@replohq/sandbox-runtime 1.7.1 → 1.7.2

package/chunk-SGKQ5HGT.mjs

@@ -1,6 +1,5 @@
 import { v4 } from 'uuid';
 
-// ../replo-utils/lib/crypto.ts
 function randomUUID() {
   return v4();
 }

package/chunk-TESFJQID.mjs

@@ -1,4 +1,3 @@
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/isArray.js
 var isArray = Array.isArray;
 var isArray_default = isArray;
 

package/chunk-UOBGRB5I.mjs

@@ -1,7 +1,6 @@
 import { exhaustiveSwitch } from './chunk-JUKCUPQ6.mjs';
 import { z } from 'zod';
 
-// ../replo-utils/lib/json.ts
 function parseJsonOrNull(json) {
   try {
     return JSON.parse(json);
@@ -10,7 +9,6 @@ function parseJsonOrNull(json) {
   }
 }
 
-// ../replo-utils/lib/parse.ts
 function parseSchemaOrNull(value, schema) {
   const parseResult = schema.safeParse(value);
   return parseResult.success ? parseResult.data : null;
@@ -205,9 +203,6 @@ var selectModeSelectionSchema = z.discriminatedUnion("type", [
   z.object({
     type: z.literal("drag"),
     dragRect: selectModeBoundingRectSchema,
-    // Bounding boxes of the selectables the drag currently intersects,
-    // rendered as lighter highlights so the user can see what the drag
-    // will capture before they release.
     selectionRects: z.array(selectModeSelectionRectSchema)
   })
 ]).describe("SelectModeSelection");

package/design-library-preview/DesignLibraryPreview.js

@@ -92,4 +92,3 @@ function DesignLibraryPreview() {
 export {
   DesignLibraryPreview
 };
-//# sourceMappingURL=DesignLibraryPreview.js.map

package/next/component-preview-client.js

@@ -205,4 +205,3 @@ export {
   ComponentPreviewNavigation,
   ComponentPreviewStage
 };
-//# sourceMappingURL=component-preview-client.js.map

package/next/component-preview-href.js

@@ -11,4 +11,3 @@ function getComponentPreviewHref({
 export {
   getComponentPreviewHref
 };
-//# sourceMappingURL=component-preview-href.js.map

package/next/component-preview-props.js

@@ -33,4 +33,3 @@ export {
   mergeClientProps,
   productReferencesChanged
 };
-//# sourceMappingURL=component-preview-props.js.map

package/next/component-preview.js

@@ -81,4 +81,3 @@ function createComponentPreviewPage(Component, options) {
 export {
   createComponentPreviewPage
 };
-//# sourceMappingURL=component-preview.js.map

package/next/config.js

@@ -28,4 +28,3 @@ export {
   PUBLISH_TSCONFIG_FILENAME,
   withComponentPreviewPageExtension
 };
-//# sourceMappingURL=config.js.map

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@replohq/sandbox-runtime",
-  "version": "1.7.1",
+  "version": "1.7.2",
   "reploBuild": {
     "packageName": "@replohq/sandbox-runtime",
-    "version": "1.7.1",
+    "version": "1.7.2",
     "branch": "HEAD",
-    "commit": "a518bd507469206a903941ac3dde233c966036de",
-    "builtAt": "2026-09-15T05:05:19.645Z"
+    "commit": "d7ee0ec28234216b633c81e1a6d8683591c946f8",
+    "builtAt": "2026-09-15T17:30:06.538Z"
   },
   "description": "Replo sandbox runtime — editor integration for agent-built Next.js sites.",
   "license": "SEE LICENSE IN LICENSE",

package/posthog-relay.js

@@ -39,14 +39,10 @@ function initPostHogRelay() {
       api_host: POSTHOG_API_HOST,
       persistence: "localStorage",
       autocapture: false,
-      // (Noah, 2026-07-14, REPL-29305): Disable performance capture — its PerformanceObserver
-      // relays a non-cloneable PerformanceServerTiming across the iframe boundary via postMessage,
-      // throwing a DataCloneError in the preview. Matches the bedrock-sdk relay.
       capture_performance: false,
       capture_pageview: false,
       session_recording: {
         recordCrossOriginIframes: true,
-        // NOTE (Nick, 2026-02-02, REPL-23284): Disable canvas recording to prevent SecurityError on tainted canvases
         captureCanvas: { recordCanvas: false }
       }
     });
@@ -69,4 +65,3 @@ function PostHogRelay() {
 export {
   PostHogRelay as default
 };
-//# sourceMappingURL=posthog-relay.js.map

package/sandbox-runtime.js

@@ -34,4 +34,3 @@ function SandboxRuntime({ children }) {
 export {
   SandboxRuntime
 };
-//# sourceMappingURL=sandbox-runtime.js.map

package/select-mode/EditorSelection.d.ts

@@ -18,7 +18,5 @@
  * The `interactionSessionRef` is the single source of truth for the
  * in-progress drag/selection — every hook reads/writes it via ref so we
  * don't trigger React re-renders during interaction-heavy operations.
- *
- * @author Kevin O'Connell 2026-04-17
  */
 export declare function EditorSelection(): null;

package/select-mode/EditorSelection.js

@@ -105,4 +105,3 @@ function EditorSelection() {
 export {
   EditorSelection
 };
-//# sourceMappingURL=EditorSelection.js.map

package/select-mode/annotationFrames.js

@@ -116,4 +116,3 @@ export {
   setActiveAnnotationBadge,
   showAnnotationFrames
 };
-//# sourceMappingURL=annotationFrames.js.map

package/select-mode/descriptor/elementDescriptor.d.ts

@@ -16,8 +16,6 @@ export declare function buildSelector(element: Element): string;
  * Centralizes everything the parent (and downstream agent) need to know
  * about a selection: identification, geometry, source location, and a
  * style-inlined HTML snippet.
- *
- * @author Kevin O'Connell 2026-04-17
  */
 export declare function buildElementDescriptor({ element, clickPosition, siblingSelectors, }: {
     element: Element;

package/select-mode/descriptor/elementDescriptor.js

@@ -198,4 +198,3 @@ export {
   buildSelector,
   getNearestSelectableElement
 };
-//# sourceMappingURL=elementDescriptor.js.map

package/select-mode/descriptor/styleExtraction.js

@@ -335,4 +335,3 @@ export {
   getDefinedStyles,
   getInheritedStyles
 };
-//# sourceMappingURL=styleExtraction.js.map

package/select-mode/displayModeStore.js

@@ -28,7 +28,6 @@ const displayModeStore = {
     displayMode = nextDisplayMode;
     notify();
   },
-  /** Test-only: reset back to the default so specs don't leak state. */
   reset() {
     displayMode = "browse";
   }
@@ -44,4 +43,3 @@ export {
   displayModeStore,
   useDisplayMode
 };
-//# sourceMappingURL=displayModeStore.js.map

package/select-mode/fast-refresh-relay.js

@@ -30,4 +30,3 @@ function installFastRefreshRelay({
 export {
   installFastRefreshRelay
 };
-//# sourceMappingURL=fast-refresh-relay.js.map

