@rodrigocoliveira/mobile-app-bridge 0.1.0

package/dist/native/index.d.ts

@@ -0,0 +1,39 @@
+import * as react from 'react';
+import { WebViewProps, WebView } from 'react-native-webview';
+import { E as EventMessage, A as AppInfo } from '../protocol-DcOkx09n.js';
+
+interface BridgeEmitter {
+    /**
+     * Sends an event to the page right away, like the Agendart bridge. Returns false when no WebView is
+     * connected; the event is then dropped. Anything that must not be lost (e.g. the notification that
+     * opened the app) belongs in a handler the page calls when it is ready.
+     */
+    emit(name: string, data?: unknown): boolean;
+    /** @internal Called by BridgeWebView. */
+    connect(send: (message: EventMessage) => void): () => void;
+}
+
+type Handler = (params: any) => unknown;
+type Handlers = Record<string, Handler>;
+
+type ShouldStartLoadRequest = Parameters<NonNullable<WebViewProps['onShouldStartLoadWithRequest']>>[0];
+interface BridgeWebViewProps extends Omit<WebViewProps, 'onShouldStartLoadWithRequest' | 'injectedJavaScriptForMainFrameOnly' | 'injectedJavaScriptBeforeContentLoadedForMainFrameOnly'> {
+    /** Hostnames allowed to call handlers and to load inside the WebView. `*.x.com` matches subdomains. */
+    trustedHosts: readonly string[];
+    /** Hostnames that load inside the WebView WITHOUT bridge access (file previews, OAuth, 3-D Secure). */
+    inAppHosts?: readonly string[];
+    /** Methods the page can call with `bridge.call(method, params)`. */
+    handlers?: Handlers;
+    /** From `useBridgeEmitter()`, to send events to the page. */
+    emitter?: BridgeEmitter;
+    /** Overrides for the badge values read from expo-constants. */
+    appInfo?: Partial<AppInfo>;
+    /** Runs before the default policy. Return true/false to decide, or undefined to fall back to it. */
+    onShouldStartLoadWithRequest?: (request: ShouldStartLoadRequest) => boolean | undefined;
+}
+declare const BridgeWebView: react.ForwardRefExoticComponent<BridgeWebViewProps & react.RefAttributes<WebView<{}>>>;
+
+/** Stable emitter for sending events to the page. Pass it to <BridgeWebView emitter={...} />. */
+declare function useBridgeEmitter(): BridgeEmitter;
+
+export { AppInfo, type BridgeEmitter, BridgeWebView, type BridgeWebViewProps, type Handler, type Handlers, useBridgeEmitter };

package/dist/native/index.js

@@ -0,0 +1,266 @@
+import {
+  BADGE_KEY,
+  BRIDGE_EVENT,
+  ErrorCode,
+  isBridgeMessage
+} from "../chunk-SEQSUJLW.js";
+
+// src/native/BridgeWebView.tsx
+import { forwardRef, useCallback, useEffect, useMemo, useRef } from "react";
+import { Linking, Platform } from "react-native";
+import Constants from "expo-constants";
+import { WebView } from "react-native-webview";
+
+// src/native/app-info.ts
+function resolveAppInfo(platformOS, expoConfig, override = {}) {
+  const platform = platformOS === "android" ? "android" : "ios";
+  const buildNumber = platform === "ios" ? expoConfig?.ios?.buildNumber : expoConfig?.android?.versionCode?.toString();
+  return {
+    platform,
+    appVersion: expoConfig?.version ?? "0.0.0",
+    buildNumber: buildNumber ?? "0",
+    ...override
+  };
+}
+
+// src/native/hosts.ts
+var URL_PATTERN = /^([a-z][a-z0-9+.-]*):(?:\/\/(?:[^@/\\?#]*@)?(\[[^\]]*\]|[^:/\\?#]*))?/i;
+function schemeOf(url) {
+  const match = URL_PATTERN.exec(url.trim());
+  return match ? match[1].toLowerCase() : null;
+}
+function hostnameOf(url) {
+  const host = URL_PATTERN.exec(url.trim())?.[2];
+  if (!host) return null;
+  return host.toLowerCase().replace(/\.$/, "");
+}
+function isTrustedHostname(hostname, trustedHosts) {
+  const host = hostname.toLowerCase().replace(/\.$/, "");
+  return trustedHosts.some((entry) => {
+    const pattern = entry.toLowerCase();
+    if (pattern.startsWith("*.")) return host.endsWith(`.${pattern.slice(2)}`);
+    return host === pattern;
+  });
+}
+function isTrustedUrl(url, trustedHosts) {
+  const hostname = hostnameOf(url);
+  return hostname !== null && isTrustedHostname(hostname, trustedHosts);
+}
+
+// src/native/navigation.ts
+var BLOCKED_SCHEMES = /* @__PURE__ */ new Set(["about", "blob", "file", "javascript", "data"]);
+function decideNavigation(request, hosts) {
+  const scheme = schemeOf(request.url);
+  const isHttp = scheme === "http" || scheme === "https";
+  const isSubframe = request.isTopFrame === false;
+  if (isHttp && (isTrustedUrl(request.url, hosts.trustedHosts) || isTrustedUrl(request.url, hosts.inAppHosts))) {
+    return "load";
+  }
+  if (isSubframe && (isHttp || scheme === "about")) return "load";
+  if (scheme === null || BLOCKED_SCHEMES.has(scheme)) return "block";
+  return "open-external";
+}
+function composeNavigationHandler(consumer, getHosts, openExternal) {
+  return (request) => {
+    const custom = consumer?.(request);
+    if (typeof custom === "boolean") return custom;
+    const decision = decideNavigation(request, getHosts());
+    if (decision === "open-external") openExternal(request.url);
+    return decision === "load";
+  };
+}
+
+// src/native/router.ts
+function routeMessage(raw, sourceUrl, handlers, trustedHosts) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return { type: "forward" };
+  }
+  if (!isBridgeMessage(parsed)) return { type: "forward" };
+  if (parsed.kind !== "req") return { type: "drop", reason: "unexpected-kind" };
+  if (!isTrustedUrl(sourceUrl, trustedHosts)) return { type: "drop", reason: "untrusted-origin" };
+  return { type: "response", response: runHandler(parsed, handlers) };
+}
+async function runHandler(request, handlers) {
+  const handler = Object.prototype.hasOwnProperty.call(handlers, request.method) ? handlers[request.method] : void 0;
+  if (!handler) {
+    return failure(request.id, { code: ErrorCode.UNKNOWN_METHOD, message: `No handler registered for "${request.method}"` });
+  }
+  let result;
+  try {
+    result = await handler(request.params);
+  } catch (error) {
+    return failure(request.id, toErrorPayload(error));
+  }
+  try {
+    JSON.stringify(result);
+  } catch {
+    return failure(request.id, {
+      code: ErrorCode.HANDLER_ERROR,
+      message: `Result of "${request.method}" is not JSON-serializable`
+    });
+  }
+  return { bridge: 1, kind: "res", id: request.id, ok: true, result };
+}
+function failure(id, error) {
+  return { bridge: 1, kind: "res", id, ok: false, error };
+}
+function toErrorPayload(error) {
+  if (typeof error === "object" && error !== null) {
+    const { code, message } = error;
+    return {
+      code: typeof code === "string" ? code : ErrorCode.HANDLER_ERROR,
+      message: typeof message === "string" ? message : String(error)
+    };
+  }
+  return { code: ErrorCode.HANDLER_ERROR, message: String(error) };
+}
+
+// src/native/scripts.ts
+function serializeForScript(value) {
+  return JSON.stringify(value).replace(/</g, "\\u003c").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+}
+function buildBadgeScript(info) {
+  return `(function () { window.${BADGE_KEY} = ${serializeForScript(info)}; })();`;
+}
+function buildDispatchScript(message, trustedHosts) {
+  return [
+    "(function () {",
+    "  var host = String(location.hostname || '').toLowerCase().replace(/\\.$/, '');",
+    `  var trusted = ${serializeForScript(trustedHosts.map((entry) => entry.toLowerCase()))};`,
+    "  var allowed = trusted.some(function (entry) {",
+    "    if (entry.indexOf('*.') === 0) return host.slice(-(entry.length - 1)) === entry.slice(1);",
+    "    return host === entry;",
+    "  });",
+    "  if (!allowed) return;",
+    `  window.dispatchEvent(new CustomEvent(${JSON.stringify(BRIDGE_EVENT)}, { detail: ${serializeForScript(message)} }));`,
+    "})();",
+    "true;"
+  ].join("\n");
+}
+function composeInjectedScript(info, consumerScript) {
+  return [buildBadgeScript(info), consumerScript ?? "", "true;"].join("\n;\n");
+}
+
+// src/native/BridgeWebView.tsx
+import { jsx } from "react/jsx-runtime";
+function assignRef(ref, value) {
+  if (typeof ref === "function") ref(value);
+  else if (ref) ref.current = value;
+}
+var BridgeWebView = forwardRef(function BridgeWebView2(props, ref) {
+  const {
+    trustedHosts,
+    inAppHosts,
+    handlers,
+    emitter,
+    appInfo,
+    onMessage,
+    onShouldStartLoadWithRequest,
+    injectedJavaScriptBeforeContentLoaded,
+    injectedJavaScript,
+    ...webViewProps
+  } = props;
+  const webViewRef = useRef(null);
+  const handlersRef = useRef(handlers ?? {});
+  const trustedHostsRef = useRef(trustedHosts);
+  const inAppHostsRef = useRef(inAppHosts ?? []);
+  handlersRef.current = handlers ?? {};
+  trustedHostsRef.current = trustedHosts;
+  inAppHostsRef.current = inAppHosts ?? [];
+  const setRef = useCallback(
+    (instance) => {
+      webViewRef.current = instance;
+      assignRef(ref, instance);
+    },
+    [ref]
+  );
+  const send = useCallback((message) => {
+    webViewRef.current?.injectJavaScript(buildDispatchScript(message, trustedHostsRef.current));
+  }, []);
+  useEffect(() => emitter?.connect(send), [emitter, send]);
+  const appInfoKey = JSON.stringify(appInfo ?? {});
+  const info = useMemo(() => resolveAppInfo(Platform.OS, Constants.expoConfig, appInfo), [appInfoKey]);
+  const injectedBeforeLoad = useMemo(
+    () => composeInjectedScript(info, injectedJavaScriptBeforeContentLoaded),
+    [info, injectedJavaScriptBeforeContentLoaded]
+  );
+  const injectedAfterLoad = useMemo(() => composeInjectedScript(info, injectedJavaScript), [info, injectedJavaScript]);
+  const handleMessage = useCallback(
+    (event) => {
+      const { data, url } = event.nativeEvent;
+      const route = routeMessage(data, url, handlersRef.current, trustedHostsRef.current);
+      if (route.type === "forward") {
+        onMessage?.(event);
+        return;
+      }
+      if (route.type === "drop") {
+        if (__DEV__) console.warn(`[mobile-app-bridge] dropped message (${route.reason}) from ${url}`);
+        return;
+      }
+      void route.response.then(send);
+    },
+    [onMessage, send]
+  );
+  const handleShouldStart = useMemo(
+    () => composeNavigationHandler(
+      onShouldStartLoadWithRequest,
+      () => ({ trustedHosts: trustedHostsRef.current, inAppHosts: inAppHostsRef.current }),
+      (url) => {
+        Linking.openURL(url).catch(() => {
+        });
+      }
+    ),
+    [onShouldStartLoadWithRequest]
+  );
+  return /* @__PURE__ */ jsx(
+    WebView,
+    {
+      ...webViewProps,
+      ref: setRef,
+      onMessage: handleMessage,
+      onShouldStartLoadWithRequest: handleShouldStart,
+      injectedJavaScriptBeforeContentLoaded: injectedBeforeLoad,
+      injectedJavaScript: injectedAfterLoad,
+      injectedJavaScriptForMainFrameOnly: true,
+      injectedJavaScriptBeforeContentLoadedForMainFrameOnly: true
+    }
+  );
+});
+
+// src/native/useBridgeEmitter.ts
+import { useRef as useRef2 } from "react";
+
+// src/native/emitter.ts
+function createEmitterCore() {
+  let send = null;
+  return {
+    emit(name, data) {
+      if (!send) return false;
+      const message = { bridge: 1, kind: "evt", name };
+      if (data !== void 0) message.data = data;
+      send(message);
+      return true;
+    },
+    connect(nextSend) {
+      send = nextSend;
+      return () => {
+        if (send === nextSend) send = null;
+      };
+    }
+  };
+}
+
+// src/native/useBridgeEmitter.ts
+function useBridgeEmitter() {
+  const ref = useRef2(null);
+  if (ref.current === null) ref.current = createEmitterCore();
+  return ref.current;
+}
+export {
+  BridgeWebView,
+  useBridgeEmitter
+};
+//# sourceMappingURL=index.js.map

