@patientos/website-kit 0.2.3 → 0.2.5

package/dist/{chunk-MTOKBMBG.js → chunk-7UPUEMXX.js}

@@ -6,7 +6,7 @@ import {
   PortalAccountClient,
   PortalPanelClient,
   StoreClient
-} from "./chunk-LHP4RZ3N.js";
+} from "./chunk-75FJ5AJB.js";
 import {
   mountIslandsWith
 } from "./chunk-THMT43MV.js";

package/dist/{chunk-BHVDY6SC.js → chunk-FSZ726DM.js}

@@ -9,9 +9,135 @@ var PORTAL_WHOAMI_PATH = "/portal/api/whoami";
 var PORTAL_MAGIC_LINK_PATH = "/portal/api/magic-link";
 var PORTAL_PREFILL_PATH = "/portal/api/prefill";
 var PORTAL_PUBLIC_CLAIM_PATH = "/portal/api/public-claim";
+var PORTAL_APPLICATION_HANDOFF_PATH = "/portal/api/application-run-handoffs";
+var PORTAL_SESSION_EXCHANGE_PATH = "/portal/api/session-exchange";
 var PORTAL_RETURN_PATH = "/portal/return";
+var PORTAL_HANDOFF_FRAGMENT_PREFIX = "#patientos-handoff=";
 var BRIDGE_TIMEOUT_MS = 15e3;
 var BRIDGE_PROBE_TIMEOUT_MS = 8e3;
+var PORTAL_BEARER_STORAGE_PREFIX = "patientos.portal.bearer:";
+var parkedHandoffPayload = null;
+var pendingHandoffTokens = /* @__PURE__ */ new Map();
+var pendingHandoffExchanges = /* @__PURE__ */ new Map();
+var memoryBearers = /* @__PURE__ */ new Map();
+function onLocalhostDevPage() {
+  if (typeof window === "undefined") return false;
+  return window.location.protocol === "http:" && window.location.hostname === "localhost" && window.location.port !== "";
+}
+function localhostHandoffEnabled(apiOrigin) {
+  return apiOrigin !== "" && onLocalhostDevPage();
+}
+function bearerStorage() {
+  try {
+    return typeof window === "undefined" ? null : window.sessionStorage;
+  } catch {
+    return null;
+  }
+}
+function bearerStorageKey(apiOrigin) {
+  return `${PORTAL_BEARER_STORAGE_PREFIX}${apiOrigin}`;
+}
+function readBearer(apiOrigin) {
+  const memory = memoryBearers.get(apiOrigin);
+  if (memory) return memory;
+  try {
+    const stored = bearerStorage()?.getItem(bearerStorageKey(apiOrigin)) ?? null;
+    if (!stored || stored.length > 4096) {
+      clearBearer(apiOrigin);
+      return null;
+    }
+    memoryBearers.set(apiOrigin, stored);
+    return stored;
+  } catch {
+    return null;
+  }
+}
+function writeBearer(apiOrigin, token) {
+  memoryBearers.set(apiOrigin, token);
+  try {
+    bearerStorage()?.setItem(bearerStorageKey(apiOrigin), token);
+  } catch {
+  }
+}
+function clearBearer(apiOrigin) {
+  memoryBearers.delete(apiOrigin);
+  try {
+    bearerStorage()?.removeItem(bearerStorageKey(apiOrigin));
+  } catch {
+  }
+}
+function decodeBase64UrlJson(raw) {
+  const b64 = raw.replace(/-/g, "+").replace(/_/g, "/");
+  const binary = atob(b64.padEnd(Math.ceil(b64.length / 4) * 4, "="));
+  const bytes = Uint8Array.from(binary, (char) => char.charCodeAt(0));
+  return JSON.parse(new TextDecoder().decode(bytes));
+}
+function consumePortalHandoffFragment() {
+  if (!onLocalhostDevPage()) return;
+  const raw = window.location.hash;
+  if (!raw.startsWith(PORTAL_HANDOFF_FRAGMENT_PREFIX)) return;
+  let payload = null;
+  try {
+    const decoded = decodeBase64UrlJson(raw.slice(PORTAL_HANDOFF_FRAGMENT_PREFIX.length));
+    const candidate = decoded;
+    if (typeof candidate?.token === "string" && candidate.token.length > 0 && candidate.token.length <= 512 && typeof candidate.returnHash === "string") {
+      payload = { token: candidate.token, returnHash: candidate.returnHash };
+    }
+  } catch {
+  }
+  const restoredHash = payload?.returnHash ? `#${payload.returnHash}` : "";
+  window.history.replaceState(
+    window.history.state,
+    "",
+    `${window.location.pathname}${window.location.search}${restoredHash}`
+  );
+  if (payload) parkedHandoffPayload = payload;
