@patientos/website-kit 0.2.4 → 0.2.6

package/dist/{chunk-BHVDY6SC.js → chunk-ZYX4TXBN.js}

@@ -9,9 +9,135 @@ var PORTAL_WHOAMI_PATH = "/portal/api/whoami";
 var PORTAL_MAGIC_LINK_PATH = "/portal/api/magic-link";
 var PORTAL_PREFILL_PATH = "/portal/api/prefill";
 var PORTAL_PUBLIC_CLAIM_PATH = "/portal/api/public-claim";
+var PORTAL_APPLICATION_HANDOFF_PATH = "/portal/api/application-run-handoffs";
+var PORTAL_SESSION_EXCHANGE_PATH = "/portal/api/session-exchange";
 var PORTAL_RETURN_PATH = "/portal/return";
+var PORTAL_HANDOFF_FRAGMENT_PREFIX = "#patientos-handoff=";
 var BRIDGE_TIMEOUT_MS = 15e3;
 var BRIDGE_PROBE_TIMEOUT_MS = 8e3;
+var PORTAL_BEARER_STORAGE_PREFIX = "patientos.portal.bearer:";
+var parkedHandoffPayload = null;
+var pendingHandoffTokens = /* @__PURE__ */ new Map();
+var pendingHandoffExchanges = /* @__PURE__ */ new Map();
+var memoryBearers = /* @__PURE__ */ new Map();
+function onLocalhostDevPage() {
+  if (typeof window === "undefined") return false;
+  return window.location.protocol === "http:" && window.location.hostname === "localhost" && window.location.port !== "";
+}
+function localhostHandoffEnabled(apiOrigin) {
+  return apiOrigin !== "" && onLocalhostDevPage();
+}
+function bearerStorage() {
+  try {
+    return typeof window === "undefined" ? null : window.sessionStorage;
+  } catch {
+    return null;
+  }
+}
+function bearerStorageKey(apiOrigin) {
+  return `${PORTAL_BEARER_STORAGE_PREFIX}${apiOrigin}`;
+}
+function readBearer(apiOrigin) {
+  const memory = memoryBearers.get(apiOrigin);
+  if (memory) return memory;
+  try {
+    const stored = bearerStorage()?.getItem(bearerStorageKey(apiOrigin)) ?? null;
+    if (!stored || stored.length > 4096) {
+      clearBearer(apiOrigin);
+      return null;
+    }
+    memoryBearers.set(apiOrigin, stored);
+    return stored;
+  } catch {
+    return null;
+  }
+}
+function writeBearer(apiOrigin, token) {
+  memoryBearers.set(apiOrigin, token);
+  try {
+    bearerStorage()?.setItem(bearerStorageKey(apiOrigin), token);
+  } catch {
+  }
+}
+function clearBearer(apiOrigin) {
+  memoryBearers.delete(apiOrigin);
+  try {
+    bearerStorage()?.removeItem(bearerStorageKey(apiOrigin));
+  } catch {
+  }
+}
+function decodeBase64UrlJson(raw) {
+  const b64 = raw.replace(/-/g, "+").replace(/_/g, "/");
+  const binary = atob(b64.padEnd(Math.ceil(b64.length / 4) * 4, "="));
+  const bytes = Uint8Array.from(binary, (char) => char.charCodeAt(0));
+  return JSON.parse(new TextDecoder().decode(bytes));
+}
+function consumePortalHandoffFragment() {
+  if (!onLocalhostDevPage()) return;
+  const raw = window.location.hash;
+  if (!raw.startsWith(PORTAL_HANDOFF_FRAGMENT_PREFIX)) return;
+  let payload = null;
+  try {
+    const decoded = decodeBase64UrlJson(raw.slice(PORTAL_HANDOFF_FRAGMENT_PREFIX.length));
+    const candidate = decoded;
+    if (typeof candidate?.token === "string" && candidate.token.length > 0 && candidate.token.length <= 512 && typeof candidate.returnHash === "string") {
+      payload = { token: candidate.token, returnHash: candidate.returnHash };
+    }
+  } catch {
+  }
+  const restoredHash = payload?.returnHash ? `#${payload.returnHash}` : "";
+  window.history.replaceState(
+    window.history.state,
+    "",
+    `${window.location.pathname}${window.location.search}${restoredHash}`
+  );
+  if (payload) parkedHandoffPayload = payload;
+}
+function adoptParkedHandoff(apiOrigin) {
+  const payload = parkedHandoffPayload;
+  if (!payload || !localhostHandoffEnabled(apiOrigin)) return;
+  parkedHandoffPayload = null;
+  clearBearer(apiOrigin);