package/dist/native/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/native/BridgeWebView.tsx","../../src/native/app-info.ts","../../src/native/hosts.ts","../../src/native/navigation.ts","../../src/native/router.ts","../../src/native/scripts.ts","../../src/native/useBridgeEmitter.ts","../../src/native/emitter.ts"],"sourcesContent":["import { forwardRef, useCallback, useEffect, useMemo, useRef, type ForwardedRef } from 'react'\nimport { Linking, Platform } from 'react-native'\nimport Constants from 'expo-constants'\nimport { WebView, type WebViewMessageEvent, type WebViewProps } from 'react-native-webview'\nimport type { AppInfo, EventMessage, ResponseMessage } from '../shared/protocol'\nimport { resolveAppInfo } from './app-info'\nimport type { BridgeEmitter } from './emitter'\nimport { composeNavigationHandler } from './navigation'\nimport { routeMessage, type Handlers } from './router'\nimport { buildDispatchScript, composeInjectedScript } from './scripts'\n\ntype ShouldStartLoadRequest = Parameters<NonNullable<WebViewProps['onShouldStartLoadWithRequest']>>[0]\n\nexport interface BridgeWebViewProps\n  extends Omit<\n    WebViewProps,\n    | 'onShouldStartLoadWithRequest'\n    | 'injectedJavaScriptForMainFrameOnly'\n    | 'injectedJavaScriptBeforeContentLoadedForMainFrameOnly'\n  > {\n  /** Hostnames allowed to call handlers and to load inside the WebView. `*.x.com` matches subdomains. */\n  trustedHosts: readonly string[]\n  /** Hostnames that load inside the WebView WITHOUT bridge access (file previews, OAuth, 3-D Secure). */\n  inAppHosts?: readonly string[]\n  /** Methods the page can call with `bridge.call(method, params)`. */\n  handlers?: Handlers\n  /** From `useBridgeEmitter()`, to send events to the page. */\n  emitter?: BridgeEmitter\n  /** Overrides for the badge values read from expo-constants. */\n  appInfo?: Partial<AppInfo>\n  /** Runs before the default policy. Return true/false to decide, or undefined to fall back to it. */\n  onShouldStartLoadWithRequest?: (request: ShouldStartLoadRequest) => boolean | undefined\n}\n\nfunction assignRef<T>(ref: ForwardedRef<T>, value: T | null) {\n  if (typeof ref === 'function') ref(value)\n  else if (ref) ref.current = value\n}\n\nexport const BridgeWebView = forwardRef<WebView, BridgeWebViewProps>(function BridgeWebView(props, ref) {\n  const {\n    trustedHosts,\n    inAppHosts,\n    handlers,\n    emitter,\n    appInfo,\n    onMessage,\n    onShouldStartLoadWithRequest,\n    injectedJavaScriptBeforeContentLoaded,\n    injectedJavaScript,\n    ...webViewProps\n  } = props\n\n  const webViewRef = useRef<WebView | null>(null)\n  const handlersRef = useRef<Handlers>(handlers ?? {})\n  const trustedHostsRef = useRef(trustedHosts)\n  const inAppHostsRef = useRef<readonly string[]>(inAppHosts ?? [])\n  handlersRef.current = handlers ?? {}\n  trustedHostsRef.current = trustedHosts\n  inAppHostsRef.current = inAppHosts ?? []\n\n  const setRef = useCallback(\n    (instance: WebView | null) => {\n      webViewRef.current = instance\n      assignRef(ref, instance)\n    },\n    [ref],\n  )\n\n  // Every native-to-page delivery re-checks the current page's host in-page (see buildDispatchScript).\n  const send = useCallback((message: ResponseMessage | EventMessage) => {\n    webViewRef.current?.injectJavaScript(buildDispatchScript(message, trustedHostsRef.current))\n  }, [])\n\n  useEffect(() => emitter?.connect(send), [emitter, send])\n\n  const appInfoKey = JSON.stringify(appInfo ?? {})\n  // appInfoKey stands in for appInfo so a new object literal each render does not rebuild the scripts.\n  // eslint-disable-next-line react-hooks/exhaustive-deps\n  const info = useMemo(() => resolveAppInfo(Platform.OS, Constants.expoConfig, appInfo), [appInfoKey])\n  const injectedBeforeLoad = useMemo(\n    () => composeInjectedScript(info, injectedJavaScriptBeforeContentLoaded),\n    [info, injectedJavaScriptBeforeContentLoaded],\n  )\n  // The badge runs again after load: on Android the before-load injection can lose a race with document creation.\n  const injectedAfterLoad = useMemo(() => composeInjectedScript(info, injectedJavaScript), [info, injectedJavaScript])\n\n  const handleMessage = useCallback(\n    (event: WebViewMessageEvent) => {\n      const { data, url } = event.nativeEvent\n      const route = routeMessage(data, url, handlersRef.current, trustedHostsRef.current)\n      if (route.type === 'forward') {\n        onMessage?.(event)\n        return\n      }\n      if (route.type === 'drop') {\n        if (__DEV__) console.warn(`[mobile-app-bridge] dropped message (${route.reason}) from ${url}`)\n        return\n      }\n      void route.response.then(send)\n    },\n    [onMessage, send],\n  )\n\n  const handleShouldStart = useMemo(\n    () =>\n      composeNavigationHandler<ShouldStartLoadRequest>(\n        onShouldStartLoadWithRequest,\n        () => ({ trustedHosts: trustedHostsRef.current, inAppHosts: inAppHostsRef.current }),\n        (url) => {\n          Linking.openURL(url).catch(() => {})\n        },\n      ),\n    [onShouldStartLoadWithRequest],\n  )\n\n  return (\n    <WebView\n      {...webViewProps}\n      ref={setRef}\n      onMessage={handleMessage}\n      onShouldStartLoadWithRequest={handleShouldStart}\n      injectedJavaScriptBeforeContentLoaded={injectedBeforeLoad}\n      injectedJavaScript={injectedAfterLoad}\n      injectedJavaScriptForMainFrameOnly\n      injectedJavaScriptBeforeContentLoadedForMainFrameOnly\n    />\n  )\n})\n","import type { AppInfo, Platform } from '../shared/protocol'\n\nexport interface ExpoConfigLike {\n  version?: string\n  ios?: { buildNumber?: string }\n  android?: { versionCode?: number }\n}\n\nexport function resolveAppInfo(\n  platformOS: string,\n  expoConfig: ExpoConfigLike | null | undefined,\n  override: Partial<AppInfo> = {},\n): AppInfo {\n  const platform: Platform = platformOS === 'android' ? 'android' : 'ios'\n  const buildNumber =\n    platform === 'ios' ? expoConfig?.ios?.buildNumber : expoConfig?.android?.versionCode?.toString()\n\n  return {\n    platform,\n    appVersion: expoConfig?.version ?? '0.0.0',\n    buildNumber: buildNumber ?? '0',\n    ...override,\n  }\n}\n","// Regex-based on purpose: React Native's URL polyfill has historically not implemented `hostname`.\n// Backslashes are excluded from userinfo/host because browsers treat `\\` as `/` in http(s) URLs.\nconst URL_PATTERN = /^([a-z][a-z0-9+.-]*):(?:\\/\\/(?:[^@/\\\\?#]*@)?(\\[[^\\]]*\\]|[^:/\\\\?#]*))?/i\n\nexport function schemeOf(url: string): string | null {\n  const match = URL_PATTERN.exec(url.trim())\n  return match ? match[1]!.toLowerCase() : null\n}\n\nexport function hostnameOf(url: string): string | null {\n  const host = URL_PATTERN.exec(url.trim())?.[2]\n  if (!host) return null\n  return host.toLowerCase().replace(/\\.$/, '')\n}\n\nexport function isTrustedHostname(hostname: string, trustedHosts: readonly string[]): boolean {\n  const host = hostname.toLowerCase().replace(/\\.