package/select-mode/fiber.js

@@ -56,8 +56,7 @@ function parseDebugStackSource(debugStack) {
     if (REACT_STACK_BOTTOM_FRAME_PATTERN.test(line)) {
       return null;
     }
-    const framedMatch = line.match(/^at\s+(.+?)\s+\((.*):(\d+):(\d+)\)$/) ?? // Method names never contain `/`, which keeps `@`-versioned path
-    // segments (`.pnpm/react@19.2.4/…`) from being read as a method.
+    const framedMatch = line.match(/^at\s+(.+?)\s+\((.*):(\d+):(\d+)\)$/) ??
     line.match(/^([^@/]*)@(.+):(\d+):(\d+)$/);
     const stackFrameMatch = framedMatch ?? line.match(/^at\s+(?:.*\()?(.*):(\d+):(\d+)\)?$/) ?? line.match(/^(.*):(\d+):(\d+)$/);
     if (!stackFrameMatch) {
@@ -98,8 +97,6 @@ function getFiberFromElement(element) {
   });
   if (fiberSymbolKey) {
     return (
-      // Legacy cast - may or may not be necessary
-      // eslint-disable-next-line replo/no-as-cast
       element[fiberSymbolKey] ?? null
     );
   }
@@ -503,4 +500,3 @@ export {
   getRepetitionHostNodes,
   getSourceLocation
 };
-//# sourceMappingURL=fiber.js.map

package/select-mode/hooks/useCrosshairCursor.d.ts

@@ -4,8 +4,6 @@ import type { DisplayMode } from "../../_vendor/schemas/generated/selectMode";
  * is in `selection` mode. We inject a `<style>` tag into the iframe document
  * (rather than toggling a class on `<html>`) so that the `!important` rule
  * wins against any per-element cursor styling on the page being edited.
- *
- * @author Kevin O'Connell 2026-04-17
  */
 export declare function useCrosshairCursor({ displayMode, }: {
     displayMode: DisplayMode;

package/select-mode/hooks/useCrosshairCursor.js

@@ -21,4 +21,3 @@ function useCrosshairCursor({
 export {
   useCrosshairCursor
 };
-//# sourceMappingURL=useCrosshairCursor.js.map

package/select-mode/hooks/useEditModeStateMachine.js

@@ -226,4 +226,3 @@ export {
   isTextEditableElement,
   useEditModeStateMachine
 };
-//# sourceMappingURL=useEditModeStateMachine.js.map

package/select-mode/hooks/useOptimisticOverrides.js

@@ -283,4 +283,3 @@ function useOptimisticOverrides() {
 export {
   useOptimisticOverrides
 };
-//# sourceMappingURL=useOptimisticOverrides.js.map

package/select-mode/hooks/useParentMessaging.d.ts

@@ -15,8 +15,6 @@ import type { DisplayMode, SelectModeFormatCommand, SelectModeOptimisticUpdatePa
  * Also fires `iframeReady` on mount so the parent knows it's safe to push
  * the initial `setDisplayMode` — without this handshake the parent would
  * race the iframe's mount and the first message could be lost.
- *
- * @author Kevin O'Connell 2026-04-17
  */
 export declare function useParentMessaging({ applyOptimisticUpdate, markCommitted, resolveSessionOverrides, onEnterEditMode, onExitEditMode, onFormatCommand, revertOverride, setDisplayMode, setSelectionType, }: {
     applyOptimisticUpdate?: (input: {

package/select-mode/hooks/useParentMessaging.js

@@ -91,4 +91,3 @@ function useParentMessaging({
 export {
   useParentMessaging
 };
-//# sourceMappingURL=useParentMessaging.js.map

package/select-mode/hooks/useSelectModeController.js

@@ -70,4 +70,3 @@ function useSelectModeController() {
 export {
   useSelectModeController
 };
-//# sourceMappingURL=useSelectModeController.js.map

package/select-mode/hooks/useSelectionHover.d.ts

@@ -12,8 +12,6 @@ export declare function resetHoverRectDedup(): void;
  *    the only highlight we want visible.
  *  - Unchanged rectangles do not cross the iframe bridge. Viewport updates
  *    are coalesced because scroll and wheel can fire in the same frame.
- *
- * @author Noah Gilmore 2026-07-26
  */
 export declare function useSelectionHover({ displayMode, interactionSessionRef, }: {
     displayMode: DisplayMode;

package/select-mode/hooks/useSelectionHover.js

@@ -125,4 +125,3 @@ export {
   resetHoverRectDedup,
   useSelectionHover
 };
-//# sourceMappingURL=useSelectionHover.js.map

package/select-mode/hooks/useSelectionInteractions.d.ts

@@ -23,8 +23,6 @@ import type { SelectModeInteractionSession } from "../selectModeSession";
  * We capture-listen and `preventDefault`/`stopPropagation` clicks so the
  * underlying page can't navigate or trigger handlers while the user is
  * working in selection mode.
- *
- * @author Kevin O'Connell 2026-04-17
  */
 export declare function useSelectionInteractions({ displayMode, editingElementRef, interactionSessionRef, onBeginEditing, }: {
     displayMode: DisplayMode;

package/select-mode/hooks/useSelectionInteractions.js

@@ -472,4 +472,3 @@ function useSelectionInteractions({
 export {
   useSelectionInteractions
 };
-//# sourceMappingURL=useSelectionInteractions.js.map

package/select-mode/hooks/useSelectionScrollSync.d.ts

@@ -18,8 +18,6 @@ import type { SelectModeInteractionSession } from "../selectModeSession";
  *  - For an `area` session we keep the original *page* rect (which doesn't
  *    move) and convert it to viewport coordinates using the latest scroll
  *    offset before sending.
- *
- * @author Noah Gilmore 2026-07-26
  */
 export declare function useSelectionScrollSync({ displayMode, interactionSessionRef, }: {
     displayMode: DisplayMode;

package/select-mode/hooks/useSelectionScrollSync.js

@@ -62,4 +62,3 @@ function useSelectionScrollSync({
 export {
   useSelectionScrollSync
 };
-//# sourceMappingURL=useSelectionScrollSync.js.map

package/select-mode/hooks/useSiblingResolution.js

@@ -19,4 +19,3 @@ export {
   getRepetitionSiblingElements,
   getRepetitionSiblingSelectors
 };
-//# sourceMappingURL=useSiblingResolution.js.map

package/select-mode/iframeRpcChannel.js

@@ -97,4 +97,3 @@ export {
   setNavigateToRouteHandler,
   setSelectModeParentHandlers
 };
-//# sourceMappingURL=iframeRpcChannel.js.map

package/select-mode/inlineTextMarks.js

@@ -22,4 +22,3 @@ export {
   isInlineTextMarkElement,
   skipInlineTextMarkElements
 };
-//# sourceMappingURL=inlineTextMarks.js.map

package/select-mode/interactions/selectionGeometry.d.ts

@@ -12,36 +12,21 @@ export type ScrollOffset = {
 export type SelectedAreaState = {
     pageRect: SelectModeBoundingRect;
 };
-/**
- * @author Kevin O'Connell 2026-04-17
- */
 export declare function getDragPositionFromClient({ clientX, clientY, scrollOffset, }: {
     clientX: number;
     clientY: number;
     scrollOffset: ScrollOffset;
 }): DragPosition;
-/**
- * @author Kevin O'Connell 2026-04-17
- */
 export declare function getDocumentScrollOffset(): ScrollOffset;
-/**
- * @author Kevin O'Connell 2026-04-17
- */
 export declare function getViewportSelectionRect({ dragStart, dragCurrent, scrollOffset, }: {
     dragStart: DragPosition;
     dragCurrent: DragPosition;
     scrollOffset: ScrollOffset;
 }): SelectModeBoundingRect;
-/**
- * @author Kevin O'Connell 2026-04-17
- */
 export declare function getPageRectFromViewportRect({ rect, scrollOffset, }: {
     rect: SelectModeBoundingRect;
     scrollOffset: ScrollOffset;
 }): SelectModeBoundingRect;
-/**
- * @author Kevin O'Connell 2026-04-17
- */
 export declare function getViewportRectFromPageRect({ rect, scrollOffset, }: {
     rect: SelectModeBoundingRect;
     scrollOffset: ScrollOffset;
@@ -117,14 +102,9 @@ export declare function unionElementPageRects({ elements, scrollOffset, }: {
  * selection rect, clamped to the element's own bounds. This anchor is what
  * lets the selected-element overlay continue to track the element when the
  * user scrolls (`useSelectionScrollSync` re-projects relative to it).
- *
- * @author Kevin O'Connell 2026-04-17
  */
 export declare function getElementAnchor({ element, selectionRect, }: {
     element: Element;
     selectionRect: SelectModeBoundingRect;
 }): SelectModeClickPosition;
-/**
- * @author Kevin O'Connell 2026-04-17
- */
 export declare function getElementBoundingRect(element: Element): SelectModeBoundingRect;