+  pendingHandoffTokens.set(apiOrigin, payload.token);
+}
+async function exchangePortalHandoff(apiOrigin, fetchImpl) {
+  const pending = pendingHandoffExchanges.get(apiOrigin);
+  if (pending) return pending;
+  const oneTimeToken = pendingHandoffTokens.get(apiOrigin);
+  if (!oneTimeToken) return readBearer(apiOrigin);
+  pendingHandoffTokens.delete(apiOrigin);
+  const exchange = (async () => {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), BRIDGE_PROBE_TIMEOUT_MS);
+    try {
+      const response = await fetchImpl(`${apiOrigin}${PORTAL_SESSION_EXCHANGE_PATH}`, {
+        ...PORTAL_REQUEST_INIT,
+        method: "POST",
+        headers: { accept: "application/json", "content-type": "application/json" },
+        body: JSON.stringify({ token: oneTimeToken }),
+        signal: controller.signal
+      });
+      const result = await readPortalResult(response);
+      const bearer = result.ok && typeof result.data?.token === "string" ? result.data.token : null;
+      if (!bearer) return null;
+      writeBearer(apiOrigin, bearer);
+      return bearer;
+    } catch {
+      pendingHandoffTokens.set(apiOrigin, oneTimeToken);
+      return null;
+    } finally {
+      clearTimeout(timer);
+    }
+  })();
+  pendingHandoffExchanges.set(apiOrigin, exchange);
+  try {
+    return await exchange;
+  } finally {
+    if (pendingHandoffExchanges.get(apiOrigin) === exchange) {
+      pendingHandoffExchanges.delete(apiOrigin);
+    }
+  }
+}
 var PORTAL_REQUEST_INIT = {
   credentials: "include",
   cache: "no-store"
@@ -71,17 +197,41 @@ function createPortalClient(config = {}) {
   const portalHref = config.portalUrl?.trim() ?? "";
   const available = apiOrigin !== "" || sameOriginAvailable(config.portalOrigin);
   const fetchImpl = config.fetchImpl ?? ((input, init) => globalThis.fetch(input, init));
+  const handoffEnabled = localhostHandoffEnabled(apiOrigin);
+  consumePortalHandoffFragment();
+  adoptParkedHandoff(apiOrigin);
   const url = (path) => apiOrigin && path.startsWith("/") ? apiOrigin + path : path;
+  const fetchWithSession = async (input, init) => {
+    let belongsToApiOrigin = false;
+    if (handoffEnabled) {
+      try {
+        belongsToApiOrigin = new URL(input, window.location.href).origin === apiOrigin;
+      } catch {
+      }
+    }
+    const bearer = belongsToApiOrigin ? await exchangePortalHandoff(apiOrigin, fetchImpl) : null;
+    if (!bearer) return fetchImpl(input, init);
+    const headers = new Headers(init?.headers);
+    headers.set("authorization", `Bearer ${bearer}`);
+    return fetchImpl(input, { ...init, headers });
+  };
   async function request(path, init, timeoutMs = BRIDGE_TIMEOUT_MS) {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeoutMs);
     try {
-      const response = await fetchImpl(url(path), {
+      const response = await fetchWithSession(url(path), {
         ...PORTAL_REQUEST_INIT,
         ...init,
         signal: controller.signal
       });
-      return await readPortalResult(response);
+      const result = await readPortalResult(response);
+      if (handoffEnabled) {
+        const body = result.ok ? result.data : null;
+        if (path === "/portal/api/sign-out" && result.ok || !result.ok && result.status === 401 || body?.signedIn === false) {
+          clearBearer(apiOrigin);
+        }
+      }
+      return result;
     } catch {
       return { ok: false, status: null, error: null };
     } finally {
@@ -95,18 +245,27 @@ function createPortalClient(config = {}) {
     body: JSON.stringify(body ?? {})
   });
   const del = (path) => request(path, { method: "DELETE", headers: { accept: "application/json" } });