$/, '')\n  return trustedHosts.some((entry) => {\n    const pattern = entry.toLowerCase()\n    if (pattern.startsWith('*.')) return host.endsWith(`.${pattern.slice(2)}`)\n    return host === pattern\n  })\n}\n\nexport function isTrustedUrl(url: string, trustedHosts: readonly string[]): boolean {\n  const hostname = hostnameOf(url)\n  return hostname !== null && isTrustedHostname(hostname, trustedHosts)\n}\n","import { isTrustedUrl, schemeOf } from './hosts'\n\nexport type NavigationDecision = 'load' | 'block' | 'open-external'\n\nexport interface NavigationRequestLike {\n  url: string\n  /** iOS only. Android only asks about top-frame navigations, so `undefined` means top frame. */\n  isTopFrame?: boolean\n}\n\nexport interface HostLists {\n  /** Load in the WebView and may call handlers. */\n  trustedHosts: readonly string[]\n  /** Load in the WebView without bridge access (file previews, OAuth, 3-D Secure). */\n  inAppHosts: readonly string[]\n}\n\nconst BLOCKED_SCHEMES = new Set(['about', 'blob', 'file', 'javascript', 'data'])\n\nexport function decideNavigation(request: NavigationRequestLike, hosts: HostLists): NavigationDecision {\n  const scheme = schemeOf(request.url)\n  const isHttp = scheme === 'http' || scheme === 'https'\n  const isSubframe = request.isTopFrame === false\n\n  if (isHttp && (isTrustedUrl(request.url, hosts.trustedHosts) || isTrustedUrl(request.url, hosts.inAppHosts))) {\n    return 'load'\n  }\n  // Iframes (reCAPTCHA, maps, GTM, payment widgets) must load in place; they never get the badge.\n  if (isSubframe && (isHttp || scheme === 'about')) return 'load'\n  if (scheme === null || BLOCKED_SCHEMES.has(scheme)) return 'block'\n  return 'open-external'\n}\n\nexport function composeNavigationHandler<R extends NavigationRequestLike>(\n  consumer: ((request: R) => boolean | undefined) | undefined,\n  getHosts: () => HostLists,\n  openExternal: (url: string) => void,\n): (request: R) => boolean {\n  return (request) => {\n    const custom = consumer?.(request)\n    if (typeof custom === 'boolean') return custom\n\n    const decision = decideNavigation(request, getHosts())\n    if (decision === 'open-external') openExternal(request.url)\n    return decision === 'load'\n  }\n}\n","import {\n  ErrorCode,\n  isBridgeMessage,\n  type ErrorPayload,\n  type RequestMessage,\n  type ResponseMessage,\n} from '../shared/protocol'\nimport { isTrustedUrl } from './hosts'\n\n// `any` is intentional: handlers type their own params.\nexport type Handler = (params: any) => unknown\nexport type Handlers = Record<string, Handler>\n\nexport type RouteResult =\n  | { type: 'forward' }\n  | { type: 'drop'; reason: 'untrusted-origin' | 'unexpected-kind' }\n  | { type: 'response'; response: Promise<ResponseMessage> }\n\nexport function routeMessage(\n  raw: string,\n  sourceUrl: string,\n  handlers: Handlers,\n  trustedHosts: readonly string[],\n): RouteResult {\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(raw)\n  } catch {\n    return { type: 'forward' }\n  }\n\n  if (!isBridgeMessage(parsed)) return { type: 'forward' }\n  if (parsed.kind !== 'req') return { type: 'drop', reason: 'unexpected-kind' }\n  if (!isTrustedUrl(sourceUrl, trustedHosts)) return { type: 'drop', reason: 'untrusted-origin' }\n\n  return { type: 'response', response: runHandler(parsed, handlers) }\n}\n\nexport async function runHandler(request: RequestMessage, handlers: Handlers): Promise<ResponseMessage> {\n  // Own-property check so names like \"toString\" never reach Object.prototype.\n  const handler = Object.prototype.hasOwnProperty.call(handlers, request.method) ? handlers[request.method] : undefined\n  if (!handler) {\n    return failure(request.id, { code: ErrorCode.UNKNOWN_METHOD, message: `No handler registered for \"${request.method}\"` })\n  }\n\n  let result: unknown\n  try {\n    result = await handler(request.params)\n  } catch (error) {\n    return failure(request.id, toErrorPayload(error))\n  }\n\n  try {\n    JSON.stringify(result)\n  } catch {\n    return failure(request.id, {\n      code: ErrorCode.HANDLER_ERROR,\n      message: `Result of \"${request.method}\" is not JSON-serializable`,\n    })\n  }\n\n  return { bridge: 1, kind: 'res', id: request.id, ok: true, result }\n}\n\nfunction failure(id: string, error: ErrorPayload): ResponseMessage {\n  return { bridge: 1, kind: 'res', id, ok: false, error }\n}\n\nfunction toErrorPayload(error: unknown): ErrorPayload {\n  if (typeof error === 'object' && error !== null) {\n    const { code, message } = error as { code?: unknown; message?: unknown }\n    return {\n      code: typeof code === 'string' ? code : ErrorCode.HANDLER_ERROR,\n      message: typeof message === 'string' ? message : String(error),\n    }\n  }\n  return { code: ErrorCode.HANDLER_ERROR, message: String(error) }\n}\n","import { BADGE_KEY, BRIDGE_EVENT, type AppInfo, type EventMessage, type ResponseMessage } from '../shared/protocol'\n\n/** JSON that is also safe to embed inside injected JavaScript. */\nexport function serializeForScript(value: unknown): string {\n  return JSON.stringify(value)\n    .replace(/</g, '\\\\u003c')\n    .replace(/\\u2028/g, '\\\\u2028')\n    .replace(/\\u2029/g, '\\\\u2029')\n}\n\n/**\n * Sets the badge. BridgeWebView runs it before content loads AND again after load, because on Android\n * react-native-webview injects the \"before content loaded\" script in a race with document creation.\n */\nexport function buildBadgeScript(info: AppInfo): string {\n  return `(function () { window.${BADGE_KEY} = ${serializeForScript(info)}; })();`\n}\n\n/**\n * Delivers a response or event to the page, but only if the page's host is trusted: pages that\n * load in the app without bridge access (inAppHosts, consumer-allowed third parties) get nothing.\n * Host matching mirrors isTrustedHostname() in hosts.ts.\n */\nexport function buildDispatchScript(message: ResponseMessage | EventMessage, trustedHosts: readonly string[]): string {\n  return [\n    '(function () {',\n    \"  var host = String(location.hostname || '').toLowerCase().replace(/\\\\.$/, '');\",\n    `  var trusted = ${serializeForScript(trustedHosts.map((entry) => entry.toLowerCase()))};`,\n    '  var allowed = trusted.some(function (entry) {',\n    \"    if (entry.indexOf('*.') === 0) return host.slice(-(entry.length - 1)) === entry.slice(1);\",\n    '    return host === entry;',\n    '  });',\n    '  if (!allowed) return;',\n    `  window.dispatchEvent(new CustomEvent(${JSON.stringify(BRIDGE_EVENT)}, { detail: ${serializeForScript(message)} }));`,\n    '})();',\n    'true;',\n  ].join('\\n')\n}\n\n/** Badge first, then the consumer's own script. Separators keep trailing comments harmless. */\nexport function composeInjectedScript(info: AppInfo, consumerScript?: string): string {\n  return [buildBadgeScript(info), consumerScript ?? '', 'true;'].join('\\n;\\n')\n}\n","import { useRef } from 'react'\nimport { createEmitterCore, type BridgeEmitter } from './emitter'\n\n/** Stable emitter for sending events to the page. Pass it to <BridgeWebView emitter={...