@machinemetrics/mm-react-embeddable 2.0.0-4 → 2.0.0-6

package/dist/mm-react-embeddable.cjs.js

@@ -1,9 +1,9 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("react"),Ee=require("prop-types"),ge=require("styled-components"),ee=r=>r&&r.__esModule?r:{default:r},L=ee(t),k=ee(Ee),re=ee(ge),Y=t.createContext(null),N=t.createContext({pending:[],authorize:()=>{},approve:()=>{},complete:()=>{},dismiss:()=>{},originEpochs:{},credentials:{},unsupported:{}}),ue="access_token",Q=r=>r?r.kind?r:r.accessToken?{kind:ue,accessToken:r.accessToken,expiresAt:r.expiresAt||null}:null:null,Re=60,ke=120,Ce=new Set(["host_not_allowed","unbound_host_bound_guest","invalid_token","provider_unavailable"]),J=typeof window!="undefined"&&window.location.protocol==="https:",Te=8e3,G=r=>{try{return new URL(r).origin}catch{return null}},ne=(r,u)=>{const i=u==null?void 0:u.origin;return!i||G(r==null?void 0:r.authUrl)!==i?null:i},se=r=>{if(!r||/^\d{1,3}(?:\.\d{1,3}){3}$/.test(r)||r.includes(":"))return r;const u=r.split(".");return u.length<=2?r:u.slice(-2).join(".")},oe=(r,u)=>{try{const i=new URL(r),f=new URL(u);return i.protocol!==f.protocol?!0:se(i.hostname)!==se(f.hostname)}catch{return!0}},ce=(r,{onBlocked:u,onClosed:i})=>{const f=window.open(r.authUrl,"mm-embed-auth","popup,width=600,height=700");if(!f)return u(),()=>{};const m=setInterval(()=>{f.closed&&(clearInterval(m),i())},1e3);return()=>clearInterval(m)},ie=({children:r,launcher:u,broker:i})=>{const f=t.useContext(Y),[m,E]=t.useState({}),[B,C]=t.useState({}),[x,A]=t.useState({}),[P,O]=t.useState({}),v=t.useRef(x);v.current=x;const g=t.useRef(m);g.current=m;const z=t.useRef(null),K=t.useRef({}),M=t.useRef({}),D=t.useRef({}),$=t.useRef(i);$.current=i;const _=t.useCallback(e=>{const n=M.current[e];if(!n)return;const s=a=>!a[e]||a[e].clientId?a:{...a,[e]:{...a[e],clientId:n}};E(s),O(s)},[]),c=t.useCallback((e,n)=>{e&&(O(s=>s[e]?s:{...s,[e]:{origin:e,reason:n,clientId:M.current[e]||null}}),_(e))},[_]),l=t.useCallback((e,{v2:n=!1,origin:s=null}={})=>{s&&(n&&v.current[s]||(E(a=>a[s]?a:{...a,[s]:{origin:s,authUrl:e.authUrl,silentUrl:e.silentUrl||null,status:n&&$.current?"broker":n&&e.silentUrl&&J?"silent":"interactive",v2:n,scope:e.scope||null,acceptsCredentials:D.current[s]||null,consent:null,error:null,clientId:e.clientId||M.current[s]||null,popupBlocked:!1}}),_(s)))},[_]),o=t.useRef({}),d=t.useCallback(e=>{o.current[e]&&(clearTimeout(o.current[e]),delete o.current[e])},[]),p=t.useCallback(e=>{d(e),E(n=>{if(!n[e])return n;const s={...n};return delete s[e],s})},[d]),h=t.useCallback(e=>{e&&(p(e),C(n=>({...n,[e]:(n[e]||0)+1})))},[p]),S=t.useCallback(e=>{E(n=>!n[e]||n[e].status==="interactive"?n:{...n,[e]:{...n[e],status:"interactive"}})},[]),y=t.useCallback(e=>{p(e.origin)},[p]),R=t.useCallback((e,n)=>{const s=ne(e,n);if(s){if(oe(s,window.location.origin)){c(s,"cross-site-legacy");return}l(e,{origin:s})}},[l,c]);t.useEffect(()=>{if(!f)return;const e=[f.addListener("*","init",(n,s)=>{s!=null&&s.origin&&(n!=null&&n.clientId)&&(M.current[s.origin]=n.clientId,_(s.origin)),s!=null&&s.origin&&Array.isArray(n==null?void 0:n.acceptsCredentials)&&(D.current[s.origin]=n.acceptsCredentials)}),f.addListener("*","authorize",R),f.addListener("*","login",R),f.addListener("*","credential-request",(n,s)=>l(n,{v2:!0,origin:ne(n,s)}))];return()=>e.forEach(n=>n())},[f,R,l,_]),t.useEffect(()=>{const e=n=>{const s=n==null?void 0:n.data;if(!s||s.type!=="authorized"&&s.type!=="authorize-failed")return;const a=G(s.authUrl);if(!(!a||n.origin!==a)){if(s.type==="authorized"){if(s.accessToken){if(!g.current[a])return;A(b=>({...b,[a]:Q({accessToken:s.accessToken})})),p(a)}else h(a);return}S(a)}};return window.addEventListener("message",e),()=>window.removeEventListener("message",e)},[p,h,S]);const F=t.useCallback((e,n)=>{const s=e==null?void 0:e.origin,a=Q(n);!s||!a||(A(b=>({...b,[s]:a})),p(s))},[p]),U=t.useCallback((e,n)=>{E(s=>s[e]?{...s,[e]:{...s[e],...n}}:s)},[]),w=t.useRef({}),I=t.useCallback(async(e,{approve:n}={})=>{const s=$.current,{origin:a}=e;let b;try{b=await s({origin:a,clientId:e.clientId,scope:e.scope,authUrl:e.authUrl},{approve:n})}catch{n?U(a,{error:{reason:"broker_unavailable"}}):U(a,{status:e.silentUrl&&J?"silent":"interactive"});return}if((b==null?void 0:b.status)===200&&b.credential){F(e,b.credential);return}if((b==null?void 0:b.status)===409&&b.consentRequired){U(a,{status:"interactive",consent:{client:b.client||null,stepUp:!!b.stepUp,scope:b.scope||e.scope},error:null});return}const V=(b==null?void 0:b.error)||"broker_error";if(!n&&Ce.has(V)){U(a,{status:e.silentUrl&&J?"silent":"interactive"});return}if(n&&V==="consent_denied"){U(a,{error:null});return}if(V==="rate_limited"&&!e.rateLimitRetried){const X=Math.min(Number(b==null?void 0:b.retryAfter)>0?Number(b.retryAfter):Re,ke),he={...e,rateLimitRetried:!0};d(a),o.current[a]=setTimeout(()=>{delete o.current[a],w.current[a]=!0,Z.current(he,{approve:n}).finally(()=>{delete w.current[a]})},X*1e3),U(a,{rateLimitRetried:!0});return}p(a),O(X=>({...X,[a]:{origin:a,reason:`broker:${V}`,detail:b||null,clientId:e.clientId||M.current[a]||null}}))},[F,U,p,d]),Z=t.useRef(I);Z.current=I,t.useEffect(()=>{Object.values(m).forEach(e=>{e.status!=="broker"||w.current[e.origin]||o.current[e.origin]||(w.current[e.origin]=!0,I(e).finally(()=>{delete w.current[e.origin]}))})},[m,I]);const W=t.useCallback(e=>!$.current||!(e!=null&&e.consent)?Promise.resolve():I(e,{approve:!0}),[I]);t.useEffect(()=>{const e=K.current;Object.values(m).forEach(n=>{n.status==="silent"&&!e[n.origin]&&(e[n.origin]=setTimeout(()=>{delete e[n.origin],S(n.origin)},Te))}),Object.keys(e).forEach(n=>{(!m[n]||m[n].status!=="silent")&&(clearTimeout(e[n]),delete e[n])})},[m,S]),t.useEffect(()=>()=>{z.current&&z.current(),Object.values(K.current).forEach(clearTimeout),Object.values(o.current).forEach(clearTimeout)},[]);const j=t.useCallback(e=>{z.current&&(z.current(),z.current=null);const n=u||ce;z.current=n(e,{onBlocked:()=>{E(s=>s[e.origin]?{...s,[e.origin]:{...s[e.origin],popupBlocked:!0}}:s)},onClosed:()=>{if(e.v2){J&&E(s=>!s[e.origin]||!s[e.origin].silentUrl?s:{...s,[e.origin]:{...s[e.origin],status:"silent"}});return}h(e.origin)}})},[u,h]),T={pending:Object.values(m).filter(e=>e.status==="interactive"),authorize:j,approve:W,complete:F,dismiss:y,originEpochs:B,credentials:x,unsupported:P},q=Object.values(m).filter(e=>e.status==="silent"&&e.silentUrl);return L.default.createElement(N.Provider,{value:T},r,q.map(e=>L.default.createElement("iframe",{key:`mm-silent-auth-${e.origin}`,src:e.silentUrl,title:`MachineMetrics silent authorization (${e.origin})`,"aria-hidden":"true",tabIndex:-1,style:{display:"none"}})))};ie.propTypes={children:k.default.node,launcher:k.default.func,broker:k.default.func};const _e=()=>t.useContext(N),ae=r=>{const{originEpochs:u}=t.useContext(N),i=G(r);return i&&u[i]||0},le=r=>{const{credentials:u}=t.useContext(N),i=G(r);return i&&u[i]||null},de=r=>{const{unsupported:u}=t.useContext(N),i=G(r);return i&&u[i]||null},fe=({children:r,authorizationLauncher:u,credentialBroker:i})=>{const[f,m]=t.useState({}),[E,B]=t.useState({}),C=t.useRef({}),x=t.useRef({}),A=t.useRef({}),P=t.useCallback((c,l)=>{var o;return!!((o=A.current[c])!=null&&o.has(l))},[]),O=t.useCallback((c,l,o)=>{m(d=>({...d,[c]:{origin:l,frameRef:o}}))},[]),v=t.useCallback(c=>{m(l=>{const o={...l};return delete o[c],o}),B(l=>{const o={...l};return delete o[c],o}),delete A.current[c]},[]);t.useEffect(()=>{const c=(o=[],d,p)=>{o.forEach(h=>h(d,p))},l=o=>{var F,U,w,I,Z,W,j;if(!((F=o==null?void 0:o.data)!=null&&F.instanceId))return;const{instanceId:d,type:p}=o.data,h=f[d],S=(w=(U=h==null?void 0:h.frameRef)==null?void 0:U.current)==null?void 0:w.contentWindow;if(!S||o.source!==S||o.origin!==h.origin)return;const y={origin:o.origin},R=C.current;if(p==="response"){const{callbackId:T,response:q,error:e}=o.data,n=x.current[T];n&&(n(q,e),delete x.current[T]);return}if(p==="mark-registered"){const{requestType:T}=o.data;A.current[d]||(A.current[d]=new Set),A.current[d].add(T);return}p==="ready"&&B(T=>({...T,[d]:!0})),c((I=R[d])==null?void 0:I[p],o.data,y),c((Z=R["*"])==null?void 0:Z[p],o.data,y),c((W=R[d])==null?void 0:W["*"],o.data,y),c((j=R["*"])==null?void 0:j["*"],o.data,y)};return window.addEventListener("message",l),()=>{window.removeEventListener("message",l)}},[f]);const g=t.useCallback((c,l,o)=>{var p,h;const d=f[c];if(!d){console.warn(`Origin not set for id: ${c}. Unable to send message.`);return}(h=(p=d==null?void 0:d.frameRef)==null?void 0:p.current)!=null&&h.contentWindow&&d.frameRef.current.contentWindow.postMessage({type:l,...o,instanceId:c},d.origin)},[f]),z=t.useRef(0),K=t.useCallback(()=>`${Date.now()}-${++z.current}`,[]),M=t.useCallback(async(c,l,o={})=>new Promise((d,p)=>{const h=K(),S=(y,R)=>{delete x.current[h],R?p(R):d(y)};x.current[h]=S,g(c,"request",{callbackId:h,requestType:l,data:o})}),[g]),D=t.useCallback((c,l)=>{g(c,"load-options",l)},[g]),$=t.useCallback((c,l)=>{g(c,"validate",l)},[g]),_=t.useMemo(()=>({registerFrame:O,unregisterFrame:v,sendMessage:g,sendRequest:M,loadOptions:D,validate:$,hasHandler:P,readyFrames:E,addListener:(c,l,o)=>(C.current[c]||(C.current[c]={}),C.current[c][l]||(C.current[c][l]=[]),C.current[c][l].push(o),()=>{C.current[c][l]=C.current[c][l].filter(d=>d!==o)})}),[O,v,g,M,D,$,P,E]);return L.default.createElement(Y.Provider,{value:_},L.default.createElement(ie,{launcher:u,broker:i},r))},H=(r,u,i)=>{const f=t.useContext(Y);if(f===null)throw new Error("useEmbeddedEffect must be used within a MMEmbeddableZoneProvider");const m=t.useRef(i);t.useEffect(()=>{m.current=i},[i]),t.useEffect(()=>{if(!(!r||!u)){if(u.startsWith("key:")){const E=u.substring(4);return f.readyFrames[r]&&f.sendMessage(r,"subscribe-key",{keyChord:E}),f.addListener(r,`key-pressed:${E}`,(...C)=>m.current(...C))}return f.addListener(r,u,(...E)=>m.current(...E))}},[f,r,u])};fe.propTypes={children:k.default.node.isRequired,authorizationLauncher:k.default.func,credentialBroker:k.default.func};const te=re.default.default||re.default,we=1e4,Ie="credentials",Me=(r,u)=>`${r}/mm-embedded-interop?id=${encodeURIComponent(u)}&origin=${encodeURIComponent(window.location.origin)}&caps=${Ie}`,Se=te.iframe`
