@openkey/sdk 0.10.0 → 0.10.1

package/dist/index.d.mts

@@ -211,12 +211,23 @@ interface CapabilityPresentationEnvelopeV1 {
 /**
  * Sol final continuation contract requirement 5: pure validation of an
  * incoming iframe resize message envelope. Exported so unit tests can
- * exercise every rejection branch — wrong requestId, wrong version, no
- * active request, malformed height — without booting the browser
- * runtime that `IframeModal` requires.
+ * exercise every rejection branch — wrong requestId, wrong version,
+ * malformed height — without booting the browser runtime that
+ * `IframeModal` requires.
  *
- * Returns the sanitized height when acceptable, or `null` when the
- * message must be dropped.
+ * Two modes, chosen by the modal's bound correlation:
+ * - Versioned request bound (`requestId` AND `protocolVersion` set): the
+ *   resize MUST carry that exact pair.
+ * - No versioned request (both null — `connect`, `signMessage`, and the
+ *   other unversioned flows): the widget sends a plain
+ *   `{ type, height }`. It is accepted only when it carries no
+ *   `requestId`. The caller has already checked that the message came
+ *   from this modal's iframe (`event.source`) on the OpenKey origin
+ *   (TC-647).
+ * A half-bound correlation (only one of the two set) drops everything.
+ *
+ * Returns the height clamped to 85% of the viewport when acceptable, or
+ * `null` when the message must be dropped.
  */
 declare function validateIframeResize(incoming: unknown, expected: {
     requestId: string | null;

package/dist/index.d.ts

@@ -211,12 +211,23 @@ interface CapabilityPresentationEnvelopeV1 {
 /**
  * Sol final continuation contract requirement 5: pure validation of an
  * incoming iframe resize message envelope. Exported so unit tests can
- * exercise every rejection branch — wrong requestId, wrong version, no
- * active request, malformed height — without booting the browser
- * runtime that `IframeModal` requires.
+ * exercise every rejection branch — wrong requestId, wrong version,
+ * malformed height — without booting the browser runtime that
+ * `IframeModal` requires.
  *
- * Returns the sanitized height when acceptable, or `null` when the
- * message must be dropped.
+ * Two modes, chosen by the modal's bound correlation:
+ * - Versioned request bound (`requestId` AND `protocolVersion` set): the
+ *   resize MUST carry that exact pair.
+ * - No versioned request (both null — `connect`, `signMessage`, and the
+ *   other unversioned flows): the widget sends a plain
+ *   `{ type, height }`. It is accepted only when it carries no
+ *   `requestId`. The caller has already checked that the message came
+ *   from this modal's iframe (`event.source`) on the OpenKey origin
+ *   (TC-647).
+ * A half-bound correlation (only one of the two set) drops everything.
+ *
+ * Returns the height clamped to 85% of the viewport when acceptable, or
+ * `null` when the message must be dropped.
  */
 declare function validateIframeResize(incoming: unknown, expected: {
     requestId: string | null;

package/dist/index.js

@@ -273,12 +273,16 @@ function validateIframeResize(incoming, expected) {
   if (!incoming || typeof incoming !== "object") return null;
   const data = incoming;
   if (data.type !== "openkey:resize") return null;
-  if (expected.requestId === null || expected.protocolVersion === null) return null;
-  if (typeof data.protocolVersion !== "number" || data.protocolVersion !== expected.protocolVersion) {
-    return null;
-  }
-  if (typeof data.requestId !== "string" || data.requestId !== expected.requestId) {
-    return null;
+  if (expected.requestId === null && expected.protocolVersion === null) {
+    if (data.requestId !== void 0) return null;
+  } else {
+    if (expected.requestId === null || expected.protocolVersion === null) return null;
+    if (typeof data.protocolVersion !== "number" || data.protocolVersion !== expected.protocolVersion) {
+      return null;
+    }
+    if (typeof data.requestId !== "string" || data.requestId !== expected.requestId) {
+      return null;
+    }
   }
   if (typeof data.height !== "number" || !Number.isFinite(data.height) || data.height <= 0) {
     return null;
@@ -354,11 +358,11 @@ var IframeModal = class {
   onMessage;
   messageHandler;
   host;
-  // Sol final continuation contract requirement 5: iframe resize traffic
-  // MUST correlate to the active request's requestId AND protocolVersion.
-  // Set by `setExpectedCorrelation` after the outer flow decides which
-  // request this modal is bound to. When both are null, resize messages
-  // are dropped (no active request → no resize authority).
+  // Sol final continuation contract requirement 5: when the modal carries a
+  // versioned request, iframe resize traffic MUST correlate to its
+  // requestId AND protocolVersion. Set by `setExpectedCorrelation` as soon
+  // as the modal is created. When both are null the flow is unversioned and
+  // only uncorrelated resizes from this iframe are accepted (TC-647).
   expectedRequestId = null;
   expectedProtocolVersion = null;
   constructor(opts) {
@@ -440,10 +444,11 @@ var IframeModal = class {
    * request correlation so subsequent resize (and future correlated)
    * messages can be verified against `requestId` + `protocolVersion`.
    *
-   * The outer flow calls this immediately BEFORE posting the sign
-   * request into the iframe, so a resize that arrives synchronously
-   * after ready is correlated correctly. Passing `null` for either
-   * argument disables correlation (resize is dropped).
+   * The outer flow calls this right after creating the modal for a
+   * versioned request, before the iframe can send anything, so no
+   * uncorrelated resize is ever accepted for that request. Passing `null`
+   * for both arguments means the flow is unversioned; passing `null` for
+   * only one drops every resize.
    */
   setExpectedCorrelation(requestId, protocolVersion) {
     this.expectedRequestId = requestId;
@@ -1294,12 +1299,6 @@ var OpenKey = class {
         onMessage: (data) => {
           if (data.type === "openkey:ready") {
             readyReceived = true;
-            if (isVersionedRequest && modal) {
-              modal.setExpectedCorrelation(
-                outgoingRequestId,
-                outgoingProtocolVersion
-              );
-            }
             modal?.postMessage(message);
             return;
           }
@@ -1360,6 +1359,12 @@ var OpenKey = class {
           }
         }
       });
+      if (isVersionedRequest) {
+        modal.setExpectedCorrelation(
+          outgoingRequestId,
+          outgoingProtocolVersion
+        );
+      }
       const readyTimeout = setTimeout(() => {
         if (readyReceived || settled) return;
         cleanup();