@patientos/website-kit 0.1.0 → 0.2.1

package/dist/{chunk-G3U6EXJM.js → chunk-BW7YKCKH.js}

@@ -4,6 +4,44 @@ import * as React4 from "react";
 // src/portal-shared.client.tsx
 import * as React from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
+var apiOrigin = "";
+var apiOriginLocked = false;
+function normalizePortalApiOrigin(raw) {
+  let u;
+  try {
+    u = new URL(raw.trim());
+  } catch {
+    return null;
+  }
+  const loopback = u.hostname === "localhost" || u.hostname === "127.0.0.1";
+  if (u.protocol !== "https:" && !(u.protocol === "http:" && loopback)) return null;
+  if (u.username || u.password || u.search || u.hash) return null;
+  if (u.pathname !== "/" && u.pathname !== "") return null;
+  return u.origin;
+}
+function configurePortalApiOrigin(raw) {
+  const wanted = raw?.trim();
+  if (!wanted) return;
+  const origin = normalizePortalApiOrigin(wanted);
+  if (!origin) {
+    console.error("[portal] ignoring a malformed portal API origin", wanted);
+    return;
+  }
+  if (apiOriginLocked) {
+    if (origin !== apiOrigin) {
+      console.error("[portal] refusing to re-point the portal API origin", {
+        configured: apiOrigin,
+        rejected: origin
+      });
+    }
+    return;
+  }
+  apiOrigin = origin;
+  apiOriginLocked = true;
+}
+function portalApiUrl(path) {
+  return apiOrigin && path.startsWith("/") ? apiOrigin + path : path;
+}
 var PORTAL_MAGIC_LINK_URL = "/portal/api/magic-link";
 var PORTAL_SIGN_OUT_URL = "/portal/api/sign-out";
 var PORTAL_REQUEST_INIT = { credentials: "include", cache: "no-store" };
@@ -30,14 +68,16 @@ async function readPortalResult(res) {
 }
 async function portalGet(url, fetchImpl) {
   try {
-    return await readPortalResult(await portalFetch(fetchImpl)(url, PORTAL_REQUEST_INIT));
+    return await readPortalResult(
+      await portalFetch(fetchImpl)(portalApiUrl(url), PORTAL_REQUEST_INIT)
+    );
   } catch {
     return { ok: false, status: null, error: null };
   }
 }
 async function portalSend(url, method, body, fetchImpl) {
   try {
-    const res = await portalFetch(fetchImpl)(url, {
+    const res = await portalFetch(fetchImpl)(portalApiUrl(url), {
       ...PORTAL_REQUEST_INIT,
       method,
       headers: { "content-type": "application/json" },
@@ -50,7 +90,10 @@ async function portalSend(url, method, body, fetchImpl) {
 }
 async function portalDelete(url, fetchImpl) {
   try {
-    const res = await portalFetch(fetchImpl)(url, { ...PORTAL_REQUEST_INIT, method: "DELETE" });
+    const res = await portalFetch(fetchImpl)(portalApiUrl(url), {
+      ...PORTAL_REQUEST_INIT,
+      method: "DELETE"
+    });
     return await readPortalResult(res);
   } catch {
     return { ok: false, status: null, error: null };
@@ -89,9 +132,18 @@ async function signOutOfPortal(fetchImpl) {
   const res = await portalSend(PORTAL_SIGN_OUT_URL, "POST", {}, fetchImpl);
   return { ok: res.ok };
 }
+var PORTAL_RETURN_PATH = "/portal/return";
+function encodeReturnTarget(url) {
+  const bytes = new TextEncoder().encode(url);
+  let binary = "";
+  for (const b of bytes) binary += String.fromCharCode(b);
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
 function currentPagePath() {
   if (typeof window === "undefined") return "/";
-  return window.location.pathname || "/";
+  const path = `${window.location.pathname || "/"}${window.location.search}${window.location.hash}`;
+  if (!apiOrigin) return path;
+  return `${PORTAL_RETURN_PATH}?to=${encodeReturnTarget(window.location.origin + path)}`;
 }
 var LOCALE = "en-AU";
 function parseInstant(iso) {
@@ -1198,6 +1250,8 @@ export {
   formatSlotTime,
   zoneAbbr,
   SlotPicker,
+  configurePortalApiOrigin,
+  portalApiUrl,
   PORTAL_REQUEST_INIT,
   portalGet,
   portalSend,