-  const returnPath = () => {
+  const returnPath = (targetUrl) => {
     if (typeof window === "undefined") return "/";
-    const path = `${window.location.pathname || "/"}${window.location.search}${window.location.hash}`;
-    if (!apiOrigin) return path;
-    return `${PORTAL_RETURN_PATH}?to=${encodePortalReturnTarget(window.location.origin + path)}`;
+    let target = targetUrl ?? window.location.href;
+    try {
+      const parsed2 = new URL(target, window.location.href);
+      if (parsed2.origin !== window.location.origin) target = window.location.href;
+      else target = parsed2.href;
+    } catch {
+      target = window.location.href;
+    }
+    const parsed = new URL(target);
+    const path = `${parsed.pathname || "/"}${parsed.search}${parsed.hash}`;
+    if (!apiOrigin && !targetUrl) return path;
+    return `${PORTAL_RETURN_PATH}?to=${encodePortalReturnTarget(target)}`;
   };
   return {
     available,
     apiOrigin,
     portalHref,
     url,
-    fetch: fetchImpl,
+    fetch: fetchWithSession,
     async whoAmI() {
       if (!available) return { signedIn: false };
       const result = await request(
@@ -134,6 +293,15 @@ function createPortalClient(config = {}) {
       const result = await send(PORTAL_PUBLIC_CLAIM_PATH, "POST", {});
       return result.ok ? result.data : null;
     },
+    async redeemApplicationRunHandoff(handoffId) {
+      if (!available) return null;
+      const result = await send(
+        `${PORTAL_APPLICATION_HANDOFF_PATH}/${encodeURIComponent(handoffId)}/redeem`,
+        "POST",
+        {}
+      );
+      return result.ok ? result.data : null;
+    },
     returnPath,
     get,
     send,
@@ -145,13 +313,9 @@ function createPortalClient(config = {}) {
 import { jsx, jsxs } from "react/jsx-runtime";
 var defaultPortalClient = createPortalClient();
 var PORTAL_SIGN_OUT_URL = "/portal/api/sign-out";
-function portalFetch(fetchImpl) {
-  return fetchImpl ?? ((input, init) => fetch(input, init));
-}
 var BOUND_PORTAL_CLIENT = /* @__PURE__ */ Symbol("boundPortalClient");
-function portalFetchForClient(client2, fetchImpl) {
-  const fetcher = portalFetch(fetchImpl);
-  const bound = (input, init) => fetcher(client2.url(input), init);
+function portalFetchForClient(client2) {
+  const bound = (input, init) => client2.fetch(client2.url(input), init);
   bound[BOUND_PORTAL_CLIENT] = client2;
   return bound;
 }
@@ -563,6 +727,25 @@ function resetSession() {
   clientKey = "";
 }
 var flowKey = (requestId) => `pos:flow:${requestId}`;
+var applicationRunKey = (runId) => `pos:application-run:${runId}`;
+function saveApplicationRunToken(c, runId) {
+  const token = c.getApplicationRunToken(runId);
+  if (!token) return;
+  try {
+    session()?.setItem(applicationRunKey(runId), token);
+  } catch {
+  }
+}
+function restoreApplicationRunToken(c, runId) {
+  try {
+    const token = session()?.getItem(applicationRunKey(runId)) ?? null;
+    if (!token) return false;
+    c.setApplicationRunToken(runId, token);
+    return true;
+  } catch {
+    return false;
+  }
+}
 function saveFlowRecord(requestId, record) {
   try {
     session()?.setItem(flowKey(requestId), JSON.stringify(record));
@@ -1277,12 +1460,16 @@ export {
   FlowErrorSummary,
   focusField,
   FlowLoading,
+  normalizePortalApiOrigin,
+  encodePortalReturnTarget,
   createPortalClient,
   PatientOSApiError,
   patientos,
   persistClaimToken,
   adoptClaimToken,
   resetSession,
+  saveApplicationRunToken,
+  restoreApplicationRunToken,
   saveFlowRecord,
   loadFlowRecord,
   once,