package/select-mode/interactions/selectionGeometry.js

@@ -271,4 +271,3 @@ export {
   isAdditiveSelectionClick,
   unionElementPageRects
 };
-//# sourceMappingURL=selectionGeometry.js.map

package/select-mode/optimisticOverrideDom.js

@@ -4,4 +4,3 @@ export {
   SELECT_MODE_OVERRIDE_ATTRIBUTE,
   SELECT_MODE_OVERRIDE_STYLE_ATTRIBUTE
 };
-//# sourceMappingURL=optimisticOverrideDom.js.map

package/select-mode/selectModeSession.js

@@ -18,4 +18,3 @@ export {
   IDLE_SESSION,
   getConnectedSelectedElement
 };
-//# sourceMappingURL=selectModeSession.js.map

package/select-mode/selectionFrame.d.ts

@@ -23,8 +23,6 @@
  * The canopy iframe loads a customer page and doesn't include lattice /
  * tailwind, so styling is intentionally vanilla inline CSS rather than
  * Tailwind classes.
- *
- * @author Noah Gilmore 2026-07-26
  */
 type SelectionFrameVariant = "element" | "area";
 type SelectionFramePageRect = {
@@ -57,8 +55,6 @@ export declare function getOrCreateFramesLayerContainer({ id, zIndex, }: {
  * call this once at commit time and let the browser handle the rest of the
  * scroll lifetime. Reconciles the node pool against `frames.length` so group
  * updates reuse the existing nodes when the repetition count stays stable.
- *
- * @author Noah Gilmore 2026-07-26
  */
 export declare function showSelectionFrames({ frames, }: {
     frames: SelectionFrameSpec[];
@@ -77,8 +73,5 @@ export declare function showAreaSelectionFrames({ elements, scrollOffset, }: {
         top: number;
     };
 }): void;
-/**
- * @author Kevin O'Connell 2026-05-26
- */
 export declare function hideSelectionFrame(): void;
 export {};

package/select-mode/selectionFrame.js

@@ -162,4 +162,3 @@ export {
   showElementSelectionFrames,
   showSelectionFrames
 };
-//# sourceMappingURL=selectionFrame.js.map

package/select-mode/selectionPublish.js

@@ -18,4 +18,3 @@ function isSamePageRect(left, right) {
 export {
   isSelectionStillCurrent
 };
-//# sourceMappingURL=selectionPublish.js.map

package/select-mode/symbolicate.js

@@ -197,4 +197,3 @@ async function symbolicateSelectedElement(selectedElement) {
 export {
   symbolicateSelectedElement
 };
-//# sourceMappingURL=symbolicate.js.map

package/select-mode/tiptapInlineEditor.js

@@ -58,8 +58,6 @@ function createInlineTiptapEditor({
       InlineLink
     ],
     editorProps: {
-      // Drop the browser's default focus ring on the contenteditable — the
-      // select-mode selection frame already indicates the edit target.
       attributes: {
         "data-select-mode-inline-editor": "",
         style: "outline: none;"
@@ -92,8 +90,6 @@ function createInlineTiptapEditor({
   });
   return {
     focus: () => editor.commands.focus(),
-    // Focus the editor with the full text block selected so the user can type
-    // to replace it immediately (or arrow/click to drop the selection).
     focusAndSelectAll: () => editor.chain().focus().selectAll().run(),
     destroy: () => {
       editor.destroy();
@@ -120,4 +116,3 @@ function createInlineTiptapEditor({
 export {
   createInlineTiptapEditor
 };
-//# sourceMappingURL=tiptapInlineEditor.js.map

package/ClientErrorBoundary.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../ClientErrorBoundary.tsx"],
-  "sourcesContent": ["\"use client\";\n\nimport * as React from \"react\";\n\ninterface ErrorBoundaryState {\n  didCatch: boolean;\n}\n\ntype ErrorBoundaryProps = React.PropsWithChildren<{\n  onError?: (error: unknown, info: React.ErrorInfo) => void;\n}>;\n\nclass ErrorBoundary extends React.Component<\n  ErrorBoundaryProps,\n  ErrorBoundaryState\n> {\n  state: ErrorBoundaryState = {\n    didCatch: false,\n  };\n\n  static getDerivedStateFromError(): ErrorBoundaryState {\n    return { didCatch: true };\n  }\n\n  componentDidCatch(error: unknown, info: React.ErrorInfo) {\n    this.props.onError?.(error, info);\n  }\n\n  render() {\n    if (this.state.didCatch) {\n      /**\n       * NOTE (Max, 2026-06-10): When there's any error that hits this Error boundary,\n       * we render this neutral cover.\n       * getDerivedStateFromError() runs in the render phase, before commit, so this cover\n       * is what hits the DOM immediately when the error is caught.\n       * The editor lays its own loading / error UI on top (driven by NextErrorReporter's\n       * status postMessage).\n       * This div has a plain light neutral color, close enough to the editor's\n       * loading animation. If we returned null, it'd show a cover with the site's default color (e.g. black),\n       * which makes the transition less smooth between the sandbox runtime showing this cover, and the iframe embedder\n       * receiving the post message telling it to show some loading animation.\n       *\n       * I'm really unsatisfied with this approach: there's no apparent flicker only because the editor's loading animation\n       * when receiving the post message has the same color as this neutral cover... Alternative would be for\n       * this error boundary to show the loading animation itself (instead of the embedder) but that's even more weird...\n       */\n      return (\n        <div\n          style={{\n            position: \"fixed\",\n            inset: 0,\n            zIndex: 2147483646,\n            background: \"#ffffff\",\n          }}\n        />\n      );\n    }\n    return this.props.children;\n  }\n}\n\n/**\n * NOTE (Max, 2026-06-10): Client-side error boundary. On a caught render error it\n * (1) reports the error to the parent editor via postMessage (so it can get reported to Sentry)\n * and (2) renders a neutral cover instead of going blank, so the preview never flashes the broken\n * page while the agent fixes it. The editor decides what to show on top (loading\n * vs. an actionable error screen); the embedder reloads the iframe once the error\n * clears.\n */\nexport function ClientErrorBoundary({ children }: React.PropsWithChildren) {\n  const handleError = React.useCallback(\n    (error: unknown, errorInfo: React.ErrorInfo) => {\n      const errorObj =\n        error instanceof Error ? error : new Error(String(error));\n      window.parent.postMessage(\n        {\n          // TODO (Max, 2026-06-11, REPL-27851): When adding Sentry to miniapps, I'll ensure we listen to this message\n          // and send it to Sentry. I'm not a fan of having 2 separate post messages for reporting errors (the 'error' post message in NextErrorReporter, and this one).\n          // But there's no way for the NextErrorReporter to get the actual error object, so we'll\n          // need a separate postMessage (this one, with an updated name).\n          type: \"replo-editor:client-error\",\n          payload: {\n            pageRoute: window.location.pathname,\n            error: {\n              message: errorObj.message,\n              stack: errorObj.stack,\n              componentStack: errorInfo.componentStack,\n            },\n          },\n        },\n        \"*\",\n      );\n    },\n    [],\n  );\n\n  return <ErrorBoundary onError={handleError}>{children}</ErrorBoundary>;\n}\n"],
-  "mappings": ";AA+CQ;AA7CR,YAAY,WAAW;AAUvB,MAAM,sBAAsB,MAAM,UAGhC;AAAA,EACA,QAA4B;AAAA,IAC1B,UAAU;AAAA,EACZ;AAAA,EAEA,OAAO,2BAA+C;AACpD,WAAO,EAAE,UAAU,KAAK;AAAA,EAC1B;AAAA,EAEA,kBAAkB,OAAgB,MAAuB;AACvD,SAAK,MAAM,UAAU,OAAO,IAAI;AAAA,EAClC;AAAA,EAEA,SAAS;AACP,QAAI,KAAK,MAAM,UAAU;AAiBvB,aACE;AAAA,QAAC;AAAA;AAAA,UACC,OAAO;AAAA,YACL,UAAU;AAAA,YACV,OAAO;AAAA,YACP,QAAQ;AAAA,YACR,YAAY;AAAA,UACd;AAAA;AAAA,MACF;AAAA,IAEJ;AACA,WAAO,KAAK,MAAM;AAAA,EACpB;AACF;AAUO,SAAS,oBAAoB,EAAE,SAAS,GAA4B;AACzE,QAAM,cAAc,MAAM;AAAA,IACxB,CAAC,OAAgB,cAA+B;AAC9C,YAAM,WACJ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAC1D,aAAO,OAAO;AAAA,QACZ;AAAA;AAAA;AAAA;AAAA;AAAA,UAKE,MAAM;AAAA,UACN,SAAS;AAAA,YACP,WAAW,OAAO,SAAS;AAAA,YAC3B,OAAO;AAAA,cACL,SAAS,SAAS;AAAA,cAClB,OAAO,SAAS;AAAA,cAChB,gBAAgB,UAAU;AAAA,YAC5B;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA,CAAC;AAAA,EACH;AAEA,SAAO,oBAAC,iBAAc,SAAS,aAAc,UAAS;AACxD;",
-  "names": []
-}