+}
+function adoptParkedHandoff(apiOrigin) {
+  const payload = parkedHandoffPayload;
+  if (!payload || !localhostHandoffEnabled(apiOrigin)) return;
+  parkedHandoffPayload = null;
+  clearBearer(apiOrigin);
+  pendingHandoffTokens.set(apiOrigin, payload.token);
+}
+async function exchangePortalHandoff(apiOrigin, fetchImpl) {
+  const pending = pendingHandoffExchanges.get(apiOrigin);
+  if (pending) return pending;
+  const oneTimeToken = pendingHandoffTokens.get(apiOrigin);
+  if (!oneTimeToken) return readBearer(apiOrigin);
+  pendingHandoffTokens.delete(apiOrigin);
+  const exchange = (async () => {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), BRIDGE_PROBE_TIMEOUT_MS);
+    try {
+      const response = await fetchImpl(`${apiOrigin}${PORTAL_SESSION_EXCHANGE_PATH}`, {
+        ...PORTAL_REQUEST_INIT,
+        method: "POST",
+        headers: { accept: "application/json", "content-type": "application/json" },
+        body: JSON.stringify({ token: oneTimeToken }),
+        signal: controller.signal
+      });
+      const result = await readPortalResult(response);
+      const bearer = result.ok && typeof result.data?.token === "string" ? result.data.token : null;
+      if (!bearer) return null;
+      writeBearer(apiOrigin, bearer);
+      return bearer;
+    } catch {
+      pendingHandoffTokens.set(apiOrigin, oneTimeToken);
+      return null;
+    } finally {
+      clearTimeout(timer);
+    }
+  })();
+  pendingHandoffExchanges.set(apiOrigin, exchange);
+  try {
+    return await exchange;
+  } finally {
+    if (pendingHandoffExchanges.get(apiOrigin) === exchange) {
+      pendingHandoffExchanges.delete(apiOrigin);
+    }
+  }
+}
 var PORTAL_REQUEST_INIT = {
   credentials: "include",
   cache: "no-store"
@@ -71,17 +197,41 @@ function createPortalClient(config = {}) {
   const portalHref = config.portalUrl?.trim() ?? "";
   const available = apiOrigin !== "" || sameOriginAvailable(config.portalOrigin);
   const fetchImpl = config.fetchImpl ?? ((input, init) => globalThis.fetch(input, init));
+  const handoffEnabled = localhostHandoffEnabled(apiOrigin);
+  consumePortalHandoffFragment();
+  adoptParkedHandoff(apiOrigin);
   const url = (path) => apiOrigin && path.startsWith("/") ? apiOrigin + path : path;
+  const fetchWithSession = async (input, init) => {
+    let belongsToApiOrigin = false;
+    if (handoffEnabled) {
+      try {
+        belongsToApiOrigin = new URL(input, window.location.href).origin === apiOrigin;
+      } catch {
+      }
+    }
+    const bearer = belongsToApiOrigin ? await exchangePortalHandoff(apiOrigin, fetchImpl) : null;
+    if (!bearer) return fetchImpl(input, init);
+    const headers = new Headers(init?.headers);
+    headers.set("authorization", `Bearer ${bearer}`);
+    return fetchImpl(input, { ...init, headers });
+  };
   async function request(path, init, timeoutMs = BRIDGE_TIMEOUT_MS) {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeoutMs);
     try {
-      const response = await fetchImpl(url(path), {
+      const response = await fetchWithSession(url(path), {
         ...PORTAL_REQUEST_INIT,
         ...init,
         signal: controller.signal
       });
-      return await readPortalResult(response);
+      const result = await readPortalResult(response);
+      if (handoffEnabled) {
+        const body = result.ok ? result.data : null;
+        if (path === "/portal/api/sign-out" && result.ok || !result.ok && result.status === 401 || body?.signedIn === false) {
+          clearBearer(apiOrigin);
+        }
+      }
+      return result;
     } catch {
       return { ok: false, status: null, error: null };