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("react"),Re=require("prop-types"),ke=require("styled-components"),re=r=>r&&r.__esModule?r:{default:r},L=re(t),R=re(Re),oe=re(ke),G=t.createContext(null),Y=t.createContext({pending:[],authorize:()=>{},approve:()=>{},complete:()=>{},dismiss:()=>{},originEpochs:{},credentials:{},unsupported:{}}),ie="access_token",ee=r=>r?r.kind?r:r.accessToken?{kind:ie,accessToken:r.accessToken,expiresAt:r.expiresAt||null}:null:null,Ce=60,Te=120,_e=new Set(["host_not_allowed","unbound_host_bound_guest","invalid_token","provider_unavailable"]),Q=typeof window!="undefined"&&window.location.protocol==="https:",we=8e3,V=r=>{try{return new URL(r).origin}catch{return null}},ue=(r,o)=>{const i=o==null?void 0:o.origin;return!i||V(r==null?void 0:r.authUrl)!==i?null:i},ce=r=>{if(!r||/^\d{1,3}(?:\.\d{1,3}){3}$/.test(r)||r.includes(":"))return r;const o=r.split(".");return o.length<=2?r:o.slice(-2).join(".")},te=(r,o)=>{try{const i=new URL(r),f=new URL(o);return i.protocol!==f.protocol?!0:ce(i.hostname)!==ce(f.hostname)}catch{return!0}},ae=(r,{onBlocked:o,onClosed:i})=>{const f=window.open(r.authUrl,"mm-embed-auth","popup,width=600,height=700");if(!f)return o(),()=>{};const b=setInterval(()=>{f.closed&&(clearInterval(b),i())},1e3);return()=>clearInterval(b)},le=({children:r,launcher:o,broker:i})=>{const f=t.useContext(G),[b,m]=t.useState({}),[D,k]=t.useState({}),[x,A]=t.useState({}),[P,O]=t.useState({}),H=t.useRef(x);H.current=x;const E=t.useRef(b);E.current=b;const z=t.useRef(null),N=t.useRef({}),I=t.useRef({}),Z=t.useRef({}),$=t.useRef(i);$.current=i;const T=t.useCallback(e=>{const n=I.current[e];if(!n)return;const s=a=>!a[e]||a[e].clientId?a:{...a,[e]:{...a[e],clientId:n}};m(s),O(s)},[]),c=t.useCallback((e,n)=>{e&&(O(s=>s[e]?s:{...s,[e]:{origin:e,reason:n,clientId:I.current[e]||null}}),T(e))},[T]),l=t.useCallback((e,{v2:n=!1,origin:s=null}={})=>{s&&(n&&H.current[s]||(m(a=>a[s]?a:{...a,[s]:{origin:s,authUrl:e.authUrl,silentUrl:e.silentUrl||null,status:n&&$.current?"broker":n&&e.silentUrl&&Q?"silent":"interactive",v2:n,scope:e.scope||null,acceptsCredentials:Z.current[s]||null,consent:null,error:null,clientId:e.clientId||I.current[s]||null,popupBlocked:!1}}),T(s)))},[T]),u=t.useRef({}),d=t.useCallback(e=>{u.current[e]&&(clearTimeout(u.current[e]),delete u.current[e])},[]),p=t.useCallback(e=>{d(e),m(n=>{if(!n[e])return n;const s={...n};return delete s[e],s})},[d]),h=t.useCallback(e=>{e&&(p(e),k(n=>({...n,[e]:(n[e]||0)+1})))},[p]),M=t.useCallback(e=>{m(n=>!n[e]||n[e].status==="interactive"?n:{...n,[e]:{...n[e],status:"interactive"}})},[]),y=t.useCallback(e=>{p(e.origin)},[p]),g=t.useCallback((e,n)=>{const s=ue(e,n);if(s){if(te(s,window.location.origin)){c(s,"cross-site-legacy");return}l(e,{origin:s})}},[l,c]);t.useEffect(()=>{if(!f)return;const e=[f.addListener("*","init",(n,s)=>{s!=null&&s.origin&&(n!=null&&n.clientId)&&(I.current[s.origin]=n.clientId,T(s.origin)),s!=null&&s.origin&&Array.isArray(n==null?void 0:n.acceptsCredentials)?Z.current[s.origin]=n.acceptsCredentials:s!=null&&s.origin&&te(s.origin,window.location.origin)&&c(s.origin,"cross-site-legacy")}),f.addListener("*","authorize",g),f.addListener("*","login",g),f.addListener("*","credential-request",(n,s)=>l(n,{v2:!0,origin:ue(n,s)}))];return()=>e.forEach(n=>n())},[f,g,l,T,c]),t.useEffect(()=>{const e=n=>{const s=n==null?void 0:n.data;if(!s||s.type!=="authorized"&&s.type!=="authorize-failed")return;const a=V(s.authUrl);if(!(!a||n.origin!==a)){if(s.type==="authorized"){if(s.accessToken){if(!E.current[a])return;A(U=>({...U,[a]:ee({accessToken:s.accessToken})})),p(a)}else h(a);return}M(a)}};return window.addEventListener("message",e),()=>window.removeEventListener("message",e)},[p,h,M]);const F=t.useCallback((e,n)=>{const s=e==null?void 0:e.origin,a=ee(n);!s||!a||(A(U=>({...U,[s]:a})),p(s))},[p]),S=t.useCallback((e,n)=>{m(s=>s[e]?{...s,[e]:{...s[e],...n}}:s)},[]),_=t.useRef({}),w=t.useCallback(async(e,{approve:n}={})=>{const s=$.current,{origin:a}=e;let U;try{U=await s({origin:a,clientId:e.clientId,scope:e.scope,authUrl:e.authUrl},{approve:n})}catch{n?S(a,{error:{reason:"broker_unavailable"}}):S(a,{status:e.silentUrl&&Q?"silent":"interactive"});return}const se=U==null?void 0:U.status,B=(U==null?void 0:U.body)||{};if(se===200&&B.credential){F(e,B.credential);return}if(se===409&&B.consentRequired){S(a,{status:"interactive",consent:{client:B.client||null,stepUp:!!B.stepUp,scope:B.scope||e.scope},error:null});return}const X=B.error||"broker_error";if(!n&&_e.has(X)){S(a,{status:e.silentUrl&&Q?"silent":"interactive"});return}if(n&&X==="consent_denied"){S(a,{error:null});return}if(X==="rate_limited"&&!e.rateLimitRetried){const J=Math.min(Number(B.retryAfter)>0?Number(B.retryAfter):Ce,Te),ge={...e,rateLimitRetried:!0};d(a),u.current[a]=setTimeout(()=>{delete u.current[a],_.current[a]=!0,W.current(ge,{approve:n}).finally(()=>{delete _.current[a]})},J*1e3),S(a,{rateLimitRetried:!0});return}p(a),O(J=>({...J,[a]:{origin:a,reason:`broker:${X}`,detail:U||null,clientId:e.clientId||I.current[a]||null}}))},[F,S,p,d]),W=t.useRef(w);W.current=w,t.useEffect(()=>{Object.values(b).forEach(e=>{e.status!=="broker"||_.current[e.origin]||u.current[e.origin]||(_.current[e.origin]=!0,w(e).finally(()=>{delete _.current[e.origin]}))})},[b,w]);const v=t.useCallback(e=>!$.current||!(e!=null&&e.consent)?Promise.resolve():w(e,{approve:!0}),[w]);t.useEffect(()=>{const e=N.current;Object.values(b).forEach(n=>{n.status==="silent"&&!e[n.origin]&&(e[n.origin]=setTimeout(()=>{delete e[n.origin],M(n.origin)},we))}),Object.keys(e).forEach(n=>{(!b[n]||b[n].status!=="silent")&&(clearTimeout(e[n]),delete e[n])})},[b,M]),t.useEffect(()=>()=>{z.current&&z.current(),Object.values(N.current).forEach(clearTimeout),Object.values(u.current).forEach(clearTimeout)},[]);const j=t.useCallback(e=>{z.current&&(z.current(),z.current=null);const n=o||ae;z.current=n(e,{onBlocked:()=>{m(s=>s[e.origin]?{...s,[e.origin]:{...s[e.origin],popupBlocked:!0}}:s)},onClosed:()=>{if(e.v2){Q&&m(s=>!s[e.origin]||!s[e.origin].silentUrl?s:{...s,[e.origin]:{...s[e.origin],status:"silent"}});return}h(e.origin)}})},[o,h]),C={pending:Object.values(b).filter(e=>e.status==="interactive"),authorize:j,approve:v,complete:F,dismiss:y,originEpochs:D,credentials:x,unsupported:P},q=Object.values(b).filter(e=>e.status==="silent"&&e.silentUrl);return L.default.createElement(Y.Provider,{value:C},r,q.map(e=>L.default.createElement("iframe",{key:`mm-silent-auth-${e.origin}`,src:e.silentUrl,title:`MachineMetrics silent authorization (${e.origin})`,"aria-hidden":"true",tabIndex:-1,style:{display:"none"}})))};le.propTypes={children:R.default.node,launcher:R.default.func,broker:R.default.func};const Ie=()=>t.useContext(Y),de=r=>{const{originEpochs:o}=t.useContext(Y),i=V(r);return i&&o[i]||0},fe=r=>{const{credentials:o}=t.useContext(Y),i=V(r);return i&&o[i]||null},pe=r=>{const{unsupported:o}=t.useContext(Y),i=V(r);return i&&o[i]||null},be=({children:r,authorizationLauncher:o,credentialBroker:i})=>{const[f,b]=t.useState({}),[m,D]=t.useState({}),k=t.useRef({}),x=t.useRef({}),A=t.useRef({}),P=t.useCallback((c,l)=>{var u;return!!((u=A.current[c])!=null&&u.has(l))},[]),O=t.useCallback((c,l,u)=>{b(d=>({...d,[c]:{origin:l,frameRef:u}}))},[]),H=t.useCallback(c=>{b(l=>{const u={...l};return delete u[c],u}),D(l=>{const u={...l};return delete u[c],u}),delete A.current[c]},[]);t.useEffect(()=>{const c=(u=[],d,p)=>{u.forEach(h=>h(d,p))},l=u=>{var F,S,_,w,W,v,j;if(!((F=u==null?void 0:u.data)!=null&&F.instanceId))return;const{instanceId:d,type:p}=u.data,h=f[d],M=(_=(S=h==null?void 0:h.frameRef)==null?void 0:S.current)==null?void 0:_.contentWindow;if(!M||u.source!==M||u.origin!==h.origin)return;const y={origin:u.origin},g=k.current;if(p==="response"){const{callbackId:C,response:q,error:e}=u.data,n=x.current[C];n&&(n(q,e),delete x.current[C]);return}if(p==="mark-registered"){const{requestType:C}=u.data;A.current[d]||(A.current[d]=new Set),A.current[d].add(C);return}p==="ready"&&D(C=>({...C,[d]:!0})),c((w=g[d])==null?void 0:w[p],u.data,y),c((W=g["*"])==null?void 0:W[p],u.data,y),c((v=g[d])==null?void 0:v["*"],u.data,y),c((j=g["*"])==null?void 0:j["*"],u.data,y)};return window.addEventListener("message",l),()=>{window.removeEventListener("message",l)}},[f]);const E=t.useCallback((c,l,u)=>{var p,h;const d=f[c];if(!d){console.warn(`Origin not set for id: ${c}. Unable to send message.`);return}(h=(p=d==null?void 0:d.frameRef)==null?void 0:p.current)!=null&&h.contentWindow&&d.frameRef.current.contentWindow.postMessage({type:l,...u,instanceId:c},d.origin)},[f]),z=t.useRef(0),N=t.useCallback(()=>`${Date.now()}-${++z.current}`,[]),I=t.useCallback(async(c,l,u={})=>new Promise((d,p)=>{const h=N(),M=(y,g)=>{delete x.current[h],g?p(g):d(y)};x.current[h]=M,E(c,"request",{callbackId:h,requestType:l,data:u})}),[E]),Z=t.useCallback((c,l)=>{E(c,"load-options",l)},[E]),$=t.useCallback((c,l)=>{E(c,"validate",l)},[E]),T=t.useMemo(()=>({registerFrame:O,unregisterFrame:H,sendMessage:E,sendRequest:I,loadOptions:Z,validate:$,hasHandler:P,readyFrames:m,addListener:(c,l,u)=>(k.current[c]||(k.current[c]={}),k.current[c][l]||(k.current[c][l]=[]),k.current[c][l].push(u),()=>{k.current[c][l]=k.current[c][l].filter(d=>d!==u)})}),[O,H,E,I,Z,$,P,m]);return L.default.createElement(G.Provider,{value:T},L.default.createElement(le,{launcher:o,broker:i},r))},K=(r,o,i)=>{const f=t.useContext(G);if(f===null)throw new Error("useEmbeddedEffect must be used within a MMEmbeddableZoneProvider");const b=t.useRef(i);t.useEffect(()=>{b.current=i},[i]),t.useEffect(()=>{if(!(!r||!o)){if(o.startsWith("key:")){const m=o.substring(4);return f.readyFrames[r]&&f.sendMessage(r,"subscribe-key",{keyChord:m}),f.addListener(r,`key-pressed:${m}`,(...k)=>b.current(...k))}return f.addListener(r,o,(...m)=>b.current(...m))}},[f,r,o])};be.propTypes={children:R.default.node.isRequired,authorizationLauncher:R.default.func,credentialBroker:R.default.func};const ne=oe.default.default||oe.default,Me=1e4,Se="credentials",Ue=(r,o)=>`${r}/mm-embedded-interop?id=${encodeURIComponent(o)}&origin=${encodeURIComponent(window.location.origin)}&caps=${Se}`,Le=ne.iframe`
   width: 100%;
   height: 100%;
   border: none;
   visibility: ${r=>r.$isReady?"visible":"hidden"};
-`,Ue=te.div`
+`,xe=ne.div`
   width: 100%;
   height: 100%;
   display: flex;
@@ -16,10 +16,10 @@
   text-align: center;
   color: #555;
   font-size: 14px;
-`,pe=r=>{const u=r&&r.origin||"This app",i=r&&r.reason||"";switch(i){case"broker:scope_above_ceiling":return{title:`${u} can’t be authorized here`,detail:"It asks for permissions your role doesn’t have."};case"broker:origin_mismatch":case"broker:unknown_client":return{title:`${u} can’t be authorized here`,detail:"It isn’t registered to run at this address."};case"broker:cross_company_principal":return{title:`${u} can’t be authorized here`,detail:"It can’t be authorized for this account."};default:return i.startsWith("broker:")?{title:`${u} can’t be authorized here`,detail:"Authorization was refused."}:{title:`${u} can’t be embedded here`,detail:"It needs an update to support embedding from a different domain."}}},be=({entry:r})=>{const u=pe(r);return L.default.createElement(Ue,{"data-reason":r&&r.reason||void 0},L.default.createElement("div",{style:{fontWeight:600}},u.title),L.default.createElement("div",{style:{fontSize:12,color:"#888"}},u.detail))};be.propTypes={entry:k.default.shape({origin:k.default.string,name:k.default.string,reason:k.default.string,detail:k.default.object})};const Le=te.div`
+`,he=r=>{const o=r&&r.origin||"This app",i=r&&r.reason||"";switch(i){case"broker:scope_above_ceiling":return{title:`${o} can’t be authorized here`,detail:"It asks for permissions your role doesn’t have."};case"broker:origin_mismatch":case"broker:unknown_client":return{title:`${o} can’t be authorized here`,detail:"It isn’t registered to run at this address."};case"broker:cross_company_principal":return{title:`${o} can’t be authorized here`,detail:"It can’t be authorized for this account."};default:return i.startsWith("broker:")?{title:`${o} can’t be authorized here`,detail:"Authorization was refused."}:{title:`${o} can’t be embedded here`,detail:"It needs an update to support embedding from a different domain."}}},me=({entry:r})=>{const o=he(r);return L.default.createElement(xe,{"data-reason":r&&r.reason||void 0},L.default.createElement("div",{style:{fontWeight:600}},o.title),L.default.createElement("div",{style:{fontSize:12,color:"#888"}},o.detail))};me.propTypes={entry:R.default.shape({origin:R.default.string,name:R.default.string,reason:R.default.string,detail:R.default.object})};const Ae=ne.div`
   height: 100%;
   display: flex;
   flex: 1;
   align-items: center;
   justify-content: center;