package/dist/{chunk-Q4URDZAK.js → chunk-CRYD7EXD.js}

@@ -6,7 +6,7 @@ import {
   PortalAccountClient,
   PortalPanelClient,
   StoreClient
-} from "./chunk-TOPPLOH2.js";
+} from "./chunk-EO64UB5F.js";
 import {
   mountIslandsWith
 } from "./chunk-THMT43MV.js";

package/dist/{chunk-TOPPLOH2.js → chunk-EO64UB5F.js}

@@ -25,6 +25,7 @@ import {
   SlotPicker,
   SummarisedFieldErrors,
   adoptClaimToken,
+  configurePortalApiOrigin,
   currentPagePath,
   describedBy,
   effectiveFee,
@@ -54,6 +55,7 @@ import {
   patientos,
   persistClaimToken,
   pickDeliveryOption,
+  portalApiUrl,
   portalDelete,
   portalGet,
   portalSend,
@@ -64,7 +66,7 @@ import {
   signOutOfPortal,
   writePortalSignedInHint,
   zoneAbbr
-} from "./chunk-G3U6EXJM.js";
+} from "./chunk-BW7YKCKH.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -1492,13 +1494,14 @@ function portalSurfaceHref(surface, portalUrl) {
 function PortalPanel({
   surface,
   portalUrl,
+  portalApiOrigin,
   className
 }) {
   return /* @__PURE__ */ jsxs4(
     Island,
     {
       name: "portal-panel",
-      props: { surface, portalUrl },
+      props: { surface, portalUrl, portalApiOrigin },
       className: ["sk-portal-panel", className].filter(Boolean).join(" "),
       children: [
         /* @__PURE__ */ jsx5("h2", { className: "sk-portal-panel__heading", children: PORTAL_SURFACE_LABEL[surface] ?? "Your portal" }),
@@ -4548,7 +4551,7 @@ async function loadPortalPanel(surface, fetchImpl) {
   let body;
   try {
     const res = await fetchImpl(
-      `${SUMMARY_URL}?surface=${encodeURIComponent(surface)}`,
+      portalApiUrl(`${SUMMARY_URL}?surface=${encodeURIComponent(surface)}`),
       PORTAL_REQUEST_INIT
     );
     body = await res.json();
@@ -4581,9 +4584,11 @@ function itemMeta(item) {
 function PortalPanelClient({
   surface,
   portalUrl,
+  portalApiOrigin,
   initialState,
   fetchImpl
 }) {
+  configurePortalApiOrigin(portalApiOrigin);
   const [state, setState] = React16.useState(initialState ?? { kind: "loading" });
   React16.useEffect(() => {
     if (initialState) return;
@@ -10260,6 +10265,7 @@ function PortalAccount({
   bookHref,
   appointmentsHref,
   funnelHref,
+  portalApiOrigin,
   className
 }) {
   const href = portalUrl ?? "/portal";
@@ -10276,6 +10282,7 @@ function PortalAccount({
         portalUrl,
         bookHref,
         appointmentsHref,
+        portalApiOrigin,
         ...isBook ? { funnelHref, services, publicApi, clinicPhone } : {}
       },
       className: ["sk-portal-account", className].filter(Boolean).join(" "),
@@ -10380,8 +10387,11 @@ var VALIDATE_URL = "/api/address/validate";
 async function searchPortalAddresses(query) {
   const q = query.trim();
   if (q.length < 3) return [];
-  const res = await fetch(`${AUTOCOMPLETE_URL}?q=${encodeURIComponent(q)}`, {
-    credentials: "same-origin",
+  const res = await fetch(portalApiUrl(`${AUTOCOMPLETE_URL}?q=${encodeURIComponent(q)}`), {
+    // `include`, not `same-origin`: on a separately-deployed clinic site this resolves to
+    // the APP's origin, and the endpoint's only door for a patient is the portal session
+    // cookie (address-google.server.ts `hasAddressAccess`). Same-origin it is identical.
+    credentials: "include",
     headers: { accept: "application/json" }
   });
   if (!res.ok) return [];
@@ -10389,9 +10399,9 @@ async function searchPortalAddresses(query) {
   return body.suggestions ?? [];
 }
 async function validatePortalAddress(address) {
-  const res = await fetch(VALIDATE_URL, {
+  const res = await fetch(portalApiUrl(VALIDATE_URL), {
     method: "POST",
-    credentials: "same-origin",
+    credentials: "include",
     headers: { "content-type": "application/json" },
     body: JSON.stringify({ address })
   });
@@ -10852,6 +10862,7 @@ async function savePortalProfileAndReload(patch, fetchImpl) {
 }
 function PortalAccountClient(props) {
   const { surface } = props;
+  configurePortalApiOrigin(props.portalApiOrigin);
   if (surface === "book") return /* @__PURE__ */ jsx26(PortalAccountBookLauncher, { ...props });
   return /* @__PURE__ */ jsx26(PortalAccountSurfaceClient, { ...props, surface });
 }