package/dist/{chunk-Y67WZPV5.js → chunk-ZZFBTLR4.js}

@@ -6,7 +6,7 @@ import {
   PortalAccountClient,
   PortalPanelClient,
   StoreClient
-} from "./chunk-S7U2HOV7.js";
+} from "./chunk-7ZOQ6UKG.js";
 import {
   mountIslandsWith
 } from "./chunk-THMT43MV.js";

package/dist/index.d.ts

@@ -2,12 +2,13 @@ export { BPOINT_SCRIPT_ORIGIN, BPOINT_SCRIPT_URL, CONSULT_CHUNK_PATH, THIRD_PART
 import * as React from 'react';
 export { ISLAND_ATTR, ISLAND_PROPS_ATTR, Island, IslandProps, IslandRegistry, mountIslandsWith, readIslandProps } from './islands.js';
 export { ISLANDS, IslandName, mountIslands } from './islands-registry.js';
-import { P as PortalClient, W as WhoAmI, a as PortalPrefill, b as PublicClaim } from './portal-account-pI1cWgsT.js';
-export { F as FetchLike, c as PortalAccount, d as PortalAccountMarkerProps, e as PortalAccountProps, f as PortalAccountSurface, g as PortalClientConfig, h as PortalPanel, i as PortalPanelMarkerProps, j as PortalPanelProps, k as PortalResult, l as PortalSurface, m as createPortalClient } from './portal-account-pI1cWgsT.js';
-export { B as BookingBlock, a as BookingBlockMarkerProps, b as BookingBlockProps, c as BookingTypeOption, C as Cart, d as CartMarkerProps, e as CartProps, f as CertificateFunnel, g as CertificateFunnelMarkerProps, h as CertificateFunnelProps, i as Checkout, j as CheckoutMarkerProps, k as CheckoutProps, F as FunnelPublicApi, l as FunnelServiceOption, S as Store, m as StoreMarkerProps, n as StoreProps } from './checkout-block-Cog4H4I4.js';
+import { P as PortalClient, W as WhoAmI, a as PortalPrefill, b as PublicClaim, F as FetchLike } from './portal-account-8uQc_Ncx.js';
+export { c as PortalAccount, d as PortalAccountMarkerProps, e as PortalAccountProps, f as PortalAccountSurface, g as PortalClientConfig, h as PortalPanel, i as PortalPanelMarkerProps, j as PortalPanelProps, k as PortalResult, l as PortalSurface, m as createPortalClient } from './portal-account-8uQc_Ncx.js';
+export { B as BookingBlock, a as BookingBlockMarkerProps, b as BookingBlockProps, c as BookingTypeOption, C as Cart, d as CartMarkerProps, e as CartProps, f as CertificateFunnel, g as CertificateFunnelMarkerProps, h as CertificateFunnelProps, i as Checkout, j as CheckoutMarkerProps, k as CheckoutProps, F as FunnelPublicApi, l as FunnelServiceOption, S as Store, m as StoreMarkerProps, n as StoreProps } from './checkout-block-BdpPIuQ5.js';
 export { PatientSurfaceTheme, patientSurfaceTheme } from './patient-surface-theme.js';
 export { Rgb, contrastRatio, deriveForeground, parseHexColor, relativeLuminance } from './contrast.js';
 export { AnswerValue, Answers, ShowWhenCondition, evaluateShowWhen, visibleQuestions } from './show-when.js';
+import '@patientos/public-sdk';
 
 /**
  * Theme tokens for the website-kit.
@@ -209,6 +210,33 @@ interface PortalSession {
  */
 declare function usePortalSession(): PortalSession;
 
+interface StoreClientConfig {
+    /** The validated PatientOS patient/API origin. Empty means same-origin. */
+    apiOrigin?: string | null;
+    /** Injectable browser transport for tests. */
+    fetchImpl?: FetchLike;
+}
+type StoreResult<T> = {
+    ok: true;
+    data: T;
+} | {
+    ok: false;
+    status: number | null;
+    error: string | null;
+    message: string | null;
+};
+interface StoreClient {
+    readonly apiOrigin: string;
+    url(path: string): string;
+    get<T>(path: string): Promise<StoreResult<T>>;
+    post<T>(path: string, body: unknown, options?: {
+        signal?: AbortSignal;
+    }): Promise<StoreResult<T>>;
+    /** PatientOS magic-link sign-in that returns to this site's checkout. */
+    signInHref(returnPath?: string): string;
+}
+declare function createStoreClient(config?: StoreClientConfig): StoreClient;
+
 declare const WEBSITE_KIT_VERSION = "0.1.0";
 
