@machinemetrics/mm-react-embeddable 2.0.0-6 → 2.0.0

package/dist/mm-react-embeddable.es.js

@@ -1,7 +1,7 @@
-import x, { createContext as de, useContext as V, useState as M, useRef as g, useCallback as h, useEffect as R, useMemo as me } from "react";
-import k from "prop-types";
+import $, { createContext as fe, useContext as V, useState as O, useRef as m, useCallback as h, useEffect as b, useMemo as ge } from "react";
+import E from "prop-types";
 import ie from "styled-components";
-const ne = de(null), N = de({
+const ne = fe(null), J = fe({
   pending: [],
   authorize: () => {
   },
@@ -14,16 +14,16 @@ const ne = de(null), N = de({
   originEpochs: {},
   credentials: {},
   unsupported: {}
-}), ge = "access_token", ce = (t) => t ? t.kind ? t : t.accessToken ? {
-  kind: ge,
+}), be = "access_token", ce = (t) => t ? t.kind ? t : t.accessToken ? {
+  kind: be,
   accessToken: t.accessToken,
   expiresAt: t.expiresAt || null
-} : null : null, be = 60, Ee = 120, Re = /* @__PURE__ */ new Set([
+} : null : null, Ee = 60, Re = 120, we = /* @__PURE__ */ new Set([
   "host_not_allowed",
   "unbound_host_bound_guest",
   "invalid_token",
   "provider_unavailable"
-]), re = typeof window != "undefined" && window.location.protocol === "https:", Te = 8e3, Q = (t) => {
+]), te = typeof window != "undefined" && window.location.protocol === "https:", Te = 8e3, N = (t) => {
   try {
     return new URL(t).origin;
   } catch {
@@ -31,7 +31,7 @@ const ne = de(null), N = de({
   }
 }, ue = (t, s) => {
   const c = s == null ? void 0 : s.origin;
-  return !c || Q(t == null ? void 0 : t.authUrl) !== c ? null : c;
+  return !c || N(t == null ? void 0 : t.authUrl) !== c ? null : c;
 }, le = (t) => {
   if (!t || /^\d{1,3}(?:\.\d{1,3}){3}$/.test(t) || t.includes(":"))
     return t;
@@ -53,166 +53,154 @@ const ne = de(null), N = de({
   if (!d)
     return s(), () => {
     };
-  const p = setInterval(() => {
-    d.closed && (clearInterval(p), c());
+  const f = setInterval(() => {
+    d.closed && (clearInterval(f), c());
   }, 1e3);
-  return () => clearInterval(p);
-}, fe = ({ children: t, launcher: s, broker: c }) => {
-  const d = V(ne), [p, b] = M({}), [Z, w] = M({}), [$, S] = M({}), [q, y] = M({}), G = g($);
-  G.current = $;
-  const E = g(p);
-  E.current = p;
-  const F = g(null), X = g({}), C = g({}), v = g({}), P = g(c);
-  P.current = c;
-  const _ = h((e) => {
-    const r = C.current[e];
+  return () => clearInterval(f);
+}, pe = ({ children: t, launcher: s, broker: c }) => {
+  const d = V(ne), [f, g] = O({}), [P, B] = O({}), [W, H] = O({}), [k, z] = O({}), y = m(W);
+  y.current = W;
+  const U = m(f);
+  U.current = f;
+  const x = m(null), Y = m({}), R = m({}), G = m({}), v = m(c);
+  v.current = c;
+  const M = h((e) => {
+    const r = R.current[e];
     if (!r)
       return;
-    const n = (u) => !u[e] || u[e].clientId ? u : { ...u, [e]: { ...u[e], clientId: r } };
-    b(n), y(n);
-  }, []), i = h(
+    const n = (i) => !i[e] || i[e].clientId ? i : { ...i, [e]: { ...i[e], clientId: r } };
+    g(n), z(n);
+  }, []), L = h(
     (e, r) => {
-      e && (y((n) => n[e] ? n : {
+      e && (z((n) => n[e] ? n : {
         ...n,
         [e]: {
           origin: e,
           reason: r,
-          clientId: C.current[e] || null
+          clientId: R.current[e] || null
         }
-      }), _(e));
+      }), M(e));
     },
-    [_]
-  ), l = h(
+    [M]
+  ), S = h(
     (e, { v2: r = !1, origin: n = null } = {}) => {
-      n && (r && G.current[n] || (b((u) => u[n] ? u : {
-        ...u,
+      n && (r && y.current[n] || (g((i) => i[n] ? i : {
+        ...i,
         [n]: {
           origin: n,
           authUrl: e.authUrl,
           silentUrl: e.silentUrl || null,
-          // v2 entries try the invisible silent resolver first — but only on a host that can
-          // frame login (https). Otherwise (and for legacy signals) go straight to interactive,
-          // so an http host doesn't wait out a silent frame that can never load login.
-          status: r && P.current ? "broker" : r && e.silentUrl && re ? "silent" : "interactive",
+          status: r && v.current ? "broker" : r && e.silentUrl && te ? "silent" : "interactive",
           v2: r,
-          // v1.9: the scope the guest asked for; forwarded verbatim to the broker.
           scope: e.scope || null,
-          acceptsCredentials: v.current[n] || null,
+          acceptsCredentials: G.current[n] || null,
           consent: null,
           error: null,
-          // clientId from the request payload (v2) or the cached init (legacy);
-          // the host resolves the display name from it.
