@machinemetrics/mm-react-embeddable 2.0.1-0 → 2.0.1-2

package/dist/mm-react-embeddable.es.js

@@ -1,7 +1,7 @@
-import P, { createContext as ue, useContext as G, useState as L, useRef as g, useCallback as h, useEffect as b, useMemo as fe } from "react";
-import E from "prop-types";
+import P, { createContext as ue, useContext as G, useState as U, useRef as R, useCallback as b, useEffect as k, useMemo as fe } from "react";
+import T from "prop-types";
 import te from "styled-components";
-const ee = ue(null), J = ue({
+const ee = ue(null), V = ue({
   pending: [],
   authorize: () => {
   },
@@ -14,184 +14,185 @@ const ee = ue(null), J = ue({
   originEpochs: {},
   credentials: {},
   unsupported: {}
-}), pe = "access_token", ne = (r) => r ? r.kind ? r : r.accessToken ? {
+}), pe = "access_token", ne = (t) => t ? t.kind ? t : t.accessToken ? {
   kind: pe,
-  accessToken: r.accessToken,
-  expiresAt: r.expiresAt || null
-} : null : null, he = 60, ge = 120, me = /* @__PURE__ */ new Set([
+  accessToken: t.accessToken,
+  expiresAt: t.expiresAt || null
+} : null : null, ge = 60, he = 120, me = /* @__PURE__ */ new Set([
   "host_not_allowed",
   "unbound_host_bound_guest",
   "invalid_token",
   "provider_unavailable"
-]), V = (r) => {
+]), J = (t) => {
   try {
-    return new URL(r).origin;
+    return new URL(t).origin;
   } catch {
     return null;
   }
-}, oe = (r, o) => {
-  const i = o == null ? void 0 : o.origin;
-  return !i || V(r == null ? void 0 : r.authUrl) !== i ? null : i;
-}, se = (r) => {
-  if (!r || /^\d{1,3}(?:\.\d{1,3}){3}$/.test(r) || r.includes(":"))
-    return r;
-  const o = r.split(".");
-  return o.length <= 2 ? r : o.slice(-2).join(".");
-}, ce = (r, o) => {
+}, se = (t, s) => {
+  const i = s == null ? void 0 : s.origin;
+  return !i || J(t == null ? void 0 : t.authUrl) !== i ? null : i;
+}, oe = (t) => {
+  if (!t || /^\d{1,3}(?:\.\d{1,3}){3}$/.test(t) || t.includes(":"))
+    return t;
+  const s = t.split(".");
+  return s.length <= 2 ? t : s.slice(-2).join(".");
+}, ce = (t, s) => {
   try {
-    const i = new URL(r), p = new URL(o);
-    return i.protocol !== p.protocol ? !0 : se(i.hostname) !== se(p.hostname);
+    const i = new URL(t), l = new URL(s);
+    return i.protocol !== l.protocol ? !0 : oe(i.hostname) !== oe(l.hostname);
   } catch {
     return !0;
   }
-}, be = (r, { onBlocked: o, onClosed: i }) => {
-  const p = window.open(
-    r.authUrl,
+}, be = (t, { onBlocked: s, onClosed: i }) => {
+  const l = window.open(
+    t.authUrl,
     "mm-embed-auth",
     "popup,width=600,height=700"
   );
-  if (!p)
-    return o(), () => {
+  if (!l)
+    return s(), () => {
     };
-  const m = setInterval(() => {
-    p.closed && (clearInterval(m), i());
+  const w = setInterval(() => {
+    l.closed && (clearInterval(w), i());
   }, 1e3);
-  return () => clearInterval(m);
-}, ae = ({ children: r, launcher: o, broker: i }) => {
-  const p = G(ee), [m, R] = L({}), [v, B] = L({}), [W, j] = L({}), [T, A] = L({}), $ = g(W);
-  $.current = W;
-  const _ = g(m);
-  _.current = m;
-  const U = g(null), q = g({}), I = g({}), D = g(i);
-  D.current = i;
-  const O = h((e) => {
-    const n = q.current[e];
+  return () => clearInterval(w);
+}, ae = ({ children: t, launcher: s, broker: i }) => {
+  const l = G(ee), [w, I] = U({}), [v, D] = U({}), [j, K] = U({}), [y, E] = U({}), x = R(j);
+  x.current = j;
+  const Z = R(w);
+  Z.current = w;
+  const _ = R(null), $ = R({}), A = R({}), q = R(i);
+  q.current = i;
+  const F = b((e) => {
+    const n = $.current[e];
     if (!n)
       return;
-    const t = (s) => !s[e] || s[e].clientId ? s : { ...s, [e]: { ...s[e], clientId: n } };
-    R(t), A(t);
-  }, []), x = h(
+    const r = (c) => !c[e] || c[e].clientId ? c : { ...c, [e]: { ...c[e], clientId: n } };
+    I(r), E(r);
+  }, []), B = b(
     (e, n) => {
-      e && (A((t) => t[e] ? t : {
-        ...t,
+      e && (E((r) => r[e] ? r : {
+        ...r,
         [e]: {
           origin: e,
           reason: n,
-          clientId: q.current[e] || null
+          clientId: $.current[e] || null
         }
-      }), O(e));
+      }), F(e));
     },
-    [O]
-  ), M = h(
-    (e, { v2: n = !1, origin: t = null } = {}) => {
-      t && (n && $.current[t] || (R((s) => s[t] ? s : {
-        ...s,
-        [t]: {
-          origin: t,
+    [F]
+  ), z = b(
+    (e, { v2: n = !1, origin: r = null } = {}) => {
+      r && (n && x.current[r] || (I((c) => c[r] ? c : {
+        ...c,
+        [r]: {
+          origin: r,
           authUrl: e.authUrl,
-          status: n && D.current ? "broker" : "interactive",
+          status: n && q.current ? "broker" : "interactive",
           v2: n,
           scope: e.scope || null,
-          acceptsCredentials: I.current[t] || null,