package/DocumentReadyBeacon.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../DocumentReadyBeacon.tsx"],
-  "sourcesContent": ["// Posts at HTML parse time, pre-hydration; error shells and retry pages are different documents without this script, so receiving it proves the real site's document arrived.\n// phase: \"document\" lets the editor distinguish this from the hydration-time reporter \u2014 document arrival must not disarm its JS-boot watchdog.\nconst BEACON_SCRIPT = `if (window.parent !== window) { window.parent.postMessage({ type: \"replo:preview:status\", status: \"ok\", phase: \"document\", route: window.location.pathname }, \"*\"); }`;\n\nexport function DocumentReadyBeacon() {\n  return <script dangerouslySetInnerHTML={{ __html: BEACON_SCRIPT }} />;\n}\n"],
-  "mappings": "AAKS;AAHT,MAAM,gBAAgB;AAEf,SAAS,sBAAsB;AACpC,SAAO,oBAAC,YAAO,yBAAyB,EAAE,QAAQ,cAAc,GAAG;AACrE;",
-  "names": []
-}

package/LinkInterceptor.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../LinkInterceptor.tsx"],
-  "sourcesContent": ["\"use client\";\n\nimport { useEffect } from \"react\";\n\nimport { displayModeStore } from \"./select-mode/displayModeStore\";\n\ntype NavigationNavigateEvent = {\n  destination?: { url?: string };\n  preventDefault?: () => void;\n};\n\ntype NavigationLike = {\n  addEventListener: (\n    type: \"navigate\",\n    listener: (event: NavigationNavigateEvent) => void,\n  ) => void;\n  removeEventListener: (\n    type: \"navigate\",\n    listener: (event: NavigationNavigateEvent) => void,\n  ) => void;\n};\n\n// NOTE (Max, 2026-08-26): Shared by name with @replohq/sdk's `navigateExternal`\n// (packages/sdk/lib/external-navigation.ts) rather than by import \u2014 the two\n// packages publish independently and must not depend on each other.\nconst EXTERNAL_NAVIGATION_HANDLER_KEY = \"__reploExternalNavigationHandler\";\n\nfunction blockNavigation(event: MouseEvent) {\n  event.preventDefault();\n  event.stopPropagation();\n  event.stopImmediatePropagation();\n}\n\nfunction isNavigationLike(value: unknown): value is NavigationLike {\n  if (typeof value !== \"object\" || value === null) {\n    return false;\n  }\n\n  return (\n    typeof Reflect.get(value, \"addEventListener\") === \"function\" &&\n    typeof Reflect.get(value, \"removeEventListener\") === \"function\"\n  );\n}\n\nfunction getWindowNavigation() {\n  const navigation = Reflect.get(window, \"navigation\");\n  return isNavigationLike(navigation) ? navigation : null;\n}\n\nfunction shouldInterceptNavigationForAgentPreview() {\n  if (typeof window === \"undefined\") {\n    return false;\n  }\n\n  if (window.parent === window) {\n    return false;\n  }\n\n  return (\n    new URLSearchParams(window.location.search).get(\"__reploAgentPreview\") ===\n    \"1\"\n  );\n}\n\nfunction resolveUrl(rawUrl: string | URL): URL | null {\n  try {\n    return new URL(\n      typeof rawUrl === \"string\" ? rawUrl : rawUrl.href,\n      window.location.href,\n    );\n  } catch {\n    return null;\n  }\n}\n\nfunction urlLeavesSandbox(rawUrl: string | URL): boolean | null {\n  const resolved = resolveUrl(rawUrl);\n  return resolved === null ? null : resolved.origin !== window.location.origin;\n}\n\nexport default function LinkInterceptor() {\n  // eslint-disable-next-line replo/no-use-effect -- Browser navigation APIs must be patched at client runtime and restored when the interceptor unmounts.\n  useEffect(() => {\n    if (!shouldInterceptNavigationForAgentPreview()) {\n      return;\n    }\n\n    const originalWindowOpen = window.open;\n    const originalPushState = history.pushState;\n    const originalReplaceState = history.replaceState;\n    const navigation = getWindowNavigation();\n\n    // Tell the parent editor where the site's own navigation went so it can\n    // keep its URL, page list, and select-mode in sync without reloading the\n    // iframe. A fact, not a request: it is only sent once a navigation is\n    // actually happening.\n    const reportNavigated = (rawUrl: string | URL) => {\n      window.parent.postMessage(\n        {\n          type: \"replo:navigated\",\n          route: resolveUrl(rawUrl)?.pathname ?? String(rawUrl),\n        },\n        \"*\",\n      );\n    };\n\n    // A navigation that leaves the sandbox cannot happen in place: checkout\n    // providers refuse to be framed and the iframe has no `allow-popups`. Hand\n    // the destination to the editor, which opens it in a real browser tab.\n    const openInParent = (rawUrl: string | URL) => {\n      const resolved = resolveUrl(rawUrl);\n      if (!resolved) {\n        return;\n      }\n      window.parent.postMessage(\n        {\n          type: \"replo:open-external\",\n          url: resolved.toString(),\n        },\n        \"*\",\n      );\n    };\n\n    Reflect.set(window, EXTERNAL_NAVIGATION_HANDLER_KEY, (url: string) => {\n      openInParent(url);\n      return true;\n    });\n\n    window.open = function (\n      url?: string | URL,\n      target?: string,\n      features?: string,\n    ) {\n      if (url !== undefined && url !== \"\" && urlLeavesSandbox(url) === true) {\n        openInParent(url);\n        return null;\n      }\n\n      return originalWindowOpen.call(window, url, target, features);\n    };\n\n    // The history patches are where client-side navigations are reported:\n    // next/link cancels its click and routes through pushState, so the click\n    // handler below cannot know whether the site actually navigated \u2014 these\n    // patches fire exactly when it did (link clicks and programmatic\n    // router.push/redirects alike).\n    history.pushState = function (\n      state: Parameters<History[\"pushState\"]>[0],\n      unused: string,\n      url?: string | URL | null,\n    ) {\n      if (url && urlLeavesSandbox(url) === true) {\n        return;\n      }\n\n      const result = originalPushState.call(history, state, unused, url);\n      if (url) {\n        reportNavigated(url);\n      }\n      return result;\n    };\n\n    history.replaceState = function (\n      state: Parameters<History[\"replaceState\"]>[0],\n      unused: string,\n      url?: string | URL | null,\n    ) {\n      if (url && urlLeavesSandbox(url) === true) {\n        return;\n      }\n\n      const result = originalReplaceState.call(history, state, unused, url);\n      if (url) {\n        reportNavigated(url);\n      }\n      return result;\n    };\n\n    const handleNavigate = (event: NavigationNavigateEvent) => {\n      const destinationUrl = event.destination?.url;\n      if (\n        destinationUrl === undefined ||\n        destinationUrl === \"\" ||\n        urlLeavesSandbox(destinationUrl) !