-          clientId: e.clientId || C.current[n] || null,
+          clientId: e.clientId || R.current[n] || null,
           popupBlocked: !1
         }
-      }), _(n)));
+      }), M(n)));
     },
-    [_]
-  ), o = g({}), a = h((e) => {
-    o.current[e] && (clearTimeout(o.current[e]), delete o.current[e]);
-  }, []), f = h(
+    [M]
+  ), C = m({}), l = h((e) => {
+    C.current[e] && (clearTimeout(C.current[e]), delete C.current[e]);
+  }, []), u = h(
     (e) => {
-      a(e), b((r) => {
+      l(e), g((r) => {
         if (!r[e])
           return r;
         const n = { ...r };
         return delete n[e], n;
       });
     },
-    [a]
-  ), m = h(
+    [l]
+  ), o = h(
     (e) => {
-      e && (f(e), w((r) => ({
+      e && (u(e), B((r) => ({
         ...r,
         [e]: (r[e] || 0) + 1
       })));
     },
-    [f]
-  ), A = h((e) => {
-    b((r) => !r[e] || r[e].status === "interactive" ? r : {
+    [u]
+  ), a = h((e) => {
+    g((r) => !r[e] || r[e].status === "interactive" ? r : {
       ...r,
       [e]: { ...r[e], status: "interactive" }
     });
-  }, []), j = h(
+  }, []), T = h(
     (e) => {
-      f(e.origin);
+      u(e.origin);
     },
-    [f]
-  ), T = h(
+    [u]
+  ), p = h(
     (e, r) => {
       const n = ue(e, r);
       if (n) {
         if (ae(n, window.location.origin)) {
-          i(n, "cross-site-legacy");
+          L(n, "cross-site-legacy");
           return;
         }
-        l(e, { origin: n });
+        S(e, { origin: n });
       }
     },
-    [l, i]
+    [S, L]
   );
-  R(() => {
+  b(() => {
     if (!d)
       return;
     const e = [
-      // `init` carries the app's OAuth clientId. Cache it by the ATTESTED app
-      // origin (payload `origin` is ignored) and attach it to any entry already
-      // showing. `init` is posted before the authorize/login/credential-request
-      // signals, so it is usually cached by the time an entry is created. The
-      // clientId is only a lookup key: the host resolves the display name from
-      // it, and a broker binds it to the attested origin server-side.
       d.addListener("*", "init", (r, n) => {
-        n != null && n.origin && (r != null && r.clientId) && (C.current[n.origin] = r.clientId, _(n.origin)), n != null && n.origin && Array.isArray(r == null ? void 0 : r.acceptsCredentials) ? v.current[n.origin] = r.acceptsCredentials : n != null && n.origin && ae(n.origin, window.location.origin) && i(n.origin, "cross-site-legacy");
+        n != null && n.origin && (r != null && r.clientId) && (R.current[n.origin] = r.clientId, M(n.origin)), n != null && n.origin && Array.isArray(r == null ? void 0 : r.acceptsCredentials) ? G.current[n.origin] = r.acceptsCredentials : n != null && n.origin && ae(n.origin, window.location.origin) && L(n.origin, "cross-site-legacy");
       }),
-      d.addListener("*", "authorize", T),
-      d.addListener("*", "login", T),
+      d.addListener("*", "authorize", p),
+      d.addListener("*", "login", p),
       d.addListener(
         "*",
         "credential-request",
-        (r, n) => l(r, { v2: !0, origin: ue(r, n) })
+        (r, n) => S(r, { v2: !0, origin: ue(r, n) })
       )
     ];
     return () => e.forEach((r) => r());
-  }, [d, T, l, _, i]), R(() => {
+  }, [d, p, S, M, L]), b(() => {
     const e = (r) => {
       const n = r == null ? void 0 : r.data;
       if (!n || n.type !== "authorized" && n.type !== "authorize-failed")
         return;
-      const u = Q(n.authUrl);
-      if (!(!u || r.origin !== u)) {
+      const i = N(n.authUrl);
+      if (!(!i || r.origin !== i)) {
         if (n.type === "authorized") {
           if (n.accessToken) {
-            if (!E.current[u])
+            if (!U.current[i])
               return;
-            S((z) => ({
-              ...z,
-              [u]: ce({ accessToken: n.accessToken })
-            })), f(u);
+            H((_) => ({
+              ..._,
+              [i]: ce({ accessToken: n.accessToken })
+            })), u(i);
           } else
-            m(u);
+            o(i);
           return;
         }
-        A(u);
+        a(i);
       }
     };
     return window.addEventListener("message", e), () => window.removeEventListener("message", e);
-  }, [f, m, A]);
-  const B = h(
+  }, [u, o, a]);
+  const F = h(
     (e, r) => {
-      const n = e == null ? void 0 : e.origin, u = ce(r);
-      !n || !u || (S((z) => ({ ...z, [n]: u })), f(n));
+      const n = e == null ? void 0 : e.origin, i = ce(r);
+      !n || !i || (H((_) => ({ ..._, [n]: i })), u(n));
     },
-    [f]
-  ), O = h((e, r) => {
-    b((n) => n[e] ? { ...n, [e]: { ...n[e], ...r } } : n);
-  }, []), U = g({}), L = h(
+    [u]
+  ), w = h((e, r) => {
+    g((n) => n[e] ? { ...n, [e]: { ...n[e], ...r } } : n);
+  }, []), I = m({}), A = h(
     async (e, { approve: r } = {}) => {
-      const n = P.current, { origin: u } = e;
-      let z;
+      const n = v.current, { origin: i } = e;
+      let _;
       try {
-        z = await n(
+        _ = await n(
           {
-            origin: u,
+            origin: i,
             clientId: e.clientId,
             scope: e.scope,
             authUrl: e.authUrl
@@ -220,127 +208,125 @@ const ne = de(null), N = de({
           { approve: r }
         );
       } catch {
-        r ? O(u, { error: { reason: "broker_unavailable" } }) : O(u, {
-          status: e.silentUrl && re ? "silent" : "interactive"