+          acceptsCredentials: A.current[r] || null,
           consent: null,
           error: null,
-          clientId: e.clientId || q.current[t] || null,
+          clientId: e.clientId || $.current[r] || null,
           popupBlocked: !1
         }
-      }), O(t)));
+      }), F(r)));
     },
-    [O]
-  ), y = g({}), F = h((e) => {
-    y.current[e] && (clearTimeout(y.current[e]), delete y.current[e]);
-  }, []), c = h(
+    [F]
+  ), M = R({}), W = b((e) => {
+    M.current[e] && (clearTimeout(M.current[e]), delete M.current[e]);
+  }, []), o = b(
     (e) => {
-      F(e), R((n) => {
+      W(e), I((n) => {
         if (!n[e])
           return n;
-        const t = { ...n };
-        return delete t[e], t;
+        const r = { ...n };
+        return delete r[e], r;
       });
     },
-    [F]
-  ), l = h(
+    [W]
+  ), a = b(
     (e) => {
-      e && (c(e), B((n) => ({
+      e && (o(e), D((n) => ({
         ...n,
         [e]: (n[e] || 0) + 1
       })));
     },
-    [c]
-  ), u = h(
+    [o]
+  ), u = b(
     (e) => {
-      c(e.origin);
+      o(e.origin);
     },
-    [c]
-  ), d = h(
+    [o]
+  ), f = b(
     (e, n) => {
-      const t = oe(e, n);
-      if (t) {
-        if (ce(t, window.location.origin)) {
-          x(t, "cross-site-legacy");
+      const r = se(e, n);
+      if (r) {
+        if (ce(r, window.location.origin)) {
+          B(r, "cross-site-legacy");
           return;
         }
-        M(e, { origin: t });
+        z(e, { origin: r });
       }
     },
-    [M, x]
+    [z, B]
   );
-  b(() => {
-    if (!p)
+  k(() => {
+    if (!l)
       return;
     const e = [
-      p.addListener("*", "init", (n, t) => {
-        t != null && t.origin && (n != null && n.clientId) && (q.current[t.origin] = n.clientId, O(t.origin)), t != null && t.origin && Array.isArray(n == null ? void 0 : n.acceptsCredentials) ? I.current[t.origin] = n.acceptsCredentials : t != null && t.origin && ce(t.origin, window.location.origin) && x(t.origin, "cross-site-legacy");
+      l.addListener("*", "init", (n, r) => {
+        r != null && r.origin && (n != null && n.clientId) && ($.current[r.origin] = n.clientId, F(r.origin)), r != null && r.origin && Array.isArray(n == null ? void 0 : n.acceptsCredentials) ? A.current[r.origin] = n.acceptsCredentials : r != null && r.origin && ce(r.origin, window.location.origin) && B(r.origin, "cross-site-legacy");
       }),
-      p.addListener("*", "authorize", d),
-      p.addListener("*", "login", d),
-      p.addListener(
+      l.addListener("*", "authorize", f),
+      l.addListener("*", "login", f),
+      l.addListener(
         "*",
         "credential-request",
-        (n, t) => M(n, { v2: !0, origin: oe(n, t) })
+        (n, r) => z(n, { v2: !0, origin: se(n, r) })
       )
     ];
     return () => e.forEach((n) => n());
-  }, [p, d, M, O, x]), b(() => {
+  }, [l, f, z, F, B]), k(() => {
     const e = (n) => {
-      const t = n == null ? void 0 : n.data;
-      if (!t || t.type !== "authorized")
+      const r = n == null ? void 0 : n.data;
+      if (!r || r.type !== "authorized")
         return;
-      const s = V(t.authUrl);
-      if (!(!s || n.origin !== s)) {
-        if (t.accessToken) {
-          if (!_.current[s])
-            return;
-          j((a) => ({
-            ...a,
-            [s]: ne({ accessToken: t.accessToken })
-          })), c(s);
+      const c = J(r.authUrl);
+      if (!c || n.origin !== c)
+        return;
+      const p = Z.current[c];
+      if (!(!p || p.status !== "interactive")) {
+        if (r.accessToken) {
+          K((O) => ({
+            ...O,
+            [c]: ne({ accessToken: r.accessToken })
+          })), o(c);
           return;
         }
-        l(s);
+        a(c);
       }
     };
     return window.addEventListener("message", e), () => window.removeEventListener("message", e);
-  }, [c, l]);
-  const w = h(
+  }, [o, a]);
+  const g = b(
     (e, n) => {
-      const t = e == null ? void 0 : e.origin, s = ne(n);
-      !t || !s || (j((a) => ({ ...a, [t]: s })), c(t));
+      const r = e == null ? void 0 : e.origin, c = ne(n);
+      !r || !c || (K((p) => ({ ...p, [r]: c })), o(r));
     },
-    [c]
-  ), f = h((e, n) => {
-    R((t) => t[e] ? { ...t, [e]: { ...t[e], ...n } } : t);
-  }, []), C = g({}), k = h(
+    [o]
+  ), h = b((e, n) => {
+    I((r) => r[e] ? { ...r, [e]: { ...r[e], ...n } } : r);
+  }, []), m = R({}), C = b(
     async (e, { approve: n } = {}) => {
-      const t = D.current, { origin: s } = e;
-      let a;
+      const r = q.current, { origin: c } = e;
+      let p;
       try {
-        a = await t(
+        p = await r(
           {
-            origin: s,
+            origin: c,
             clientId: e.clientId,