-export { Button, type ButtonProps, type ButtonVariant, Container, type ContainerProps, FAQ, type FAQProps, type FaqItem, Hero, type HeroProps, Hours, type HoursProps, type HoursRow, MapEmbed, type MapEmbedProps, PortalClient, PortalPrefill, PortalProvider, type PortalProviderProps, type PortalSession, type PortalSessionStatus, PublicClaim, Row, type RowProps, Section, type SectionProps, type Service, ServiceGrid, type ServiceGridProps, Stack, type StackProps, TeamGrid, type TeamGridProps, type TeamMember, ThemeProvider, type ThemeProviderProps, WEBSITE_KIT_VERSION, WebsiteShell, type WebsiteShellProps, type WebsiteTheme, WhoAmI, defaultTheme, resolveTheme, themeToCssVars, usePortalClient, usePortalSession };
+export { Button, type ButtonProps, type ButtonVariant, Container, type ContainerProps, FAQ, type FAQProps, type FaqItem, FetchLike, Hero, type HeroProps, Hours, type HoursProps, type HoursRow, MapEmbed, type MapEmbedProps, PortalClient, PortalPrefill, PortalProvider, type PortalProviderProps, type PortalSession, type PortalSessionStatus, PublicClaim, Row, type RowProps, Section, type SectionProps, type Service, ServiceGrid, type ServiceGridProps, Stack, type StackProps, type StoreClient, type StoreClientConfig, type StoreResult, TeamGrid, type TeamGridProps, type TeamMember, ThemeProvider, type ThemeProviderProps, WEBSITE_KIT_VERSION, WebsiteShell, type WebsiteShellProps, type WebsiteTheme, WhoAmI, createStoreClient, defaultTheme, resolveTheme, themeToCssVars, usePortalClient, usePortalSession };

package/dist/index.js

@@ -1,11 +1,12 @@
 import {
   ISLANDS,
   mountIslands
-} from "./chunk-Y67WZPV5.js";
+} from "./chunk-ZZFBTLR4.js";
 import {
   PortalAccount,
   PortalPanel,
   PortalProvider,
+  createStoreClient,
   getAppointmentTypes,
   getClinic,
   getPublicApi,
@@ -13,7 +14,7 @@ import {
   getThemeTokens,
   usePortalClient,
   usePortalSession
-} from "./chunk-S7U2HOV7.js";
+} from "./chunk-7ZOQ6UKG.js";
 import {
   BPOINT_SCRIPT_ORIGIN,
   BPOINT_SCRIPT_URL,
@@ -35,7 +36,7 @@ import {
 } from "./chunk-THMT43MV.js";
 import {
   createPortalClient
-} from "./chunk-BHVDY6SC.js";
+} from "./chunk-ZYX4TXBN.js";
 import {
   contrastRatio,
   deriveForeground,
@@ -403,6 +404,8 @@ function BookingBlock({
 import { jsx as jsx6, jsxs as jsxs5 } from "react/jsx-runtime";
 function Store({
   categoryHandle,
+  productHandle,
+  storeApiOrigin,
   title,
   columns,
   className
@@ -411,7 +414,7 @@ function Store({
     Island,
     {
       name: "store",
-      props: { categoryHandle, title, columns },
+      props: { categoryHandle, productHandle, storeApiOrigin, title, columns },
       className: ["sk-store", className].filter(Boolean).join(" "),
       children: [
         /* @__PURE__ */ jsx6("h2", { className: "sk-store__heading", children: title ?? "Shop" }),
@@ -423,20 +426,41 @@ function Store({
 
 // src/cart-block.tsx
 import { jsx as jsx7, jsxs as jsxs6 } from "react/jsx-runtime";
-function Cart({ className }) {
-  return /* @__PURE__ */ jsxs6(Island, { name: "cart", className: ["sk-cart", className].filter(Boolean).join(" "), children: [
-    /* @__PURE__ */ jsx7("h2", { className: "sk-cart__heading", children: "Your cart" }),
-    /* @__PURE__ */ jsx7("p", { className: "sk-cart__placeholder", children: "Your cart needs JavaScript to load." })
-  ] });
+function Cart({ storeApiOrigin, className }) {
+  return /* @__PURE__ */ jsxs6(
+    Island,
+    {
+      name: "cart",
+      props: { storeApiOrigin },
+      className: ["sk-cart", className].filter(Boolean).join(" "),
+      children: [
+        /* @__PURE__ */ jsx7("h2", { className: "sk-cart__heading", children: "Your cart" }),
+        /* @__PURE__ */ jsx7("p", { className: "sk-cart__placeholder", children: "Your cart needs JavaScript to load." })
+      ]
+    }
+  );
 }
 