+        r ? w(i, { error: { reason: "broker_unavailable" } }) : w(i, {
+          status: e.silentUrl && te ? "silent" : "interactive"
         });
         return;
       }
-      const oe = z == null ? void 0 : z.status, H = (z == null ? void 0 : z.body) || {};
-      if (oe === 200 && H.credential) {
-        B(e, H.credential);
+      const oe = _ == null ? void 0 : _.status, Z = (_ == null ? void 0 : _.body) || {};
+      if (oe === 200 && Z.credential) {
+        F(e, Z.credential);
         return;
       }
-      if (oe === 409 && H.consentRequired) {
-        O(u, {
+      if (oe === 409 && Z.consentRequired) {
+        w(i, {
           status: "interactive",
           consent: {
-            client: H.client || null,
-            stepUp: !!H.stepUp,
-            scope: H.scope || e.scope
+            client: Z.client || null,
+            stepUp: !!Z.stepUp,
+            scope: Z.scope || e.scope
           },
           error: null
         });
         return;
       }
-      const ee = H.error || "broker_error";
-      if (!r && Re.has(ee)) {
-        O(u, {
-          status: e.silentUrl && re ? "silent" : "interactive"
+      const ee = Z.error || "broker_error";
+      if (!r && we.has(ee)) {
+        w(i, {
+          status: e.silentUrl && te ? "silent" : "interactive"
         });
         return;
       }
       if (r && ee === "consent_denied") {
-        O(u, { error: null });
+        w(i, { error: null });
         return;
       }
       if (ee === "rate_limited" && !e.rateLimitRetried) {
-        const te = Math.min(
-          Number(H.retryAfter) > 0 ? Number(H.retryAfter) : be,
-          Ee
-        ), he = { ...e, rateLimitRetried: !0 };
-        a(u), o.current[u] = setTimeout(() => {
-          delete o.current[u], U.current[u] = !0, K.current(he, { approve: r }).finally(() => {
-            delete U.current[u];
+        const re = Math.min(
+          Number(Z.retryAfter) > 0 ? Number(Z.retryAfter) : Ee,
+          Re
+        ), me = { ...e, rateLimitRetried: !0 };
+        l(i), C.current[i] = setTimeout(() => {
+          delete C.current[i], I.current[i] = !0, D.current(me, { approve: r }).finally(() => {
+            delete I.current[i];
           });
-        }, te * 1e3), O(u, { rateLimitRetried: !0 });
+        }, re * 1e3), w(i, { rateLimitRetried: !0 });
         return;
       }
-      f(u), y((te) => ({
-        ...te,
-        [u]: {
-          origin: u,
+      u(i), z((re) => ({
+        ...re,
+        [i]: {
+          origin: i,
           reason: `broker:${ee}`,
-          detail: z || null,
-          clientId: e.clientId || C.current[u] || null
+          detail: _ || null,
+          clientId: e.clientId || R.current[i] || null
         }
       }));
     },
-    [B, O, f, a]
-  ), K = g(L);
-  K.current = L, R(() => {
-    Object.values(p).forEach((e) => {
-      e.status !== "broker" || U.current[e.origin] || o.current[e.origin] || (U.current[e.origin] = !0, L(e).finally(() => {
-        delete U.current[e.origin];
+    [F, w, u, l]
+  ), D = m(A);
+  D.current = A, b(() => {
+    Object.values(f).forEach((e) => {
+      e.status !== "broker" || I.current[e.origin] || C.current[e.origin] || (I.current[e.origin] = !0, A(e).finally(() => {
+        delete I.current[e.origin];
       }));
     });
-  }, [p, L]);
-  const Y = h(
-    (e) => !P.current || !(e != null && e.consent) ? Promise.resolve() : L(e, { approve: !0 }),
-    [L]
+  }, [f, A]);
+  const Q = h(
+    (e) => !v.current || !(e != null && e.consent) ? Promise.resolve() : A(e, { approve: !0 }),
+    [A]
   );
-  R(() => {
-    const e = X.current;
-    Object.values(p).forEach((r) => {
+  b(() => {
+    const e = Y.current;
+    Object.values(f).forEach((r) => {
       r.status === "silent" && !e[r.origin] && (e[r.origin] = setTimeout(() => {
-        delete e[r.origin], A(r.origin);
+        delete e[r.origin], a(r.origin);
       }, Te));
     }), Object.keys(e).forEach((r) => {
-      (!p[r] || p[r].status !== "silent") && (clearTimeout(e[r]), delete e[r]);
+      (!f[r] || f[r].status !== "silent") && (clearTimeout(e[r]), delete e[r]);
     });
-  }, [p, A]), R(() => () => {
-    F.current && F.current(), Object.values(X.current).forEach(clearTimeout), Object.values(o.current).forEach(clearTimeout);
+  }, [f, a]), b(() => () => {
+    x.current && x.current(), Object.values(Y.current).forEach(clearTimeout), Object.values(C.current).forEach(clearTimeout);
   }, []);
-  const W = h(
+  const K = h(
     (e) => {
-      F.current && (F.current(), F.current = null);
+      x.current && (x.current(), x.current = null);
       const r = s || ke;
-      F.current = r(e, {
+      x.current = r(e, {
         onBlocked: () => {
-          b((n) => n[e.origin] ? {
+          g((n) => n[e.origin] ? {
             ...n,
             [e.origin]: { ...n[e.origin], popupBlocked: !0 }
           } : n);
         },
         onClosed: () => {
           if (e.v2) {
-            re && b((n) => !n[e.origin] || !n[e.origin].silentUrl ? n : {
+            te && g((n) => !n[e.origin] || !n[e.origin].silentUrl ? n : {
               ...n,
               [e.origin]: { ...n[e.origin], status: "silent" }
             });
             return;
           }
-          m(e.origin);
+          o(e.origin);
         }
       });
     },
-    [s, m]
-  ), I = {
-    // Hosts render UI for interactive entries only; silent resolution is
-    // invisible by design.