             scope: e.scope,
             authUrl: e.authUrl
@@ -199,106 +200,112 @@ const ee = ue(null), J = ue({
           { approve: n }
         );
       } catch {
-        n ? f(s, { error: { reason: "broker_unavailable" } }) : f(s, { status: "interactive" });
+        n ? h(c, { error: { reason: "broker_unavailable" } }) : h(c, { status: "interactive" });
         return;
       }
-      const Q = a == null ? void 0 : a.status, S = (a == null ? void 0 : a.body) || {};
-      if (Q === 200 && S.credential) {
-        w(e, S.credential);
+      const O = p == null ? void 0 : p.status, d = (p == null ? void 0 : p.body) || {};
+      if (O === 200 && d.credential) {
+        g(e, d.credential);
         return;
       }
-      if (Q === 409 && S.consentRequired) {
-        f(s, {
+      if (O === 409 && d.consentRequired) {
+        h(c, {
           status: "interactive",
           consent: {
-            client: S.client || null,
-            stepUp: !!S.stepUp,
-            scope: S.scope || e.scope
+            client: d.client || null,
+            stepUp: !!d.stepUp,
+            scope: d.scope || e.scope
           },
           error: null
         });
         return;
       }
-      const Y = S.error || "broker_error";
-      if (!n && me.has(Y)) {
-        f(s, { status: "interactive" });
+      const S = d.error || "broker_error";
+      if (!n && me.has(S)) {
+        h(c, { status: "interactive" });
         return;
       }
-      if (n && Y === "consent_denied") {
-        f(s, { error: null });
+      if (n && S === "consent_denied") {
+        h(c, { error: null });
         return;
       }
-      if (Y === "rate_limited" && !e.rateLimitRetried) {
+      if (S === "rate_limited" && !e.rateLimitRetried) {
         const N = Math.min(
-          Number(S.retryAfter) > 0 ? Number(S.retryAfter) : he,
-          ge
+          Number(d.retryAfter) > 0 ? Number(d.retryAfter) : ge,
+          he
         ), de = { ...e, rateLimitRetried: !0 };
-        F(s), y.current[s] = setTimeout(() => {
-          delete y.current[s], C.current[s] = !0, z.current(de, { approve: n }).finally(() => {
-            delete C.current[s];
+        W(c), M.current[c] = setTimeout(() => {
+          delete M.current[c], m.current[c] = !0, L.current(de, { approve: n }).finally(() => {
+            delete m.current[c];
           });
-        }, N * 1e3), f(s, { rateLimitRetried: !0 });
+        }, N * 1e3), h(c, { rateLimitRetried: !0 });
         return;
       }
-      c(s), A((N) => ({
+      o(c), E((N) => ({
         ...N,
-        [s]: {
-          origin: s,
-          reason: `broker:${Y}`,
-          detail: a || null,
-          clientId: e.clientId || q.current[s] || null
+        [c]: {
+          origin: c,
+          reason: `broker:${S}`,
+          detail: { status: O != null ? O : null, reason: S },
+          clientId: e.clientId || $.current[c] || null
         }
       }));
     },
-    [w, f, c, F]
-  ), z = g(k);
-  z.current = k, b(() => {
-    Object.values(m).forEach((e) => {
-      e.status !== "broker" || C.current[e.origin] || y.current[e.origin] || (C.current[e.origin] = !0, k(e).finally(() => {
-        delete C.current[e.origin];
+    [g, h, o, W]
+  ), L = R(C);
+  L.current = C, k(() => {
+    Object.values(w).forEach((e) => {
+      e.status !== "broker" || m.current[e.origin] || M.current[e.origin] || (m.current[e.origin] = !0, C(e).finally(() => {
+        delete m.current[e.origin];
       }));
     });
-  }, [m, k]);
-  const Z = h(
-    (e) => !D.current || !(e != null && e.consent) ? Promise.resolve() : k(e, { approve: !0 }),
-    [k]
+  }, [w, C]);
+  const Q = b(
+    (e) => !q.current || !(e != null && e.consent) || m.current[e.origin] ? Promise.resolve() : (m.current[e.origin] = !0, C(e, { approve: !0 }).finally(() => {
+      delete m.current[e.origin];
+    })),
+    [C]
   );
-  b(() => () => {
-    U.current && U.current(), Object.values(y.current).forEach(clearTimeout);
+  k(() => () => {
+    _.current && _.current(), Object.values(M.current).forEach(clearTimeout);
   }, []);
-  const H = h(
+  const H = b(
     (e) => {
-      U.current && (U.current(), U.current = null);
-      const n = o || be;
-      U.current = n(e, {
+      _.current && (_.current(), _.current = null);
+      const n = s || be;
+      _.current = n(e, {
         onBlocked: () => {
-          R((t) => t[e.origin] ? {
-            ...t,
-            [e.origin]: { ...t[e.origin], popupBlocked: !0 }
-          } : t);
+          I((r) => r[e.origin] ? {
+            ...r,
+            [e.origin]: { ...r[e.origin], popupBlocked: !0 }
+          } : r);
         },
-        // A popup closed without posting may still have completed login; the remounted guest re-requests.