-`,xe=()=>L.default.createElement(Le,null,L.default.createElement("div",{style:{textAlign:"center"}},"This app couldn’t be loaded as an embeddable widget.")),me=({id:r,src:u,path:i,onInit:f=()=>{},onTimeout:m,context:E={},params:B={},renderUnsupported:C,renderTimeout:x,...A})=>{if("isConfiguring"in A)return console.error("isConfiguring must be passed via the params prop to MMEmbeddableZone"),null;if("colorMode"in E)return console.error("colorMode must be passed via the params prop to MMEmbeddableZone"),null;if("isFullScreen"in E)return console.error("isFullScreen must be passed via the params prop to MMEmbeddableZone"),null;const P=t.useRef(),[O,v]=t.useState(),[g,z]=t.useState(0),[K,M]=t.useState(!1),[D,$]=t.useState(!1),_=ae(u),c=le(u),l=de(u),[o,d]=t.useState(0),[p,h]=t.useState(null),{registerFrame:S,unregisterFrame:y,sendMessage:R}=t.useContext(Y),[F,U]=t.useState(),w=t.useRef(),I=t.useRef(m),Z=t.useRef(f),W=t.useRef(!1),j=t.useCallback(()=>{W.current=!1,clearTimeout(w.current),z(0),M(!1),$(!1),h(null)},[]);t.useEffect(()=>{(_>0||o>0)&&j()},[_,o,j]),t.useEffect(()=>{I.current=m},[m]),t.useEffect(()=>{Z.current=f},[f]),t.useEffect(()=>{g&&R(r,"set-context",{context:{...E}})},[E,r,g]),t.useEffect(()=>{g&&R(r,"set-params",{params:B})},[B,r,g]),t.useEffect(()=>{i!==void 0&&U((i==null?void 0:i.indexOf("/"))===0?i:`/${i}`)},[i]),t.useEffect(()=>{F===void 0||!g||R(r,"navigate",{path:F})},[F,g,r,R]),t.useEffect(()=>{if(!u||!r||!P)return;j();const e=new URL(u);return S(r,e.origin,P),Z.current(),v(Me(e.origin,r)),()=>{y(r)}},[u,r,S,P,j]),t.useEffect(()=>{if(!(!O||W.current))return w.current=setTimeout(()=>{M(!0),I.current&&I.current()},we),()=>clearTimeout(w.current)},[O,u,_,o]);const T=t.useCallback(()=>{W.current=!0,clearTimeout(w.current),M(!1)},[]);H(r,"init",e=>{T(),Array.isArray(e==null?void 0:e.acceptsCredentials)&&h(e.acceptsCredentials)}),H(r,"authorize",T),H(r,"login",T),H(r,"credential-request",()=>{T(),$(!0)}),t.useEffect(()=>{if(!D||!c)return;const e=p;if(Array.isArray(e)&&!e.includes(c.kind))return;const n=c.kind==="access_token"?{accessToken:c.accessToken}:{};R(r,"credential",{...n,credential:c})},[D,c,p,r,R]),H(r,"ready",()=>{T(),z(e=>e+1)});const q=t.useRef();return H(r,"heartbeat",()=>{q.current&&clearTimeout(q.current),q.current=setTimeout(()=>{d(e=>e+1)},6e3)}),t.useEffect(()=>()=>{q.current&&clearTimeout(q.current)},[]),l?C?C(l):L.default.createElement(be,{entry:l}):K&&!g?x?x():L.default.createElement(xe,null):L.default.createElement(Se,{key:`auth-epoch-${_}-frame-${o}`,$isReady:g,ref:P,src:O,...A})};me.propTypes={id:k.default.string,src:k.default.string.isRequired,path:k.default.string,onInit:k.default.func,onTimeout:k.default.func,renderUnsupported:k.default.func,renderTimeout:k.default.func};exports.CREDENTIAL_KIND_ACCESS_TOKEN=ue;exports.EmbeddedAuthorizationContext=N;exports.MMEmbeddableZone=me;exports.MMEmbeddableZoneContext=Y;exports.MMEmbeddableZoneProvider=fe;exports.isCrossSite=oe;exports.normalizeCredential=Q;exports.popupAuthorizationLauncher=ce;exports.unsupportedCopy=pe;exports.useEmbeddedAuthorizations=_e;exports.useEmbeddedCredential=le;exports.useEmbeddedEffect=H;exports.useEmbeddedOriginEpoch=ae;exports.useEmbeddedUnsupported=de;
+`,ze=()=>L.default.createElement(Ae,null,L.default.createElement("div",{style:{textAlign:"center"}},"This app couldn’t be loaded as an embeddable widget.")),Ee=({id:r,src:o,path:i,onInit:f=()=>{},onTimeout:b,context:m={},params:D={},renderUnsupported:k,renderTimeout:x,...A})=>{if("isConfiguring"in A)return console.error("isConfiguring must be passed via the params prop to MMEmbeddableZone"),null;if("colorMode"in m)return console.error("colorMode must be passed via the params prop to MMEmbeddableZone"),null;if("isFullScreen"in m)return console.error("isFullScreen must be passed via the params prop to MMEmbeddableZone"),null;const P=t.useRef(),[O,H]=t.useState(),[E,z]=t.useState(0),[N,I]=t.useState(!1),[Z,$]=t.useState(!1),T=de(o),c=fe(o),l=pe(o),[u,d]=t.useState(0),[p,h]=t.useState(null),{registerFrame:M,unregisterFrame:y,sendMessage:g}=t.useContext(G),[F,S]=t.useState(),_=t.useRef(),w=t.useRef(b),W=t.useRef(f),v=t.useRef(!1),j=t.useCallback(()=>{v.current=!1,clearTimeout(_.current),z(0),I(!1),$(!1),h(null)},[]);t.useEffect(()=>{(T>0||u>0)&&j()},[T,u,j]),t.useEffect(()=>{w.current=b},[b]),t.useEffect(()=>{W.current=f},[f]),t.useEffect(()=>{E&&g(r,"set-context",{context:{...m}})},[m,r,E]),t.useEffect(()=>{E&&g(r,"set-params",{params:D})},[D,r,E]),t.useEffect(()=>{i!==void 0&&S((i==null?void 0:i.indexOf("/"))===0?i:`/${i}`)},[i]),t.useEffect(()=>{F===void 0||!E||g(r,"navigate",{path:F})},[F,E,r,g]),t.useEffect(()=>{if(!o||!r||!P)return;j();const e=new URL(o);return M(r,e.origin,P),W.current(),H(Ue(e.origin,r)),()=>{y(r)}},[o,r,M,P,j]),t.useEffect(()=>{if(!(!O||v.current))return _.current=setTimeout(()=>{I(!0),w.current&&w.current()},Me),()=>clearTimeout(_.current)},[O,o,T,u]);const C=t.useCallback(()=>{v.current=!0,clearTimeout(_.current),I(!1)},[]);K(r,"init",e=>{C(),Array.isArray(e==null?void 0:e.acceptsCredentials)&&h(e.acceptsCredentials)}),K(r,"authorize",C),K(r,"login",C),K(r,"credential-request",()=>{C(),$(!0)}),t.useEffect(()=>{if(!Z||!c)return;const e=p;if(Array.isArray(e)&&!e.includes(c.kind))return;const n=c.kind==="access_token"?{accessToken:c.accessToken}:{};g(r,"credential",{...n,credential:c})},[Z,c,p,r,g]),K(r,"ready",()=>{C(),z(e=>e+1)});const q=t.useRef();return K(r,"heartbeat",()=>{q.current&&clearTimeout(q.current),q.current=setTimeout(()=>{d(e=>e+1)},6e3)}),t.useEffect(()=>()=>{q.current&&clearTimeout(q.current)},[]),l?k?k(l):L.default.createElement(me,{entry:l}):N&&!E?x?x():L.default.createElement(ze,null):L.default.createElement(Le,{key:`auth-epoch-${T}-frame-${u}`,$isReady:E,ref:P,src:O,...A})};Ee.propTypes={id:R.default.string,src:R.default.string.isRequired,path:R.default.string,onInit:R.default.func,onTimeout:R.default.func,renderUnsupported:R.default.func,renderTimeout:R.default.func};exports.CREDENTIAL_KIND_ACCESS_TOKEN=ie;exports.EmbeddedAuthorizationContext=Y;exports.MMEmbeddableZone=Ee;exports.MMEmbeddableZoneContext=G;exports.MMEmbeddableZoneProvider=be;exports.isCrossSite=te;exports.normalizeCredential=ee;exports.popupAuthorizationLauncher=ae;exports.unsupportedCopy=he;exports.useEmbeddedAuthorizations=Ie;exports.useEmbeddedCredential=fe;exports.useEmbeddedEffect=K;exports.useEmbeddedOriginEpoch=de;exports.useEmbeddedUnsupported=pe;

package/dist/mm-react-embeddable.es.js

@@ -1,7 +1,7 @@
-import x, { createContext as ue, useContext as G, useState as C, useRef as b, useCallback as h, useEffect as T, useMemo as fe } from "react";
-import w from "prop-types";
-import se from "styled-components";
-const re = ue(null), J = ue({
+import x, { createContext as de, useContext as V, useState as M, useRef as g, useCallback as h, useEffect as R, useMemo as me } from "react";
+import k from "prop-types";
+import ie from "styled-components";
+const ne = de(null), N = de({
   pending: [],
   authorize: () => {
   },
@@ -14,37 +14,37 @@ const re = ue(null), J = ue({
   originEpochs: {},
   credentials: {},
   unsupported: {}
-}), pe = "access_token", oe = (t) => t ? t.kind ? t : t.accessToken ? {
-  kind: pe,
+}), ge = "access_token", ce = (t) => t ? t.kind ? t : t.accessToken ? {
+  kind: ge,
   accessToken: t.accessToken,
   expiresAt: t.expiresAt || null
-} : null : null, me = 60, he = 120, ge = /* @__PURE__ */ new Set([
+} : null : null, be = 60, Ee = 120, Re = /* @__PURE__ */ new Set([
   "host_not_allowed",
   "unbound_host_bound_guest",
   "invalid_token",
   "provider_unavailable"
-]), te = typeof window != "undefined" && window.location.protocol === "https:", be = 8e3, N = (t) => {
+]), re = typeof window != "undefined" && window.location.protocol === "https:", Te = 8e3, Q = (t) => {
   try {
     return new URL(t).origin;
   } catch {
     return null;
   }
-}, ie = (t, s) => {
+}, ue = (t, s) => {
   const c = s == null ? void 0 : s.origin;
-  return !c || N(t == null ? void 0 : t.authUrl) !== c ? null : c;
-}, ce = (t) => {
+  return !c || Q(t == null ? void 0 : t.authUrl) !== c ? null : c;
+}, le = (t) => {
   if (!t || /^\d{1,3}(?:\.\d{1,3}){3}$/.test(t) || t.includes(":"))
     return t;
   const s = t.split(".");
   return s.length <= 2 ? t : s.slice(-2).join(".");
-}, Ee = (t, s) => {
+}, ae = (t, s) => {
   try {
     const c = new URL(t), d = new URL(s);
-    return c.protocol !== d.protocol ? !0 : ce(c.hostname) !== ce(d.hostname);
+    return c.protocol !== d.protocol ? !0 : le(c.hostname) !== le(d.hostname);
   } catch {
     return !0;
   }
-}, Re = (t, { onBlocked: s, onClosed: c }) => {
+}, ke = (t, { onBlocked: s, onClosed: c }) => {
   const d = window.open(
     t.authUrl,
     "mm-embed-auth",
@@ -53,34 +53,38 @@ const re = ue(null), J = ue({
   if (!d)
     return s(), () => {
     };
-  const m = setInterval(() => {
-    d.closed && (clearInterval(m), c());
+  const p = setInterval(() => {
+    d.closed && (clearInterval(p), c());
   }, 1e3);
-  return () => clearInterval(m);
-}, ae = ({ children: t, launcher: s, broker: c }) => {
-  const d = G(re), [m, E] = C({}), [H, I] = C({}), [$, S] = C({}), [q, P] = C({}), Y = b($);
-  Y.current = $;
-  const R = b(m);
-  R.current = m;
-  const F = b(null), V = b({}), A = b({}), Z = b({}), y = b(c);
-  y.current = c;
-  const U = h((e) => {
-    const r = A.current[e];
+  return () => clearInterval(p);
+}, fe = ({ children: t, launcher: s, broker: c }) => {
+  const d = V(ne), [p, b] = M({}), [Z, w] = M({}), [$, S] = M({}), [q, y] = M({}), G = g($);
+  G.current = $;
+  const E = g(p);
+  E.current = p;
+  const F = g(null), X = g({}), C = g({}), v = g({}), P = g(c);
+  P.current = c;
+  const _ = h((e) => {
+    const r = C.current[e];
     if (!r)
       return;
     const n = (u) => !u[e] || u[e].clientId ? u : { ...u, [e]: { ...u[e], clientId: r } };
-    E(n), P(n);
+    b(n), y(n);
   }, []), i = h(
     (e, r) => {
-      e && (P((n) => n[e] ? n : {
+      e && (y((n) => n[e] ? n : {
         ...n,
-        [e]: { origin: e, reason: r, clientId: A.current[e] || null }
-      }), U(e));
+        [e]: {
+          origin: e,
+          reason: r,
+          clientId: C.current[e] || null
+        }
+      }), _(e));
     },
-    [U]
-  ), a = h(
+    [_]
+  ), l = h(
     (e, { v2: r = !1, origin: n = null } = {}) => {
-      n && (r && Y.current[n] || (E((u) => u[n] ? u : {
+      n && (r && G.current[n] || (b((u) => u[n] ? u : {
         ...u,
         [n]: {
           origin: n,
@@ -89,40 +93,43 @@ const re = ue(null), J = ue({
           // v2 entries try the invisible silent resolver first — but only on a host that can
           // frame login (https). Otherwise (and for legacy signals) go straight to interactive,
           // so an http host doesn't wait out a silent frame that can never load login.
-          status: r && y.current ? "broker" : r && e.silentUrl && te ? "silent" : "interactive",
+          status: r && P.current ? "broker" : r && e.silentUrl && re ? "silent" : "interactive",
           v2: r,
           // v1.9: the scope the guest asked for; forwarded verbatim to the broker.
           scope: e.scope || null,
-          acceptsCredentials: Z.current[n] || null,
+          acceptsCredentials: v.current[n] || null,
           consent: null,
           error: null,
           // clientId from the request payload (v2) or the cached init (legacy);
           // the host resolves the display name from it.