-    pending: Object.values(p).filter(
+    [s, o]
+  ), j = {
+    pending: Object.values(f).filter(
       (e) => e.status === "interactive"
     ),
-    authorize: W,
-    approve: Y,
-    complete: B,
-    dismiss: j,
-    originEpochs: Z,
-    credentials: $,
-    unsupported: q
-  }, D = Object.values(p).filter(
+    authorize: K,
+    approve: Q,
+    complete: F,
+    dismiss: T,
+    originEpochs: P,
+    credentials: W,
+    unsupported: k
+  }, q = Object.values(f).filter(
     (e) => e.status === "silent" && e.silentUrl
   );
-  return /* @__PURE__ */ x.createElement(N.Provider, { value: I }, t, D.map((e) => /* @__PURE__ */ x.createElement(
+  return /* @__PURE__ */ $.createElement(J.Provider, { value: j }, t, q.map((e) => /* @__PURE__ */ $.createElement(
     "iframe",
     {
       key: `mm-silent-auth-${e.origin}`,
@@ -352,9 +338,9 @@ const ne = de(null), N = de({
     }
   )));
 };
-fe.propTypes = {
-  children: k.node,
-  launcher: k.func,
+pe.propTypes = {
+  children: E.node,
+  launcher: E.func,
   /**
    * `async (request, { approve }) => result` where request =
    * `{ origin, clientId, scope, authUrl }` (origin is the zone-attested frame origin) and result
@@ -363,169 +349,192 @@ fe.propTypes = {
    * on 200, `{ consentRequired: true, client: { name, hostname }, stepUp }` on 409, `{ error,
    * … }` otherwise. Provided only by hosts that are themselves first-party clients.
    */
-  broker: k.func
+  broker: E.func
 };
-const je = () => V(N), we = (t) => {
-  const { originEpochs: s } = V(N), c = Q(t);
+const qe = () => V(J), Ie = (t) => {
+  const { originEpochs: s } = V(J), c = N(t);
   return c && s[c] || 0;
-}, Ie = (t) => {
-  const { credentials: s } = V(N), c = Q(t);
-  return c && s[c] || null;
 }, _e = (t) => {
-  const { unsupported: s } = V(N), c = Q(t);
+  const { credentials: s } = V(J), c = N(t);
   return c && s[c] || null;
-}, Ue = ({ children: t, authorizationLauncher: s, credentialBroker: c }) => {
-  const [d, p] = M({}), [b, Z] = M({}), w = g({}), $ = g({}), S = g({}), q = h((i, l) => {
+}, Ue = (t) => {
+  const { unsupported: s } = V(J), c = N(t);
+  return c && s[c] || null;
+}, de = "MMEmbeddableZoneProvider requires a boolean `ready` prop (true once the host holds the bearer its credentialBroker needs). Embedded apps will not load until it is provided.", Me = ({
+  children: t,
+  authorizationLauncher: s,
+  credentialBroker: c,
+  ready: d
+}) => {
+  const f = d === !0, g = m(!1);
+  b(() => {
+    d !== void 0 || g.current || (g.current = !0, console.error(de), typeof window != "undefined" && typeof window.alert == "function" && window.alert(de));
+  }, [d]);
+  const [P, B] = O({}), [W, H] = O({}), k = m({}), z = m({}), y = m({}), U = h((l, u) => {
     var o;
-    return !!((o = S.current[i]) != null && o.has(l));
-  }, []), y = h((i, l, o) => {
-    p((a) => ({ ...a, [i]: { origin: l, frameRef: o } }));
-  }, []), G = h((i) => {
-    p((l) => {
-      const o = { ...l };
-      return delete o[i], o;
-    }), Z((l) => {
-      const o = { ...l };
-      return delete o[i], o;
-    }), delete S.current[i];
+    return !!((o = y.current[l]) != null && o.has(u));
+  }, []), x = h((l, u, o) => {
+    B((a) => ({ ...a, [l]: { origin: u, frameRef: o } }));
+  }, []), Y = h((l) => {
+    B((u) => {
+      const o = { ...u };
+      return delete o[l], o;
+    }), H((u) => {
+      const o = { ...u };
+      return delete o[l], o;
+    }), delete y.current[l];
   }, []);
-  R(() => {
-    const i = (o = [], a, f) => {
-      o.forEach((m) => m(a, f));
-    }, l = (o) => {
-      var B, O, U, L, K, Y, W;
-      if (!((B = o == null ? void 0 : o.data) != null && B.instanceId))
+  b(() => {
+    const l = (o = [], a, T) => {
+      o.forEach((p) => p(a, T));
+    }, u = (o) => {
+      var A, D, Q, K, j, q, e;
+      if (!((A = o == null ? void 0 : o.data) != null && A.instanceId))
         return;
-      const { instanceId: a, type: f } = o.data, m = d[a], A = (U = (O = m == null ? void 0 : m.frameRef) == null ? void 0 : O.current) == null ? void 0 : U.contentWindow;
