@revenuecat/purchases-ui-js 4.8.13 → 4.8.14

package/dist/components/web-view/WebView.svelte

@@ -83,9 +83,10 @@
   // WebView has no visibility overrides; it shows unless visible is explicitly false.
   const isVisible = $derived(props.visible !== false);
 
-  // Host<->content bridge (client-only): createHostBridge comes from the bundled
-  // npm SDK and is attached to the live iframe. The content reports its size
-  // (`resize`), driving `fit` axes; a resolve failure degrades to the plain iframe.
+  // Host<->content bridge (client-only): the host IIFE is loaded from the CDN by
+  // protocol version via <script> and attached to the live iframe. The content
+  // reports its size (`resize`), driving `fit` axes; a resolve failure degrades
+  // to the plain iframe.
   let iframeEl = $state<HTMLIFrameElement | undefined>(undefined);
   let previousSafeUrl: string | null | undefined;
 

package/dist/components/web-view/web-view-sdk.d.ts

@@ -1,13 +1,16 @@
 /**
- * Resolves `createHostBridge` for the web_view host bridge.
+ * Loads `createHostBridge` for the web_view host bridge from the CDN IIFE:
+ * `https://sdk.revenuecat-static.com/v<major>/rc-host.iife.js` → `window.RCHost`.
  *
- * Imported statically from `@revenuecat/workflow-web-components-sdk` so this
- * module stays Metro-safe (no non-literal dynamic `import()`). Host version is
- * pinned to the npm dependency until a script-tag CDN loader lands.
+ * Classic `<script src>` is Metro-safe (no non-literal dynamic `import()`). The
+ * ESM sibling at `/v<major>/rc-host.js` remains for other consumers. Types and
+ * message constants come from `@revenuecat/workflow-web-components-sdk`.
  */
-import { type Bridge, type HostBridgeConfig } from "@revenuecat/workflow-web-components-sdk";
+import type { Bridge, HostBridgeConfig } from "@revenuecat/workflow-web-components-sdk";
 export { FIT_MESSAGE, RESIZE_MESSAGE, } from "@revenuecat/workflow-web-components-sdk";
 export type { ResizePayload } from "@revenuecat/workflow-web-components-sdk";
+/** Base origin the versioned SDK builds are served from. */
+export declare const SDK_BASE_URL = "https://sdk.revenuecat-static.com";
 /**
  * The subset of the SDK bridge purchases-ui-js uses: subscribe to a message, run
  * a callback once the channel opens, fire-and-forget, and tear down.
@@ -16,20 +19,32 @@ export type WebViewHostBridge = Pick<Bridge, "on" | "onReady" | "send" | "destro
 export type CreateHostBridge = (config: HostBridgeConfig) => Bridge;
 /** Test factories may return only the bridge surface this package uses. */
 export type CreateHostBridgeForTests = (config: HostBridgeConfig) => WebViewHostBridge;
+declare global {
+    interface Window {
+        RCHost?: {
+            createHostBridge?: CreateHostBridge;
+        };
+    }
+}
+type ScriptLoader = (url: string) => Promise<CreateHostBridge>;
+/** Stable, rolling per-major URL of the host bridge IIFE build. */
+export declare function hostSdkUrl(protocolVersion: number): string;
 /**
- * Resolve `createHostBridge` for a protocol major. Rejects on an invalid
- * `protocol_version` so callers can degrade to a render-only iframe.
- *
- * Today only the bundled npm host implementation is returned (protocol majors
- * share that build). Callers still pass `protocol_version` so the bridge is
- * configured with the component's declared major.
+ * Resolve `createHostBridge` for a protocol major from the CDN. Rejects on an
+ * invalid `protocol_version` or a failed script load so callers can degrade to
+ * a render-only iframe.
  */
 export declare function loadCreateHostBridge(protocolVersion: number): Promise<CreateHostBridge>;
 /**
  * Override the host-bridge factory. Intended for tests so they never exercise
- * the real postMessage wiring. Pass `null` to restore the bundled implementation.
+ * the real postMessage wiring. Pass `null` to restore CDN loading.
  */
 export declare function __setCreateHostBridgeForTests(factory: CreateHostBridgeForTests | null): void;
+/**
+ * Override the script loader (and clear the cache). Intended for tests that
+ * assert the CDN URL without hitting the network.
+ */
+export declare function __setHostScriptLoaderForTests(fn: ScriptLoader | null): void;
 /**
  * Make `loadCreateHostBridge` reject so callers (e.g. WebView) can assert they
  * degrade to a render-only iframe. Pass `null` to clear.