package/dist/index.d.ts

@@ -3,7 +3,7 @@ import * as React from 'react';
 export { ISLAND_ATTR, ISLAND_PROPS_ATTR, Island, IslandProps, IslandRegistry, mountIslandsWith, readIslandProps } from './islands.js';
 export { ISLANDS, IslandName, mountIslands } from './islands-registry.js';
 export { B as BookingBlock, a as BookingBlockMarkerProps, b as BookingBlockProps, c as BookingTypeOption, C as Cart, d as CartMarkerProps, e as CartProps, f as CertificateFunnel, g as CertificateFunnelMarkerProps, h as CertificateFunnelProps, i as Checkout, j as CheckoutMarkerProps, k as CheckoutProps, F as FunnelPublicApi, l as FunnelServiceOption, S as Store, m as StoreMarkerProps, n as StoreProps } from './checkout-block-CrO7OxI9.js';
-export { P as PortalAccount, a as PortalAccountMarkerProps, b as PortalAccountProps, c as PortalAccountSurface, d as PortalPanel, e as PortalPanelMarkerProps, f as PortalPanelProps, g as PortalSurface } from './portal-account-EhOtLV5u.js';
+export { P as PortalAccount, a as PortalAccountMarkerProps, b as PortalAccountProps, c as PortalAccountSurface, d as PortalPanel, e as PortalPanelMarkerProps, f as PortalPanelProps, g as PortalSurface } from './portal-account-CaK1lqSZ.js';
 export { PatientSurfaceTheme, patientSurfaceTheme } from './patient-surface-theme.js';
 export { Rgb, contrastRatio, deriveForeground, parseHexColor, relativeLuminance } from './contrast.js';
 export { AnswerValue, Answers, ShowWhenCondition, evaluateShowWhen, visibleQuestions } from './show-when.js';

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   ISLANDS,
   mountIslands
-} from "./chunk-Q4URDZAK.js";
+} from "./chunk-CRYD7EXD.js";
 import {
   PortalAccount,
   PortalPanel,
@@ -10,7 +10,7 @@ import {
   getPublicApi,
   getServices,
   getThemeTokens
-} from "./chunk-TOPPLOH2.js";
+} from "./chunk-EO64UB5F.js";
 import {
   BPOINT_SCRIPT_ORIGIN,
   BPOINT_SCRIPT_URL,
@@ -30,7 +30,7 @@ import {
   mountIslandsWith,
   readIslandProps
 } from "./chunk-THMT43MV.js";
-import "./chunk-G3U6EXJM.js";
+import "./chunk-BW7YKCKH.js";
 import {
   contrastRatio,
   deriveForeground,