-      if (!A || o.source !== A || o.origin !== m.origin)
+      const { instanceId: a, type: T } = o.data, p = P[a], F = (Q = (D = p == null ? void 0 : p.frameRef) == null ? void 0 : D.current) == null ? void 0 : Q.contentWindow;
+      if (!F || o.source !== F || o.origin !== p.origin)
         return;
-      const j = { origin: o.origin }, T = w.current;
-      if (f === "response") {
-        const { callbackId: I, response: D, error: e } = o.data, r = $.current[I];
-        r && (r(D, e), delete $.current[I]);
+      const w = { origin: o.origin }, I = k.current;
+      if (T === "response") {
+        const { callbackId: r, response: n, error: i } = o.data, _ = z.current[r];
+        _ && (_(n, i), delete z.current[r]);
         return;
       }
-      if (f === "mark-registered") {
-        const { requestType: I } = o.data;
-        S.current[a] || (S.current[a] = /* @__PURE__ */ new Set()), S.current[a].add(I);
+      if (T === "mark-registered") {
+        const { requestType: r } = o.data;
+        y.current[a] || (y.current[a] = /* @__PURE__ */ new Set()), y.current[a].add(r);
         return;
       }
-      f === "ready" && Z((I) => ({ ...I, [a]: !0 })), i((L = T[a]) == null ? void 0 : L[f], o.data, j), i((K = T["*"]) == null ? void 0 : K[f], o.data, j), i((Y = T[a]) == null ? void 0 : Y["*"], o.data, j), i((W = T["*"]) == null ? void 0 : W["*"], o.data, j);
+      T === "ready" && H((r) => ({ ...r, [a]: !0 })), l((K = I[a]) == null ? void 0 : K[T], o.data, w), l((j = I["*"]) == null ? void 0 : j[T], o.data, w), l((q = I[a]) == null ? void 0 : q["*"], o.data, w), l((e = I["*"]) == null ? void 0 : e["*"], o.data, w);
     };
-    return window.addEventListener("message", l), () => {
-      window.removeEventListener("message", l);
+    return window.addEventListener("message", u), () => {
+      window.removeEventListener("message", u);
     };
-  }, [d]);
-  const E = h(
-    (i, l, o) => {
-      var f, m;
-      const a = d[i];
+  }, [P]);
+  const R = h(
+    (l, u, o) => {
+      var T, p;
+      const a = P[l];
       if (!a) {
-        console.warn(`Origin not set for id: ${i}. Unable to send message.`);
+        console.warn(`Origin not set for id: ${l}. Unable to send message.`);
         return;
       }
-      (m = (f = a == null ? void 0 : a.frameRef) == null ? void 0 : f.current) != null && m.contentWindow && a.frameRef.current.contentWindow.postMessage(
-        { type: l, ...o, instanceId: i },
+      (p = (T = a == null ? void 0 : a.frameRef) == null ? void 0 : T.current) != null && p.contentWindow && a.frameRef.current.contentWindow.postMessage(
+        { type: u, ...o, instanceId: l },
         a.origin
       );
     },
-    [d]
-  ), F = g(0), X = h(() => `${Date.now()}-${++F.current}`, []), C = h(
-    async (i, l, o = {}) => new Promise((a, f) => {
-      const m = X(), A = (j, T) => {
-        delete $.current[m], T ? f(T) : a(j);
+    [P]
+  ), G = m(0), v = h(() => `${Date.now()}-${++G.current}`, []), M = h(
+    async (l, u, o = {}) => new Promise((a, T) => {
+      const p = v(), F = (w, I) => {
+        delete z.current[p], I ? T(I) : a(w);
       };
-      $.current[m] = A, E(i, "request", { callbackId: m, requestType: l, data: o });
+      z.current[p] = F, R(l, "request", { callbackId: p, requestType: u, data: o });
     }),
-    [E]
-  ), v = h(
-    (i, l) => {
-      E(i, "load-options", l);
+    [R]
+  ), L = h(
+    (l, u) => {
+      R(l, "load-options", u);
     },
-    [E]
-  ), P = h(
-    (i, l) => {
-      E(i, "validate", l);
+    [R]
+  ), S = h(
+    (l, u) => {
+      R(l, "validate", u);
     },
-    [E]
-  ), _ = me(
+    [R]
+  ), C = ge(
     () => ({
-      registerFrame: y,
-      unregisterFrame: G,
-      sendMessage: E,
-      sendRequest: C,
-      loadOptions: v,
-      validate: P,
-      hasHandler: q,
-      readyFrames: b,
-      addListener: (i, l, o) => (w.current[i] || (w.current[i] = {}), w.current[i][l] || (w.current[i][l] = []), w.current[i][l].push(o), () => {
-        w.current[i][l] = w.current[i][l].filter((a) => a !== o);
+      registerFrame: x,