} />. */\nexport function useBridgeEmitter(): BridgeEmitter {\n  const ref = useRef<BridgeEmitter | null>(null)\n  if (ref.current === null) ref.current = createEmitterCore()\n  return ref.current\n}\n","import type { EventMessage } from '../shared/protocol'\n\nexport interface BridgeEmitter {\n  /**\n   * Sends an event to the page right away, like the Agendart bridge. Returns false when no WebView is\n   * connected; the event is then dropped. Anything that must not be lost (e.g. the notification that\n   * opened the app) belongs in a handler the page calls when it is ready.\n   */\n  emit(name: string, data?: unknown): boolean\n  /** @internal Called by BridgeWebView. */\n  connect(send: (message: EventMessage) => void): () => void\n}\n\nexport function createEmitterCore(): BridgeEmitter {\n  let send: ((message: EventMessage) => void) | null = null\n\n  return {\n    emit(name, data) {\n      if (!send) return false\n      const message: EventMessage = { bridge: 1, kind: 'evt', name }\n      if (data !== undefined) message.data = data\n      send(message)\n      return true\n    },\n\n    connect(nextSend) {\n      send = nextSend\n      return () => {\n        if (send === nextSend) send = null\n      }\n    },\n  }\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,YAAY,aAAa,WAAW,SAAS,cAAiC;AACvF,SAAS,SAAS,gBAAgB;AAClC,OAAO,eAAe;AACtB,SAAS,eAA4D;;;ACK9D,SAAS,eACd,YACA,YACA,WAA6B,CAAC,GACrB;AACT,QAAM,WAAqB,eAAe,YAAY,YAAY;AAClE,QAAM,cACJ,aAAa,QAAQ,YAAY,KAAK,cAAc,YAAY,SAAS,aAAa,SAAS;AAEjG,SAAO;AAAA,IACL;AAAA,IACA,YAAY,YAAY,WAAW;AAAA,IACnC,aAAa,eAAe;AAAA,IAC5B,GAAG;AAAA,EACL;AACF;;;ACrBA,IAAM,cAAc;AAEb,SAAS,SAAS,KAA4B;AACnD,QAAM,QAAQ,YAAY,KAAK,IAAI,KAAK,CAAC;AACzC,SAAO,QAAQ,MAAM,CAAC,EAAG,YAAY,IAAI;AAC3C;AAEO,SAAS,WAAW,KAA4B;AACrD,QAAM,OAAO,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;AAC7C,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,KAAK,YAAY,EAAE,QAAQ,OAAO,EAAE;AAC7C;AAEO,SAAS,kBAAkB,UAAkB,cAA0C;AAC5F,QAAM,OAAO,SAAS,YAAY,EAAE,QAAQ,OAAO,EAAE;AACrD,SAAO,aAAa,KAAK,CAAC,UAAU;AAClC,UAAM,UAAU,MAAM,YAAY;AAClC,QAAI,QAAQ,WAAW,IAAI,EAAG,QAAO,KAAK,SAAS,IAAI,QAAQ,MAAM,CAAC,CAAC,EAAE;AACzE,WAAO,SAAS;AAAA,EAClB,CAAC;AACH;AAEO,SAAS,aAAa,KAAa,cAA0C;AAClF,QAAM,WAAW,WAAW,GAAG;AAC/B,SAAO,aAAa,QAAQ,kBAAkB,UAAU,YAAY;AACtE;;;ACVA,IAAM,kBAAkB,oBAAI,IAAI,CAAC,SAAS,QAAQ,QAAQ,cAAc,MAAM,CAAC;AAExE,SAAS,iBAAiB,SAAgC,OAAsC;AACrG,QAAM,SAAS,SAAS,QAAQ,GAAG;AACnC,QAAM,SAAS,WAAW,UAAU,WAAW;AAC/C,QAAM,aAAa,QAAQ,eAAe;AAE1C,MAAI,WAAW,aAAa,QAAQ,KAAK,MAAM,YAAY,KAAK,aAAa,QAAQ,KAAK,MAAM,UAAU,IAAI;AAC5G,WAAO;AAAA,EACT;AAEA,MAAI,eAAe,UAAU,WAAW,SAAU,QAAO;AACzD,MAAI,WAAW,QAAQ,gBAAgB,IAAI,MAAM,EAAG,QAAO;AAC3D,SAAO;AACT;AAEO,SAAS,yBACd,UACA,UACA,cACyB;AACzB,SAAO,CAAC,YAAY;AAClB,UAAM,SAAS,WAAW,OAAO;AACjC,QAAI,OAAO,WAAW,UAAW,QAAO;AAExC,UAAM,WAAW,iBAAiB,SAAS,SAAS,CAAC;AACrD,QAAI,aAAa,gBAAiB,cAAa,QAAQ,GAAG;AAC1D,WAAO,aAAa;AAAA,EACtB;AACF;;;AC5BO,SAAS,aACd,KACA,WACA,UACA,cACa;AACb,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO,EAAE,MAAM,UAAU;AAAA,EAC3B;AAEA,MAAI,CAAC,gBAAgB,MAAM,EAAG,QAAO,EAAE,MAAM,UAAU;AACvD,MAAI,OAAO,SAAS,MAAO,QAAO,EAAE,MAAM,QAAQ,QAAQ,kBAAkB;AAC5E,MAAI,CAAC,aAAa,WAAW,YAAY,EAAG,QAAO,EAAE,MAAM,QAAQ,QAAQ,mBAAmB;AAE9F,SAAO,EAAE,MAAM,YAAY,UAAU,WAAW,QAAQ,QAAQ,EAAE;AACpE;AAEA,eAAsB,WAAW,SAAyB,UAA8C;AAEtG,QAAM,UAAU,OAAO,UAAU,eAAe,KAAK,UAAU,QAAQ,MAAM,IAAI,SAAS,QAAQ,MAAM,IAAI;AAC5G,MAAI,CAAC,SAAS;AACZ,WAAO,QAAQ,QAAQ,IAAI,EAAE,MAAM,UAAU,gBAAgB,SAAS,8BAA8B,QAAQ,MAAM,IAAI,CAAC;AAAA,EACzH;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,QAAQ,QAAQ,MAAM;AAAA,EACvC,SAAS,OAAO;AACd,WAAO,QAAQ,QAAQ,IAAI,eAAe,KAAK,CAAC;AAAA,EAClD;AAEA,MAAI;AACF,SAAK,UAAU,MAAM;AAAA,EACvB,QAAQ;AACN,WAAO,QAAQ,QAAQ,IAAI;AAAA,MACzB,MAAM,UAAU;AAAA,MAChB,SAAS,cAAc,QAAQ,MAAM;AAAA,IACvC,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,QAAQ,GAAG,MAAM,OAAO,IAAI,QAAQ,IAAI,IAAI,MAAM,OAAO;AACpE;AAEA,SAAS,QAAQ,IAAY,OAAsC;AACjE,SAAO,EAAE,QAAQ,GAAG,MAAM,OAAO,IAAI,IAAI,OAAO,MAAM;AACxD;AAEA,SAAS,eAAe,OAA8B;AACpD,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,UAAM,EAAE,MAAM,QAAQ,IAAI;AAC1B,WAAO;AAAA,MACL,MAAM,OAAO,SAAS,WAAW,OAAO,UAAU;AAAA,MAClD,SAAS,OAAO,YAAY,WAAW,UAAU,OAAO,KAAK;AAAA,IAC/D;AAAA,EACF;AACA,SAAO,EAAE,MAAM,UAAU,eAAe,SAAS,OAAO,KAAK,EAAE;AACjE;;;AC1EO,SAAS,mBAAmB,OAAwB;AACzD,SAAO,KAAK,UAAU,KAAK,EACxB,QAAQ,MAAM,SAAS,EACvB,QAAQ,WAAW,SAAS,EAC5B,QAAQ,WAAW,SAAS;AACjC;AAMO,SAAS,iBAAiB,MAAuB;AACtD,SAAO,yBAAyB,SAAS,MAAM,mBAAmB,IAAI,CAAC;AACzE;AAOO,SAAS,oBAAoB,SAAyC,cAAyC;AACpH,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,mBAAmB,mBAAmB,aAAa,IAAI,CAAC,UAAU,MAAM,YAAY,CAAC,CAAC,CAAC;AAAA,IACvF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,0CAA0C,KAAK,UAAU,YAAY,CAAC,eAAe,mBAAmB,OAAO,CAAC;AAAA,IAChH;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAGO,SAAS,sBAAsB,MAAe,gBAAiC;AACpF,SAAO,CAAC,iBAAiB,IAAI,GAAG,kBAAkB,IAAI,OAAO,EAAE,KAAK,OAAO;AAC7E;;;AL2EI;AAnFJ,SAAS,UAAa,KAAsB,OAAiB;AAC3D,MAAI,OAAO,QAAQ,WAAY,KAAI,KAAK;AAAA,WAC/B,IAAK,KAAI,UAAU;AAC9B;AAEO,IAAM,gBAAgB,WAAwC,SAASA,eAAc,OAAO,KAAK;AACtG,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EACL,IAAI;AAEJ,QAAM,aAAa,OAAuB,IAAI;AAC9C,QAAM,cAAc,OAAiB,YAAY,CAAC,CAAC;AACnD,QAAM,kBAAkB,OAAO,YAAY;AAC3C,QAAM,gBAAgB,OAA0B,cAAc,CAAC,CAAC;AAChE,cAAY,UAAU,YAAY,CAAC;AACnC,kBAAgB,UAAU;AAC1B,gBAAc,UAAU,cAAc,CAAC;AAEvC,QAAM,SAAS;AAAA,IACb,CAAC,aAA6B;AAC5B,iBAAW,UAAU;AACrB,gBAAU,KAAK,QAAQ;AAAA,IACzB;AAAA,IACA,CAAC,GAAG;AAAA,EACN;AAGA,QAAM,OAAO,YAAY,CAAC,YAA4C;AACpE,eAAW,SAAS,iBAAiB,oBAAoB,SAAS,gBAAgB,OAAO,CAAC;AAAA,EAC5F,GAAG,CAAC,CAAC;AAEL,YAAU,MAAM,SAAS,QAAQ,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC;AAEvD,QAAM,aAAa,KAAK,UAAU,WAAW,CAAC,CAAC;AAG/C,QAAM,OAAO,QAAQ,MAAM,eAAe,SAAS,IAAI,UAAU,YAAY,OAAO,GAAG,CAAC,UAAU,CAAC;AACnG,QAAM,qBAAqB;AAAA,IACzB,MAAM,sBAAsB,MAAM,qCAAqC;AAAA,IACvE,CAAC,MAAM,qCAAqC;AAAA,EAC9C;AAEA,QAAM,oBAAoB,QAAQ,MAAM,sBAAsB,MAAM,kBAAkB,GAAG,CAAC,MAAM,kBAAkB,CAAC;AAEnH,QAAM,gBAAgB;AAAA,IACpB,CAAC,UAA+B;AAC9B,YAAM,EAAE,MAAM,IAAI,IAAI,MAAM;AAC5B,YAAM,QAAQ,aAAa,MAAM,KAAK,YAAY,SAAS,gBAAgB,OAAO;AAClF,UAAI,MAAM,SAAS,WAAW;AAC5B,oBAAY,KAAK;AACjB;AAAA,MACF;AACA,UAAI,MAAM,SAAS,QAAQ;AACzB,YAAI,QAAS,SAAQ,KAAK,wCAAwC,MAAM,MAAM,UAAU,GAAG,EAAE;AAC7F;AAAA,MACF;AACA,WAAK,MAAM,SAAS,KAAK,IAAI;AAAA,IAC/B;AAAA,IACA,CAAC,WAAW,IAAI;AAAA,EAClB;AAEA,QAAM,oBAAoB;AAAA,IACxB,MACE;AAAA,MACE;AAAA,MACA,OAAO,EAAE,cAAc,gBAAgB,SAAS,YAAY,cAAc,QAAQ;AAAA,MAClF,CAAC,QAAQ;AACP,gBAAQ,QAAQ,GAAG,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACrC;AAAA,IACF;AAAA,IACF,CAAC,4BAA4B;AAAA,EAC/B;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ,KAAK;AAAA,MACL,WAAW;AAAA,MACX,8BAA8B;AAAA,MAC9B,uCAAuC;AAAA,MACvC,oBAAoB;AAAA,MACpB,oCAAkC;AAAA,MAClC,uDAAqD;AAAA;AAAA,EACvD;AAEJ,CAAC;;;AMhID,SAAS,UAAAC,eAAc;;;ACahB,SAAS,oBAAmC;AACjD,MAAI,OAAiD;AAErD,SAAO;AAAA,IACL,KAAK,MAAM,MAAM;AACf,UAAI,CAAC,KAAM,QAAO;AAClB,YAAM,UAAwB,EAAE,QAAQ,GAAG,MAAM,OAAO,KAAK;AAC7D,UAAI,SAAS,OAAW,SAAQ,OAAO;AACvC,WAAK,OAAO;AACZ,aAAO;AAAA,IACT;AAAA,IAEA,QAAQ,UAAU;AAChB,aAAO;AACP,aAAO,MAAM;AACX,YAAI,SAAS,SAAU,QAAO;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AACF;;;AD5BO,SAAS,mBAAkC;AAChD,QAAM,MAAMC,QAA6B,IAAI;AAC7C,MAAI,IAAI,YAAY,KAAM,KAAI,UAAU,kBAAkB;AAC1D,SAAO,IAAI;AACb;","names":["BridgeWebView","useRef","useRef"]}