-        onClosed: () => l(e.origin)
+        // A completed login already removed the entry. A v2 entry stays pending so the prompt remains;
+        // a legacy guest is remounted because it only learns of a login by reloading.
+        onClosed: () => {
+          const r = Z.current[e.origin];
+          !r || r.v2 || a(e.origin);
+        }
       });
     },
-    [o, l]
-  ), K = {
-    pending: Object.values(m).filter(
+    [s, a]
+  ), Y = {
+    pending: Object.values(w).filter(
       (e) => e.status === "interactive"
     ),
     authorize: H,
-    approve: Z,
-    complete: w,
+    approve: Q,
+    complete: g,
     dismiss: u,
     originEpochs: v,
-    credentials: W,
-    unsupported: T
+    credentials: j,
+    unsupported: y
   };
-  return /* @__PURE__ */ P.createElement(J.Provider, { value: K }, r);
+  return /* @__PURE__ */ P.createElement(V.Provider, { value: Y }, t);
 };
 ae.propTypes = {
-  children: E.node,
-  launcher: E.func,
+  children: T.node,
+  launcher: T.func,
   /**
    * `async (request, { approve }) => result` where request =
    * `{ origin, clientId, scope, authUrl }` (origin is the zone-attested frame origin) and result
@@ -307,192 +314,197 @@ ae.propTypes = {
    * on 200, `{ consentRequired: true, client: { name, hostname }, stepUp }` on 409, `{ error,
    * … }` otherwise. Provided only by hosts that are themselves first-party clients.
    */
-  broker: E.func
+  broker: T.func
 };
-const Oe = () => G(J), Ee = (r) => {
-  const { originEpochs: o } = G(J), i = V(r);
-  return i && o[i] || 0;
-}, Re = (r) => {
-  const { credentials: o } = G(J), i = V(r);
-  return i && o[i] || null;
-}, we = (r) => {
-  const { unsupported: o } = G(J), i = V(r);
-  return i && o[i] || null;
-}, ie = "MMEmbeddableZoneProvider requires a boolean `ready` prop (true once the host holds the bearer its credentialBroker needs). Embedded apps will not load until it is provided.", ke = ({
-  children: r,
-  authorizationLauncher: o,
+const $e = () => G(V), Ee = (t) => {
+  const { originEpochs: s } = G(V), i = J(t);
+  return i && s[i] || 0;
+}, Re = (t) => {
+  const { credentials: s } = G(V), i = J(t);
+  return i && s[i] || null;
+}, ke = (t) => {
+  const { unsupported: s } = G(V), i = J(t);
+  return i && s[i] || null;
+}, ie = "MMEmbeddableZoneProvider requires a boolean `ready` prop (true once the host holds the bearer its credentialBroker needs). Embedded apps will not load until it is provided.", we = ({
+  children: t,
+  authorizationLauncher: s,
   credentialBroker: i,
-  ready: p
+  ready: l
 }) => {
-  const m = p === !0, R = g(!1);
-  b(() => {
-    p !== void 0 || R.current || (R.current = !0, console.error(ie), typeof window != "undefined" && typeof window.alert == "function" && window.alert(ie));
-  }, [p]);
-  const [v, B] = L({}), [W, j] = L({}), T = g({}), A = g({}), $ = g({}), _ = h((c, l) => {
+  const w = l === !0, I = R(!1);
+  k(() => {
+    l !== void 0 || I.current || (I.current = !0, console.error(ie), typeof window != "undefined" && typeof window.alert == "function" && window.alert(ie));
+  }, [l]);
+  const [v, D] = U({}), [j, K] = U({}), y = R({}), E = R({}), x = R({}), Z = b((o, a) => {
     var u;
-    return !!((u = $.current[c]) != null && u.has(l));
-  }, []), U = h((c, l, u) => {
-    B((d) => ({ ...d, [c]: { origin: l, frameRef: u } }));
-  }, []), q = h((c) => {
-    B((l) => {
-      const u = { ...l };
-      return delete u[c], u;
-    }), j((l) => {
-      const u = { ...l };
-      return delete u[c], u;
-    }), delete $.current[c];
+    return !!((u = x.current[o]) != null && u.has(a));
+  }, []), _ = b((o, a, u) => {
+    D((f) => ({ ...f, [o]: { origin: a, frameRef: u } }));
+  }, []), $ = b((o) => {
+    D((a) => {
+      const u = { ...a };
+      return delete u[o], u;
+    }), K((a) => {
+      const u = { ...a };
+      return delete u[o], u;
+    }), delete x.current[o], Object.keys(E.current).forEach((a) => {
+      E.current[a].instanceId === o && delete E.current[a];
+    });
   }, []);
-  b(() => {
-    const c = (u = [], d, w) => {
-      u.forEach((f) => f(d, w));
-    }, l = (u) => {
-      var Z, H, K, e, n, t, s;
-      if (!((Z = u == null ? void 0 : u.data) != null && Z.instanceId))
+  k(() => () => {
+    E.current = {};
+  }, []), k(() => {
+    const o = (u = [], f, g) => {
+      u.forEach((h) => h(f, g));
+    }, a = (u) => {
+      var Q, H, Y, e, n, r, c;
+      if (!((Q = u == null ? void 0 : u.data) != null && Q.instanceId))
         return;
-      const { instanceId: d, type: w } = u.data, f = v[d], C = (K = (H = f == null ? void 0 : f.frameRef) == null ? void 0 : H.current) == null ? void 0 : K.contentWindow;
-      if (!C || u.source !== C || u.origin !== f.origin)
