatch":case"broker:unknown_client":return{title:`${o} can’t be authorized here`,detail:"It isn’t registered to run at this address."};case"broker:cross_company_principal":return{title:`${o} can’t be authorized here`,detail:"It can’t be authorized for this account."};default:return c.startsWith("broker:")?{title:`${o} can’t be authorized here`,detail:"Authorization was refused."}:{title:`${o} can’t be embedded here`,detail:"It needs an update to support embedding from a different domain."}}},fe=({entry:n})=>{const o=de(n);return h.default.createElement(we,{"data-reason":n&&n.reason||void 0},h.default.createElement("div",{style:{fontWeight:600}},o.title),h.default.createElement("div",{style:{fontSize:12,color:"#888"}},o.detail))};fe.propTypes={entry:R.default.shape({origin:R.default.string,name:R.default.string,reason:R.default.string,detail:R.default.object})};const xe=X.div`
+`,pe=r=>{const o=r&&r.origin||"This app",c=r&&r.reason||"";switch(c){case"broker:scope_above_ceiling":return{title:`${o} can’t be authorized here`,detail:"It asks for permissions your role doesn’t have."};case"broker:origin_mismatch":case"broker:unknown_client":return{title:`${o} can’t be authorized here`,detail:"It isn’t registered to run at this address."};case"broker:cross_company_principal":return{title:`${o} can’t be authorized here`,detail:"It can’t be authorized for this account."};default:return c.startsWith("broker:")?{title:`${o} can’t be authorized here`,detail:"Authorization was refused."}:{title:`${o} can’t be embedded here`,detail:"It needs an update to support embedding from a different domain."}}},be=({entry:r})=>{const o=pe(r);return E.default.createElement(Te,{"data-reason":r&&r.reason||void 0},E.default.createElement("div",{style:{fontWeight:600}},o.title),E.default.createElement("div",{style:{fontSize:12,color:"#888"}},o.detail))};be.propTypes={entry:T.default.shape({origin:T.default.string,name:T.default.string,reason:T.default.string,detail:T.default.object})};const ze=X.div`
   height: 100%;
   display: flex;
   flex: 1;
   align-items: center;
   justify-content: center;
-`,Te=()=>h.default.createElement(xe,null,h.default.createElement("div",{style:{textAlign:"center"}},"This app couldn’t be loaded as an embeddable widget.")),pe=({id:n,src:o,path:c,onInit:f=()=>{},onTimeout:b,context:g={},params:$={},renderUnsupported:w,renderTimeout:z,..._})=>{if("isConfiguring"in _)return console.error("isConfiguring must be passed via the params prop to MMEmbeddableZone"),null;if("colorMode"in g)return console.error("colorMode must be passed via the params prop to MMEmbeddableZone"),null;if("isFullScreen"in g)return console.error("isFullScreen must be passed via the params prop to MMEmbeddableZone"),null;const y=t.useRef(),[A,q]=t.useState(),[E,M]=t.useState(0),[D,T]=t.useState(!1),[P,O]=t.useState(!1),x=ie(o),a=ce(o),l=ae(o),[u,d]=t.useState(0),[k,C]=t.useState(null),{registerFrame:S,unregisterFrame:I,sendMessage:m}=t.useContext(K),[U,F]=t.useState(),L=t.useRef(),v=t.useRef(b),B=t.useRef(f),j=t.useRef(!1),e=t.useCallback(()=>{j.current=!1,clearTimeout(L.current),M(0),T(!1),O(!1),C(null)},[]);t.useEffect(()=>{(x>0||u>0)&&e()},[x,u,e]),t.useEffect(()=>{v.current=b},[b]),t.useEffect(()=>{B.current=f},[f]),t.useEffect(()=>{E&&m(n,"set-context",{context:{...g}})},[g,n,E]),t.useEffect(()=>{E&&m(n,"set-params",{params:$})},[$,n,E]),t.useEffect(()=>{c!==void 0&&F((c==null?void 0:c.indexOf("/"))===0?c:`/${c}`)},[c]),t.useEffect(()=>{U===void 0||!E||m(n,"navigate",{path:U})},[U,E,n,m]),t.useEffect(()=>{if(!o||!n||!y)return;e();const i=new URL(o);return S(n,i.origin,y),B.current(),q(Ce(i.origin,n)),()=>{I(n)}},[o,n,S,y,e]),t.useEffect(()=>{if(!(!A||j.current))return L.current=setTimeout(()=>{T(!0),v.current&&v.current()},Ee),()=>clearTimeout(L.current)},[A,o,x,u]);const r=t.useCallback(()=>{j.current=!0,clearTimeout(L.current),T(!1)},[]);W(n,"init",i=>{r(),Array.isArray(i==null?void 0:i.acceptsCredentials)&&C(i.acceptsCredentials)}),W(n,"authorize",r),W(n,"login",r),W(n,"credential-request",()=>{r(),O(!0)}),t.useEffect(()=>{if(!P||!a)return;const i=k;if(Array.isArray(i)&&!i.includes(a.kind))return;const p=a.kind==="access_token"?