+      unregisterFrame: Y,
+      sendMessage: R,
+      sendRequest: M,
+      loadOptions: L,
+      validate: S,
+      hasHandler: U,
+      readyFrames: W,
+      ready: f,
+      addListener: (l, u, o) => (k.current[l] || (k.current[l] = {}), k.current[l][u] || (k.current[l][u] = []), k.current[l][u].push(o), () => {
+        k.current[l][u] = k.current[l][u].filter((a) => a !== o);
       })
     }),
     [
-      y,
-      G,
-      E,
-      C,
-      v,
-      P,
-      q,
-      b
+      x,
+      Y,
+      R,
+      M,
+      L,
+      S,
+      U,
+      W,
+      f
     ]
   );
-  return /* @__PURE__ */ x.createElement(ne.Provider, { value: _ }, /* @__PURE__ */ x.createElement(fe, { launcher: s, broker: c }, t));
-}, J = (t, s, c) => {
+  return /* @__PURE__ */ $.createElement(ne.Provider, { value: C }, /* @__PURE__ */ $.createElement(
+    pe,
+    {
+      launcher: s,
+      broker: c
+    },
+    t
+  ));
+}, X = (t, s, c) => {
   const d = V(ne);
   if (d === null)
     throw new Error(
       "useEmbeddedEffect must be used within a MMEmbeddableZoneProvider"
     );
-  const p = g(c);
-  R(() => {
-    p.current = c;
-  }, [c]), R(() => {
+  const f = m(c);
+  b(() => {
+    f.current = c;
+  }, [c]), b(() => {
     if (!(!t || !s)) {
       if (s.startsWith("key:")) {
-        const b = s.substring(4);
-        return d.readyFrames[t] && d.sendMessage(t, "subscribe-key", { keyChord: b }), d.addListener(
+        const g = s.substring(4);
+        return d.readyFrames[t] && d.sendMessage(t, "subscribe-key", { keyChord: g }), d.addListener(
           t,
-          `key-pressed:${b}`,
-          (...w) => p.current(...w)
+          `key-pressed:${g}`,
+          (...B) => f.current(...B)
         );
       }
       return d.addListener(
         t,
         s,
-        (...b) => p.current(...b)
+        (...g) => f.current(...g)
       );
     }
   }, [d, t, s]);
 };
-Ue.propTypes = {
-  children: k.node.isRequired,
+Me.propTypes = {
+  children: E.node.isRequired,
+  /**
+   * Required. True once the host holds its bearer; zones mount no iframe until then. Missing =
+   * not ready, plus a one-time alert.
+   */
+  ready: E.bool.isRequired,
   /**
    * Optional interactive-step launcher for embedded authorizations,
    * `(entry, { onBlocked, onClosed }) => cleanup`. Defaults to a top-level
    * popup. Hosts that cannot open windows (Android WebView shells) drive
    * their own UI from useEmbeddedAuthorizations() instead.
    */
-  authorizationLauncher: k.func,
+  authorizationLauncher: E.func,
   /**
    * Optional credential broker for hosts that are first-party MachineMetrics clients
    * (`async (request, { approve }) => result`, see EmbeddedAuthorizationManager). When present,
    * v2 credential requests are brokered server-side (no popup, no hidden frame) and consent is
    * rendered natively by the host from the broker's `client` identity.
    */
-  credentialBroker: k.func
+  credentialBroker: E.func
 };
-const se = ie.default || ie, Le = 1e4, Me = "credentials", Ce = (t, s) => `${t}/mm-embedded-interop?id=${encodeURIComponent(s)}&origin=${encodeURIComponent(
+const se = ie.default || ie, Le = 1e4, Ce = "credentials", Ae = (t, s) => `${t}/mm-embedded-interop?id=${encodeURIComponent(s)}&origin=${encodeURIComponent(
   window.location.origin
-)}&caps=${Me}`, Ae = se.iframe`
+)}&caps=${Ce}`, Oe = se.iframe`
   width: 100%;
   height: 100%;
   border: none;
   visibility: ${(t) => t.$isReady ? "visible" : "hidden"};
-`, Oe = se.div`
+`, ze = se.div`
   width: 100%;
   height: 100%;
   display: flex;
@@ -538,7 +547,7 @@ const se = ie.default || ie, Le = 1e4, Me = "credentials", Ce = (t, s) => `${t}/
   text-align: center;
   color: #555;
   font-size: 14px;
-`, ze = (t) => {
+`, xe = (t) => {
   const s = t && t.origin || "This app", c = t && t.reason || "";
   switch (c) {
     case "broker:scope_above_ceiling":
@@ -566,154 +575,158 @@ const se = ie.default || ie, Le = 1e4, Me = "credentials", Ce = (t, s) => `${t}/
         detail: "It needs an update to support embedding from a different domain."