+      const { instanceId: f, type: g } = u.data, h = v[f], m = (Y = (H = h == null ? void 0 : h.frameRef) == null ? void 0 : H.current) == null ? void 0 : Y.contentWindow;
+      if (!m || u.source !== m || u.origin !== h.origin)
         return;
-      const k = { origin: u.origin }, z = T.current;
-      if (w === "response") {
-        const { callbackId: a, response: Q, error: S } = u.data, Y = A.current[a];
-        Y && (Y(Q, S), delete A.current[a]);
+      const C = { origin: u.origin }, L = y.current;
+      if (g === "response") {
+        const { callbackId: p, response: O, error: d } = u.data, S = E.current[p];
+        S && S.instanceId === f && (S.callback(O, d), delete E.current[p]);
         return;
       }
-      if (w === "mark-registered") {
-        const { requestType: a } = u.data;
-        $.current[d] || ($.current[d] = /* @__PURE__ */ new Set()), $.current[d].add(a);
+      if (g === "mark-registered") {
+        const { requestType: p } = u.data;
+        x.current[f] || (x.current[f] = /* @__PURE__ */ new Set()), x.current[f].add(p);
         return;
       }
-      w === "ready" && j((a) => ({ ...a, [d]: !0 })), c((e = z[d]) == null ? void 0 : e[w], u.data, k), c((n = z["*"]) == null ? void 0 : n[w], u.data, k), c((t = z[d]) == null ? void 0 : t["*"], u.data, k), c((s = z["*"]) == null ? void 0 : s["*"], u.data, k);
+      g === "ready" && K((p) => ({ ...p, [f]: !0 })), o((e = L[f]) == null ? void 0 : e[g], u.data, C), o((n = L["*"]) == null ? void 0 : n[g], u.data, C), o((r = L[f]) == null ? void 0 : r["*"], u.data, C), o((c = L["*"]) == null ? void 0 : c["*"], u.data, C);
     };
-    return window.addEventListener("message", l), () => {
-      window.removeEventListener("message", l);
+    return window.addEventListener("message", a), () => {
+      window.removeEventListener("message", a);
     };
   }, [v]);
-  const I = h(
-    (c, l, u) => {
-      var w, f;
-      const d = v[c];
-      if (!d) {
-        console.warn(`Origin not set for id: ${c}. Unable to send message.`);
+  const A = b(
+    (o, a, u, f) => {
+      var h, m;
+      const g = v[o];
+      if (!g) {
+        console.warn(`Origin not set for id: ${o}. Unable to send message.`);
         return;
       }
-      (f = (w = d == null ? void 0 : d.frameRef) == null ? void 0 : w.current) != null && f.contentWindow && d.frameRef.current.contentWindow.postMessage(
-        { type: l, ...u, instanceId: c },
-        d.origin
+      (m = (h = g == null ? void 0 : g.frameRef) == null ? void 0 : h.current) != null && m.contentWindow && g.frameRef.current.contentWindow.postMessage(
+        { type: a, ...u, instanceId: o },
+        f || g.origin
       );
     },
     [v]
-  ), D = g(0), O = h(() => `${Date.now()}-${++D.current}`, []), x = h(
-    async (c, l, u = {}) => new Promise((d, w) => {
-      const f = O(), C = (k, z) => {
-        delete A.current[f], z ? w(z) : d(k);
+  ), q = R(0), F = b(() => `${Date.now()}-${++q.current}`, []), B = b(
+    async (o, a, u = {}) => new Promise((f, g) => {
+      const h = F(), m = (C, L) => {
+        delete E.current[h], L ? g(L) : f(C);
       };
-      A.current[f] = C, I(c, "request", { callbackId: f, requestType: l, data: u });
+      E.current[h] = { instanceId: o, callback: m }, A(o, "request", { callbackId: h, requestType: a, data: u });
     }),
-    [I]
-  ), M = h(
-    (c, l) => {
-      I(c, "load-options", l);
+    [A]
+  ), z = b(
+    (o, a) => {
+      A(o, "load-options", a);
     },
-    [I]
-  ), y = h(
-    (c, l) => {
-      I(c, "validate", l);
+    [A]
+  ), M = b(
+    (o, a) => {
+      A(o, "validate", a);
     },
-    [I]
-  ), F = fe(
+    [A]
+  ), W = fe(
     () => ({
-      registerFrame: U,
-      unregisterFrame: q,
-      sendMessage: I,
-      sendRequest: x,
-      loadOptions: M,
-      validate: y,
-      hasHandler: _,
-      readyFrames: W,
-      ready: m,
-      addListener: (c, l, u) => (T.current[c] || (T.current[c] = {}), T.current[c][l] || (T.current[c][l] = []), T.current[c][l].push(u), () => {
-        T.current[c][l] = T.current[c][l].filter((d) => d !== u);
+      registerFrame: _,
+      unregisterFrame: $,
+      sendMessage: A,
+      sendRequest: B,
+      loadOptions: z,
+      validate: M,
+      hasHandler: Z,
+      readyFrames: j,
+      ready: w,
+      addListener: (o, a, u) => (y.current[o] || (y.current[o] = {}), y.current[o][a] || (y.current[o][a] = []), y.current[o][a].push(u), () => {
+        y.current[o][a] = y.current[o][a].filter((f) => f !== u);
       })
     }),
     [
-      U,
-      q,
-      I,
-      x,
-      M,
-      y,
       _,
-      W,
-      m
+      $,
+      A,
+      B,
+      z,
+      M,
+      Z,
+      j,