package/dist/protocol-DcOkx09n.d.cts

@@ -0,0 +1,22 @@
+declare const PROTOCOL_MARKER: 1;
+declare const ErrorCode: {
+    readonly NOT_IN_APP: "NOT_IN_APP";
+    readonly TIMEOUT: "TIMEOUT";
+    readonly UNKNOWN_METHOD: "UNKNOWN_METHOD";
+    readonly HANDLER_ERROR: "HANDLER_ERROR";
+    readonly INVALID_PARAMS: "INVALID_PARAMS";
+};
+type Platform = 'ios' | 'android';
+interface AppInfo {
+    platform: Platform;
+    appVersion: string;
+    buildNumber: string;
+}
+interface EventMessage {
+    bridge: typeof PROTOCOL_MARKER;
+    kind: 'evt';
+    name: string;
+    data?: unknown;
+}
+
+export { type AppInfo as A, type EventMessage as E, ErrorCode as a };

package/dist/protocol-DcOkx09n.d.ts

@@ -0,0 +1,22 @@
+declare const PROTOCOL_MARKER: 1;
+declare const ErrorCode: {
+    readonly NOT_IN_APP: "NOT_IN_APP";
+    readonly TIMEOUT: "TIMEOUT";
+    readonly UNKNOWN_METHOD: "UNKNOWN_METHOD";
+    readonly HANDLER_ERROR: "HANDLER_ERROR";
+    readonly INVALID_PARAMS: "INVALID_PARAMS";
+};
+type Platform = 'ios' | 'android';
+interface AppInfo {
+    platform: Platform;
+    appVersion: string;
+    buildNumber: string;
+}
+interface EventMessage {
+    bridge: typeof PROTOCOL_MARKER;
+    kind: 'evt';
+    name: string;
+    data?: unknown;
+}
+
+export { type AppInfo as A, type EventMessage as E, ErrorCode as a };

package/dist/web/index.cjs

@@ -0,0 +1,163 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/web/index.ts
+var web_exports = {};
+__export(web_exports, {
+  BridgeError: () => BridgeError,
+  ErrorCode: () => ErrorCode,
+  bridge: () => bridge,
+  createBridgeClient: () => createBridgeClient
+});
+module.exports = __toCommonJS(web_exports);
+
+// src/shared/protocol.ts
+var PROTOCOL_MARKER = 1;
+var BRIDGE_EVENT = "mobile-app-bridge";
+var DEFAULT_TIMEOUT = 3e4;
+var ErrorCode = {
+  NOT_IN_APP: "NOT_IN_APP",
+  TIMEOUT: "TIMEOUT",
+  UNKNOWN_METHOD: "UNKNOWN_METHOD",
+  HANDLER_ERROR: "HANDLER_ERROR",
+  INVALID_PARAMS: "INVALID_PARAMS"
+};
+function isBridgeMessage(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const message = value;
+  if (message.bridge !== PROTOCOL_MARKER) return false;
+  switch (message.kind) {
+    case "req":
+      return typeof message.id === "string" && typeof message.method === "string";
+    case "res":
+      if (typeof message.id !== "string" || typeof message.ok !== "boolean") return false;
+      return message.ok || typeof message.error === "object" && message.error !== null;
+    case "evt":
+      return typeof message.name === "string";
+    default:
+      return false;
+  }
+}
+
+// src/web/errors.ts
+var BridgeError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "BridgeError";
+    this.code = code;
+  }
+};
+
+// src/web/client.ts
+function createBridgeClient(getWindow) {
+  const pending = /* @__PURE__ */ new Map();
+  const listeners = /* @__PURE__ */ new Map();
+  let attachedTo;
+  let counter = 0;
+  function appWindow() {
+    const win = getWindow();
+    return win?.ReactNativeWebView ? win : void 0;
+  }
+  function handle(detail) {
+    if (!isBridgeMessage(detail)) return;
+    if (detail.kind === "evt") {
+      const subscribers = listeners.get(detail.name);
+      if (subscribers) for (const listener of [...subscribers]) listener(detail.data);
+      return;
+    }
+    if (detail.kind !== "res") return;
+    const entry = pending.get(detail.id);
+    if (!entry) return;
+    pending.delete(detail.id);
+    if (entry.timer !== void 0) clearTimeout(entry.timer);
+    if (detail.ok) entry.resolve(detail.result);
+    else entry.reject(new BridgeError(detail.error.code, detail.error.message));
+  }
+  function attach(win) {
+    if (attachedTo === win) return;
+    attachedTo = win;
+    win.addEventListener(BRIDGE_EVENT, (event) => handle(event.detail));
+  }
+  function nextId() {
+    return globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}-${(counter++).toString(36)}`;
+  }
+  return {
+    get isApp() {
+      return appWindow() !== void 0;
+    },
+    get info() {
+      return appWindow()?.__MOBILE_APP_BRIDGE__ ?? null;
+    },
+    call(method, params, callOptions = {}) {
+      const win = appWindow();
+      if (!win?.ReactNativeWebView) {
+        return Promise.reject(new BridgeError(ErrorCode.NOT_IN_APP, `Cannot call "${method}" outside the mobile app`));
+      }
+      attach(win);
+      const id = nextId();
+      const request = { bridge: 1, kind: "req", id, method };
+      if (params !== void 0) request.params = params;
+      let payload;
+      try {
+        payload = JSON.stringify(request);
+      } catch {
+        return Promise.reject(new BridgeError(ErrorCode.INVALID_PARAMS, `Params for "${method}" are not JSON-serializable`));
+      }
+      const timeout = callOptions.timeout ?? DEFAULT_TIMEOUT;
+      const postMessage = win.ReactNativeWebView.postMessage.bind(win.ReactNativeWebView);
+      return new Promise((resolve, reject) => {
+        const timer = timeout > 0 ? setTimeout(() => {
+          if (pending.delete(id)) {
+            reject(new BridgeError(ErrorCode.TIMEOUT, `"${method}" did not respond within ${timeout}ms`));
+          }
+        }, timeout) : void 0;
+        pending.set(id, { resolve, reject, timer });
+        postMessage(payload);
+      });
+    },
+    on(name, listener) {
+      const win = appWindow();
+      if (win) attach(win);
+      let subscribers = listeners.get(name);
+      if (!subscribers) {
+        subscribers = /* @__PURE__ */ new Set();
+        listeners.set(name, subscribers);
+      }
+      const typed = listener;
+      subscribers.add(typed);
+      return () => {
+        subscribers.delete(typed);
+      };
+    }
+  };
+}
+
+// src/web/index.ts
+var bridge = createBridgeClient(
+  () => typeof window === "undefined" ? void 0 : window
+);
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  BridgeError,
+  ErrorCode,
+  bridge,
+  createBridgeClient
+});
+//# sourceMappingURL=index.cjs.map