-          clientId: e.clientId || A.current[n] || null,
+          clientId: e.clientId || C.current[n] || null,
           popupBlocked: !1
         }
-      }), U(n)));
+      }), _(n)));
     },
-    [U]
-  ), o = b({}), l = h((e) => {
+    [_]
+  ), o = g({}), a = h((e) => {
     o.current[e] && (clearTimeout(o.current[e]), delete o.current[e]);
-  }, []), f = h((e) => {
-    l(e), E((r) => {
-      if (!r[e])
-        return r;
-      const n = { ...r };
-      return delete n[e], n;
-    });
-  }, [l]), g = h(
+  }, []), f = h(
+    (e) => {
+      a(e), b((r) => {
+        if (!r[e])
+          return r;
+        const n = { ...r };
+        return delete n[e], n;
+      });
+    },
+    [a]
+  ), m = h(
     (e) => {
-      e && (f(e), I((r) => ({
+      e && (f(e), w((r) => ({
         ...r,
         [e]: (r[e] || 0) + 1
       })));
     },
     [f]
-  ), O = h((e) => {
-    E((r) => !r[e] || r[e].status === "interactive" ? r : {
+  ), A = h((e) => {
+    b((r) => !r[e] || r[e].status === "interactive" ? r : {
       ...r,
       [e]: { ...r[e], status: "interactive" }
     });
@@ -131,20 +138,20 @@ const re = ue(null), J = ue({
       f(e.origin);
     },
     [f]
-  ), k = h(
+  ), T = h(
     (e, r) => {
-      const n = ie(e, r);
+      const n = ue(e, r);
       if (n) {
-        if (Ee(n, window.location.origin)) {
+        if (ae(n, window.location.origin)) {
           i(n, "cross-site-legacy");
           return;
         }
-        a(e, { origin: n });
+        l(e, { origin: n });
       }
     },
-    [a, i]
+    [l, i]
   );
-  T(() => {
+  R(() => {
     if (!d)
       return;
     const e = [
@@ -155,179 +162,185 @@ const re = ue(null), J = ue({
       // clientId is only a lookup key: the host resolves the display name from
       // it, and a broker binds it to the attested origin server-side.
       d.addListener("*", "init", (r, n) => {
-        n != null && n.origin && (r != null && r.clientId) && (A.current[n.origin] = r.clientId, U(n.origin)), n != null && n.origin && Array.isArray(r == null ? void 0 : r.acceptsCredentials) && (Z.current[n.origin] = r.acceptsCredentials);
+        n != null && n.origin && (r != null && r.clientId) && (C.current[n.origin] = r.clientId, _(n.origin)), n != null && n.origin && Array.isArray(r == null ? void 0 : r.acceptsCredentials) ? v.current[n.origin] = r.acceptsCredentials : n != null && n.origin && ae(n.origin, window.location.origin) && i(n.origin, "cross-site-legacy");
       }),
-      d.addListener("*", "authorize", k),
-      d.addListener("*", "login", k),
+      d.addListener("*", "authorize", T),
+      d.addListener("*", "login", T),
       d.addListener(
         "*",
         "credential-request",
-        (r, n) => a(r, { v2: !0, origin: ie(r, n) })
+        (r, n) => l(r, { v2: !0, origin: ue(r, n) })
       )
     ];
     return () => e.forEach((r) => r());
-  }, [d, k, a, U]), T(() => {
+  }, [d, T, l, _, i]), R(() => {
     const e = (r) => {
       const n = r == null ? void 0 : r.data;
       if (!n || n.type !== "authorized" && n.type !== "authorize-failed")
         return;
-      const u = N(n.authUrl);
+      const u = Q(n.authUrl);
       if (!(!u || r.origin !== u)) {
         if (n.type === "authorized") {
           if (n.accessToken) {
-            if (!R.current[u])
+            if (!E.current[u])
               return;
-            S((p) => ({
-              ...p,
-              [u]: oe({ accessToken: n.accessToken })
+            S((z) => ({
+              ...z,
+              [u]: ce({ accessToken: n.accessToken })
             })), f(u);
           } else
-            g(u);
+            m(u);
           return;
         }
-        O(u);
+        A(u);
       }
     };
     return window.addEventListener("message", e), () => window.removeEventListener("message", e);
-  }, [f, g, O]);
+  }, [f, m, A]);
   const B = h(
     (e, r) => {
-      const n = e == null ? void 0 : e.origin, u = oe(r);
-      !n || !u || (S((p) => ({ ...p, [n]: u })), f(n));
+      const n = e == null ? void 0 : e.origin, u = ce(r);
+      !n || !u || (S((z) => ({ ...z, [n]: u })), f(n));
     },
     [f]
-  ), z = h((e, r) => {
-    E((n) => n[e] ? { ...n, [e]: { ...n[e], ...r } } : n);
-  }, []), L = b({}), M = h(
+  ), O = h((e, r) => {
+    b((n) => n[e] ? { ...n, [e]: { ...n[e], ...r } } : n);
+  }, []), U = g({}), L = h(
     async (e, { approve: r } = {}) => {
-      const n = y.current, { origin: u } = e;
-      let p;
+      const n = P.current, { origin: u } = e;
+      let z;
       try {
-        p = await n(
-          { origin: u, clientId: e.clientId, scope: e.scope, authUrl: e.authUrl },
+        z = await n(
+          {
+            origin: u,
+            clientId: e.clientId,
+            scope: e.scope,
+            authUrl: e.authUrl
+          },
           { approve: r }
         );
       } catch {
-        r ? z(u, { error: { reason: "broker_unavailable" } }) : z(u, {
-          status: e.silentUrl && te ? "silent" : "interactive"
+        r ? O(u, { error: { reason: "broker_unavailable" } }) : O(u, {
+          status: e.silentUrl && re ? "silent" : "interactive"
         });
         return;
       }
-      if ((p == null ? void 0 : p.status) === 200 && p.credential) {
-        B(e, p.credential);
+      const oe = z == null ? void 0 : z.status, H = (z == null ? void 0 : z.body) || {};
+      if (oe === 200 && H.credential) {
+        B(e, H.credential);
         return;
       }
-      if ((p == null ? void 0 : p.status) === 409 && p.consentRequired) {
-        z(u, {
+      if (oe === 409 && H.consentRequired) {
+        O(u, {
           status: "interactive",
           consent: {
-            client: p.client || null,
-            stepUp: !!p.stepUp,
-            scope: p.scope || e.scope
+            client: H.client || null,
+            stepUp: !!H.stepUp,
+            scope: H.scope || e.scope
           },
           error: null
         });
         return;
       }
-      const Q = (p == null ? void 0 : p.error) || "broker_error";
-      if (!r && ge.has(Q)) {
-        z(u, {
-          status: e.silentUrl && te ? "silent" : "interactive"
+      const ee = H.error || "broker_error";
+      if (!r && Re.has(ee)) {
+        O(u, {
+          status: e.silentUrl && re ? "silent" : "interactive"
         });
         return;
       }
-      if (r && Q === "consent_denied") {
-        z(u, { error: null });
+      if (r && ee === "consent_denied") {
+        O(u, { error: null });
         return;
       }
-      if (Q === "rate_limited" && !e.rateLimitRetried) {
-        const ee = Math.min(
-          Number(p == null ? void 0 : p.retryAfter) > 0 ? Number(p.retryAfter) : me,
-          he
-        ), de = { ...e, rateLimitRetried: !0 };
-        l(u), o.current[u] = setTimeout(() => {
-          delete o.current[u], L.current[u] = !0, v.current(de, { approve: r }).finally(() => {
-            delete L.current[u];
+      if (ee === "rate_limited" && !e.rateLimitRetried) {
+        const te = Math.min(
+          Number(H.retryAfter) > 0 ? Number(H.retryAfter) : be,
+          Ee
+        ), he = { ...e, rateLimitRetried: !0 };
+        a(u), o.current[u] = setTimeout(() => {
+          delete o.current[u], U.current[u] = !0, K.current(he, { approve: r }).finally(() => {
+            delete U.current[u];
           });
-        }, ee * 1e3), z(u, { rateLimitRetried: !0 });
+        }, te * 1e3), O(u, { rateLimitRetried: !0 });
         return;
       }
-      f(u), P((ee) => ({
-        ...ee,
+      f(u), y((te) => ({
+        ...te,
         [u]: {
           origin: u,
-          reason: `broker:${Q}`,
-          detail: p || null,
-          clientId: e.clientId || A.current[u] || null
+          reason: `broker:${ee}`,
+          detail: z || null,
+          clientId: e.clientId || C.current[u] || null
         }
       }));
     },
-    [B, z, f, l]
-  ), v = b(M);
-  v.current = M, T(() => {
-    Object.values(m).forEach((e) => {
-      e.status !== "broker" || L.current[e.origin] || o.current[e.origin] || (L.current[e.origin] = !0, M(e).finally(() => {
-        delete L.current[e.origin];
+    [B, O, f, a]
+  ), K = g(L);
+  K.current = L, R(() => {
+    Object.values(p).forEach((e) => {
+      e.status !== "broker" || U.current[e.origin] || o.current[e.origin] || (U.current[e.origin] = !0, L(e).finally(() => {
+        delete U.current[e.origin];
       }));
     });
-  }, [m, M]);
-  const K = h(
-    (e) => !y.current || !(e != null && e.consent) ? Promise.resolve() : M(e, { approve: !0 }),
-    [M]
+  }, [p, L]);
+  const Y = h(
+    (e) => !P.current || !(e != null && e.consent) ? Promise.resolve() : L(e, { approve: !0 }),
+    [L]
   );
-  T(() => {
-    const e = V.current;
-    Object.values(m).forEach((r) => {
+  R(() => {
+    const e = X.current;
+    Object.values(p).forEach((r) => {
       r.status === "silent" && !e[r.origin] && (e[r.origin] = setTimeout(() => {
-        delete e[r.origin], O(r.origin);
-      }, be));
+        delete e[r.origin], A(r.origin);
+      }, Te));
     }), Object.keys(e).forEach((r) => {
-      (!m[r] || m[r].status !== "silent") && (clearTimeout(e[r]), delete e[r]);
+      (!p[r] || p[r].status !== "silent") && (clearTimeout(e[r]), delete e[r]);
     });
-  }, [m, O]), T(() => () => {
-    F.current && F.current(), Object.values(V.current).forEach(clearTimeout), Object.values(o.current).forEach(clearTimeout);
+  }, [p, A]), R(() => () => {
+    F.current && F.current(), Object.values(X.current).forEach(clearTimeout), Object.values(o.current).forEach(clearTimeout);
   }, []);
   const W = h(
     (e) => {
       F.current && (F.current(), F.current = null);
-      const r = s || Re;
+      const r = s || ke;
       F.current = r(e, {
         onBlocked: () => {
-          E((n) => n[e.origin] ? {
+          b((n) => n[e.origin] ? {
             ...n,
             [e.origin]: { ...n[e.origin], popupBlocked: !0 }
           } : n);
         },
         onClosed: () => {
           if (e.v2) {
-            te && E((n) => !n[e.origin] || !n[e.origin].silentUrl ? n : {
+            re && b((n) => !n[e.origin] || !n[e.origin].silentUrl ? n : {
               ...n,
               [e.origin]: { ...n[e.origin], status: "silent" }
             });
             return;
           }
-          g(e.origin);
+          m(e.origin);
         }
       });
     },
-    [s, g]
-  ), _ = {
+    [s, m]
+  ), I = {
     // Hosts render UI for interactive entries only; silent resolution is
     // invisible by design.
-    pending: Object.values(m).filter(
+    pending: Object.values(p).filter(
       (e) => e.status === "interactive"
     ),
     authorize: W,
-    approve: K,
+    approve: Y,
     complete: B,
     dismiss: j,
-    originEpochs: H,
+    originEpochs: Z,
     credentials: $,
     unsupported: q
-  }, D = Object.values(m).filter(
+  }, D = Object.values(p).filter(
     (e) => e.status === "silent" && e.silentUrl
   );
-  return /* @__PURE__ */ x.createElement(J.Provider, { value: _ }, t, D.map((e) => /* @__PURE__ */ x.createElement(
+  return /* @__PURE__ */ x.createElement(N.Provider, { value: I }, t, D.map((e) => /* @__PURE__ */ x.createElement(
     "iframe",
     {
       key: `mm-silent-auth-${e.origin}`,
@@ -339,179 +352,180 @@ const re = ue(null), J = ue({
     }
   )));
 };
-ae.propTypes = {
-  children: w.node,
-  launcher: w.func,
+fe.propTypes = {
+  children: k.node,
+  launcher: k.func,
   /**
    * `async (request, { approve }) => result` where request =
    * `{ origin, clientId, scope, authUrl }` (origin is the zone-attested frame origin) and result
-   * mirrors the authorization server's broker response: `{ status: 200, credential, scope,
-   * client }`, `{ status: 409, consentRequired: true, client: { name, hostname }, stepUp }`, or
-   * `{ status, error }`. Provided only by hosts that are themselves first-party clients.
+   * is `{ status, body }`: the HTTP status and the authorization server's parsed JSON, kept
+   * apart so a body field can never shadow the status. Bodies: `{ credential, scope, client }`
+   * on 200, `{ consentRequired: true, client: { name, hostname }, stepUp }` on 409, `{ error,
+   * … }` otherwise. Provided only by hosts that are themselves first-party clients.