+      w
     ]
   );
-  return /* @__PURE__ */ P.createElement(ee.Provider, { value: F }, /* @__PURE__ */ P.createElement(
+  return /* @__PURE__ */ P.createElement(ee.Provider, { value: W }, /* @__PURE__ */ P.createElement(
     ae,
     {
-      launcher: o,
+      launcher: s,
       broker: i
     },
-    r
+    t
   ));
-}, X = (r, o, i) => {
-  const p = G(ee);
-  if (p === null)
+}, X = (t, s, i) => {
+  const l = G(ee);
+  if (l === null)
     throw new Error(
       "useEmbeddedEffect must be used within a MMEmbeddableZoneProvider"
     );
-  const m = g(i);
-  b(() => {
-    m.current = i;
-  }, [i]), b(() => {
-    if (!(!r || !o)) {
-      if (o.startsWith("key:")) {
-        const R = o.substring(4);
-        return p.readyFrames[r] && p.sendMessage(r, "subscribe-key", { keyChord: R }), p.addListener(
-          r,
-          `key-pressed:${R}`,
-          (...B) => m.current(...B)
+  const w = R(i);
+  k(() => {
+    w.current = i;
+  }, [i]), k(() => {
+    if (!(!t || !s)) {
+      if (s.startsWith("key:")) {
+        const I = s.substring(4);
+        return l.readyFrames[t] && l.sendMessage(t, "subscribe-key", { keyChord: I }), l.addListener(
+          t,
+          `key-pressed:${I}`,
+          (...D) => w.current(...D)
         );
       }
-      return p.addListener(
-        r,
-        o,
-        (...R) => m.current(...R)
+      return l.addListener(
+        t,
+        s,
+        (...I) => w.current(...I)
       );
     }
-  }, [p, r, o]);
+  }, [l, t, s]);
 };
-ke.propTypes = {
-  children: E.node.isRequired,
+we.propTypes = {
+  children: T.node.isRequired,
   /**
    * Required. True once the host holds its bearer; zones mount no iframe until then. Missing =
    * not ready, plus a one-time alert.
    */
-  ready: E.bool.isRequired,
+  ready: T.bool.isRequired,
   /**
    * Optional interactive-step launcher for embedded authorizations,
    * `(entry, { onBlocked, onClosed }) => cleanup`. Defaults to a top-level
    * popup. Hosts that cannot open windows (Android WebView shells) drive
    * their own UI from useEmbeddedAuthorizations() instead.
    */
-  authorizationLauncher: E.func,
+  authorizationLauncher: T.func,
   /**
    * Optional credential broker for hosts that are first-party MachineMetrics clients
    * (`async (request, { approve }) => result`, see EmbeddedAuthorizationManager). When present,
-   * v2 credential requests are brokered server-side (no popup) and consent is
-   * rendered natively by the host from the broker's `client` identity.
+   * v2 credential requests are brokered server-side and consent is rendered natively by the host
+   * from the broker's `client` identity; a broker answer the host may not act on falls back to the
+   * interactive entry and its popup.
    */
-  credentialBroker: E.func
+  credentialBroker: T.func
 };
-const re = te.default || te, Te = 1e4, Ie = "credentials", _e = (r, o) => `${r}/mm-embedded-interop?id=${encodeURIComponent(o)}&origin=${encodeURIComponent(
+const re = te.default || te, Te = 1e4, Ie = "credentials", _e = (t, s) => `${t}/mm-embedded-interop?id=${encodeURIComponent(s)}&origin=${encodeURIComponent(
   window.location.origin
 )}&caps=${Ie}`, Me = re.iframe`
   width: 100%;
   height: 100%;
   border: none;
-  visibility: ${(r) => r.$isReady ? "visible" : "hidden"};
-`, ye = re.div`
+  visibility: ${(t) => t.$isReady ? "visible" : "hidden"};
+`, Ce = re.div`
   width: 100%;
   height: 100%;
   display: flex;
@@ -505,44 +517,44 @@ const re = te.default || te, Te = 1e4, Ie = "credentials", _e = (r, o) => `${r}/
   text-align: center;
   color: #555;
   font-size: 14px;
-`, Ce = (r) => {
-  const o = r && r.origin || "This app", i = r && r.reason || "";
+`, ye = (t) => {
+  const s = t && t.origin || "This app", i = t && t.reason || "";
   switch (i) {
     case "broker:scope_above_ceiling":
       return {
-        title: `${o} can’t be authorized here`,
+        title: `${s} can’t be authorized here`,
         detail: "It asks for permissions your role doesn’t have."
       };
     case "broker:origin_mismatch":
     case "broker:unknown_client":
       return {
-        title: `${o} can’t be authorized here`,
+        title: `${s} can’t be authorized here`,
         detail: "It isn’t registered to run at this address."
       };
     case "broker:cross_company_principal":
       return {
-        title: `${o} can’t be authorized here`,
+        title: `${s} can’t be authorized here`,
         detail: "It can’t be authorized for this account."
       };
     default:
       return i.startsWith("broker:") ? {
-        title: `${o} can’t be authorized here`,
+        title: `${s} can’t be authorized here`,
         detail: "Authorization was refused."