package/dist/islands-impl.d.ts

@@ -1,8 +1,8 @@
 import * as React from 'react';
 import { b as BookingBlockProps, h as CertificateFunnelProps, n as StoreProps, e as CartProps, k as CheckoutProps } from './checkout-block-CrO7OxI9.js';
-import { f as PortalPanelProps } from './portal-account-EhOtLV5u.js';
-import { F as FetchLike } from './portal-account.client-CTget1-3.js';
-export { P as PortalAccountClient } from './portal-account.client-CTget1-3.js';
+import { f as PortalPanelProps } from './portal-account-CaK1lqSZ.js';
+import { F as FetchLike } from './portal-account.client-CqnsCCiC.js';
+export { P as PortalAccountClient } from './portal-account.client-CqnsCCiC.js';
 
 declare function BookingBlockClient(props: BookingBlockProps): React.ReactElement;
 
@@ -57,7 +57,7 @@ type PortalPanelClientProps = PortalPanelProps & {
     /** Test seam: the fetch used for whoami/summary/magic-link. Defaults to global. */
     fetchImpl?: FetchLike;
 };
-declare function PortalPanelClient({ surface, portalUrl, initialState, fetchImpl, }: PortalPanelClientProps): React.ReactElement;
+declare function PortalPanelClient({ surface, portalUrl, portalApiOrigin, initialState, fetchImpl, }: PortalPanelClientProps): React.ReactElement;
 
 declare function StoreClient({ categoryHandle, title, columns }: StoreProps): React.ReactElement;
 

package/dist/islands-impl.js

@@ -6,11 +6,11 @@ import {
   PortalAccountClient,
   PortalPanelClient,
   StoreClient
-} from "./chunk-TOPPLOH2.js";
+} from "./chunk-EO64UB5F.js";
 import "./chunk-ZOF22TJA.js";
 import "./chunk-QDO3SJWR.js";
 import "./chunk-THMT43MV.js";
-import "./chunk-G3U6EXJM.js";
+import "./chunk-BW7YKCKH.js";
 import "./chunk-MLKGABMK.js";
 export {
   BookingBlockClient,

package/dist/islands-registry.js

@@ -1,12 +1,12 @@
 import {
   ISLANDS,
   mountIslands
-} from "./chunk-Q4URDZAK.js";
-import "./chunk-TOPPLOH2.js";
+} from "./chunk-CRYD7EXD.js";
+import "./chunk-EO64UB5F.js";
 import "./chunk-ZOF22TJA.js";
 import "./chunk-QDO3SJWR.js";
 import "./chunk-THMT43MV.js";
-import "./chunk-G3U6EXJM.js";
+import "./chunk-BW7YKCKH.js";
 import "./chunk-MLKGABMK.js";
 export {
   ISLANDS,

package/dist/{portal-account-EhOtLV5u.d.ts → portal-account-CaK1lqSZ.d.ts}

@@ -11,6 +11,12 @@ type PortalPanelProps = {
      * `/portal` path on this same origin.
      */
     portalUrl?: string;
+    /**
+     * The APP's origin, when the site is deployed SEPARATELY from it (PAT-908). Omitted ⇒
+     * same-origin, which is what a one-origin clinic site wants. See the fuller note on
+     * `PortalAccountProps.portalApiOrigin` — the two islands take the same value.
+     */
+    portalApiOrigin?: string;
 };
 /** Marker-only props: the island config plus presentation the page controls. */
 type PortalPanelMarkerProps = PortalPanelProps & {
@@ -26,7 +32,7 @@ type PortalPanelMarkerProps = PortalPanelProps & {
  * gets permanently. A `visibility:hidden` / `opacity:0` placeholder would make the
  * no-JS experience a blank box.
  */
-declare function PortalPanel({ surface, portalUrl, className, }: PortalPanelMarkerProps): React.ReactElement;
+declare function PortalPanel({ surface, portalUrl, portalApiOrigin, className, }: PortalPanelMarkerProps): React.ReactElement;
 