== true\n      ) {\n        return;\n      }\n\n      event.preventDefault?.();\n      openInParent(destinationUrl);\n    };\n\n    const handleClick = (event: MouseEvent) => {\n      // While select mode is active a link click must select the element, not\n      // navigate. `useSelectionInteractions` prevents the default nav, but this\n      // sibling capture listener would still post `replo:navigate` and move the\n      // preview off the page \u2014 `stopPropagation` there can't suppress a\n      // listener on the same node, so we bail out here explicitly.\n      if (displayModeStore.getSnapshot() === \"selection\") {\n        return;\n      }\n\n      const target = event.target;\n\n      if (!(target instanceof Element)) {\n        return;\n      }\n\n      const link = target.closest(\"a[href]\");\n\n      if (!(link instanceof HTMLAnchorElement)) {\n        return;\n      }\n\n      const href = link.getAttribute(\"href\");\n      if (!href) {\n        return;\n      }\n\n      if (href.startsWith(\"#\")) {\n        return;\n      }\n\n      const linkTarget = link.getAttribute(\"target\");\n      if (linkTarget && linkTarget !== \"_self\") {\n        blockNavigation(event);\n        openInParent(href);\n        return;\n      }\n\n      if (urlLeavesSandbox(href) === true) {\n        blockNavigation(event);\n        openInParent(href);\n        return;\n      }\n\n      // A modified click (new tab / etc.) is the browser's to handle \u2014 the\n      // iframe sandbox has no `allow-popups`, so it can't escape anyway.\n      // Don't hijack it or tell the parent we navigated.\n      if (\n        event.button !== 0 ||\n        event.metaKey ||\n        event.ctrlKey ||\n        event.shiftKey ||\n        event.altKey\n      ) {\n        return;\n      }\n\n      // A download link never navigates, so there is nothing to report.\n      if (link.hasAttribute(\"download\")) {\n        return;\n      }\n\n      // Let the site navigate itself \u2014 next/link does an instant client-side\n      // transition, exactly like a normal Next.js app \u2014 instead of cancelling\n      // the click and making the parent editor tear down and reload the whole\n      // preview iframe. next/link navigations are reported by the pushState\n      // patch above; this deferred report covers plain anchors the browser\n      // itself navigates (a full document load inside the iframe). Deferred a\n      // microtask because this capture listener runs before the site's own\n      // handlers: a cancelled click (next/link included) navigates nothing.\n      queueMicrotask(() => {\n        if (event.defaultPrevented) {\n          return;\n        }\n        reportNavigated(href);\n      });\n    };\n\n    navigation?.addEventListener(\"navigate\", handleNavigate);\n    document.addEventListener(\"click\", handleClick, true);\n\n    return () => {\n      Reflect.deleteProperty(window, EXTERNAL_NAVIGATION_HANDLER_KEY);\n      window.open = originalWindowOpen;\n      history.pushState = originalPushState;\n      history.replaceState = originalReplaceState;\n      navigation?.removeEventListener(\"navigate\", handleNavigate);\n      document.removeEventListener(\"click\", handleClick, true);\n    };\n  }, []);\n\n  return null;\n}\n"],
-  "mappings": ";AAEA,SAAS,iBAAiB;AAE1B,SAAS,wBAAwB;AAqBjC,MAAM,kCAAkC;AAExC,SAAS,gBAAgB,OAAmB;AAC1C,QAAM,eAAe;AACrB,QAAM,gBAAgB;AACtB,QAAM,yBAAyB;AACjC;AAEA,SAAS,iBAAiB,OAAyC;AACjE,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AAEA,SACE,OAAO,QAAQ,IAAI,OAAO,kBAAkB,MAAM,cAClD,OAAO,QAAQ,IAAI,OAAO,qBAAqB,MAAM;AAEzD;AAEA,SAAS,sBAAsB;AAC7B,QAAM,aAAa,QAAQ,IAAI,QAAQ,YAAY;AACnD,SAAO,iBAAiB,UAAU,IAAI,aAAa;AACrD;AAEA,SAAS,2CAA2C;AAClD,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO;AAAA,EACT;AAEA,MAAI,OAAO,WAAW,QAAQ;AAC5B,WAAO;AAAA,EACT;AAEA,SACE,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,qBAAqB,MACrE;AAEJ;AAEA,SAAS,WAAW,QAAkC;AACpD,MAAI;AACF,WAAO,IAAI;AAAA,MACT,OAAO,WAAW,WAAW,SAAS,OAAO;AAAA,MAC7C,OAAO,SAAS;AAAA,IAClB;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iBAAiB,QAAsC;AAC9D,QAAM,WAAW,WAAW,MAAM;AAClC,SAAO,aAAa,OAAO,OAAO,SAAS,WAAW,OAAO,SAAS;AACxE;AAEe,SAAR,kBAAmC;AAExC,YAAU,MAAM;AACd,QAAI,CAAC,yCAAyC,GAAG;AAC/C;AAAA,IACF;AAEA,UAAM,qBAAqB,OAAO;AAClC,UAAM,oBAAoB,QAAQ;AAClC,UAAM,uBAAuB,QAAQ;AACrC,UAAM,aAAa,oBAAoB;AAMvC,UAAM,kBAAkB,CAAC,WAAyB;AAChD,aAAO,OAAO;AAAA,QACZ;AAAA,UACE,MAAM;AAAA,UACN,OAAO,WAAW,MAAM,GAAG,YAAY,OAAO,MAAM;AAAA,QACtD;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAKA,UAAM,eAAe,CAAC,WAAyB;AAC7C,YAAM,WAAW,WAAW,MAAM;AAClC,UAAI,CAAC,UAAU;AACb;AAAA,MACF;AACA,aAAO,OAAO;AAAA,QACZ;AAAA,UACE,MAAM;AAAA,UACN,KAAK,SAAS,SAAS;AAAA,QACzB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,IAAI,QAAQ,iCAAiC,CAAC,QAAgB;AACpE,mBAAa,GAAG;AAChB,aAAO;AAAA,IACT,CAAC;AAED,WAAO,OAAO,SACZ,KACA,QACA,UACA;AACA,UAAI,QAAQ,UAAa,QAAQ,MAAM,iBAAiB,GAAG,MAAM,MAAM;AACrE,qBAAa,GAAG;AAChB,eAAO;AAAA,MACT;AAEA,aAAO,mBAAmB,KAAK,QAAQ,KAAK,QAAQ,QAAQ;AAAA,IAC9D;AAOA,YAAQ,YAAY,SAClB,OACA,QACA,KACA;AACA,UAAI,OAAO,iBAAiB,GAAG,MAAM,MAAM;AACzC;AAAA,MACF;AAEA,YAAM,SAAS,kBAAkB,KAAK,SAAS,OAAO,QAAQ,GAAG;AACjE,UAAI,KAAK;AACP,wBAAgB,GAAG;AAAA,MACrB;AACA,aAAO;AAAA,IACT;AAEA,YAAQ,eAAe,SACrB,OACA,QACA,KACA;AACA,UAAI,OAAO,iBAAiB,GAAG,MAAM,MAAM;AACzC;AAAA,MACF;AAEA,YAAM,SAAS,qBAAqB,KAAK,SAAS,OAAO,QAAQ,GAAG;AACpE,UAAI,KAAK;AACP,wBAAgB,GAAG;AAAA,MACrB;AACA,aAAO;AAAA,IACT;AAEA,UAAM,iBAAiB,CAAC,UAAmC;AACzD,YAAM,iBAAiB,MAAM,aAAa;AAC1C,UACE,mBAAmB,UACnB,mBAAmB,MACnB,iBAAiB,cAAc,MAAM,MACrC;AACA;AAAA,MACF;AAEA,YAAM,iBAAiB;AACvB,mBAAa,cAAc;AAAA,IAC7B;AAEA,UAAM,cAAc,CAAC,UAAsB;AAMzC,UAAI,iBAAiB,YAAY,MAAM,aAAa;AAClD;AAAA,MACF;AAEA,YAAM,SAAS,MAAM;AAErB,UAAI,EAAE,kBAAkB,UAAU;AAChC;AAAA,MACF;AAEA,YAAM,OAAO,OAAO,QAAQ,SAAS;AAErC,UAAI,EAAE,gBAAgB,oBAAoB;AACxC;AAAA,MACF;AAEA,YAAM,OAAO,KAAK,aAAa,MAAM;AACrC,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AAEA,UAAI,KAAK,WAAW,GAAG,GAAG;AACxB;AAAA,MACF;AAEA,YAAM,aAAa,KAAK,aAAa,QAAQ;AAC7C,UAAI,cAAc,eAAe,SAAS;AACxC,wBAAgB,KAAK;AACrB,qBAAa,IAAI;AACjB;AAAA,MACF;AAEA,UAAI,iBAAiB,IAAI,MAAM,MAAM;AACnC,wBAAgB,KAAK;AACrB,qBAAa,IAAI;AACjB;AAAA,MACF;AAKA,UACE,MAAM,WAAW,KACjB,MAAM,WACN,MAAM,WACN,MAAM,YACN,MAAM,QACN;AACA;AAAA,MACF;AAGA,UAAI,KAAK,aAAa,UAAU,GAAG;AACjC;AAAA,MACF;AAUA,qBAAe,MAAM;AACnB,YAAI,MAAM,kBAAkB;AAC1B;AAAA,QACF;AACA,wBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAEA,gBAAY,iBAAiB,YAAY,cAAc;AACvD,aAAS,iBAAiB,SAAS,aAAa,IAAI;AAEpD,WAAO,MAAM;AACX,cAAQ,eAAe,QAAQ,+BAA+B;AAC9D,aAAO,OAAO;AACd,cAAQ,YAAY;AACpB,cAAQ,eAAe;AACvB,kBAAY,oBAAoB,YAAY,cAAc;AAC1D,eAAS,oBAAoB,SAAS,aAAa,IAAI;AAAA,IACzD;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,SAAO;AACT;",
-  "names": []
-}