       } : {
-        title: `${o} can’t be embedded here`,
+        title: `${s} can’t be embedded here`,
         detail: "It needs an update to support embedding from a different domain."
       };
   }
-}, le = ({ entry: r }) => {
-  const o = Ce(r);
-  return /* @__PURE__ */ P.createElement(ye, { "data-reason": r && r.reason || void 0 }, /* @__PURE__ */ P.createElement("div", { style: { fontWeight: 600 } }, o.title), /* @__PURE__ */ P.createElement("div", { style: { fontSize: 12, color: "#888" } }, o.detail));
+}, le = ({ entry: t }) => {
+  const s = ye(t);
+  return /* @__PURE__ */ P.createElement(Ce, { "data-reason": t && t.reason || void 0 }, /* @__PURE__ */ P.createElement("div", { style: { fontWeight: 600 } }, s.title), /* @__PURE__ */ P.createElement("div", { style: { fontSize: 12, color: "#888" } }, s.detail));
 };
 le.propTypes = {
-  entry: E.shape({
-    origin: E.string,
-    name: E.string,
-    reason: E.string,
-    detail: E.object
+  entry: T.shape({
+    origin: T.string,
+    name: T.string,
+    reason: T.string,
+    detail: T.object
   })
 };
 const Le = re.div`
@@ -552,139 +564,154 @@ const Le = re.div`
   align-items: center;
   justify-content: center;
 `, Ae = () => /* @__PURE__ */ P.createElement(Le, null, /* @__PURE__ */ P.createElement("div", { style: { textAlign: "center" } }, "This app couldn’t be loaded as an embeddable widget.")), Ue = ({
-  id: r,
-  src: o,
+  id: t,
+  src: s,
   path: i,
-  onInit: p = () => {
+  onInit: l = () => {
   },
-  onTimeout: m,
-  context: R = {},
+  onTimeout: w,
+  context: I = {},
   params: v = {},
-  renderUnsupported: B,
-  renderTimeout: W,
-  ...j
+  renderUnsupported: D,
+  renderTimeout: j,
+  ...K
 }) => {
-  if ("isConfiguring" in j)
+  if ("isConfiguring" in K)
     return console.error(
       "isConfiguring must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  if ("colorMode" in R)
+  if ("colorMode" in I)
     return console.error(
       "colorMode must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  if ("isFullScreen" in R)
+  if ("isFullScreen" in I)
     return console.error(
       "isFullScreen must be passed via the params prop to MMEmbeddableZone"
     ), null;
-  const T = g(), [A, $] = L(), [_, U] = L(0), [q, I] = L(!1), [D, O] = L(!1), x = Ee(o), M = Re(o), y = we(o), [F, c] = L(0), [l, u] = L(null), { registerFrame: d, unregisterFrame: w, sendMessage: f, ready: C } = G(
+  const y = R(), E = J(s), [x, Z] = U(), [_, $] = U(0), [A, q] = U(!1), [F, B] = U(!1), z = Ee(s), M = Re(s), W = ke(s), [o, a] = U(0), [u, f] = U(null), { registerFrame: g, unregisterFrame: h, sendMessage: m, ready: C } = G(
     ee
-  ), [k, z] = L(), Z = g(), H = g(m), K = g(p), e = g(!1), n = h(() => {
-    e.current = !1, clearTimeout(Z.current), U(0), I(!1), O(!1), u(null);
+  ), [L, Q] = U(), H = R(), Y = R(w), e = R(l), n = R(!1), r = R(), c = b(() => {
+    n.current = !1, clearTimeout(H.current), clearTimeout(r.current), $(0), q(!1), B(!1), f(null);
   }, []);
-  b(() => {
-    (x > 0 || F > 0) && n();
-  }, [x, F, n]), b(() => {
-    H.current = m;
-  }, [m]), b(() => {
-    K.current = p;
-  }, [p]), b(() => {
-    _ && f(r, "set-context", {
-      context: {
-        ...R
-      }
-    });
-  }, [R, r, _]), b(() => {
-    _ && f(r, "set-params", { params: v });
-  }, [v, r, _]), b(() => {
-    i !== void 0 && z((i == null ? void 0 : i.indexOf("/")) === 0 ? i : `/${i}`);
-  }, [i]), b(() => {
-    k === void 0 || !_ || f(r, "navigate", { path: k });
-  }, [k, _, r, f]), b(() => {
-    if (!o || !r || !T)
+  k(() => {
+    (z > 0 || o > 0) && c();
+  }, [z, o, c]), k(() => {
+    Y.current = w;
+  }, [w]), k(() => {
+    e.current = l;
+  }, [l]), k(() => {
+    _ && m(
+      t,
+      "set-context",
+      {
+        context: {
+          ...I
+        }
+      },
+      E
+    );
+  }, [I, t, _, E]), k(() => {
+    _ && m(t, "set-params", { params: v }, E);
+  }, [v, t, _, E]), k(() => {
+    i !== void 0 && Q((i == null ? void 0 : i.indexOf("/")) === 0 ? i : `/${i}`);
+  }, [i]), k(() => {
+    L === void 0 || !_ || m(t, "navigate", { path: L }, E);
+  }, [L, _, t, m, E]), k(() => {
+    if (!s || !t || !y)
       return;
     if (!C) {
-      n(), $(void 0);
+      c(), Z(void 0);
       return;
     }
-    n();
-    const a = new URL(o);
-    return d(r, a.origin, T), K.current(), $(_e(a.origin, r)), () => {