    */
-  broker: w.func
+  broker: k.func
 };
-const Pe = () => G(J), Te = (t) => {
-  const { originEpochs: s } = G(J), c = N(t);
+const je = () => V(N), we = (t) => {
+  const { originEpochs: s } = V(N), c = Q(t);
   return c && s[c] || 0;
-}, ke = (t) => {
-  const { credentials: s } = G(J), c = N(t);
+}, Ie = (t) => {
+  const { credentials: s } = V(N), c = Q(t);
   return c && s[c] || null;
-}, we = (t) => {
-  const { unsupported: s } = G(J), c = N(t);
+}, _e = (t) => {
+  const { unsupported: s } = V(N), c = Q(t);
   return c && s[c] || null;
-}, Ie = ({ children: t, authorizationLauncher: s, credentialBroker: c }) => {
-  const [d, m] = C({}), [E, H] = C({}), I = b({}), $ = b({}), S = b({}), q = h((i, a) => {
+}, Ue = ({ children: t, authorizationLauncher: s, credentialBroker: c }) => {
+  const [d, p] = M({}), [b, Z] = M({}), w = g({}), $ = g({}), S = g({}), q = h((i, l) => {
     var o;
-    return !!((o = S.current[i]) != null && o.has(a));
-  }, []), P = h((i, a, o) => {
-    m((l) => ({ ...l, [i]: { origin: a, frameRef: o } }));
-  }, []), Y = h((i) => {
-    m((a) => {
-      const o = { ...a };
+    return !!((o = S.current[i]) != null && o.has(l));
+  }, []), y = h((i, l, o) => {
+    p((a) => ({ ...a, [i]: { origin: l, frameRef: o } }));
+  }, []), G = h((i) => {
+    p((l) => {
+      const o = { ...l };
       return delete o[i], o;
-    }), H((a) => {
-      const o = { ...a };
+    }), Z((l) => {
+      const o = { ...l };
       return delete o[i], o;
     }), delete S.current[i];
   }, []);
-  T(() => {
-    const i = (o = [], l, f) => {
-      o.forEach((g) => g(l, f));
-    }, a = (o) => {
-      var B, z, L, M, v, K, W;
+  R(() => {
+    const i = (o = [], a, f) => {
+      o.forEach((m) => m(a, f));
+    }, l = (o) => {
+      var B, O, U, L, K, Y, W;
       if (!((B = o == null ? void 0 : o.data) != null && B.instanceId))
         return;
-      const { instanceId: l, type: f } = o.data, g = d[l], O = (L = (z = g == null ? void 0 : g.frameRef) == null ? void 0 : z.current) == null ? void 0 : L.contentWindow;
-      if (!O || o.source !== O || o.origin !== g.origin)
+      const { instanceId: a, type: f } = o.data, m = d[a], A = (U = (O = m == null ? void 0 : m.frameRef) == null ? void 0 : O.current) == null ? void 0 : U.contentWindow;
+      if (!A || o.source !== A || o.origin !== m.origin)
         return;
-      const j = { origin: o.origin }, k = I.current;
+      const j = { origin: o.origin }, T = w.current;
       if (f === "response") {
-        const { callbackId: _, response: D, error: e } = o.data, r = $.current[_];
-        r && (r(D, e), delete $.current[_]);
+        const { callbackId: I, response: D, error: e } = o.data, r = $.current[I];
+        r && (r(D, e), delete $.current[I]);
         return;
       }
       if (f === "mark-registered") {
-        const { requestType: _ } = o.data;
-        S.current[l] || (S.current[l] = /* @__PURE__ */ new Set()), S.current[l].add(_);
+        const { requestType: I } = o.data;
+        S.current[a] || (S.current[a] = /* @__PURE__ */ new Set()), S.current[a].add(I);
         return;
       }
-      f === "ready" && H((_) => ({ ..._, [l]: !0 })), i((M = k[l]) == null ? void 0 : M[f], o.data, j), i((v = k["*"]) == null ? void 0 : v[f], o.data, j), i((K = k[l]) == null ? void 0 : K["*"], o.data, j), i((W = k["*"]) == null ? void 0 : W["*"], o.data, j);
+      f === "ready" && Z((I) => ({ ...I, [a]: !0 })), i((L = T[a]) == null ? void 0 : L[f], o.data, j), i((K = T["*"]) == null ? void 0 : K[f], o.data, j), i((Y = T[a]) == null ? void 0 : Y["*"], o.data, j), i((W = T["*"]) == null ? void 0 : W["*"], o.data, j);
     };
-    return window.addEventListener("message", a), () => {
-      window.removeEventListener("message", a);
+    return window.addEventListener("message", l), () => {
+      window.removeEventListener("message", l);
     };
   }, [d]);
-  const R = h(
-    (i, a, o) => {
-      var f, g;
-      const l = d[i];
-      if (!l) {
+  const E = h(
+    (i, l, o) => {
+      var f, m;
+      const a = d[i];
+      if (!a) {
         console.warn(`Origin not set for id: ${i}. Unable to send message.`);
         return;
       }
-      (g = (f = l == null ? void 0 : l.frameRef) == null ? void 0 : f.current) != null && g.contentWindow && l.frameRef.current.contentWindow.postMessage(
-        { type: a, ...o, instanceId: i },
-        l.origin
+      (m = (f = a == null ? void 0 : a.frameRef) == null ? void 0 : f.current) != null && m.contentWindow && a.frameRef.current.contentWindow.postMessage(
+        { type: l, ...o, instanceId: i },
+        a.origin
       );
     },
     [d]
-  ), F = b(0), V = h(() => `${Date.now()}-${++F.current}`, []), A = h(
-    async (i, a, o = {}) => new Promise((l, f) => {
-      const g = V(), O = (j, k) => {
-        delete $.current[g], k ? f(k) : l(j);
+  ), F = g(0), X = h(() => `${Date.now()}-${++F.current}`, []), C = h(
+    async (i, l, o = {}) => new Promise((a, f) => {
+      const m = X(), A = (j, T) => {
+        delete $.current[m], T ? f(T) : a(j);
       };
-      $.current[g] = O, R(i, "request", { callbackId: g, requestType: a, data: o });
+      $.current[m] = A, E(i, "request", { callbackId: m, requestType: l, data: o });
     }),
-    [R]
-  ), Z = h(
-    (i, a) => {
-      R(i, "load-options", a);
+    [E]
+  ), v = h(
+    (i, l) => {
+      E(i, "load-options", l);
     },
-    [R]
-  ), y = h(
-    (i, a) => {
-      R(i, "validate", a);
+    [E]
+  ), P = h(
+    (i, l) => {
+      E(i, "validate", l);
     },
-    [R]
-  ), U = fe(
+    [E]
+  ), _ = me(
     () => ({
-      registerFrame: P,
-      unregisterFrame: Y,
-      sendMessage: R,
-      sendRequest: A,
-      loadOptions: Z,
-      validate: y,
+      registerFrame: y,
+      unregisterFrame: G,
+      sendMessage: E,
+      sendRequest: C,
+      loadOptions: v,
+      validate: P,
       hasHandler: q,
-      readyFrames: E,
-      addListener: (i, a, o) => (I.current[i] || (I.current[i] = {}), I.current[i][a] || (I.current[i][a] = []), I.current[i][a].push(o), () => {
-        I.current[i][a] = I.current[i][a].filter((l) => l !== o);
+      readyFrames: b,
+      addListener: (i, l, o) => (w.current[i] || (w.current[i] = {}), w.current[i][l] || (w.current[i][l] = []), w.current[i][l].push(o), () => {
+        w.current[i][l] = w.current[i][l].filter((a) => a !== o);
       })
     }),
     [
-      P,
-      Y,
-      R,
-      A,
-      Z,
       y,
+      G,
+      E,
+      C,
+      v,
+      P,
       q,
-      E
+      b
     ]
   );
-  return /* @__PURE__ */ x.createElement(re.Provider, { value: U }, /* @__PURE__ */ x.createElement(ae, { launcher: s, broker: c }, t));
-}, X = (t, s, c) => {
-  const d = G(re);
+  return /* @__PURE__ */ x.createElement(ne.Provider, { value: _ }, /* @__PURE__ */ x.createElement(fe, { launcher: s, broker: c }, t));
+}, J = (t, s, c) => {
+  const d = V(ne);
   if (d === null)
     throw new Error(
       "useEmbeddedEffect must be used within a MMEmbeddableZoneProvider"
     );
-  const m = b(c);
-  T(() => {
-    m.current = c;
-  }, [c]), T(() => {
+  const p = g(c);
+  R(() => {
+    p.current = c;
+  }, [c]), R(() => {
     if (!(!t || !s)) {
       if (s.startsWith("key:")) {
-        const E = s.substring(4);
-        return d.readyFrames[t] && d.sendMessage(t, "subscribe-key", { keyChord: E }), d.addListener(
+        const b = s.substring(4);
+        return d.readyFrames[t] && d.sendMessage(t, "subscribe-key", { keyChord: b }), d.addListener(
           t,
-          `key-pressed:${E}`,
-          (...I) => m.current(...I)
+          `key-pressed:${b}`,
+          (...w) => p.current(...w)
         );
       }
       return d.addListener(
         t,
         s,
-        (...E) => m.current(...E)
+        (...b) => p.current(...b)
       );
     }
   }, [d, t, s]);
 };
-Ie.propTypes = {
-  children: w.node.isRequired,
+Ue.propTypes = {
+  children: k.node.isRequired,
   /**
    * Optional interactive-step launcher for embedded authorizations,
    * `(entry, { onBlocked, onClosed }) => cleanup`. Defaults to a top-level
    * popup. Hosts that cannot open windows (Android WebView shells) drive
    * their own UI from useEmbeddedAuthorizations() instead.
    */
-  authorizationLauncher: w.func,
+  authorizationLauncher: k.func,
   /**
    * Optional credential broker for hosts that are first-party MachineMetrics clients
    * (`async (request, { approve }) => result`, see EmbeddedAuthorizationManager). When present,
    * v2 credential requests are brokered server-side (no popup, no hidden frame) and consent is
    * rendered natively by the host from the broker's `client` identity.
    */
-  credentialBroker: w.func
+  credentialBroker: k.func
 };
-const ne = se.default || se, _e = 1e4, Ue = "credentials", Le = (t, s) => `${t}/mm-embedded-interop?id=${encodeURIComponent(s)}&origin=${encodeURIComponent(
+const se = ie.default || ie, Le = 1e4, Me = "credentials", Ce = (t, s) => `${t}/mm-embedded-interop?id=${encodeURIComponent(s)}&origin=${encodeURIComponent(
   window.location.origin
-)}&caps=${Ue}`, Me = ne.iframe`
+)}&caps=${Me}`, Ae = se.iframe`
   width: 100%;
   height: 100%;
   border: none;
   visibility: ${(t) => t.$isReady ? "visible" : "hidden"};
-`, Ce = ne.div`
+`, Oe = se.div`
   width: 100%;
   height: 100%;
   display: flex;
@@ -524,7 +538,7 @@ const ne = se.default || se, _e = 1e4, Ue = "credentials", Le = (t, s) => `${t}/
   text-align: center;
   color: #555;
   font-size: 14px;
-`, Ae = (t) => {
+`, ze = (t) => {
   const s = t && t.origin || "This app", c = t && t.reason || "";
   switch (c) {
     case "broker:scope_above_ceiling":
@@ -552,34 +566,34 @@ const ne = se.default || se, _e = 1e4, Ue = "credentials", Le = (t, s) => `${t}/
         detail: "It needs an update to support embedding from a different domain."
       };
   }
-}, le = ({ entry: t }) => {
-  const s = Ae(t);
-  return /* @__PURE__ */ x.createElement(Ce, { "data-reason": t && t.reason || void 0 }, /* @__PURE__ */ x.createElement("div", { style: { fontWeight: 600 } }, s.title), /* @__PURE__ */ x.createElement("div", { style: { fontSize: 12, color: "#888" } }, s.detail));
+}, pe = ({ entry: t }) => {
+  const s = ze(t);
+  return /* @__PURE__ */ x.createElement(Oe, { "data-reason": t && t.reason || void 0 }, /* @__PURE__ */ x.createElement("div", { style: { fontWeight: 600 } }, s.title), /* @__PURE__ */ x.createElement("div", { style: { fontSize: 12, color: "#888" } }, s.detail));
 };
-le.propTypes = {
-  entry: w.shape({
-    origin: w.string,
-    name: w.string,
-    reason: w.string,
-    detail: w.object
+pe.propTypes = {
+  entry: k.shape({
+    origin: k.string,
+    name: k.string,
+    reason: k.string,
+    detail: k.object
   })
 };
-const Oe = ne.div`
+const xe = se.div`
   height: 100%;
   display: flex;
   flex: 1;
   align-items: center;
   justify-content: center;
-`, ze = () => /* @__PURE__ */ x.createElement(Oe, null, /* @__PURE__ */ x.createElement("div", { style: { textAlign: "center" } }, "This app couldn’t be loaded as an embeddable widget.")), xe = ({
+`, $e = () => /* @__PURE__ */ x.createElement(xe, null, /* @__PURE__ */ x.createElement("div", { style: { textAlign: "center" } }, "This app couldn’t be loaded as an embeddable widget.")), Se = ({
   id: t,
   src: s,
   path: c,
   onInit: d = () => {
   },
-  onTimeout: m,
-  context: E = {},
-  params: H = {},
-  renderUnsupported: I,
+  onTimeout: p,
+  context: b = {},
+  params: Z = {},
+  renderUnsupported: w,
   renderTimeout: $,
   ...S
 }) => {
@@ -587,119 +601,119 @@ const Oe = ne.div`
     return console.error(
       "isConfiguring must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  if ("colorMode" in E)
+  if ("colorMode" in b)
     return console.error(
       "colorMode must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  if ("isFullScreen" in E)
+  if ("isFullScreen" in b)
     return console.error(
       "isFullScreen must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  const q = b(), [P, Y] = C(), [R, F] = C(0), [V, A] = C(!1), [Z, y] = C(!1), U = Te(s), i = ke(s), a = we(s), [o, l] = C(0), [f, g] = C(null), { registerFrame: O, unregisterFrame: j, sendMessage: k } = G(
-    re
-  ), [B, z] = C(), L = b(), M = b(m), v = b(d), K = b(!1), W = h(() => {
-    K.current = !1, clearTimeout(L.current), F(0), A(!1), y(!1), g(null);
+  const q = g(), [y, G] = M(), [E, F] = M(0), [X, C] = M(!1), [v, P] = M(!1), _ = we(s), i = Ie(s), l = _e(s), [o, a] = M(0), [f, m] = M(null), { registerFrame: A, unregisterFrame: j, sendMessage: T } = V(
+    ne
+  ), [B, O] = M(), U = g(), L = g(p), K = g(d), Y = g(!1), W = h(() => {
+    Y.current = !1, clearTimeout(U.current), F(0), C(!1), P(!1), m(null);
   }, []);
-  T(() => {
-    (U > 0 || o > 0) && W();
-  }, [U, o, W]), T(() => {
-    M.current = m;
-  }, [m]), T(() => {
-    v.current = d;
-  }, [d]), T(() => {
-    R && k(t, "set-context", {
+  R(() => {
+    (_ > 0 || o > 0) && W();
+  }, [_, o, W]), R(() => {
+    L.current = p;
+  }, [p]), R(() => {
+    K.current = d;
+  }, [d]), R(() => {
+    E && T(t, "set-context", {
       context: {
-        ...E
+        ...b
       }
     });
-  }, [E, t, R]), T(() => {
-    R && k(t, "set-params", { params: H });
-  }, [H, t, R]), T(() => {
-    c !== void 0 && z((c == null ? void 0 : c.indexOf("/")) === 0 ? c : `/${c}`);
-  }, [c]), T(() => {
-    B === void 0 || !R || k(t, "navigate", { path: B });
-  }, [B, R, t, k]), T(() => {
+  }, [b, t, E]), R(() => {
+    E && T(t, "set-params", { params: Z });
+  }, [Z, t, E]), R(() => {
+    c !== void 0 && O((c == null ? void 0 : c.indexOf("/")) === 0 ? c : `/${c}`);
+  }, [c]), R(() => {
+    B === void 0 || !E || T(t, "navigate", { path: B });
+  }, [B, E, t, T]), R(() => {
     if (!s || !t || !q)
       return;
     W();
     const e = new URL(s);
-    return O(t, e.origin, q), v.current(), Y(Le(e.origin, t)), () => {
+    return A(t, e.origin, q), K.current(), G(Ce(e.origin, t)), () => {
       j(t);
     };
-  }, [s, t, O, q, W]), T(() => {
-    if (!(!P || K.current))
-      return L.current = setTimeout(() => {
-        A(!0), M.current && M.current();
-      }, _e), () => clearTimeout(L.current);
-  }, [P, s, U, o]);
-  const _ = h(() => {
-    K.current = !0, clearTimeout(L.current), A(!1);
+  }, [s, t, A, q, W]), R(() => {
+    if (!(!y || Y.current))
+      return U.current = setTimeout(() => {
+        C(!0), L.current && L.current();
+      }, Le), () => clearTimeout(U.current);
+  }, [y, s, _, o]);
+  const I = h(() => {
+    Y.current = !0, clearTimeout(U.current), C(!1);
   }, []);
-  X(t, "init", (e) => {
-    _(), Array.isArray(e == null ? void 0 : e.acceptsCredentials) && g(e.acceptsCredentials);
-  }), X(t, "authorize", _), X(t, "login", _), X(t, "credential-request", () => {
-    _(), y(!0);
-  }), T(() => {
-    if (!Z || !i)
+  J(t, "init", (e) => {
+    I(), Array.isArray(e == null ? void 0 : e.acceptsCredentials) && m(e.acceptsCredentials);
+  }), J(t, "authorize", I), J(t, "login", I), J(t, "credential-request", () => {
+    I(), P(!0);
+  }), R(() => {
+    if (!v || !i)
       return;
     const e = f;
     if (Array.isArray(e) && !e.includes(i.kind))
       return;
     const r = i.kind === "access_token" ? { accessToken: i.accessToken } : {};
-    k(t, "credential", { ...r, credential: i });
-  }, [Z, i, f, t, k]), X(t, "ready", () => {
-    _(), F((e) => e + 1);
+    T(t, "credential", { ...r, credential: i });
+  }, [v, i, f, t, T]), J(t, "ready", () => {
+    I(), F((e) => e + 1);
   });
-  const D = b();
-  return X(t, "heartbeat", () => {
+  const D = g();
+  return J(t, "heartbeat", () => {
     D.current && clearTimeout(D.current), D.current = setTimeout(() => {
-      l((e) => e + 1);
+      a((e) => e + 1);
     }, 6e3);
-  }), T(() => () => {
+  }), R(() => () => {
     D.current && clearTimeout(D.current);
-  }, []), a ? I ? I(a) : /* @__PURE__ */ x.createElement(le, { entry: a }) : V && !R ? $ ? $() : /* @__PURE__ */ x.createElement(ze, null) : /* @__PURE__ */ x.createElement(
-    Me,
+  }, []), l ? w ? w(l) : /* @__PURE__ */ x.createElement(pe, { entry: l }) : X && !E ? $ ? $() : /* @__PURE__ */ x.createElement($e, null) : /* @__PURE__ */ x.createElement(
+    Ae,
     {
-      key: `auth-epoch-${U}-frame-${o}`,
-      $isReady: R,
+      key: `auth-epoch-${_}-frame-${o}`,
+      $isReady: E,
       ref: q,
-      src: P,
+      src: y,
       ...S
     }
   );
 };
-xe.propTypes = {
-  id: w.string,
-  src: w.string.isRequired,
-  path: w.string,
-  onInit: w.func,
-  onTimeout: w.func,
+Se.propTypes = {
+  id: k.string,
+  src: k.string.isRequired,
+  path: k.string,
+  onInit: k.func,
+  onTimeout: k.func,
   /**
    * Optional host-styled renderer for the structurally-unsupported embed
    * state (legacy app on a cross-site origin), `(entry) => ReactNode`. Falls
    * back to a minimal built-in placeholder.