{accessToken:a.accessToken}:{};m(n,"credential",{...p,credential:a})},[P,a,k,n,m]),W(n,"ready",()=>{r(),M(i=>i+1)});const s=t.useRef();return W(n,"heartbeat",()=>{s.current&&clearTimeout(s.current),s.current=setTimeout(()=>{d(i=>i+1)},6e3)}),t.useEffect(()=>()=>{s.current&&clearTimeout(s.current)},[]),l?w?w(l):h.default.createElement(fe,{entry:l}):D&&!E?z?z():h.default.createElement(Te,null):h.default.createElement(Re,{key:`auth-epoch-${x}-frame-${u}`,$isReady:E,ref:y,src:A,..._})};pe.propTypes={id:R.default.string,src:R.default.string.isRequired,path:R.default.string,onInit:R.default.func,onTimeout:R.default.func,renderUnsupported:R.default.func,renderTimeout:R.default.func};const Ie=Z.default.div`
+`,Ie=()=>E.default.createElement(ze,null,E.default.createElement("div",{style:{textAlign:"center"}},"This app couldn’t be loaded as an embeddable widget.")),me=({id:r,src:o,path:c,onInit:l=()=>{},onTimeout:b,context:m={},params:A={},renderUnsupported:C,renderTimeout:z,...f})=>{if("isConfiguring"in f)return console.error("isConfiguring must be passed via the params prop to MMEmbeddableZone"),null;if("colorMode"in m)return console.error("colorMode must be passed via the params prop to MMEmbeddableZone"),null;if("isFullScreen"in m)return console.error("isFullScreen must be passed via the params prop to MMEmbeddableZone"),null;const w=t.useRef(),[I,L]=t.useState(),[g,U]=t.useState(0),[Z,S]=t.useState(!1),[F,$]=t.useState(!1),y=ae(o),a=le(o),d=de(o),[u,p]=t.useState(0),[R,x]=t.useState(null),{registerFrame:M,unregisterFrame:_,sendMessage:k}=t.useContext(H),[O,v]=t.useState(),P=t.useRef(),q=t.useRef(b),j=t.useRef(l),B=t.useRef(!1),e=t.useCallback(()=>{B.current=!1,clearTimeout(P.current),U(0),S(!1),$(!1),x(null)},[]);t.useEffect(()=>{(y>0||u>0)&&e()},[y,u,e]),t.useEffect(()=>{q.current=b},[b]),t.useEffect(()=>{j.current=l},[l]),t.useEffect(()=>{g&&k(r,"set-context",{context:{...m}})},[m,r,g]),t.useEffect(()=>{g&&k(r,"set-params",{params:A})},[A,r,g]),t.useEffect(()=>{c!==void 0&&v((c==null?void 0:c.indexOf("/"))===0?c:`/${c}`)},[c]),t.useEffect(()=>{O===void 0||!g||k(r,"navigate",{path:O})},[O,g,r,k]),t.useEffect(()=>{if(!o||!r||!w)return;e();const i=new URL(o);return M(r,i.origin,w),j.current(),L(we(i.origin,r)),()=>{_(r)}},[o,r,M,w,e]),t.useEffect(()=>{if(!(!I||B.current))return P.current=setTimeout(()=>{S(!0),q.current&&q.current()},Re),()=>clearTimeout(P.current)},[I,o,y,u]);const n=t.useCallback(()=>{B.current=!0,clearTimeout(P.current),S(!1)},[]);D(r,"init",i=>{n(),Array.isArray(i==null?void 0:i.acceptsCredentials)&&x(i.acceptsCredentials)}),D(r,"authorize",n),D(r,"login",n),D(r,"credential-request",()=>{n(),$(!0)}),t.useEffect(()=>{if(!F||!a)return;const i=R;if(Array.isArray(i)&&!i.includes(a.kind))return;const h=a.kind==="access_token"?{accessToken:a.accessToken}:{};k(r,"credential",{...h,credential:a})},[F,a,R,r,k]),D(r,"ready",()=>{n(),U(i=>i+1)});const s=t.useRef();return D(r,"heartbeat",()=>{s.current&&clearTimeout(s.current),s.current=setTimeout(()=>{p(i=>i+1)},6e3)}),t.useEffect(()=>()=>{s.current&&clearTimeout(s.current)},[]),d?C?C(d):E.default.createElement(be,{entry:d}):Z&&!g?z?z():E.default.createElement(Ie,null):E.default.createElement(xe,{key:`auth-epoch-${y}-frame-${u}`,$isReady:g,ref:w,src:I,...f})};me.propTypes={id:T.default.string,src:T.default.string.isRequired,path:T.default.string,onInit:T.default.func,onTimeout:T.default.func,renderUnsupported:T.default.func,renderTimeout:T.default.func};const ye=W.default.div`
   position: fixed;
   inset: 0;
   background: rgba(0, 0, 0, 0.45);
@@ -30,7 +30,7 @@
   align-items: center;
   justify-content: center;
   z-index: 10000;
-`,ze=Z.default.div`
+`,Se=W.default.div`
   background: #fff;
   border-radius: 8px;
   box-shadow: 0 4px 24px rgba(0, 0, 0, 0.2);
@@ -39,13 +39,13 @@
   max-width: calc(100vw - 32px);
   font-family: sans-serif;
   color: #222;
-`,_e=Z.default.div`
+`,_e=W.default.div`
   display: flex;
   align-items: center;