 /** A service the launcher can offer — what the build snapshot carries, nothing more. */
 type LauncherService = {
@@ -88,6 +94,20 @@ type PortalAccountProps = {
      * patient who picks a service (PAT-899). Omitted ⇒ `/certificates`.
      */
     funnelHref?: string;
+    /**
+     * The APP's origin, when this site is deployed SEPARATELY from it (PAT-908).
+     *
+     * A one-origin clinic site omits this: the app serves `/portal/api/*` on the same host
+     * and every call is a relative path, exactly as before. A site on its own deployment —
+     * pocketdoc.com.au on a Worker, the app behind `my.pocketdoc.com.au` — names the app
+     * here, and every portal request is made against it with the patient cookie attached.
+     *
+     * It must be a bare `https://host[:port]` that the clinic has registered in its
+     * `web_form` channel `allowedOrigins`, or the app answers 403 with no ACAO. Keep it
+     * SAME-SITE with the page (a subdomain of the same registrable domain): a genuinely
+     * cross-SITE origin gets no cookie from the browser and every call reads signed-out.
+     */
+    portalApiOrigin?: string;
     /** The clinic's services, for the `book` launcher. */
     services?: LauncherService[];
     /** How the launcher reaches the public API to price those services. */
@@ -108,6 +128,6 @@ type PortalAccountMarkerProps = PortalAccountProps & {
  * It shows no patient data because there is none at build time: the page is ONE static
  * artifact served to every visitor.
  */
-declare function PortalAccount({ surface, portalUrl, bookHref, appointmentsHref, funnelHref, className, }: PortalAccountMarkerProps): React.ReactElement;
+declare function PortalAccount({ surface, portalUrl, bookHref, appointmentsHref, funnelHref, portalApiOrigin, className, }: PortalAccountMarkerProps): React.ReactElement;
 
 export { PortalAccount as P, type PortalAccountMarkerProps as a, type PortalAccountProps as b, type PortalAccountSurface as c, PortalPanel as d, type PortalPanelMarkerProps as e, type PortalPanelProps as f, type PortalSurface as g };

package/dist/{portal-account.client-CTget1-3.d.ts → portal-account.client-CqnsCCiC.d.ts}

@@ -1,5 +1,5 @@
 import * as React from 'react';
-import { b as PortalAccountProps } from './portal-account-EhOtLV5u.js';
+import { b as PortalAccountProps } from './portal-account-CaK1lqSZ.js';
 
 /** The injectable fetch. Present so every behaviour here is provable without a DOM. */
 type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;

package/dist/portal-booking-client.d.ts

@@ -1,6 +1,6 @@
 import * as React from 'react';
-import { a as PortalAppointment, F as FetchLike, b as PortalAppointmentsBody, c as PortalResult } from './portal-account.client-CTget1-3.js';
-import './portal-account-EhOtLV5u.js';
+import { a as PortalAppointment, F as FetchLike, b as PortalAppointmentsBody, c as PortalResult } from './portal-account.client-CqnsCCiC.js';
+import './portal-account-CaK1lqSZ.js';
 
 /** One bookable instant, collapsing the practitioners free at the same time. */
 interface TimeSlot {

package/dist/portal-booking-client.js

@@ -22,7 +22,7 @@ import {
   releasePortalHold,
   rescheduleContextTypeId,
   reschedulePortalAppointmentAndReload
-} from "./chunk-G3U6EXJM.js";
+} from "./chunk-BW7YKCKH.js";
 import "./chunk-MLKGABMK.js";
 export {
   AVAILABILITY_FAILED_COPY,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patientos/website-kit",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "PatientOS clinic website components and patient-facing interactive islands.",
   "type": "module",
   "sideEffects": [