     } finally {
@@ -95,18 +245,27 @@ function createPortalClient(config = {}) {
     body: JSON.stringify(body ?? {})
   });
   const del = (path) => request(path, { method: "DELETE", headers: { accept: "application/json" } });
-  const returnPath = () => {
+  const returnPath = (targetUrl) => {
     if (typeof window === "undefined") return "/";
-    const path = `${window.location.pathname || "/"}${window.location.search}${window.location.hash}`;
-    if (!apiOrigin) return path;
-    return `${PORTAL_RETURN_PATH}?to=${encodePortalReturnTarget(window.location.origin + path)}`;
+    let target = targetUrl ?? window.location.href;
+    try {
+      const parsed2 = new URL(target, window.location.href);
+      if (parsed2.origin !== window.location.origin) target = window.location.href;
+      else target = parsed2.href;
+    } catch {
+      target = window.location.href;
+    }
+    const parsed = new URL(target);
+    const path = `${parsed.pathname || "/"}${parsed.search}${parsed.hash}`;
+    if (!apiOrigin && !targetUrl) return path;
+    return `${PORTAL_RETURN_PATH}?to=${encodePortalReturnTarget(target)}`;
   };
   return {
     available,
     apiOrigin,
     portalHref,
     url,
-    fetch: fetchImpl,
+    fetch: fetchWithSession,
     async whoAmI() {
       if (!available) return { signedIn: false };
       const result = await request(
@@ -134,6 +293,15 @@ function createPortalClient(config = {}) {
       const result = await send(PORTAL_PUBLIC_CLAIM_PATH, "POST", {});
       return result.ok ? result.data : null;
     },
+    async redeemApplicationRunHandoff(handoffId) {
+      if (!available) return null;
+      const result = await send(
+        `${PORTAL_APPLICATION_HANDOFF_PATH}/${encodeURIComponent(handoffId)}/redeem`,
+        "POST",
+        {}
+      );
+      return result.ok ? result.data : null;
+    },
     returnPath,
     get,
     send,
@@ -145,13 +313,9 @@ function createPortalClient(config = {}) {
 import { jsx, jsxs } from "react/jsx-runtime";
 var defaultPortalClient = createPortalClient();
 var PORTAL_SIGN_OUT_URL = "/portal/api/sign-out";
-function portalFetch(fetchImpl) {
-  return fetchImpl ?? ((input, init) => fetch(input, init));
-}
 var BOUND_PORTAL_CLIENT = /* @__PURE__ */ Symbol("boundPortalClient");
-function portalFetchForClient(client2, fetchImpl) {
-  const fetcher = portalFetch(fetchImpl);
-  const bound = (input, init) => fetcher(client2.url(input), init);
+function portalFetchForClient(client2) {
+  const bound = (input, init) => client2.fetch(client2.url(input), init);
   bound[BOUND_PORTAL_CLIENT] = client2;
   return bound;
 }
@@ -563,6 +727,25 @@ function resetSession() {
   clientKey = "";
 }
 var flowKey = (requestId) => `pos:flow:${requestId}`;
+var applicationRunKey = (runId) => `pos:application-run:${runId}`;
+function saveApplicationRunToken(c, runId) {
+  const token = c.getApplicationRunToken(runId);
+  if (!token) return;
+  try {
+    session()?.setItem(applicationRunKey(runId), token);
+  } catch {
+  }
+}
+function restoreApplicationRunToken(c, runId) {
+  try {
+    const token = session()?.getItem(applicationRunKey(runId)) ?? null;
+    if (!token) return false;
+    c.setApplicationRunToken(runId, token);
+    return true;
+  } catch {
+    return false;
+  }
+}
 function saveFlowRecord(requestId, record) {
   try {
     session()?.setItem(flowKey(requestId), JSON.stringify(record));
@@ -1283,6 +1466,8 @@ export {
   persistClaimToken,
   adoptClaimToken,
   resetSession,
+  saveApplicationRunToken,
+  restoreApplicationRunToken,
   saveFlowRecord,
   loadFlowRecord,
   once,