 // src/checkout-block.tsx
 import { jsx as jsx8, jsxs as jsxs7 } from "react/jsx-runtime";
-function Checkout({ className }) {
-  return /* @__PURE__ */ jsxs7(Island, { name: "checkout", className: ["sk-checkout", className].filter(Boolean).join(" "), children: [
-    /* @__PURE__ */ jsx8("h2", { className: "sk-checkout__heading", children: "Checkout" }),
-    /* @__PURE__ */ jsx8("p", { className: "sk-checkout__placeholder", children: "Checkout needs JavaScript to load." })
-  ] });
+function Checkout({
+  storeApiOrigin,
+  ordersHref,
+  completionHref,
+  className
+}) {
+  return /* @__PURE__ */ jsxs7(
+    Island,
+    {
+      name: "checkout",
+      props: { storeApiOrigin, ordersHref, completionHref },
+      className: ["sk-checkout", className].filter(Boolean).join(" "),
+      children: [
+        /* @__PURE__ */ jsx8("h2", { className: "sk-checkout__heading", children: "Checkout" }),
+        /* @__PURE__ */ jsx8("p", { className: "sk-checkout__placeholder", children: "Checkout needs JavaScript to load." })
+      ]
+    }
+  );
 }
 
 // src/index.ts
@@ -476,6 +500,7 @@ export {
   WebsiteShell,
   contrastRatio,
   createPortalClient,
+  createStoreClient,
   defaultTheme,
   deriveForeground,
   evaluateShowWhen,

package/dist/islands-impl.d.ts

@@ -1,7 +1,8 @@
 import * as React from 'react';
-import { b as BookingBlockProps, h as CertificateFunnelProps, n as StoreProps, e as CartProps, k as CheckoutProps } from './checkout-block-Cog4H4I4.js';
-import { j as PortalPanelProps, F as FetchLike } from './portal-account-pI1cWgsT.js';
-export { P as PortalAccountClient } from './portal-account.client-DPRRmfCJ.js';
+import { b as BookingBlockProps, h as CertificateFunnelProps, n as StoreProps, e as CartProps, k as CheckoutProps } from './checkout-block-BdpPIuQ5.js';
+import { j as PortalPanelProps, F as FetchLike } from './portal-account-8uQc_Ncx.js';
+export { P as PortalAccountClient } from './portal-account.client-BBe_q9yC.js';
+import '@patientos/public-sdk';
 
 declare function BookingBlockClient(props: BookingBlockProps): React.ReactElement;
 
@@ -58,10 +59,10 @@ type PortalPanelClientProps = PortalPanelProps & {
 };
 declare function PortalPanelClient({ surface, portalUrl, portalApiOrigin, initialState, fetchImpl, }: PortalPanelClientProps): React.ReactElement;
 
-declare function StoreClient({ categoryHandle, title, columns }: StoreProps): React.ReactElement;
+declare function StoreClient({ categoryHandle, productHandle, storeApiOrigin, title, columns, }: StoreProps): React.ReactElement;
 
-declare function CartClient(_props: CartProps): React.ReactElement;
+declare function CartClient({ storeApiOrigin }: CartProps): React.ReactElement;
 
-declare function CheckoutClient(_props: CheckoutProps): React.ReactElement;
+declare function CheckoutClient({ storeApiOrigin, ordersHref, completionHref, }: CheckoutProps): React.ReactElement;
 
 export { BookingBlockClient, CartClient, CertificateFunnelClient, CheckoutClient, PortalPanelClient, StoreClient };

package/dist/islands-impl.js

@@ -6,11 +6,11 @@ import {
   PortalAccountClient,
   PortalPanelClient,
   StoreClient
-} from "./chunk-S7U2HOV7.js";
+} from "./chunk-7ZOQ6UKG.js";
 import "./chunk-ZOF22TJA.js";
 import "./chunk-QDO3SJWR.js";
 import "./chunk-THMT43MV.js";
-import "./chunk-BHVDY6SC.js";
+import "./chunk-ZYX4TXBN.js";
 import "./chunk-MLKGABMK.js";
 export {
   BookingBlockClient,