       };
   }
-}, pe = ({ entry: t }) => {
-  const s = ze(t);
-  return /* @__PURE__ */ x.createElement(Oe, { "data-reason": t && t.reason || void 0 }, /* @__PURE__ */ x.createElement("div", { style: { fontWeight: 600 } }, s.title), /* @__PURE__ */ x.createElement("div", { style: { fontSize: 12, color: "#888" } }, s.detail));
+}, he = ({ entry: t }) => {
+  const s = xe(t);
+  return /* @__PURE__ */ $.createElement(ze, { "data-reason": t && t.reason || void 0 }, /* @__PURE__ */ $.createElement("div", { style: { fontWeight: 600 } }, s.title), /* @__PURE__ */ $.createElement("div", { style: { fontSize: 12, color: "#888" } }, s.detail));
 };
-pe.propTypes = {
-  entry: k.shape({
-    origin: k.string,
-    name: k.string,
-    reason: k.string,
-    detail: k.object
+he.propTypes = {
+  entry: E.shape({
+    origin: E.string,
+    name: E.string,
+    reason: E.string,
+    detail: E.object
   })
 };
-const xe = se.div`
+const $e = se.div`
   height: 100%;
   display: flex;
   flex: 1;
   align-items: center;
   justify-content: center;
-`, $e = () => /* @__PURE__ */ x.createElement(xe, null, /* @__PURE__ */ x.createElement("div", { style: { textAlign: "center" } }, "This app couldn’t be loaded as an embeddable widget.")), Se = ({
+`, ye = () => /* @__PURE__ */ $.createElement($e, null, /* @__PURE__ */ $.createElement("div", { style: { textAlign: "center" } }, "This app couldn’t be loaded as an embeddable widget.")), Se = ({
   id: t,
   src: s,
   path: c,
   onInit: d = () => {
   },
-  onTimeout: p,
-  context: b = {},
-  params: Z = {},
-  renderUnsupported: w,
-  renderTimeout: $,
-  ...S
+  onTimeout: f,
+  context: g = {},
+  params: P = {},
+  renderUnsupported: B,
+  renderTimeout: W,
+  ...H
 }) => {
-  if ("isConfiguring" in S)
+  if ("isConfiguring" in H)
     return console.error(
       "isConfiguring must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  if ("colorMode" in b)
+  if ("colorMode" in g)
     return console.error(
       "colorMode must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  if ("isFullScreen" in b)
+  if ("isFullScreen" in g)
     return console.error(
       "isFullScreen must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  const q = g(), [y, G] = M(), [E, F] = M(0), [X, C] = M(!1), [v, P] = M(!1), _ = we(s), i = Ie(s), l = _e(s), [o, a] = M(0), [f, m] = M(null), { registerFrame: A, unregisterFrame: j, sendMessage: T } = V(
+  const k = m(), [z, y] = O(), [U, x] = O(0), [Y, R] = O(!1), [G, v] = O(!1), M = Ie(s), L = _e(s), S = Ue(s), [C, l] = O(0), [u, o] = O(null), { registerFrame: a, unregisterFrame: T, sendMessage: p, ready: F } = V(
     ne
-  ), [B, O] = M(), U = g(), L = g(p), K = g(d), Y = g(!1), W = h(() => {
-    Y.current = !1, clearTimeout(U.current), F(0), C(!1), P(!1), m(null);
+  ), [w, I] = O(), A = m(), D = m(f), Q = m(d), K = m(!1), j = h(() => {
+    K.current = !1, clearTimeout(A.current), x(0), R(!1), v(!1), o(null);
   }, []);
-  R(() => {
-    (_ > 0 || o > 0) && W();
-  }, [_, o, W]), R(() => {
-    L.current = p;
-  }, [p]), R(() => {
-    K.current = d;
-  }, [d]), R(() => {
-    E && T(t, "set-context", {
+  b(() => {
+    (M > 0 || C > 0) && j();
+  }, [M, C, j]), b(() => {
+    D.current = f;
+  }, [f]), b(() => {
+    Q.current = d;
+  }, [d]), b(() => {
+    U && p(t, "set-context", {
       context: {
-        ...b
+        ...g
       }
     });
-  }, [b, t, E]), R(() => {
-    E && T(t, "set-params", { params: Z });
-  }, [Z, t, E]), R(() => {
-    c !== void 0 && O((c == null ? void 0 : c.indexOf("/")) === 0 ? c : `/${c}`);
-  }, [c]), R(() => {
-    B === void 0 || !E || T(t, "navigate", { path: B });
-  }, [B, E, t, T]), R(() => {
-    if (!s || !t || !q)
+  }, [g, t, U]), b(() => {
+    U && p(t, "set-params", { params: P });
+  }, [P, t, U]), b(() => {
+    c !== void 0 && I((c == null ? void 0 : c.indexOf("/")) === 0 ? c : `/${c}`);
+  }, [c]), b(() => {
+    w === void 0 || !U || p(t, "navigate", { path: w });
+  }, [w, U, t, p]), b(() => {
+    if (!s || !t || !k)
+      return;
+    if (!F) {
+      j(), y(void 0);
       return;
-    W();
-    const e = new URL(s);
-    return A(t, e.origin, q), K.current(), G(Ce(e.origin, t)), () => {
-      j(t);
+    }
+    j();
+    const r = new URL(s);
+    return a(t, r.origin, k), Q.current(), y(Ae(r.origin, t)), () => {