package/dist/web/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/web/index.ts","../../src/shared/protocol.ts","../../src/web/errors.ts","../../src/web/client.ts"],"sourcesContent":["import { createBridgeClient, type BridgeWindow } from './client'\n\n/** Shared client for the current page. Safe to import during SSR: it only reads `window` when used. */\nexport const bridge = createBridgeClient(() =>\n  typeof window === 'undefined' ? undefined : (window as unknown as BridgeWindow),\n)\n\nexport { createBridgeClient } from './client'\nexport type { BridgeClient, BridgeWindow, CallOptions } from './client'\nexport { BridgeError } from './errors'\nexport { ErrorCode } from '../shared/protocol'\nexport type { AppInfo } from '../shared/protocol'\n","export const PROTOCOL_MARKER = 1 as const\nexport const BRIDGE_EVENT = 'mobile-app-bridge'\nexport const BADGE_KEY = '__MOBILE_APP_BRIDGE__'\nexport const DEFAULT_TIMEOUT = 30_000\n\nexport const ErrorCode = {\n  NOT_IN_APP: 'NOT_IN_APP',\n  TIMEOUT: 'TIMEOUT',\n  UNKNOWN_METHOD: 'UNKNOWN_METHOD',\n  HANDLER_ERROR: 'HANDLER_ERROR',\n  INVALID_PARAMS: 'INVALID_PARAMS',\n} as const\n\nexport type Platform = 'ios' | 'android'\n\nexport interface AppInfo {\n  platform: Platform\n  appVersion: string\n  buildNumber: string\n}\n\nexport interface RequestMessage {\n  bridge: typeof PROTOCOL_MARKER\n  kind: 'req'\n  id: string\n  method: string\n  params?: unknown\n}\n\nexport interface ErrorPayload {\n  code: string\n  message: string\n}\n\nexport type ResponseMessage =\n  | { bridge: typeof PROTOCOL_MARKER; kind: 'res'; id: string; ok: true; result?: unknown }\n  | { bridge: typeof PROTOCOL_MARKER; kind: 'res'; id: string; ok: false; error: ErrorPayload }\n\nexport interface EventMessage {\n  bridge: typeof PROTOCOL_MARKER\n  kind: 'evt'\n  name: string\n  data?: unknown\n}\n\nexport type BridgeMessage = RequestMessage | ResponseMessage | EventMessage\n\nexport function isBridgeMessage(value: unknown): value is BridgeMessage {\n  if (typeof value !== 'object' || value === null) return false\n  const message = value as Record<string, unknown>\n  if (message.bridge !== PROTOCOL_MARKER) return false\n\n  switch (message.kind) {\n    case 'req':\n      return typeof message.id === 'string' && typeof message.method === 'string'\n    case 'res':\n      if (typeof message.id !== 'string' || typeof message.ok !== 'boolean') return false\n      return message.ok || (typeof message.error === 'object' && message.error !== null)\n    case 'evt':\n      return typeof message.name === 'string'\n    default:\n      return false\n  }\n}\n","export class BridgeError extends Error {\n  readonly code: string\n\n  constructor(code: string, message: string) {\n    super(message)\n    this.name = 'BridgeError'\n    this.code = code\n  }\n}\n","import {\n  BRIDGE_EVENT,\n  DEFAULT_TIMEOUT,\n  ErrorCode,\n  isBridgeMessage,\n  type AppInfo,\n  type RequestMessage,\n} from '../shared/protocol'\nimport { BridgeError } from './errors'\n\nexport interface BridgeWindow {\n  __MOBILE_APP_BRIDGE__?: AppInfo\n  ReactNativeWebView?: { postMessage(message: string): void }\n  addEventListener(type: string, listener: (event: Event) => void): void\n}\n\nexport interface CallOptions {\n  /** Milliseconds to wait for the native response. Defaults to 30s; 0 disables the timeout. */\n  timeout?: number\n}\n\nexport interface BridgeClient {\n  readonly isApp: boolean\n  readonly info: AppInfo | null\n  call<T = unknown>(method: string, params?: unknown, options?: CallOptions): Promise<T>\n  on<T = unknown>(name: string, listener: (data: T) => void): () => void\n}\n\ninterface PendingCall {\n  resolve: (value: unknown) => void\n  reject: (error: BridgeError) => void\n  timer: ReturnType<typeof setTimeout> | undefined\n}\n\ntype Listener = (data: unknown) => void\n\nexport function createBridgeClient(\n  getWindow: () => BridgeWindow | undefined,\n): BridgeClient {\n  const pending = new Map<string, PendingCall>()\n  const listeners = new Map<string, Set<Listener>>()\n  let attachedTo: BridgeWindow | undefined\n  let counter = 0\n\n  /** Inside the app whenever react-native-webview's bridge object exists (same rule as the Agendart bridge). */\n  function appWindow(): BridgeWindow | undefined {\n    const win = getWindow()\n    return win?.ReactNativeWebView ? win : undefined\n  }\n\n  function handle(detail: unknown) {\n    if (!isBridgeMessage(detail)) return\n    if (detail.kind === 'evt') {\n      // Events are fire-and-forget: without a subscriber they are dropped. Anything that must not be\n      // lost (e.g. \"app opened from a notification\") is exposed as a method the page calls when ready.\n      const subscribers = listeners.get(detail.name)\n      if (subscribers) for (const listener of [...subscribers]) listener(detail.data)\n      return\n    }\n    if (detail.kind !== 'res') return\n\n    const entry = pending.get(detail.id)\n    if (!entry) return\n    pending.delete(detail.id)\n    if (entry.timer !