    */
-  renderUnsupported: w.func,
+  renderUnsupported: k.func,
   /**
    * Optional host-styled renderer for the handshake-timeout failure state
    * (the app is not embeddable / could not load), `() => ReactNode`. Falls
    * back to a minimal centered message.
    */
-  renderTimeout: w.func
+  renderTimeout: k.func
 };
 export {
-  pe as CREDENTIAL_KIND_ACCESS_TOKEN,
-  J as EmbeddedAuthorizationContext,
-  xe as MMEmbeddableZone,
-  re as MMEmbeddableZoneContext,
-  Ie as MMEmbeddableZoneProvider,
-  Ee as isCrossSite,
-  oe as normalizeCredential,
-  Re as popupAuthorizationLauncher,
-  Ae as unsupportedCopy,
-  Pe as useEmbeddedAuthorizations,
-  ke as useEmbeddedCredential,
-  X as useEmbeddedEffect,
-  Te as useEmbeddedOriginEpoch,
-  we as useEmbeddedUnsupported
+  ge as CREDENTIAL_KIND_ACCESS_TOKEN,
+  N as EmbeddedAuthorizationContext,
+  Se as MMEmbeddableZone,
+  ne as MMEmbeddableZoneContext,
+  Ue as MMEmbeddableZoneProvider,
+  ae as isCrossSite,
+  ce as normalizeCredential,
+  ke as popupAuthorizationLauncher,
+  ze as unsupportedCopy,
+  je as useEmbeddedAuthorizations,
+  Ie as useEmbeddedCredential,
+  J as useEmbeddedEffect,
+  we as useEmbeddedOriginEpoch,
+  _e as useEmbeddedUnsupported
 };

package/dist/mm-react-embeddable.umd.js

@@ -1,9 +1,9 @@
-(function(h,t){typeof exports=="object"&&typeof module!="undefined"?t(exports,require("react"),require("prop-types"),require("styled-components")):typeof define=="function"&&define.amd?define(["exports","react","prop-types","styled-components"],t):(h=typeof globalThis!="undefined"?globalThis:h||self,t(h["mm-react-embeddable"]={},h.React,h.PropTypes,h.styled))})(this,(function(h,t,Ee,ge){"use strict";const ee=r=>r&&r.__esModule?r:{default:r},U=ee(t),C=ee(Ee),ne=ee(ge),V=t.createContext(null),Y=t.createContext({pending:[],authorize:()=>{},approve:()=>{},complete:()=>{},dismiss:()=>{},originEpochs:{},credentials:{},unsupported:{}}),se="access_token",te=r=>r?r.kind?r:r.accessToken?{kind:se,accessToken:r.accessToken,expiresAt:r.expiresAt||null}:null:null,ke=60,Ce=120,Te=new Set(["host_not_allowed","unbound_host_bound_guest","invalid_token","provider_unavailable"]),J=typeof window!="undefined"&&window.location.protocol==="https:",_e=8e3,X=r=>{try{return new URL(r).origin}catch{return null}},ue=(r,u)=>{const c=u==null?void 0:u.origin;return!c||X(r==null?void 0:r.authUrl)!==c?null:c},oe=r=>{if(!r||/^\d{1,3}(?:\.\d{1,3}){3}$/.test(r)||r.includes(":"))return r;const u=r.split(".");return u.length<=2?r:u.slice(-2).join(".")},ie=(r,u)=>{try{const c=new URL(r),f=new URL(u);return c.protocol!==f.protocol?!0:oe(c.hostname)!==oe(f.hostname)}catch{return!0}},ce=(r,{onBlocked:u,onClosed:c})=>{const f=window.open(r.authUrl,"mm-embed-auth","popup,width=600,height=700");if(!f)return u(),()=>{};const m=setInterval(()=>{f.closed&&(clearInterval(m),c())},1e3);return()=>clearInterval(m)},le=({children:r,launcher:u,broker:c})=>{const f=t.useContext(V),[m,g]=t.useState({}),[Z,_]=t.useState({}),[O,y]=t.useState({}),[q,x]=t.useState({}),N=t.useRef(O);N.current=O;const k=t.useRef(m);k.current=m;const $=t.useRef(null),G=t.useRef({}),L=t.useRef({}),W=t.useRef({}),F=t.useRef(c);F.current=c;const I=t.useCallback(e=>{const n=L.current[e];if(!n)return;const s=l=>!l[e]||l[e].clientId?l:{...l,[e]:{...l[e],clientId:n}};g(s),x(s)},[]),i=t.useCallback((e,n)=>{e&&(x(s=>s[e]?s:{...s,[e]:{origin:e,reason:n,clientId:L.current[e]||null}}),I(e))},[I]),a=t.useCallback((e,{v2:n=!1,origin:s=null}={})=>{s&&(n&&N.current[s]||(g(l=>l[s]?l:{...l,[s]:{origin:s,authUrl:e.authUrl,silentUrl:e.silentUrl||null,status:n&&F.current?"broker":n&&e.silentUrl&&J?"silent":"interactive",v2:n,scope:e.scope||null,acceptsCredentials:W.current[s]||null,consent:null,error:null,clientId:e.clientId||L.current[s]||null,popupBlocked:!1}}),I(s)))},[I]),o=t.useRef({}),d=t.useCallback(e=>{o.current[e]&&(clearTimeout(o.current[e]),delete o.current[e])},[]),p=t.useCallback(e=>{d(e),g(n=>{if(!n[e])return n;const s={...n};return delete s[e],s})},[d]),E=t.useCallback(e=>{e&&(p(e),_(n=>({...n,[e]:(n[e]||0)+1})))},[p]),A=t.useCallback(e=>{g(n=>!n[e]||n[e].status==="interactive"?n:{...n,[e]:{...n[e],status:"interactive"}})},[]),P=t.useCallback(e=>{p(e.origin)},[p]),T=t.useCallback((e,n)=>{const s=ue(e,n);if(s){if(ie(s,window.location.origin)){i(s,"cross-site-legacy");return}a(e,{origin:s})}},[a,i]);t.useEffect(()=>{if(!f)return;const e=[f.addListener("*","init",(n,s)=>{s!=null&&s.origin&&(n!=null&&n.clientId)&&(L.current[s.origin]=n.clientId,I(s.origin)),s!=null&&s.origin&&Array.isArray(n==null?void 0:n.acceptsCredentials)&&(W.current[s.origin]=n.acceptsCredentials)}),f.addListener("*","authorize",T),f.addListener("*","login",T),f.addListener("*","credential-request",(n,s)=>a(n,{v2:!0,origin:ue(n,s)}))];return()=>e.forEach(n=>n())},[f,T,a,I]),t.useEffect(()=>{const e=n=>{const s=n==null?void 0:n.data;if(!s||s.type!=="authorized"&&s.type!=="authorize-failed")return;const l=X(s.authUrl);if(!(!l||n.origin!==l)){if(s.type==="authorized"){if(s.accessToken){if(!k.current[l])return;y(b=>({...b,[l]:te({accessToken:s.accessToken})})),p(l)}else E(l);return}A(l)}};return window.addEventListener("message",e),()=>window.removeEventListener("message",e)},[p,E,A]);const j=t.useCallback((e,n)=>{const s=e==null?void 0:e.origin,l=te(n);!s||!l||(y(b=>({...b,[s]:l})),p(s))},[p]),z=t.useCallback((e,n)=>{g(s=>s[e]?{...s,[e]:{...s[e],...n}}:s)},[]),M=t.useRef({}),S=t.useCallback(async(e,{approve:n}={})=>{const s=F.current,{origin:l}=e;let b;try{b=await s({origin:l,clientId:e.clientId,scope:e.scope,authUrl:e.authUrl},{approve:n})}catch{n?z(l,{error:{reason:"broker_unavailable"}}):z(l,{status:e.silentUrl&&J?"silent":"interactive"});return}if((b==null?void 0:b.status)===200&&b.credential){j(e,b.credential);return}if((b==null?void 0:b.status)===409&&b.consentRequired){z(l,{status:"interactive",consent:{client:b.client||null,stepUp:!!b.stepUp,scope:b.scope||e.scope},error:null});return}const Q=(b==null?void 0:b.error)||"broker_error";if(!n&&Te.has(Q)){z(l,{status:e.silentUrl&&J?"silent":"interactive"});return}if(n&&Q==="consent_denied"){z(l,{error:null});return}if(Q==="rate_limited"&&!e.rateLimitRetried){const R=Math.min(Number(b==null?void 0:b.retryAfter)>0?Number(b.retryAfter):ke,Ce),Oe={...e,rateLimitRetried:!0};d(l),o.current[l]=setTimeout(()=>{delete o.current[l],M.current[l]=!0,v.current(Oe,{approve:n}).finally(()=>{delete M.current[l]})},R*1e3),z(l,{rateLimitRetried:!0});return}p(l),x(R=>({...R,[l]:{origin:l,reason:`broker:${Q}`,detail:b||null,clientId:e.clientId||L.current[l]||null}}))},[j,z,p,d]),v=t.useRef(S);v.current=S,t.useEffect(()=>{Object.values(m).forEach(e=>{e.status!=="broker"||M.current[e.origin]||o.current[e.origin]||(M.current[e.origin]=!0,S(e).finally(()=>{delete M.current[e.origin]}))})},[m,S]);const H=t.useCallback(e=>!F.current||!(e!=null&&e.consent)?Promise.resolve():S(e,{approve:!0}),[S]);t.useEffect(()=>{const e=G.current;Object.values(m).forEach(n=>{n.status==="silent"&&!e[n.origin]&&(e[n.origin]=setTimeout(()=>{delete e[n.origin],A(n.origin)},_e))}),Object.keys(e).forEach(n=>{(!m[n]||m[n].status!=="silent")&&(clearTimeout(e[n]),delete e[n])})},[m,A]),t.useEffect(()=>()=>{$.current&&$.current(),Object.values(G.current).forEach(clearTimeout),Object.values(o.current).forEach(clearTimeout)},[]);const B=t.useCallback(e=>{$.current&&($.current(),$.current=null);const n=u||ce;$.current=n(e,{onBlocked:()=>{g(s=>s[e.origin]?{...s,[e.origin]:{...s[e.origin],popupBlocked:!0}}:s)},onClosed:()=>{if(e.v2){J&&g(s=>!s[e.origin]||!s[e.origin].silentUrl?s:{...s,[e.origin]:{...s[e.origin],status:"silent"}});return}E(e.origin)}})},[u,E]),w={pending:Object.values(m).filter(e=>e.status==="interactive"),authorize:B,approve:H,complete:j,dismiss:P,originEpochs:Z,credentials:O,unsupported:q},D=Object.values(m).filter(e=>e.status==="silent"&&e.silentUrl);return U.default.createElement(Y.Provider,{value:w},r,D.map(e=>U.default.createElement("iframe",{key:`mm-silent-auth-${e.origin}`,src:e.silentUrl,title:`MachineMetrics silent authorization (${e.origin})`,"aria-hidden":"true",tabIndex:-1,style:{display:"none"}})))};le.propTypes={children:C.default.node,launcher:C.default.func,broker:C.default.func};const we=()=>t.useContext(Y),ae=r=>{const{originEpochs:u}=t.useContext(Y),c=X(r);return c&&u[c]||0},de=r=>{const{credentials:u}=t.useContext(Y),c=X(r);return c&&u[c]||null},fe=r=>{const{unsupported:u}=t.useContext(Y),c=X(r);return c&&u[c]||null},pe=({children:r,authorizationLauncher:u,credentialBroker:c})=>{const[f,m]=t.useState({}),[g,Z]=t.useState({}),_=t.useRef({}),O=t.useRef({}),y=t.useRef({}),q=t.useCallback((i,a)=>{var o;return!!((o=y.current[i])!=null&&o.has(a))},[]),x=t.useCallback((i,a,o)=>{m(d=>({...d,[i]:{origin:a,frameRef:o}}))},[]),N=t.useCallback(i=>{m(a=>{const o={...a};return delete o[i],o}),Z(a=>{const o={...a};return delete o[i],o}),delete y.current[i]},[]);t.useEffect(()=>{const i=(o=[],d,p)=>{o.forEach(E=>E(d,p))},a=o=>{var j,z,M,S,v,H,B;if(!((j=o==null?void 0:o.data)!=null&&j.instanceId))return;const{instanceId:d,type:p}=o.data,E=f[d],A=(M=(z=E==null?void 0:E.frameRef)==null?void 0:z.current)==null?void 0:M.contentWindow;if(!A||o.source!==A||o.origin!==E.origin)return;const P={origin:o.origin},T=_.current;if(p==="response"){const{callbackId:w,response:D,error:e}=o.data,n=O.current[w];n&&(n(D,e),delete O.current[w]);return}if(p==="mark-registered"){const{requestType:w}=o.data;y.current[d]||(y.current[d]=new Set),y.current[d].add(w);return}p==="ready"&&Z(w=>({...w,[d]:!0})),i((S=T[d])==null?void 0:S[p],o.data,P),i((v=T["*"])==null?void 0:v[p],o.data,P),i((H=T[d])==null?void 0:H["*"],o.data,P),i((B=T["*"])==null?void 0:B["*"],o.data,P)};return window.addEventListener("message",a),()=>{window.removeEventListener("message",a)}},[f]);const k=t.useCallback((i,a,o)=>{var p,E;const d=f[i];if(!d){console.warn(`Origin not set for id: ${i}. Unable to send message.`);return}(E=(p=d==null?void 0:d.frameRef)==null?void 0:p.current)!=null&&E.contentWindow&&d.frameRef.current.contentWindow.postMessage({type:a,...o,instanceId:i},d.origin)},[f]),$=t.useRef(0),G=t.useCallback(()=>`${Date.now()}-${++$.current}`,[]),L=t.useCallback(async(i,a,o={})=>new Promise((d,p)=>{const E=G(),A=(P,T)=>{delete O.current[E],T?p(T):d(P)};O.current[E]=A,k(i,"request",{callbackId:E,requestType:a,data:o})}),[k]),W=t.useCallback((i,a)=>{k(i,"load-options",a)},[k]),F=t.useCallback((i,a)=>{k(i,"validate",a)},[k]),I=t.useMemo(()=>({registerFrame:x,unregisterFrame:N,sendMessage:k,sendRequest:L,loadOptions:W,validate:F,hasHandler:q,readyFrames:g,addListener:(i,a,o)=>(_.current[i]||(_.current[i]={}),_.current[i][a]||(_.current[i][a]=[]),_.current[i][a].push(o),()=>{_.current[i][a]=_.current[i][a].filter(d=>d!==o)})}),[x,N,k,L,W,F,q,g]);return U.default.createElement(V.Provider,{value:I},U.default.createElement(le,{launcher:u,broker:c},r))},K=(r,u,c)=>{const f=t.useContext(V);if(f===null)throw new Error("useEmbeddedEffect must be used within a MMEmbeddableZoneProvider");const m=t.useRef(c);t.useEffect(()=>{m.current=c},[c]),t.useEffect(()=>{if(!(!r||!u)){if(u.startsWith("key:")){const g=u.substring(4);return f.readyFrames[r]&&f.sendMessage(r,"subscribe-key",{keyChord:g}),f.addListener(r,`key-pressed:${g}`,(..._)=>m.current(..._))}return f.addListener(r,u,(...g)=>m.current(...g))}},[f,r,u])};pe.propTypes={children:C.default.node.isRequired,authorizationLauncher:C.default.func,credentialBroker:C.default.func};const re=ne.default.default||ne.default,Ie=1e4,Me="credentials",Se=(r,u)=>`${r}/mm-embedded-interop?id=${encodeURIComponent(u)}&origin=${encodeURIComponent(window.location.origin)}&caps=${Me}`,Ue=re.iframe`