package/dist/index.d.ts

@@ -2,12 +2,13 @@ export { BPOINT_SCRIPT_ORIGIN, BPOINT_SCRIPT_URL, CONSULT_CHUNK_PATH, THIRD_PART
 import * as React from 'react';
 export { ISLAND_ATTR, ISLAND_PROPS_ATTR, Island, IslandProps, IslandRegistry, mountIslandsWith, readIslandProps } from './islands.js';
 export { ISLANDS, IslandName, mountIslands } from './islands-registry.js';
-import { P as PortalClient, W as WhoAmI, a as PortalPrefill, b as PublicClaim } from './portal-account-pI1cWgsT.js';
-export { F as FetchLike, c as PortalAccount, d as PortalAccountMarkerProps, e as PortalAccountProps, f as PortalAccountSurface, g as PortalClientConfig, h as PortalPanel, i as PortalPanelMarkerProps, j as PortalPanelProps, k as PortalResult, l as PortalSurface, m as createPortalClient } from './portal-account-pI1cWgsT.js';
+import { P as PortalClient, W as WhoAmI, a as PortalPrefill, b as PublicClaim } from './portal-account-8uQc_Ncx.js';
+export { F as FetchLike, c as PortalAccount, d as PortalAccountMarkerProps, e as PortalAccountProps, f as PortalAccountSurface, g as PortalClientConfig, h as PortalPanel, i as PortalPanelMarkerProps, j as PortalPanelProps, k as PortalResult, l as PortalSurface, m as createPortalClient } from './portal-account-8uQc_Ncx.js';
 export { B as BookingBlock, a as BookingBlockMarkerProps, b as BookingBlockProps, c as BookingTypeOption, C as Cart, d as CartMarkerProps, e as CartProps, f as CertificateFunnel, g as CertificateFunnelMarkerProps, h as CertificateFunnelProps, i as Checkout, j as CheckoutMarkerProps, k as CheckoutProps, F as FunnelPublicApi, l as FunnelServiceOption, S as Store, m as StoreMarkerProps, n as StoreProps } from './checkout-block-Cog4H4I4.js';
 export { PatientSurfaceTheme, patientSurfaceTheme } from './patient-surface-theme.js';
 export { Rgb, contrastRatio, deriveForeground, parseHexColor, relativeLuminance } from './contrast.js';
 export { AnswerValue, Answers, ShowWhenCondition, evaluateShowWhen, visibleQuestions } from './show-when.js';
+import '@patientos/public-sdk';
 
 /**
  * Theme tokens for the website-kit.

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   ISLANDS,
   mountIslands
-} from "./chunk-MTOKBMBG.js";
+} from "./chunk-7UPUEMXX.js";
 import {
   PortalAccount,
   PortalPanel,
@@ -13,7 +13,7 @@ import {
   getThemeTokens,
   usePortalClient,
   usePortalSession
-} from "./chunk-LHP4RZ3N.js";
+} from "./chunk-75FJ5AJB.js";
 import {
   BPOINT_SCRIPT_ORIGIN,
   BPOINT_SCRIPT_URL,
@@ -35,7 +35,7 @@ import {
 } from "./chunk-THMT43MV.js";
 import {
   createPortalClient
-} from "./chunk-BHVDY6SC.js";
+} from "./chunk-FSZ726DM.js";
 import {
   contrastRatio,
   deriveForeground,

package/dist/islands-impl.d.ts

@@ -1,7 +1,8 @@
 import * as React from 'react';
 import { b as BookingBlockProps, h as CertificateFunnelProps, n as StoreProps, e as CartProps, k as CheckoutProps } from './checkout-block-Cog4H4I4.js';
-import { j as PortalPanelProps, F as FetchLike } from './portal-account-pI1cWgsT.js';
-export { P as PortalAccountClient } from './portal-account.client-DPRRmfCJ.js';
+import { j as PortalPanelProps, F as FetchLike } from './portal-account-8uQc_Ncx.js';
+export { P as PortalAccountClient } from './portal-account.client-BBe_q9yC.js';
+import '@patientos/public-sdk';
 
 declare function BookingBlockClient(props: BookingBlockProps): React.ReactElement;
 