   justify-content: space-between;
   padding: 10px 0;
   gap: 16px;
-`,Me=Z.default.button`
+`,Ae=W.default.button`
   background: #16a500;
   color: #fff;
   border: none;
@@ -54,8 +54,8 @@
   font-size: 14px;
   cursor: pointer;
   white-space: nowrap;
-`,Se=Z.default.p`
+`,Ue=W.default.p`
   color: #b3261e;
   font-size: 13px;
   margin: 4px 0 0;
-`,Ue=()=>{const{pending:n,authorize:o}=ue();return n.length===0?null:h.default.createElement(Ie,null,h.default.createElement(ze,null,h.default.createElement("h3",{style:{margin:"0 0 8px"}},"Authorization Required"),h.default.createElement("p",{style:{margin:"0 0 12px",fontSize:14,color:"#555"}},"The following apps need you to sign in and authorize them before they can load."),n.map(c=>h.default.createElement("div",{key:c.origin},h.default.createElement(_e,null,h.default.createElement("div",null,h.default.createElement("div",{style:{fontWeight:600}},c.origin)),h.default.createElement(Me,{onClick:()=>o(c)},"Authorize")),c.popupBlocked&&h.default.createElement(Se,null,"The sign-in window was blocked. Allow popups for this site, then try again.")))))};exports.CREDENTIAL_KIND_ACCESS_TOKEN=ne;exports.EmbeddedAuthorizationContext=H;exports.EmbeddedAuthorizationPrompt=Ue;exports.MMEmbeddableZone=pe;exports.MMEmbeddableZoneContext=K;exports.MMEmbeddableZoneProvider=le;exports.isCrossSite=re;exports.normalizeCredential=J;exports.popupAuthorizationLauncher=se;exports.unsupportedCopy=de;exports.useEmbeddedAuthorizations=ue;exports.useEmbeddedCredential=ce;exports.useEmbeddedEffect=W;exports.useEmbeddedOriginEpoch=ie;exports.useEmbeddedUnsupported=ae;
+`,re='button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])';let ne=!1;const Me=()=>{const{pending:r,authorize:o,dismiss:c}=ce(),l=r.filter(f=>!f.consent),b=r.length-l.length,m=t.useRef(null),A=t.useRef(null),C=l.length>0;if(t.useEffect(()=>{b>0&&!ne&&(ne=!0,console.error("[mm-react-embeddable] EmbeddedAuthorizationPrompt received a brokered consent entry. A host with a credentialBroker must render its own consent UI (useEmbeddedAuthorizations: approve/dismiss); this default prompt only handles the popup path."))},[b]),t.useEffect(()=>{if(!C||!m.current)return;A.current=document.activeElement;const f=m.current.querySelector(re);return f&&f.focus(),()=>{const w=A.current;w&&typeof w.focus=="function"&&w.focus()}},[C]),!C)return null;const z=f=>{if(f.key==="Escape"){f.preventDefault(),l.forEach(g=>c(g));return}if(f.key!=="Tab"||!m.current)return;const w=Array.from(m.current.querySelectorAll(re));if(w.length===0)return;const I=w[0],L=w[w.length-1];f.shiftKey&&document.activeElement===I?(f.preventDefault(),L.focus()):!f.shiftKey&&document.activeElement===L&&(f.preventDefault(),I.focus())};return E.default.createElement(ye,null,E.default.createElement(Se,{ref:m,role:"dialog","aria-modal":"true","aria-labelledby":"mm-embedded-authorization-title",onKeyDown:z},E.default.createElement("h3",{id:"mm-embedded-authorization-title",style:{margin:"0 0 8px"}},"Authorization Required"),E.default.createElement("p",{style:{margin:"0 0 12px",fontSize:14,color:"#555"}},"The following apps need you to sign in and authorize them before they can load."),l.map(f=>E.default.createElement("div",{key:f.origin},E.default.createElement(_e,null,E.default.createElement("div",null,E.default.createElement("div",{style:{fontWeight:600}},f.origin)),E.default.createElement(Ae,{onClick:()=>o(f)},"Authorize")),f.popupBlocked&&E.default.createElement(Ue,null,"The sign-in window was blocked. Allow popups for this site, then try again.")))))};exports.CREDENTIAL_KIND_ACCESS_TOKEN=se;exports.EmbeddedAuthorizationContext=K;exports.EmbeddedAuthorizationPrompt=Me;exports.MMEmbeddableZone=me;exports.MMEmbeddableZoneContext=H;exports.MMEmbeddableZoneProvider=fe;exports.isCrossSite=oe;exports.normalizeCredential=J;exports.popupAuthorizationLauncher=ue;exports.unsupportedCopy=pe;exports.useEmbeddedAuthorizations=ce;exports.useEmbeddedCredential=le;exports.useEmbeddedEffect=D;exports.useEmbeddedOriginEpoch=ae;exports.useEmbeddedUnsupported=de;