+(function(m,t){typeof exports=="object"&&typeof module!="undefined"?t(exports,require("react"),require("prop-types"),require("styled-components")):typeof define=="function"&&define.amd?define(["exports","react","prop-types","styled-components"],t):(m=typeof globalThis!="undefined"?globalThis:m||self,t(m["mm-react-embeddable"]={},m.React,m.PropTypes,m.styled))})(this,(function(m,t,ke,Ce){"use strict";const te=r=>r&&r.__esModule?r:{default:r},S=te(t),k=te(ke),ue=te(Ce),X=t.createContext(null),G=t.createContext({pending:[],authorize:()=>{},approve:()=>{},complete:()=>{},dismiss:()=>{},originEpochs:{},credentials:{},unsupported:{}}),oe="access_token",re=r=>r?r.kind?r:r.accessToken?{kind:oe,accessToken:r.accessToken,expiresAt:r.expiresAt||null}:null:null,Te=60,_e=120,we=new Set(["host_not_allowed","unbound_host_bound_guest","invalid_token","provider_unavailable"]),Q=typeof window!="undefined"&&window.location.protocol==="https:",Ie=8e3,J=r=>{try{return new URL(r).origin}catch{return null}},ie=(r,u)=>{const c=u==null?void 0:u.origin;return!c||J(r==null?void 0:r.authUrl)!==c?null:c},ce=r=>{if(!r||/^\d{1,3}(?:\.\d{1,3}){3}$/.test(r)||r.includes(":"))return r;const u=r.split(".");return u.length<=2?r:u.slice(-2).join(".")},ne=(r,u)=>{try{const c=new URL(r),f=new URL(u);return c.protocol!==f.protocol?!0:ce(c.hostname)!==ce(f.hostname)}catch{return!0}},le=(r,{onBlocked:u,onClosed:c})=>{const f=window.open(r.authUrl,"mm-embed-auth","popup,width=600,height=700");if(!f)return u(),()=>{};const b=setInterval(()=>{f.closed&&(clearInterval(b),c())},1e3);return()=>clearInterval(b)},ae=({children:r,launcher:u,broker:c})=>{const f=t.useContext(X),[b,E]=t.useState({}),[W,T]=t.useState({}),[O,y]=t.useState({}),[q,x]=t.useState({}),Y=t.useRef(O);Y.current=O;const g=t.useRef(b);g.current=b;const $=t.useRef(null),V=t.useRef({}),U=t.useRef({}),v=t.useRef({}),F=t.useRef(c);F.current=c;const w=t.useCallback(e=>{const n=U.current[e];if(!n)return;const s=l=>!l[e]||l[e].clientId?l:{...l,[e]:{...l[e],clientId:n}};E(s),x(s)},[]),i=t.useCallback((e,n)=>{e&&(x(s=>s[e]?s:{...s,[e]:{origin:e,reason:n,clientId:U.current[e]||null}}),w(e))},[w]),a=t.useCallback((e,{v2:n=!1,origin:s=null}={})=>{s&&(n&&Y.current[s]||(E(l=>l[s]?l:{...l,[s]:{origin:s,authUrl:e.authUrl,silentUrl:e.silentUrl||null,status:n&&F.current?"broker":n&&e.silentUrl&&Q?"silent":"interactive",v2:n,scope:e.scope||null,acceptsCredentials:v.current[s]||null,consent:null,error:null,clientId:e.clientId||U.current[s]||null,popupBlocked:!1}}),w(s)))},[w]),o=t.useRef({}),d=t.useCallback(e=>{o.current[e]&&(clearTimeout(o.current[e]),delete o.current[e])},[]),p=t.useCallback(e=>{d(e),E(n=>{if(!n[e])return n;const s={...n};return delete s[e],s})},[d]),h=t.useCallback(e=>{e&&(p(e),T(n=>({...n,[e]:(n[e]||0)+1})))},[p]),L=t.useCallback(e=>{E(n=>!n[e]||n[e].status==="interactive"?n:{...n,[e]:{...n[e],status:"interactive"}})},[]),P=t.useCallback(e=>{p(e.origin)},[p]),C=t.useCallback((e,n)=>{const s=ie(e,n);if(s){if(ne(s,window.location.origin)){i(s,"cross-site-legacy");return}a(e,{origin:s})}},[a,i]);t.useEffect(()=>{if(!f)return;const e=[f.addListener("*","init",(n,s)=>{s!=null&&s.origin&&(n!=null&&n.clientId)&&(U.current[s.origin]=n.clientId,w(s.origin)),s!=null&&s.origin&&Array.isArray(n==null?void 0:n.acceptsCredentials)?v.current[s.origin]=n.acceptsCredentials:s!=null&&s.origin&&ne(s.origin,window.location.origin)&&i(s.origin,"cross-site-legacy")}),f.addListener("*","authorize",C),f.addListener("*","login",C),f.addListener("*","credential-request",(n,s)=>a(n,{v2:!0,origin:ie(n,s)}))];return()=>e.forEach(n=>n())},[f,C,a,w,i]),t.useEffect(()=>{const e=n=>{const s=n==null?void 0:n.data;if(!s||s.type!=="authorized"&&s.type!=="authorize-failed")return;const l=J(s.authUrl);if(!(!l||n.origin!==l)){if(s.type==="authorized"){if(s.accessToken){if(!g.current[l])return;y(z=>({...z,[l]:re({accessToken:s.accessToken})})),p(l)}else h(l);return}L(l)}};return window.addEventListener("message",e),()=>window.removeEventListener("message",e)},[p,h,L]);const j=t.useCallback((e,n)=>{const s=e==null?void 0:e.origin,l=re(n);!s||!l||(y(z=>({...z,[s]:l})),p(s))},[p]),A=t.useCallback((e,n)=>{E(s=>s[e]?{...s,[e]:{...s[e],...n}}:s)},[]),I=t.useRef({}),M=t.useCallback(async(e,{approve:n}={})=>{const s=F.current,{origin:l}=e;let z;try{z=await s({origin:l,clientId:e.clientId,scope:e.scope,authUrl:e.authUrl},{approve:n})}catch{n?A(l,{error:{reason:"broker_unavailable"}}):A(l,{status:e.silentUrl&&Q?"silent":"interactive"});return}const ge=z==null?void 0:z.status,Z=(z==null?void 0:z.body)||{};if(ge===200&&Z.credential){j(e,Z.credential);return}if(ge===409&&Z.consentRequired){A(l,{status:"interactive",consent:{client:Z.client||null,stepUp:!!Z.stepUp,scope:Z.scope||e.scope},error:null});return}const R=Z.error||"broker_error";if(!n&&we.has(R)){A(l,{status:e.silentUrl&&Q?"silent":"interactive"});return}if(n&&R==="consent_denied"){A(l,{error:null});return}if(R==="rate_limited"&&!e.rateLimitRetried){const ee=Math.min(Number(Z.retryAfter)>0?Number(Z.retryAfter):Te,_e),$e={...e,rateLimitRetried:!0};d(l),o.current[l]=setTimeout(()=>{delete o.current[l],I.current[l]=!0,H.current($e,{approve:n}).finally(()=>{delete I.current[l]})},ee*1e3),A(l,{rateLimitRetried:!0});return}p(l),x(ee=>({...ee,[l]:{origin:l,reason:`broker:${R}`,detail:z||null,clientId:e.clientId||U.current[l]||null}}))},[j,A,p,d]),H=t.useRef(M);H.current=M,t.useEffect(()=>{Object.values(b).forEach(e=>{e.status!=="broker"||I.current[e.origin]||o.current[e.origin]||(I.current[e.origin]=!0,M(e).finally(()=>{delete I.current[e.origin]}))})},[b,M]);const K=t.useCallback(e=>!F.current||!(e!=null&&e.consent)?Promise.resolve():M(e,{approve:!0}),[M]);t.useEffect(()=>{const e=V.current;Object.values(b).forEach(n=>{n.status==="silent"&&!e[n.origin]&&(e[n.origin]=setTimeout(()=>{delete e[n.origin],L(n.origin)},Ie))}),Object.keys(e).forEach(n=>{(!b[n]||b[n].status!=="silent")&&(clearTimeout(e[n]),delete e[n])})},[b,L]),t.useEffect(()=>()=>{$.current&&$.current(),Object.values(V.current).forEach(clearTimeout),Object.values(o.current).forEach(clearTimeout)},[]);const B=t.useCallback(e=>{$.current&&($.current(),$.current=null);const n=u||le;$.current=n(e,{onBlocked:()=>{E(s=>s[e.origin]?{...s,[e.origin]:{...s[e.origin],popupBlocked:!0}}:s)},onClosed:()=>{if(e.v2){Q&&E(s=>!s[e.origin]||!s[e.origin].silentUrl?s:{...s,[e.origin]:{...s[e.origin],status:"silent"}});return}h(e.origin)}})},[u,h]),_={pending:Object.values(b).filter(e=>e.status==="interactive"),authorize:B,approve:K,complete:j,dismiss:P,originEpochs:W,credentials:O,unsupported:q},D=Object.values(b).filter(e=>e.status==="silent"&&e.silentUrl);return S.default.createElement(G.Provider,{value:_},r,D.map(e=>S.default.createElement("iframe",{key:`mm-silent-auth-${e.origin}`,src:e.silentUrl,title:`MachineMetrics silent authorization (${e.origin})`,"aria-hidden":"true",tabIndex:-1,style:{display:"none"}})))};ae.propTypes={children:k.default.node,launcher:k.default.func,broker:k.default.func};const Me=()=>t.useContext(G),de=r=>{const{originEpochs:u}=t.useContext(G),c=J(r);return c&&u[c]||0},fe=r=>{const{credentials:u}=t.useContext(G),c=J(r);return c&&u[c]||null},pe=r=>{const{unsupported:u}=t.useContext(G),c=J(r);return c&&u[c]||null},be=({children:r,authorizationLauncher:u,credentialBroker:c})=>{const[f,b]=t.useState({}),[E,W]=t.useState({}),T=t.useRef({}),O=t.useRef({}),y=t.useRef({}),q=t.useCallback((i,a)=>{var o;return!!((o=y.current[i])!=null&&o.has(a))},[]),x=t.useCallback((i,a,o)=>{b(d=>({...d,[i]:{origin:a,frameRef:o}}))},[]),Y=t.useCallback(i=>{b(a=>{const o={...a};return delete o[i],o}),W(a=>{const o={...a};return delete o[i],o}),delete y.current[i]},[]);t.useEffect(()=>{const i=(o=[],d,p)=>{o.forEach(h=>h(d,p))},a=o=>{var j,A,I,M,H,K,B;if(!((j=o==null?void 0:o.data)!=null&&j.instanceId))return;const{instanceId:d,type:p}=o.data,h=f[d],L=(I=(A=h==null?void 0:h.frameRef)==null?void 0:A.current)==null?void 0:I.contentWindow;if(!L||o.source!==L||o.origin!==h.origin)return;const P={origin:o.origin},C=T.current;if(p==="response"){const{callbackId:_,response:D,error:e}=o.data,n=O.current[_];n&&(n(D,e),delete O.current[_]);return}if(p==="mark-registered"){const{requestType:_}=o.data;y.current[d]||(y.current[d]=new Set),y.current[d].add(_);return}p==="ready"&&W(_=>({..._,[d]:!0})),i((M=C[d])==null?void 0:M[p],o.data,P),i((H=C["*"])==null?void 0:H[p],o.data,P),i((K=C[d])==null?void 0:K["*"],o.data,P),i((B=C["*"])==null?void 0:B["*"],o.data,P)};return window.addEventListener("message",a),()=>{window.removeEventListener("message",a)}},[f]);const g=t.useCallback((i,a,o)=>{var p,h;const d=f[i];if(!d){console.warn(`Origin not set for id: ${i}. Unable to send message.`);return}(h=(p=d==null?void 0:d.frameRef)==null?void 0:p.current)!=null&&h.contentWindow&&d.frameRef.current.contentWindow.postMessage({type:a,...o,instanceId:i},d.origin)},[f]),$=t.useRef(0),V=t.useCallback(()=>`${Date.now()}-${++$.current}`,[]),U=t.useCallback(async(i,a,o={})=>new Promise((d,p)=>{const h=V(),L=(P,C)=>{delete O.current[h],C?p(C):d(P)};O.current[h]=L,g(i,"request",{callbackId:h,requestType:a,data:o})}),[g]),v=t.useCallback((i,a)=>{g(i,"load-options",a)},[g]),F=t.useCallback((i,a)=>{g(i,"validate",a)},[g]),w=t.useMemo(()=>({registerFrame:x,unregisterFrame:Y,sendMessage:g,sendRequest:U,loadOptions:v,validate:F,hasHandler:q,readyFrames:E,addListener:(i,a,o)=>(T.current[i]||(T.current[i]={}),T.current[i][a]||(T.current[i][a]=[]),T.current[i][a].push(o),()=>{T.current[i][a]=T.current[i][a].filter(d=>d!==o)})}),[x,Y,g,U,v,F,q,E]);return S.default.createElement(X.Provider,{value:w},S.default.createElement(ae,{launcher:u,broker:c},r))},N=(r,u,c)=>{const f=t.useContext(X);if(f===null)throw new Error("useEmbeddedEffect must be used within a MMEmbeddableZoneProvider");const b=t.useRef(c);t.useEffect(()=>{b.current=c},[c]),t.useEffect(()=>{if(!(!r||!u)){if(u.startsWith("key:")){const E=u.substring(4);return f.readyFrames[r]&&f.sendMessage(r,"subscribe-key",{keyChord:E}),f.addListener(r,`key-pressed:${E}`,(...T)=>b.current(...T))}return f.addListener(r,u,(...E)=>b.current(...E))}},[f,r,u])};be.propTypes={children:k.default.node.isRequired,authorizationLauncher:k.default.func,credentialBroker:k.default.func};const se=ue.default.default||ue.default,Se=1e4,Ue="credentials",Le=(r,u)=>`${r}/mm-embedded-interop?id=${encodeURIComponent(u)}&origin=${encodeURIComponent(window.location.origin)}&caps=${Ue}`,Ae=se.iframe`