package/dist/islands-impl.js

@@ -6,11 +6,11 @@ import {
   PortalAccountClient,
   PortalPanelClient,
   StoreClient
-} from "./chunk-LHP4RZ3N.js";
+} from "./chunk-75FJ5AJB.js";
 import "./chunk-ZOF22TJA.js";
 import "./chunk-QDO3SJWR.js";
 import "./chunk-THMT43MV.js";
-import "./chunk-BHVDY6SC.js";
+import "./chunk-FSZ726DM.js";
 import "./chunk-MLKGABMK.js";
 export {
   BookingBlockClient,

package/dist/islands-registry.js

@@ -1,12 +1,12 @@
 import {
   ISLANDS,
   mountIslands
-} from "./chunk-MTOKBMBG.js";
-import "./chunk-LHP4RZ3N.js";
+} from "./chunk-7UPUEMXX.js";
+import "./chunk-75FJ5AJB.js";
 import "./chunk-ZOF22TJA.js";
 import "./chunk-QDO3SJWR.js";
 import "./chunk-THMT43MV.js";
-import "./chunk-BHVDY6SC.js";
+import "./chunk-FSZ726DM.js";
 import "./chunk-MLKGABMK.js";
 export {
   ISLANDS,

package/dist/{portal-account-pI1cWgsT.d.ts → portal-account-8uQc_Ncx.d.ts}

@@ -1,3 +1,4 @@
+import { ApplicationRun } from '@patientos/public-sdk';
 import * as React from 'react';
 
 /** The injectable browser transport. */
@@ -64,8 +65,13 @@ interface PortalClient {
     prefill(): Promise<PortalPrefill | null>;
     /** Mint a public claim only for the signed-in patient. */
     mintPublicClaim(): Promise<PublicClaim | null>;
-    /** Current page callback, using the app-side return hop when cross-origin. */
-    returnPath(): string;
+    /** Redeem a single-use magic-link continuation after patient sign-in. */
+    redeemApplicationRunHandoff(handoffId: string): Promise<{
+        run: ApplicationRun;
+        capabilityToken: string;
+    } | null>;
+    /** Page callback, using the app-side return hop when cross-origin. */
+    returnPath(targetUrl?: string): string;
     /** Back-compat account-surface transport; callers still use constant paths. */
     get<T>(path: string): Promise<PortalResult<T>>;
     /** Back-compat account-surface JSON write; callers still use constant paths. */

package/dist/{portal-account.client-DPRRmfCJ.d.ts → portal-account.client-BBe_q9yC.d.ts}

@@ -1,5 +1,5 @@
 import * as React from 'react';
-import { e as PortalAccountProps, F as FetchLike } from './portal-account-pI1cWgsT.js';
+import { e as PortalAccountProps, F as FetchLike } from './portal-account-8uQc_Ncx.js';
 
 type PortalAddress = {
     id: string;

package/dist/portal-booking-client.d.ts

@@ -1,6 +1,7 @@
 import * as React from 'react';
-import { F as FetchLike, k as PortalResult } from './portal-account-pI1cWgsT.js';
-import { a as PortalAppointment, b as PortalAppointmentsBody } from './portal-account.client-DPRRmfCJ.js';
+import { F as FetchLike, k as PortalResult } from './portal-account-8uQc_Ncx.js';
+import { a as PortalAppointment, b as PortalAppointmentsBody } from './portal-account.client-BBe_q9yC.js';
+import '@patientos/public-sdk';
 
 /** One bookable instant, collapsing the practitioners free at the same time. */
 interface TimeSlot {

package/dist/portal-booking-client.js

@@ -22,7 +22,7 @@ import {
   releasePortalHold,
   rescheduleContextTypeId,
   reschedulePortalAppointmentAndReload
-} from "./chunk-BHVDY6SC.js";
+} from "./chunk-FSZ726DM.js";
 import "./chunk-MLKGABMK.js";
 export {
   AVAILABILITY_FAILED_COPY,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patientos/website-kit",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "PatientOS clinic website components and patient-facing interactive islands.",
   "type": "module",
   "sideEffects": [
@@ -109,12 +109,13 @@
     "@types/node": "^25.6.0",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
+    "jsdom": "^29.1.1",
     "tsup": "^8.5.0",
     "typescript": "^5.9.3",
     "vitest": "^4.1.5",
     "livekit-client": "^2.20.0"
   },
   "dependencies": {
-    "@patientos/public-sdk": "^0.2.0"
+    "@patientos/public-sdk": "^0.2.2"
   }
 }