== undefined) clearTimeout(entry.timer)\n    if (detail.ok) entry.resolve(detail.result)\n    else entry.reject(new BridgeError(detail.error.code, detail.error.message))\n  }\n\n  function attach(win: BridgeWindow) {\n    if (attachedTo === win) return\n    attachedTo = win\n    win.addEventListener(BRIDGE_EVENT, (event) => handle((event as CustomEvent).detail))\n  }\n\n  function nextId(): string {\n    return globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}-${(counter++).toString(36)}`\n  }\n\n  return {\n    get isApp() {\n      return appWindow() !== undefined\n    },\n\n    get info() {\n      return appWindow()?.__MOBILE_APP_BRIDGE__ ?? null\n    },\n\n    call<T = unknown>(method: string, params?: unknown, callOptions: CallOptions = {}): Promise<T> {\n      const win = appWindow()\n      if (!win?.ReactNativeWebView) {\n        return Promise.reject(new BridgeError(ErrorCode.NOT_IN_APP, `Cannot call \"${method}\" outside the mobile app`))\n      }\n      attach(win)\n\n      const id = nextId()\n      const request: RequestMessage = { bridge: 1, kind: 'req', id, method }\n      if (params !== undefined) request.params = params\n\n      let payload: string\n      try {\n        payload = JSON.stringify(request)\n      } catch {\n        return Promise.reject(new BridgeError(ErrorCode.INVALID_PARAMS, `Params for \"${method}\" are not JSON-serializable`))\n      }\n\n      const timeout = callOptions.timeout ?? DEFAULT_TIMEOUT\n      const postMessage = win.ReactNativeWebView.postMessage.bind(win.ReactNativeWebView)\n\n      return new Promise<T>((resolve, reject) => {\n        const timer =\n          timeout > 0\n            ? setTimeout(() => {\n                if (pending.delete(id)) {\n                  reject(new BridgeError(ErrorCode.TIMEOUT, `\"${method}\" did not respond within ${timeout}ms`))\n                }\n              }, timeout)\n            : undefined\n        pending.set(id, { resolve: resolve as (value: unknown) => void, reject, timer })\n        postMessage(payload)\n      })\n    },\n\n    on<T = unknown>(name: string, listener: (data: T) => void): () => void {\n      const win = appWindow()\n      if (win) attach(win)\n\n      let subscribers = listeners.get(name)\n      if (!subscribers) {\n        subscribers = new Set()\n        listeners.set(name, subscribers)\n      }\n      const typed = listener as Listener\n      subscribers.add(typed)\n\n      return () => {\n        subscribers.delete(typed)\n      }\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAO,IAAM,kBAAkB;AACxB,IAAM,eAAe;AAErB,IAAM,kBAAkB;AAExB,IAAM,YAAY;AAAA,EACvB,YAAY;AAAA,EACZ,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,gBAAgB;AAClB;AAoCO,SAAS,gBAAgB,OAAwC;AACtE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,UAAU;AAChB,MAAI,QAAQ,WAAW,gBAAiB,QAAO;AAE/C,UAAQ,QAAQ,MAAM;AAAA,IACpB,KAAK;AACH,aAAO,OAAO,QAAQ,OAAO,YAAY,OAAO,QAAQ,WAAW;AAAA,IACrE,KAAK;AACH,UAAI,OAAO,QAAQ,OAAO,YAAY,OAAO,QAAQ,OAAO,UAAW,QAAO;AAC9E,aAAO,QAAQ,MAAO,OAAO,QAAQ,UAAU,YAAY,QAAQ,UAAU;AAAA,IAC/E,KAAK;AACH,aAAO,OAAO,QAAQ,SAAS;AAAA,IACjC;AACE,aAAO;AAAA,EACX;AACF;;;AC/DO,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC5B;AAAA,EAET,YAAY,MAAc,SAAiB;AACzC,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;;;AC4BO,SAAS,mBACd,WACc;AACd,QAAM,UAAU,oBAAI,IAAyB;AAC7C,QAAM,YAAY,oBAAI,IAA2B;AACjD,MAAI;AACJ,MAAI,UAAU;AAGd,WAAS,YAAsC;AAC7C,UAAM,MAAM,UAAU;AACtB,WAAO,KAAK,qBAAqB,MAAM;AAAA,EACzC;AAEA,WAAS,OAAO,QAAiB;AAC/B,QAAI,CAAC,gBAAgB,MAAM,EAAG;AAC9B,QAAI,OAAO,SAAS,OAAO;AAGzB,YAAM,cAAc,UAAU,IAAI,OAAO,IAAI;AAC7C,UAAI,YAAa,YAAW,YAAY,CAAC,GAAG,WAAW,EAAG,UAAS,OAAO,IAAI;AAC9E;AAAA,IACF;AACA,QAAI,OAAO,SAAS,MAAO;AAE3B,UAAM,QAAQ,QAAQ,IAAI,OAAO,EAAE;AACnC,QAAI,CAAC,MAAO;AACZ,YAAQ,OAAO,OAAO,EAAE;AACxB,QAAI,MAAM,UAAU,OAAW,cAAa,MAAM,KAAK;AACvD,QAAI,OAAO,GAAI,OAAM,QAAQ,OAAO,MAAM;AAAA,QACrC,OAAM,OAAO,IAAI,YAAY,OAAO,MAAM,MAAM,OAAO,MAAM,OAAO,CAAC;AAAA,EAC5E;AAEA,WAAS,OAAO,KAAmB;AACjC,QAAI,eAAe,IAAK;AACxB,iBAAa;AACb,QAAI,iBAAiB,cAAc,CAAC,UAAU,OAAQ,MAAsB,MAAM,CAAC;AAAA,EACrF;AAEA,WAAS,SAAiB;AACxB,WAAO,WAAW,QAAQ,aAAa,KAAK,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,KAAK,WAAW,SAAS,EAAE,CAAC;AAAA,EACpG;AAEA,SAAO;AAAA,IACL,IAAI,QAAQ;AACV,aAAO,UAAU,MAAM;AAAA,IACzB;AAAA,IAEA,IAAI,OAAO;AACT,aAAO,UAAU,GAAG,yBAAyB;AAAA,IAC/C;AAAA,IAEA,KAAkB,QAAgB,QAAkB,cAA2B,CAAC,GAAe;AAC7F,YAAM,MAAM,UAAU;AACtB,UAAI,CAAC,KAAK,oBAAoB;AAC5B,eAAO,QAAQ,OAAO,IAAI,YAAY,UAAU,YAAY,gBAAgB,MAAM,0BAA0B,CAAC;AAAA,MAC/G;AACA,aAAO,GAAG;AAEV,YAAM,KAAK,OAAO;AAClB,YAAM,UAA0B,EAAE,QAAQ,GAAG,MAAM,OAAO,IAAI,OAAO;AACrE,UAAI,WAAW,OAAW,SAAQ,SAAS;AAE3C,UAAI;AACJ,UAAI;AACF,kBAAU,KAAK,UAAU,OAAO;AAAA,MAClC,QAAQ;AACN,eAAO,QAAQ,OAAO,IAAI,YAAY,UAAU,gBAAgB,eAAe,MAAM,6BAA6B,CAAC;AAAA,MACrH;AAEA,YAAM,UAAU,YAAY,WAAW;AACvC,YAAM,cAAc,IAAI,mBAAmB,YAAY,KAAK,IAAI,kBAAkB;AAElF,aAAO,IAAI,QAAW,CAAC,SAAS,WAAW;AACzC,cAAM,QACJ,UAAU,IACN,WAAW,MAAM;AACf,cAAI,QAAQ,OAAO,EAAE,GAAG;AACtB,mBAAO,IAAI,YAAY,UAAU,SAAS,IAAI,MAAM,4BAA4B,OAAO,IAAI,CAAC;AAAA,UAC9F;AAAA,QACF,GAAG,OAAO,IACV;AACN,gBAAQ,IAAI,IAAI,EAAE,SAA8C,QAAQ,MAAM,CAAC;AAC/E,oBAAY,OAAO;AAAA,MACrB,CAAC;AAAA,IACH;AAAA,IAEA,GAAgB,MAAc,UAAyC;AACrE,YAAM,MAAM,UAAU;AACtB,UAAI,IAAK,QAAO,GAAG;AAEnB,UAAI,cAAc,UAAU,IAAI,IAAI;AACpC,UAAI,CAAC,aAAa;AAChB,sBAAc,oBAAI,IAAI;AACtB,kBAAU,IAAI,MAAM,WAAW;AAAA,MACjC;AACA,YAAM,QAAQ;AACd,kBAAY,IAAI,KAAK;AAErB,aAAO,MAAM;AACX,oBAAY,OAAO,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AACF;;;AHzIO,IAAM,SAAS;AAAA,EAAmB,MACvC,OAAO,WAAW,cAAc,SAAa;AAC/C;","names":[]}