   width: 100%;
   height: 100%;
   border: none;
   visibility: ${r=>r.$isReady?"visible":"hidden"};
-`,Le=re.div`
+`,ze=se.div`
   width: 100%;
   height: 100%;
   display: flex;
@@ -16,10 +16,10 @@
   text-align: center;
   color: #555;
   font-size: 14px;
-`,be=r=>{const u=r&&r.origin||"This app",c=r&&r.reason||"";switch(c){case"broker:scope_above_ceiling":return{title:`${u} can’t be authorized here`,detail:"It asks for permissions your role doesn’t have."};case"broker:origin_mismatch":case"broker:unknown_client":return{title:`${u} can’t be authorized here`,detail:"It isn’t registered to run at this address."};case"broker:cross_company_principal":return{title:`${u} can’t be authorized here`,detail:"It can’t be authorized for this account."};default:return c.startsWith("broker:")?{title:`${u} can’t be authorized here`,detail:"Authorization was refused."}:{title:`${u} can’t be embedded here`,detail:"It needs an update to support embedding from a different domain."}}},me=({entry:r})=>{const u=be(r);return U.default.createElement(Le,{"data-reason":r&&r.reason||void 0},U.default.createElement("div",{style:{fontWeight:600}},u.title),U.default.createElement("div",{style:{fontSize:12,color:"#888"}},u.detail))};me.propTypes={entry:C.default.shape({origin:C.default.string,name:C.default.string,reason:C.default.string,detail:C.default.object})};const Ae=re.div`
+`,me=r=>{const u=r&&r.origin||"This app",c=r&&r.reason||"";switch(c){case"broker:scope_above_ceiling":return{title:`${u} can’t be authorized here`,detail:"It asks for permissions your role doesn’t have."};case"broker:origin_mismatch":case"broker:unknown_client":return{title:`${u} can’t be authorized here`,detail:"It isn’t registered to run at this address."};case"broker:cross_company_principal":return{title:`${u} can’t be authorized here`,detail:"It can’t be authorized for this account."};default:return c.startsWith("broker:")?{title:`${u} can’t be authorized here`,detail:"Authorization was refused."}:{title:`${u} can’t be embedded here`,detail:"It needs an update to support embedding from a different domain."}}},he=({entry:r})=>{const u=me(r);return S.default.createElement(ze,{"data-reason":r&&r.reason||void 0},S.default.createElement("div",{style:{fontWeight:600}},u.title),S.default.createElement("div",{style:{fontSize:12,color:"#888"}},u.detail))};he.propTypes={entry:k.default.shape({origin:k.default.string,name:k.default.string,reason:k.default.string,detail:k.default.object})};const Oe=se.div`
   height: 100%;
   display: flex;
   flex: 1;
   align-items: center;
   justify-content: center;
-`,ze=()=>U.default.createElement(Ae,null,U.default.createElement("div",{style:{textAlign:"center"}},"This app couldn’t be loaded as an embeddable widget.")),he=({id:r,src:u,path:c,onInit:f=()=>{},onTimeout:m,context:g={},params:Z={},renderUnsupported:_,renderTimeout:O,...y})=>{if("isConfiguring"in y)return console.error("isConfiguring must be passed via the params prop to MMEmbeddableZone"),null;if("colorMode"in g)return console.error("colorMode must be passed via the params prop to MMEmbeddableZone"),null;if("isFullScreen"in g)return console.error("isFullScreen must be passed via the params prop to MMEmbeddableZone"),null;const q=t.useRef(),[x,N]=t.useState(),[k,$]=t.useState(0),[G,L]=t.useState(!1),[W,F]=t.useState(!1),I=ae(u),i=de(u),a=fe(u),[o,d]=t.useState(0),[p,E]=t.useState(null),{registerFrame:A,unregisterFrame:P,sendMessage:T}=t.useContext(V),[j,z]=t.useState(),M=t.useRef(),S=t.useRef(m),v=t.useRef(f),H=t.useRef(!1),B=t.useCallback(()=>{H.current=!1,clearTimeout(M.current),$(0),L(!1),F(!1),E(null)},[]);t.useEffect(()=>{(I>0||o>0)&&B()},[I,o,B]),t.useEffect(()=>{S.current=m},[m]),t.useEffect(()=>{v.current=f},[f]),t.useEffect(()=>{k&&T(r,"set-context",{context:{...g}})},[g,r,k]),t.useEffect(()=>{k&&T(r,"set-params",{params:Z})},[Z,r,k]),t.useEffect(()=>{c!==void 0&&z((c==null?void 0:c.indexOf("/"))===0?c:`/${c}`)},[c]),t.useEffect(()=>{j===void 0||!k||T(r,"navigate",{path:j})},[j,k,r,T]),t.useEffect(()=>{if(!u||!r||!q)return;B();const e=new URL(u);return A(r,e.origin,q),v.current(),N(Se(e.origin,r)),()=>{P(r)}},[u,r,A,q,B]),t.useEffect(()=>{if(!(!x||H.current))return M.current=setTimeout(()=>{L(!0),S.current&&S.current()},Ie),()=>clearTimeout(M.current)},[x,u,I,o]);const w=t.useCallback(()=>{H.current=!0,clearTimeout(M.current),L(!1)},[]);K(r,"init",e=>{w(),Array.isArray(e==null?void 0:e.acceptsCredentials)&&E(e.acceptsCredentials)}),K(r,"authorize",w),K(r,"login",w),K(r,"credential-request",()=>{w(),F(!0)}),t.useEffect(()=>{if(!W||!i)return;const e=p;if(Array.isArray(e)&&!e.includes(i.kind))return;const n=i.kind==="access_token"?{accessToken:i.accessToken}:{};T(r,"credential",{...n,credential:i})},[W,i,p,r,T]),K(r,"ready",()=>{w(),$(e=>e+1)});const D=t.useRef();return K(r,"heartbeat",()=>{D.current&&clearTimeout(D.current),D.current=setTimeout(()=>{d(e=>e+1)},6e3)}),t.useEffect(()=>()=>{D.current&&clearTimeout(D.current)},[]),a?_?_(a):U.default.createElement(me,{entry:a}):G&&!k?O?O():U.default.createElement(ze,null):U.default.createElement(Ue,{key:`auth-epoch-${I}-frame-${o}`,$isReady:k,ref:q,src:x,...y})};he.propTypes={id:C.default.string,src:C.default.string.isRequired,path:C.default.string,onInit:C.default.func,onTimeout:C.default.func,renderUnsupported:C.default.func,renderTimeout:C.default.func},h.CREDENTIAL_KIND_ACCESS_TOKEN=se,h.EmbeddedAuthorizationContext=Y,h.MMEmbeddableZone=he,h.MMEmbeddableZoneContext=V,h.MMEmbeddableZoneProvider=pe,h.isCrossSite=ie,h.normalizeCredential=te,h.popupAuthorizationLauncher=ce,h.unsupportedCopy=be,h.useEmbeddedAuthorizations=we,h.useEmbeddedCredential=de,h.useEmbeddedEffect=K,h.useEmbeddedOriginEpoch=ae,h.useEmbeddedUnsupported=fe,Object.defineProperty(h,Symbol.toStringTag,{value:"Module"})}));
+`,ye=()=>S.default.createElement(Oe,null,S.default.createElement("div",{style:{textAlign:"center"}},"This app couldn’t be loaded as an embeddable widget.")),Ee=({id:r,src:u,path:c,onInit:f=()=>{},onTimeout:b,context:E={},params:W={},renderUnsupported:T,renderTimeout:O,...y})=>{if("isConfiguring"in y)return console.error("isConfiguring must be passed via the params prop to MMEmbeddableZone"),null;if("colorMode"in E)return console.error("colorMode must be passed via the params prop to MMEmbeddableZone"),null;if("isFullScreen"in E)return console.error("isFullScreen must be passed via the params prop to MMEmbeddableZone"),null;const q=t.useRef(),[x,Y]=t.useState(),[g,$]=t.useState(0),[V,U]=t.useState(!1),[v,F]=t.useState(!1),w=de(u),i=fe(u),a=pe(u),[o,d]=t.useState(0),[p,h]=t.useState(null),{registerFrame:L,unregisterFrame:P,sendMessage:C}=t.useContext(X),[j,A]=t.useState(),I=t.useRef(),M=t.useRef(b),H=t.useRef(f),K=t.useRef(!1),B=t.useCallback(()=>{K.current=!1,clearTimeout(I.current),$(0),U(!1),F(!1),h(null)},[]);t.useEffect(()=>{(w>0||o>0)&&B()},[w,o,B]),t.useEffect(()=>{M.current=b},[b]),t.useEffect(()=>{H.current=f},[f]),t.useEffect(()=>{g&&C(r,"set-context",{context:{...E}})},[E,r,g]),t.useEffect(()=>{g&&C(r,"set-params",{params:W})},[W,r,g]),t.useEffect(()=>{c!==void 0&&A((c==null?void 0:c.indexOf("/"))===0?c:`/${c}`)},[c]),t.useEffect(()=>{j===void 0||!g||C(r,"navigate",{path:j})},[j,g,r,C]),t.useEffect(()=>{if(!u||!r||!q)return;B();const e=new URL(u);return L(r,e.origin,q),H.current(),Y(Le(e.origin,r)),()=>{P(r)}},[u,r,L,q,B]),t.useEffect(()=>{if(!(!x||K.current))return I.current=setTimeout(()=>{U(!0),M.current&&M.current()},Se),()=>clearTimeout(I.current)},[x,u,w,o]);const _=t.useCallback(()=>{K.current=!0,clearTimeout(I.current),U(!1)},[]);N(r,"init",e=>{_(),Array.isArray(e==null?void 0:e.acceptsCredentials)&&h(e.acceptsCredentials)}),N(r,"authorize",_),N(r,"login",_),N(r,"credential-request",()=>{_(),F(!0)}),t.useEffect(()=>{if(!v||!i)return;const e=p;if(Array.isArray(e)&&!e.includes(i.kind))return;const n=i.kind==="access_token"?{accessToken:i.accessToken}:{};C(r,"credential",{...n,credential:i})},[v,i,p,r,C]),N(r,"ready",()=>{_(),$(e=>e+1)});const D=t.useRef();return N(r,"heartbeat",()=>{D.current&&clearTimeout(D.current),D.current=setTimeout(()=>{d(e=>e+1)},6e3)}),t.useEffect(()=>()=>{D.current&&clearTimeout(D.current)},[]),a?T?T(a):S.default.createElement(he,{entry:a}):V&&!g?O?O():S.default.createElement(ye,null):S.default.createElement(Ae,{key:`auth-epoch-${w}-frame-${o}`,$isReady:g,ref:q,src:x,...y})};Ee.propTypes={id:k.default.string,src:k.default.string.isRequired,path:k.default.string,onInit:k.default.func,onTimeout:k.default.func,renderUnsupported:k.default.func,renderTimeout:k.default.func},m.CREDENTIAL_KIND_ACCESS_TOKEN=oe,m.EmbeddedAuthorizationContext=G,m.MMEmbeddableZone=Ee,m.MMEmbeddableZoneContext=X,m.MMEmbeddableZoneProvider=be,m.isCrossSite=ne,m.normalizeCredential=re,m.popupAuthorizationLauncher=le,m.unsupportedCopy=me,m.useEmbeddedAuthorizations=Me,m.useEmbeddedCredential=fe,m.useEmbeddedEffect=N,m.useEmbeddedOriginEpoch=de,m.useEmbeddedUnsupported=pe,Object.defineProperty(m,Symbol.toStringTag,{value:"Module"})}));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@machinemetrics/mm-react-embeddable",
-  "version": "2.0.0-4",
+  "version": "2.0.0-6",
   "license": "MIT",
   "module": "dist/mm-react-embeddable.es.js",
   "main": "dist/mm-react-embeddable.cjs.js",
@@ -44,4 +44,4 @@
     "vite": "^7.2.2",
     "vitest": "^4.0.10"
   }
-}
+}