package/NavigationReceiver.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../NavigationReceiver.tsx"],
-  "sourcesContent": ["\"use client\";\n\nimport { useEffect, useMemo } from \"react\";\n\nimport { useRouter } from \"next/navigation\";\n\nimport { useIframeRpcChannel } from \"replo-utils/react/use-iframe-rpc-channel\";\n\nimport {\n  getSelectModeIframeRpcChannel,\n  setNavigateToRouteHandler,\n} from \"./select-mode/iframeRpcChannel\";\n\n// Hands the editor's `navigateToRoute` commands to the app router; `LinkInterceptor` reports the resulting navigation up.\nexport function NavigationReceiver() {\n  const router = useRouter();\n  useIframeRpcChannel(useMemo(() => getSelectModeIframeRpcChannel(), []));\n\n  // eslint-disable-next-line replo/no-use-effect -- RPC handler registration tied to the router's lifetime.\n  useEffect(() => {\n    setNavigateToRouteHandler(({ pathname }) => {\n      router.push(pathname);\n    });\n    return () => {\n      setNavigateToRouteHandler(null);\n    };\n  }, [router]);\n\n  return null;\n}\n"],
-  "mappings": ";AAEA,SAAS,WAAW,eAAe;AAEnC,SAAS,iBAAiB;AAE1B,SAAS,2BAA2B;AAEpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAGA,SAAS,qBAAqB;AACnC,QAAM,SAAS,UAAU;AACzB,sBAAoB,QAAQ,MAAM,8BAA8B,GAAG,CAAC,CAAC,CAAC;AAGtE,YAAU,MAAM;AACd,8BAA0B,CAAC,EAAE,SAAS,MAAM;AAC1C,aAAO,KAAK,QAAQ;AAAA,IACtB,CAAC;AACD,WAAO,MAAM;AACX,gCAA0B,IAAI;AAAA,IAChC;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAEX,SAAO;AACT;",
-  "names": []
-}