+      T(t);
     };
-  }, [s, t, A, q, W]), R(() => {
-    if (!(!y || Y.current))
-      return U.current = setTimeout(() => {
-        C(!0), L.current && L.current();
-      }, Le), () => clearTimeout(U.current);
-  }, [y, s, _, o]);
-  const I = h(() => {
-    Y.current = !0, clearTimeout(U.current), C(!1);
+  }, [s, t, F, a, k, j]), b(() => {
+    if (!(!z || K.current))
+      return A.current = setTimeout(() => {
+        R(!0), D.current && D.current();
+      }, Le), () => clearTimeout(A.current);
+  }, [z, s, M, C]);
+  const q = h(() => {
+    K.current = !0, clearTimeout(A.current), R(!1);
   }, []);
-  J(t, "init", (e) => {
-    I(), Array.isArray(e == null ? void 0 : e.acceptsCredentials) && m(e.acceptsCredentials);
-  }), J(t, "authorize", I), J(t, "login", I), J(t, "credential-request", () => {
-    I(), P(!0);
-  }), R(() => {
-    if (!v || !i)
+  X(t, "init", (r) => {
+    q(), Array.isArray(r == null ? void 0 : r.acceptsCredentials) && o(r.acceptsCredentials);
+  }), X(t, "authorize", q), X(t, "login", q), X(t, "credential-request", () => {
+    q(), v(!0);
+  }), b(() => {
+    if (!G || !L)
       return;
-    const e = f;
-    if (Array.isArray(e) && !e.includes(i.kind))
+    const r = u;
+    if (Array.isArray(r) && !r.includes(L.kind))
       return;
-    const r = i.kind === "access_token" ? { accessToken: i.accessToken } : {};
-    T(t, "credential", { ...r, credential: i });
-  }, [v, i, f, t, T]), J(t, "ready", () => {
-    I(), F((e) => e + 1);
+    const n = L.kind === "access_token" ? { accessToken: L.accessToken } : {};
+    p(t, "credential", { ...n, credential: L });
+  }, [G, L, u, t, p]), X(t, "ready", () => {
+    q(), x((r) => r + 1);
   });
-  const D = g();
-  return J(t, "heartbeat", () => {
-    D.current && clearTimeout(D.current), D.current = setTimeout(() => {
-      a((e) => e + 1);
+  const e = m();
+  return X(t, "heartbeat", () => {
+    e.current && clearTimeout(e.current), e.current = setTimeout(() => {
+      l((r) => r + 1);
     }, 6e3);
-  }), R(() => () => {
-    D.current && clearTimeout(D.current);
-  }, []), l ? w ? w(l) : /* @__PURE__ */ x.createElement(pe, { entry: l }) : X && !E ? $ ? $() : /* @__PURE__ */ x.createElement($e, null) : /* @__PURE__ */ x.createElement(
-    Ae,
+  }), b(() => () => {
+    e.current && clearTimeout(e.current);
+  }, []), S ? B ? B(S) : /* @__PURE__ */ $.createElement(he, { entry: S }) : Y && !U ? W ? W() : /* @__PURE__ */ $.createElement(ye, null) : /* @__PURE__ */ $.createElement(
+    Oe,
     {
-      key: `auth-epoch-${_}-frame-${o}`,
-      $isReady: E,
-      ref: q,
-      src: y,
-      ...S
+      key: `auth-epoch-${M}-frame-${C}`,
+      $isReady: U,
+      ref: k,
+      src: z,
+      ...H
     }
   );
 };
 Se.propTypes = {
-  id: k.string,
-  src: k.string.isRequired,
-  path: k.string,
-  onInit: k.func,
-  onTimeout: k.func,
+  id: E.string,
+  src: E.string.isRequired,
+  path: E.string,
+  onInit: E.func,
+  onTimeout: E.func,
   /**
    * Optional host-styled renderer for the structurally-unsupported embed
    * state (legacy app on a cross-site origin), `(entry) => ReactNode`. Falls
    * back to a minimal built-in placeholder.
    */
-  renderUnsupported: k.func,
+  renderUnsupported: E.func,
   /**
    * Optional host-styled renderer for the handshake-timeout failure state
    * (the app is not embeddable / could not load), `() => ReactNode`. Falls
    * back to a minimal centered message.
    */
-  renderTimeout: k.func
+  renderTimeout: E.func
 };
 export {
-  ge as CREDENTIAL_KIND_ACCESS_TOKEN,
-  N as EmbeddedAuthorizationContext,
+  be as CREDENTIAL_KIND_ACCESS_TOKEN,
+  J as EmbeddedAuthorizationContext,
   Se as MMEmbeddableZone,
   ne as MMEmbeddableZoneContext,
-  Ue as MMEmbeddableZoneProvider,
+  Me as MMEmbeddableZoneProvider,
   ae as isCrossSite,
   ce as normalizeCredential,
   ke as popupAuthorizationLauncher,
-  ze as unsupportedCopy,
-  je as useEmbeddedAuthorizations,
-  Ie as useEmbeddedCredential,
-  J as useEmbeddedEffect,
-  we as useEmbeddedOriginEpoch,
-  _e as useEmbeddedUnsupported
+  xe as unsupportedCopy,
+  qe as useEmbeddedAuthorizations,
+  _e as useEmbeddedCredential,
+  X as useEmbeddedEffect,
+  Ie as useEmbeddedOriginEpoch,
+  Ue as useEmbeddedUnsupported
 };