package/dist/components/web-view/web-view-sdk.js

@@ -1,42 +1,121 @@
-/**
- * Resolves `createHostBridge` for the web_view host bridge.
- *
- * Imported statically from `@revenuecat/workflow-web-components-sdk` so this
- * module stays Metro-safe (no non-literal dynamic `import()`). Host version is
- * pinned to the npm dependency until a script-tag CDN loader lands.
- */
-import { createHostBridge as bundledCreateHostBridge, } from "@revenuecat/workflow-web-components-sdk";
 export { FIT_MESSAGE, RESIZE_MESSAGE, } from "@revenuecat/workflow-web-components-sdk";
+/** Base origin the versioned SDK builds are served from. */
+export const SDK_BASE_URL = "https://sdk.revenuecat-static.com";
+let scriptLoader = loadHostScript;
 let createHostBridgeTestingOverride = null;
+// Memoize per protocol major: the script is stable for the page's lifetime and
+// multiple web views sharing a `protocol_version` should load it once.
+const moduleCache = new Map();
+/** Stable, rolling per-major URL of the host bridge IIFE build. */
+export function hostSdkUrl(protocolVersion) {
+    return `${SDK_BASE_URL}/v${protocolVersion}/rc-host.iife.js`;
+}
 function assertValidProtocolVersion(protocolVersion) {
     if (!Number.isInteger(protocolVersion) || protocolVersion < 1) {
         throw new Error(`invalid web_view protocol_version: ${protocolVersion}`);
     }
 }
+function readCreateHostBridge(url) {
+    const factory = window.RCHost?.createHostBridge;
+    if (typeof factory !== "function") {
+        throw new Error(`rc-host.iife.js at ${url} did not register window.RCHost.createHostBridge`);
+    }
+    return factory;
+}
+/**
+ * Load the CDN IIFE via a classic `<script>` tag and resolve
+ * `window.RCHost.createHostBridge`.
+ */
+function loadHostScript(url) {
+    if (typeof document === "undefined") {
+        return Promise.reject(new Error("web_view host bridge requires a document to load the CDN script"));
+    }
+    if (typeof window.RCHost?.createHostBridge === "function") {
+        return Promise.resolve(readCreateHostBridge(url));
+    }
+    return new Promise((resolve, reject) => {
+        const existing = document.querySelector(`script[data-rc-host-sdk="${url.replace(/"/g, '\\"')}"]`);
+        if (existing) {
+            const settle = () => {
+                try {
+                    resolve(readCreateHostBridge(url));
+                }
+                catch (error) {
+                    reject(error);
+                }
+            };
+            if (typeof window.RCHost?.createHostBridge === "function") {
+                settle();
+                return;
+            }
+            existing.addEventListener("load", settle);
+            existing.addEventListener("error", () => {
+                reject(new Error(`failed to load ${url}`));
+            });
+            return;
+        }
+        const script = document.createElement("script");
+        script.src = url;
+        script.async = true;
+        script.dataset.rcHostSdk = url;
+        script.onload = () => {
+            try {
+                resolve(readCreateHostBridge(url));
+            }
+            catch (error) {
+                reject(error);
+            }
+        };
+        script.onerror = () => {
+            reject(new Error(`failed to load ${url}`));
+        };
+        document.head.appendChild(script);
+    });
+}
+function resolveHostFactory(protocolVersion) {
+    const cached = moduleCache.get(protocolVersion);
+    if (cached)
+        return cached;
+    const url = hostSdkUrl(protocolVersion);
+    const promise = scriptLoader(url);
+    promise.catch(() => {
+        if (moduleCache.get(protocolVersion) === promise) {
+            moduleCache.delete(protocolVersion);
+        }
+    });
+    moduleCache.set(protocolVersion, promise);
+    return promise;
+}
 /**
- * Resolve `createHostBridge` for a protocol major. Rejects on an invalid
- * `protocol_version` so callers can degrade to a render-only iframe.
- *
- * Today only the bundled npm host implementation is returned (protocol majors
- * share that build). Callers still pass `protocol_version` so the bridge is
- * configured with the component's declared major.
+ * Resolve `createHostBridge` for a protocol major from the CDN. Rejects on an
+ * invalid `protocol_version` or a failed script load so callers can degrade to
+ * a render-only iframe.
  */
 export async function loadCreateHostBridge(protocolVersion) {
     assertValidProtocolVersion(protocolVersion);
     if (createHostBridgeTestingOverride) {
         return createHostBridgeTestingOverride();
     }
-    return bundledCreateHostBridge;
+    return resolveHostFactory(protocolVersion);
 }
 /**
  * Override the host-bridge factory. Intended for tests so they never exercise
- * the real postMessage wiring. Pass `null` to restore the bundled implementation.
+ * the real postMessage wiring. Pass `null` to restore CDN loading.
  */
 export function __setCreateHostBridgeForTests(factory) {
     createHostBridgeTestingOverride = factory
         ? // Test stubs only implement the WebViewHostBridge surface.
             async () => factory
         : null;
+    moduleCache.clear();
+}
+/**
+ * Override the script loader (and clear the cache). Intended for tests that
+ * assert the CDN URL without hitting the network.
+ */
+export function __setHostScriptLoaderForTests(fn) {
+    scriptLoader = fn ?? loadHostScript;
+    moduleCache.clear();
 }
 /**
  * Make `loadCreateHostBridge` reject so callers (e.g. WebView) can assert they
@@ -48,4 +127,5 @@ export function __failCreateHostBridgeForTests(error) {
             throw error;
         }
         : null;
+    moduleCache.clear();
 }

package/package.json

@@ -2,7 +2,7 @@
   "name": "@revenuecat/purchases-ui-js",
   "description": "Web components for Paywalls. Powered by RevenueCat",
   "private": false,
-  "version": "4.8.13",
+  "version": "4.8.14",
   "author": {
     "name": "RevenueCat, Inc."
   },