package/NextErrorReporter.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../NextErrorReporter.tsx"],
-  "sourcesContent": ["\"use client\";\n\nimport * as React from \"react\";\n\nimport {\n  isAllowedEditorMessage,\n  isAllowedEditorOrigin,\n} from \"./annotations/bridgeGate\";\n\n/**\n * NOTE (Max, 2026-06-10): This component sends post messages to its embedder (website-builder miniapp)\n * so that it can render a loading / error UI if there's an error on this page.\n *\n * Ideally, we wouldn't need any update to the sandbox runtime to achieve this: the miniapp would just read the\n * iframe's content and detect whenever there's a nextjs error overlay.\n * But the preview runs cross-origin from the editor, so the editor can't read the iframe's\n * DOM (browser security).\n *\n * This component has observers that detect when the nextjs error overlay appears or\n * disappears, and sends a post message with a status:\n *  - `status`: \"error\" while Next's dev overlay opens its blocking error dialog\n *     (a real page break \u2014 see the selectors below for why the badge's issue\n *     count is deliberately NOT used: it also counts recovered loader misses)\n *  - `status`: \"ok\" otherwise. Cleared by Fast Refresh on a fix, so it's also the\n *     recovery signal (agent fixed the error, so it's the error -> ok transition)\n *\n * It also hides Next's dev error overlay (`<nextjs-portal>`) at the source the\n * instant an error appears, so the red bubble never paints \u2014 the MutationObserver\n * callback runs as a microtask before paint. `data-error` stays queryable while\n * hidden, so detection is unaffected;\n *\n * The overlay lives in `<nextjs-portal>`'s shadow root, which Next can recreate,\n * so we re-attach the shadow observer whenever it hands us a new root. No polling.\n *\n * This must be mounted OUTSIDE the error boundary (see ReploProvider) so it keeps\n * reporting while the boundary is caught (and showing its neutral cover).\n *\n * I'm unsatisfied with this approach: observing for the nextjs-portal is brittle and ugly.\n * Ideally, the ClientErrorBoundary, which hooks into the render cycle, in componentDidCatch, would\n * just report a post message to the miniapp. I prototyped that, the error detection works\n * great (ok -> error transition).\n * But the error -> ok transition doesn't work for Server components (it only does for Client\n * components). Here's a slack thread with me <> Gabe on it:\n * https://replohq.slack.com/archives/C03AACVP08Y/p1781154057832689?thread_ts=1781029224.564489&cid=C03AACVP08Y.\n */\n// NOTE (Max, 2026-08-04; Nick, 2026-09-11): Two independent things have to be\n// read off <nextjs-portal>: *what* Next collected, and whether it considers that\n// blocking.\n//   - `[data-nextjs-dialog]` holds the text of the collected issue and is\n//     present for recoverable issues too, so it is the only description of the\n//     problem available. It is NOT evidence the page broke.\n//   - the surrounding `[data-nextjs-dialog-overlay]` says whether Next opened\n//     the overlay, which it auto-does only for a genuinely blocking error: the\n//     app shell's error boundary catching an uncaught render crash, an\n//     unrecoverable SSR error (missing root tags), or a build error. Verified\n//     against next@16.1.7 and next@15.3.8: the sole auto-open is\n//     AppDevOverlayErrorBoundary's componentDidCatch -> openErrorOverlay, which\n//     a nested LoaderErrorBoundary never reaches.\n// So an *open* overlay is the fatal-vs-recoverable discriminator. The badge's\n// issue count is not: it lights for every collected issue, including a\n// server-side loader error React already recovered from by streaming the\n// LoaderErrorBoundary fallback (product unpublished, deleted collection, \u2026).\n// Keying off the badge reported those as full-page errors, blanking a preview\n// that had rendered its fallback.\n//\n// Reading \"open\" is version-dependent. next@16.3 keeps the dialog mounted for\n// recoverable issues, parked inside a wrapper it marks `data-rendered=\"false\"`\n// and hides with `display: none !important`; opening flips that to `\"true\"`.\n// Earlier versions mount the dialog only when it is open, so \"has no explicitly\n// closed ancestor\" reads correctly on both.\n//\n// We still *hide* the whole portal whenever Next paints red chrome (the errored\n// badge OR the dialog) so no dev overlay bleeds into the preview \u2014 a recovered\n// loader miss shouldn't flash a red dot either.\nconst ERRORED_BADGE_SELECTOR = '[data-next-badge][data-error=\"true\"]';\nconst COLLECTED_ISSUE_SELECTOR = \"[data-nextjs-dialog]\";\nconst CLOSED_DIALOG_OVERLAY_SELECTOR =\n  '[data-nextjs-dialog-overlay][data-rendered=\"false\"]';\nconst RED_CHROME_SELECTOR = `${ERRORED_BADGE_SELECTOR}, ${COLLECTED_ISSUE_SELECTOR}`;\n\n// HMR portal churn flips the overlay for milliseconds in both directions; only a state that persists this long is real.\nconst STATUS_LATCH_MS = 500;\n\ntype PreviewStatus = \"ok\" | \"error\";\n\n// The embedder's origin as the browser reports it, trusted only if it is an allowed editor. `ancestorOrigins` names the actual parent and survives referrer policies and in-frame navigations, but Firefox lacks it; the referrer covers Firefox, the same way the annotation layer announces itself.\nfunction findInitialEditorOrigin(): string | null {\n  // A top-level page has no editor to report to.\n  if (window.self === window.top) {\n    return null;\n  }\n  const ancestorOrigin =\n    \"ancestorOrigins\" in window.location\n      ? window.location.ancestorOrigins.item(0)\n      : null;\n  return (\n    [ancestorOrigin, getOriginOrNull(document.referrer)].find((origin) => {\n      return origin !== null && isAllowedEditorOrigin(origin);\n    }) ?? null\n  );\n}\n\nfunction getOriginOrNull(url: string): string | null {\n  try {\n    return new URL(url).origin;\n  } catch {\n    return null;\n  }\n}\n\nexport function NextErrorReporter() {\n  // eslint-disable-next-line replo/no-use-effect -- Observes Next's dev error overlay (a shadow-DOM node outside React's tree) and relays its state to the cross-origin embedder. No React alternative applies.\n  React.useEffect(() => {\n    let editorOrigin = findInitialEditorOrigin();\n    let lastStatus: PreviewStatus | null = null;\n    let shadowObserver: MutationObserver | null = null;\n    let observedRoot: ShadowRoot | null = null;\n    let pendingPost: { status: PreviewStatus; timeoutId: number } | null = null;\n\n    // Status and route are only for the editor, so they never go out with a wildcard target; without a trusted origin the status is kept and delivered once one is learned.\n    const deliver = () => {\n      if (editorOrigin === null || lastStatus === null) {\n        return;\n      }\n      window.parent.postMessage(\n        {\n          type: \"replo:preview:status\",\n          route: window.location.pathname,\n          status: lastStatus,\n        },\n        editorOrigin,\n      );\n    };\n\n    const postNow = (status: PreviewStatus) => {\n      if (lastStatus === status) {\n        return;\n      }\n      lastStatus = status;\n      deliver();\n    };\n\n    // Covers a missing or stale referrer (Firefox after an in-frame navigation): a message from the parent window at an allowed origin proves where the editor lives, the same capture the annotation layer uses for its replies.