-      w(r);
+    c();
+    const d = new URL(s);
+    return g(t, d.origin, y), e.current(), Z(_e(d.origin, t)), () => {
+      h(t);
     };
-  }, [o, r, C, d, T, n]), b(() => {
-    if (!(!A || e.current))
-      return Z.current = setTimeout(() => {
-        I(!0), H.current && H.current();
-      }, Te), () => clearTimeout(Z.current);
-  }, [A, o, x, F]);
-  const t = h(() => {
-    e.current = !0, clearTimeout(Z.current), I(!1);
+  }, [s, t, C, g, y, c]), k(() => {
+    if (!(!x || n.current))
+      return H.current = setTimeout(() => {
+        q(!0), Y.current && Y.current();
+      }, Te), () => clearTimeout(H.current);
+  }, [x, s, z, o]);
+  const p = b(() => {
+    n.current = !0, clearTimeout(H.current), q(!1);
   }, []);
-  X(r, "init", (a) => {
-    t(), Array.isArray(a == null ? void 0 : a.acceptsCredentials) && u(a.acceptsCredentials);
-  }), X(r, "authorize", t), X(r, "login", t), X(r, "credential-request", () => {
-    t(), O(!0);
-  }), b(() => {
-    if (!D || !M)
+  if (X(t, "init", (d) => {
+    p(), Array.isArray(d == null ? void 0 : d.acceptsCredentials) && f(d.acceptsCredentials);
+  }), X(t, "authorize", p), X(t, "login", p), X(t, "credential-request", () => {
+    p(), B(!0);
+  }), k(() => {
+    if (!F || !M)
       return;
-    const a = l;
-    if (Array.isArray(a) && !a.includes(M.kind))
+    const d = u;
+    if (Array.isArray(d) && !d.includes(M.kind))
       return;
-    const Q = M.kind === "access_token" ? { accessToken: M.accessToken } : {};
-    f(r, "credential", { ...Q, credential: M });
-  }, [D, M, l, r, f]), X(r, "ready", () => {
-    t(), U((a) => a + 1);
-  });
-  const s = g();
-  return X(r, "heartbeat", () => {
-    s.current && clearTimeout(s.current), s.current = setTimeout(() => {
-      c((a) => a + 1);
+    const S = M.kind === "access_token" ? { accessToken: M.accessToken } : {};
+    m(t, "credential", { ...S, credential: M }, E);
+  }, [
+    F,
+    M,
+    u,
+    t,
+    m,
+    E
+  ]), X(t, "ready", () => {
+    p(), $((d) => d + 1);
+  }), X(t, "heartbeat", () => {
+    r.current && clearTimeout(r.current), r.current = setTimeout(() => {
+      a((d) => d + 1);
     }, 6e3);
-  }), b(() => () => {
-    s.current && clearTimeout(s.current);
-  }, []), y ? B ? B(y) : /* @__PURE__ */ P.createElement(le, { entry: y }) : q && !_ ? W ? W() : /* @__PURE__ */ P.createElement(Ae, null) : /* @__PURE__ */ P.createElement(
+  }), k(() => () => {
+    r.current && clearTimeout(r.current);
+  }, []), W)
+    return D ? D(W) : /* @__PURE__ */ P.createElement(le, { entry: W });
+  if (A && !_)
+    return j ? j() : /* @__PURE__ */ P.createElement(Ae, null);
+  const O = { ...K };
+  return delete O.skipManifestCheck, /* @__PURE__ */ P.createElement(
     Me,
     {
-      key: `auth-epoch-${x}-frame-${F}`,
+      key: `auth-epoch-${z}-frame-${o}`,
       $isReady: _,
-      ref: T,
-      src: A,
-      ...j
+      ref: y,
+      src: x,
+      ...O
     }
   );
 };
 Ue.propTypes = {
-  id: E.string,
-  src: E.string.isRequired,
-  path: E.string,
-  onInit: E.func,
-  onTimeout: E.func,
+  id: T.string,
+  src: T.string.isRequired,
+  path: T.string,
+  onInit: T.func,
+  onTimeout: T.func,
   /**
    * Optional host-styled renderer for the structurally-unsupported embed
    * state (legacy app on a cross-site origin), `(entry) => ReactNode`. Falls
    * back to a minimal built-in placeholder.
    */
-  renderUnsupported: E.func,
+  renderUnsupported: T.func,
   /**
    * Optional host-styled renderer for the handshake-timeout failure state
    * (the app is not embeddable / could not load), `() => ReactNode`. Falls
    * back to a minimal centered message.
    */
-  renderTimeout: E.func
+  renderTimeout: T.func
 };
 export {
   pe as CREDENTIAL_KIND_ACCESS_TOKEN,
-  J as EmbeddedAuthorizationContext,
+  V as EmbeddedAuthorizationContext,
   Ue as MMEmbeddableZone,
   ee as MMEmbeddableZoneContext,
-  ke as MMEmbeddableZoneProvider,
+  we as MMEmbeddableZoneProvider,
   ce as isCrossSite,
   ne as normalizeCredential,
   be as popupAuthorizationLauncher,
-  Ce as unsupportedCopy,
-  Oe as useEmbeddedAuthorizations,
+  ye as unsupportedCopy,
+  $e as useEmbeddedAuthorizations,
   Re as useEmbeddedCredential,
   X as useEmbeddedEffect,
   Ee as useEmbeddedOriginEpoch,
-  we as useEmbeddedUnsupported
+  ke as useEmbeddedUnsupported
 };