package/dist/islands-registry.js

@@ -1,12 +1,12 @@
 import {
   ISLANDS,
   mountIslands
-} from "./chunk-Y67WZPV5.js";
-import "./chunk-S7U2HOV7.js";
+} from "./chunk-ZZFBTLR4.js";
+import "./chunk-7ZOQ6UKG.js";
 import "./chunk-ZOF22TJA.js";
 import "./chunk-QDO3SJWR.js";
 import "./chunk-THMT43MV.js";
-import "./chunk-BHVDY6SC.js";
+import "./chunk-ZYX4TXBN.js";
 import "./chunk-MLKGABMK.js";
 export {
   ISLANDS,

package/dist/{portal-account-pI1cWgsT.d.ts → portal-account-8uQc_Ncx.d.ts}

@@ -1,3 +1,4 @@
+import { ApplicationRun } from '@patientos/public-sdk';
 import * as React from 'react';
 
 /** The injectable browser transport. */
@@ -64,8 +65,13 @@ interface PortalClient {
     prefill(): Promise<PortalPrefill | null>;
     /** Mint a public claim only for the signed-in patient. */
     mintPublicClaim(): Promise<PublicClaim | null>;
-    /** Current page callback, using the app-side return hop when cross-origin. */
-    returnPath(): string;
+    /** Redeem a single-use magic-link continuation after patient sign-in. */
+    redeemApplicationRunHandoff(handoffId: string): Promise<{
+        run: ApplicationRun;
+        capabilityToken: string;
+    } | null>;
+    /** Page callback, using the app-side return hop when cross-origin. */
+    returnPath(targetUrl?: string): string;
     /** Back-compat account-surface transport; callers still use constant paths. */
     get<T>(path: string): Promise<PortalResult<T>>;
     /** Back-compat account-surface JSON write; callers still use constant paths. */

package/dist/{portal-account.client-DPRRmfCJ.d.ts → portal-account.client-BBe_q9yC.d.ts}

@@ -1,5 +1,5 @@
 import * as React from 'react';
-import { e as PortalAccountProps, F as FetchLike } from './portal-account-pI1cWgsT.js';
+import { e as PortalAccountProps, F as FetchLike } from './portal-account-8uQc_Ncx.js';
 
 type PortalAddress = {
     id: string;

package/dist/portal-booking-client.d.ts

@@ -1,6 +1,7 @@
 import * as React from 'react';
-import { F as FetchLike, k as PortalResult } from './portal-account-pI1cWgsT.js';
-import { a as PortalAppointment, b as PortalAppointmentsBody } from './portal-account.client-DPRRmfCJ.js';
+import { F as FetchLike, k as PortalResult } from './portal-account-8uQc_Ncx.js';
+import { a as PortalAppointment, b as PortalAppointmentsBody } from './portal-account.client-BBe_q9yC.js';
+import '@patientos/public-sdk';
 
 /** One bookable instant, collapsing the practitioners free at the same time. */
 interface TimeSlot {

package/dist/portal-booking-client.js

@@ -22,7 +22,7 @@ import {
   releasePortalHold,
   rescheduleContextTypeId,
   reschedulePortalAppointmentAndReload
-} from "./chunk-BHVDY6SC.js";
+} from "./chunk-ZYX4TXBN.js";
 import "./chunk-MLKGABMK.js";
 export {
   AVAILABILITY_FAILED_COPY,

package/dist/website-kit.css

@@ -2868,7 +2868,9 @@ select.sk-identity__input[data-empty] {
     grid-template-columns: repeat(2, minmax(0, 1fr));
   }
 }
-@media (max-width: 480px) {
+/* Two catalogue columns fit ordinary 390–430px phones and keep a 54-item shop
+   scannable. Below 380px one column preserves readable product names. */
+@media (max-width: 379px) {
   .sk-store__grid {
     grid-template-columns: minmax(0, 1fr);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patientos/website-kit",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "description": "PatientOS clinic website components and patient-facing interactive islands.",
   "type": "module",
   "sideEffects": [
@@ -109,12 +109,13 @@
     "@types/node": "^25.6.0",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
+    "jsdom": "^29.1.1",
     "tsup": "^8.5.0",
     "typescript": "^5.9.3",
     "vitest": "^4.1.5",
     "livekit-client": "^2.20.0"
   },
   "dependencies": {
-    "@patientos/public-sdk": "^0.2.0"
+    "@patientos/public-sdk": "^0.2.2"
   }
 }