package/dist/web/index.d.cts

@@ -0,0 +1,31 @@
+import { A as AppInfo } from '../protocol-DcOkx09n.cjs';
+export { a as ErrorCode } from '../protocol-DcOkx09n.cjs';
+
+interface BridgeWindow {
+    __MOBILE_APP_BRIDGE__?: AppInfo;
+    ReactNativeWebView?: {
+        postMessage(message: string): void;
+    };
+    addEventListener(type: string, listener: (event: Event) => void): void;
+}
+interface CallOptions {
+    /** Milliseconds to wait for the native response. Defaults to 30s; 0 disables the timeout. */
+    timeout?: number;
+}
+interface BridgeClient {
+    readonly isApp: boolean;
+    readonly info: AppInfo | null;
+    call<T = unknown>(method: string, params?: unknown, options?: CallOptions): Promise<T>;
+    on<T = unknown>(name: string, listener: (data: T) => void): () => void;
+}
+declare function createBridgeClient(getWindow: () => BridgeWindow | undefined): BridgeClient;
+
+declare class BridgeError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+
+/** Shared client for the current page. Safe to import during SSR: it only reads `window` when used. */
+declare const bridge: BridgeClient;
+
+export { AppInfo, type BridgeClient, BridgeError, type BridgeWindow, type CallOptions, bridge, createBridgeClient };

package/dist/web/index.d.ts

@@ -0,0 +1,31 @@
+import { A as AppInfo } from '../protocol-DcOkx09n.js';
+export { a as ErrorCode } from '../protocol-DcOkx09n.js';
+
+interface BridgeWindow {
+    __MOBILE_APP_BRIDGE__?: AppInfo;
+    ReactNativeWebView?: {
+        postMessage(message: string): void;
+    };
+    addEventListener(type: string, listener: (event: Event) => void): void;
+}
+interface CallOptions {
+    /** Milliseconds to wait for the native response. Defaults to 30s; 0 disables the timeout. */
+    timeout?: number;
+}
+interface BridgeClient {
+    readonly isApp: boolean;
+    readonly info: AppInfo | null;
+    call<T = unknown>(method: string, params?: unknown, options?: CallOptions): Promise<T>;
+    on<T = unknown>(name: string, listener: (data: T) => void): () => void;
+}
+declare function createBridgeClient(getWindow: () => BridgeWindow | undefined): BridgeClient;
+
+declare class BridgeError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+
+/** Shared client for the current page. Safe to import during SSR: it only reads `window` when used. */
+declare const bridge: BridgeClient;
+
+export { AppInfo, type BridgeClient, BridgeError, type BridgeWindow, type CallOptions, bridge, createBridgeClient };