\n    const handleParentMessage = (event: MessageEvent) => {\n      if (event.source !== window.parent || !isAllowedEditorMessage(event)) {\n        return;\n      }\n      if (event.origin === editorOrigin) {\n        return;\n      }\n      editorOrigin = event.origin;\n      deliver();\n    };\n    window.addEventListener(\"message\", handleParentMessage);\n\n    // Latch every transition (the opposite observation cancels a pending one) \u2014 a false error <-> ok flip makes the editor reload the preview. Only the initial \"ok\" posts immediately, as the readiness signal.\n    const post = (status: PreviewStatus) => {\n      if (pendingPost) {\n        if (pendingPost.status === status) {\n          return;\n        }\n        window.clearTimeout(pendingPost.timeoutId);\n        pendingPost = null;\n      }\n      if (lastStatus === status) {\n        return;\n      }\n      if (lastStatus === null && status === \"ok\") {\n        postNow(status);\n        return;\n      }\n      const timeoutId = window.setTimeout(() => {\n        pendingPost = null;\n        postNow(status);\n      }, STATUS_LATCH_MS);\n      pendingPost = { status, timeoutId };\n    };\n\n    // NOTE (Max, 2026-06-10): Reads the dev overlay's current error state and\n    // propagates it \u2014 re-attach the shadow observer to the live root, hide the\n    // portal while erroring, and post ok/error up to the editor. Runs on init and\n    // on every observed DOM mutation.\n    const syncOverlayState = () => {\n      const portal = document.getElementsByTagName(\"nextjs-portal\")[0];\n      if (!(portal instanceof HTMLElement)) {\n        post(\"ok\");\n        return;\n      }\n      // NOTE (Max, 2026-06-10): Re-attach whenever Next hands us a fresh shadow\n      // root, else we'd keep watching a detached one after the overlay is\n      // recreated.\n      const root = portal.shadowRoot;\n      if (root && root !== observedRoot) {\n        shadowObserver?.disconnect();\n        shadowObserver = new MutationObserver(syncOverlayState);\n        shadowObserver.observe(root, {\n          childList: true,\n          subtree: true,\n          characterData: true,\n          attributes: true,\n          attributeFilter: [\"data-error\", \"data-rendered\"],\n        });\n        observedRoot = root;\n      }\n      // NOTE (Max, 2026-06-10): Hide the dev overlay at the source so the red\n      // bubble never paints \u2014 for any red chrome, including a recovered miss's\n      // errored badge.\n      portal.style.display = root?.querySelector(RED_CHROME_SELECTOR)\n        ? \"none\"\n        : \"\";\n      const dialog = root?.querySelector(COLLECTED_ISSUE_SELECTOR) ?? null;\n      post(\n        dialog && !dialog.closest(CLOSED_DIALOG_OVERLAY_SELECTOR)\n          ? \"error\"\n          : \"ok\",\n      );\n    };\n\n    // NOTE (Max, 2026-06-10): Catches the portal being added/removed in the light\n    // DOM; the re-attached shadow observer catches in-overlay changes.\n    const lightObserver = new MutationObserver(syncOverlayState);\n    lightObserver.observe(document.documentElement, {\n      childList: true,\n      subtree: true,\n    });\n\n    syncOverlayState();\n\n    return () => {\n      window.removeEventListener(\"message\", handleParentMessage);\n      lightObserver.disconnect();\n      shadowObserver?.disconnect();\n      if (pendingPost) {\n        window.clearTimeout(pendingPost.timeoutId);\n      }\n    };\n  }, []);\n\n  return null;\n}\n"],
-  "mappings": ";AAEA,YAAY,WAAW;AAEvB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAmEP,MAAM,yBAAyB;AAC/B,MAAM,2BAA2B;AACjC,MAAM,iCACJ;AACF,MAAM,sBAAsB,GAAG,sBAAsB,KAAK,wBAAwB;AAGlF,MAAM,kBAAkB;AAKxB,SAAS,0BAAyC;AAEhD,MAAI,OAAO,SAAS,OAAO,KAAK;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,iBACJ,qBAAqB,OAAO,WACxB,OAAO,SAAS,gBAAgB,KAAK,CAAC,IACtC;AACN,SACE,CAAC,gBAAgB,gBAAgB,SAAS,QAAQ,CAAC,EAAE,KAAK,CAAC,WAAW;AACpE,WAAO,WAAW,QAAQ,sBAAsB,MAAM;AAAA,EACxD,CAAC,KAAK;AAEV;AAEA,SAAS,gBAAgB,KAA4B;AACnD,MAAI;AACF,WAAO,IAAI,IAAI,GAAG,EAAE;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,oBAAoB;AAElC,QAAM,UAAU,MAAM;AACpB,QAAI,eAAe,wBAAwB;AAC3C,QAAI,aAAmC;AACvC,QAAI,iBAA0C;AAC9C,QAAI,eAAkC;AACtC,QAAI,cAAmE;AAGvE,UAAM,UAAU,MAAM;AACpB,UAAI,iBAAiB,QAAQ,eAAe,MAAM;AAChD;AAAA,MACF;AACA,aAAO,OAAO;AAAA,QACZ;AAAA,UACE,MAAM;AAAA,UACN,OAAO,OAAO,SAAS;AAAA,UACvB,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,CAAC,WAA0B;AACzC,UAAI,eAAe,QAAQ;AACzB;AAAA,MACF;AACA,mBAAa;AACb,cAAQ;AAAA,IACV;AAGA,UAAM,sBAAsB,CAAC,UAAwB;AACnD,UAAI,MAAM,WAAW,OAAO,UAAU,CAAC,uBAAuB,KAAK,GAAG;AACpE;AAAA,MACF;AACA,UAAI,MAAM,WAAW,cAAc;AACjC;AAAA,MACF;AACA,qBAAe,MAAM;AACrB,cAAQ;AAAA,IACV;AACA,WAAO,iBAAiB,WAAW,mBAAmB;AAGtD,UAAM,OAAO,CAAC,WAA0B;AACtC,UAAI,aAAa;AACf,YAAI,YAAY,WAAW,QAAQ;AACjC;AAAA,QACF;AACA,eAAO,aAAa,YAAY,SAAS;AACzC,sBAAc;AAAA,MAChB;AACA,UAAI,eAAe,QAAQ;AACzB;AAAA,MACF;AACA,UAAI,eAAe,QAAQ,WAAW,MAAM;AAC1C,gBAAQ,MAAM;AACd;AAAA,MACF;AACA,YAAM,YAAY,OAAO,WAAW,MAAM;AACxC,sBAAc;AACd,gBAAQ,MAAM;AAAA,MAChB,GAAG,eAAe;AAClB,oBAAc,EAAE,QAAQ,UAAU;AAAA,IACpC;AAMA,UAAM,mBAAmB,MAAM;AAC7B,YAAM,SAAS,SAAS,qBAAqB,eAAe,EAAE,CAAC;AAC/D,UAAI,EAAE,kBAAkB,cAAc;AACpC,aAAK,IAAI;AACT;AAAA,MACF;AAIA,YAAM,OAAO,OAAO;AACpB,UAAI,QAAQ,SAAS,cAAc;AACjC,wBAAgB,WAAW;AAC3B,yBAAiB,IAAI,iBAAiB,gBAAgB;AACtD,uBAAe,QAAQ,MAAM;AAAA,UAC3B,WAAW;AAAA,UACX,SAAS;AAAA,UACT,eAAe;AAAA,UACf,YAAY;AAAA,UACZ,iBAAiB,CAAC,cAAc,eAAe;AAAA,QACjD,CAAC;AACD,uBAAe;AAAA,MACjB;AAIA,aAAO,MAAM,UAAU,MAAM,cAAc,mBAAmB,IAC1D,SACA;AACJ,YAAM,SAAS,MAAM,cAAc,wBAAwB,KAAK;AAChE;AAAA,QACE,UAAU,CAAC,OAAO,QAAQ,8BAA8B,IACpD,UACA;AAAA,MACN;AAAA,IACF;AAIA,UAAM,gBAAgB,IAAI,iBAAiB,gBAAgB;AAC3D,kBAAc,QAAQ,SAAS,iBAAiB;AAAA,MAC9C,WAAW;AAAA,MACX,SAAS;AAAA,IACX,CAAC;AAED,qBAAiB;AAEjB,WAAO,MAAM;AACX,aAAO,oBAAoB,WAAW,mBAAmB;AACzD,oBAAc,WAAW;AACzB,sBAAgB,WAAW;AAC3B,UAAI,aAAa;AACf,eAAO,aAAa,YAAY,SAAS;AAAA,MAC3C;AAAA,IACF;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,SAAO;AACT;",
-  "names": []
-}

package/annotations/AnnotationLayerMount.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../annotations/AnnotationLayerMount.tsx"],
-  "sourcesContent": ["\"use client\";\n\n/**\n * Boots the vanilla annotation controller inside preview iframes. The chunk\n * loads (and this module-scope boot runs) only when the provider actually\n * renders the element, which it folds away on a NODE_ENV literal \u2014 so\n * annotation code never ships to published storefronts.\n */\nif (typeof window !== \"undefined\") {\n  void import(\"./annotationController\").then((module) => {\n    module.initAnnotationLayer();\n  });\n}\n\nexport function AnnotationLayerMount() {\n  return null;\n}\n"],
-  "mappings": ";AAQA,IAAI,OAAO,WAAW,aAAa;AACjC,OAAK,OAAO,wBAAwB,EAAE,KAAK,CAAC,WAAW;AACrD,WAAO,oBAAoB;AAAA,EAC7B,CAAC;AACH;AAEO,SAAS,uBAAuB;AACrC,SAAO;AACT;",
-  "names": []
-}