@salesforce/experimental-mfe-bridge 2.2.1-rc.2 → 2.2.1-rc.7

package/dist/index.esm.js

@@ -1,4 +1,4 @@
-/*! @salesforce/experimental-mfe-bridge v2.2.1-rc.2 (2026-04-10) */
+/*! @salesforce/experimental-mfe-bridge v2.2.1-rc.7 (2026-06-16) */
 /**
  * EmbeddingResizer - Handles dynamic iframe/container resizing
  * Uses ResizeObserver to monitor element size changes and notify the host
@@ -119,6 +119,15 @@ class EmbeddingResizer {
  * Auto-handles theme synchronization and error telemetry
  */
 const GRAPHQL_TIMEOUT_MS = 30_000;
+/** Parses `value` as a URL and returns its `.origin`, or `null` if it does not parse. */
+function extractOrigin(value) {
+    try {
+        return new URL(value).origin;
+    }
+    catch {
+        return null;
+    }
+}
 class ExternalEmbedBridge extends EventTarget {
     #connected = false;
     #hostAppOrigin = null;
@@ -130,6 +139,14 @@ class ExternalEmbedBridge extends EventTarget {
     #graphqlCounter = 0;
     constructor() {
         super();
+        // Abort init if hostMetaData is missing/invalid — widget surfaces a clear failure
+        // instead of running half-initialised.
+        const failures = this.#readMetadataFromUrl();
+        if (failures.length > 0) {
+            // eslint-disable-next-line no-console
+            console.error("[Bridge] Bridge could not be established:\n  - " + failures.join("\n  - "));
+            return;
+        }
         window.addEventListener("message", (e) => this.#handleHostMessage(e));
         this.#setupErrorCapture();
         this.#sendToHost("bridge-ready");
@@ -137,16 +154,44 @@ class ExternalEmbedBridge extends EventTarget {
         // eslint-disable-next-line no-console
         console.log("[Bridge] Initialized and ready for communication");
     }
+    /** Populates #instanceId and #hostAppOrigin from the iframe URL's `hostMetaData`
+     *  query param. Returns failure reasons (empty = success). */
+    #readMetadataFromUrl() {
+        const raw = new URLSearchParams(window.location.search).get("hostMetaData");
+        if (!raw)
+            return ["`hostMetaData` query param is missing"];
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (e) {
+            const message = e instanceof Error ? e.message : String(e);
+            return [`\`hostMetaData\` is not valid JSON: ${message}`];
+        }
+        const instanceId = typeof parsed?.instanceId === "string" ? parsed.instanceId : "";
+        const rawHostAppOrigin = typeof parsed?.hostAppOrigin === "string" ? parsed.hostAppOrigin : "";
+        const hostAppOrigin = rawHostAppOrigin ? extractOrigin(rawHostAppOrigin) : "";
+        const failures = [];
+        if (!instanceId)
+            failures.push("`instanceId` is missing or empty");
+        if (!rawHostAppOrigin) {
+            failures.push("`hostAppOrigin` is missing or empty");
+        }
+        else if (!hostAppOrigin) {
+            failures.push("`hostAppOrigin` is not a valid URL");
+        }
+        if (failures.length === 0) {
+            this.#instanceId = instanceId;
+            this.#hostAppOrigin = hostAppOrigin;
+        }
+        return failures;
+    }
     #handleHostMessage(event) {
-        if (event.source !== window.parent)
-            return;
-        if (this.#hostAppOrigin && event.origin !== this.#hostAppOrigin)
+        if (event.source !== window.parent || event.origin !== this.#hostAppOrigin)
             return;
         const payload = event.data || {};
         const { type, data, id } = payload;
-        if (typeof type !== "string" || !type.startsWith("salesforce-"))
-            return;
-        if (this.#instanceId && id !== this.#instanceId)
+        if (typeof type !== "string" || !type.startsWith("salesforce-") || id !== this.#instanceId)
             return;
         // eslint-disable-next-line no-console
         console.log("[Bridge] host->widget", type, data);
@@ -158,7 +203,7 @@ class ExternalEmbedBridge extends EventTarget {
                 this.#handleDataUpdate(data);
                 break;
             case "salesforce-shell-ready":
-                this.#handleConnectionReady(event.origin, id);
+                this.#handleConnectionReady();
                 break;
             case "salesforce-bridge-graphql-response":
                 this.#handleGraphQLResponse(data);
@@ -176,10 +221,8 @@ class ExternalEmbedBridge extends EventTarget {
         // use super to escape the override
         super.dispatchEvent(new CustomEvent("data", { detail: payload }));
     }
-    #handleConnectionReady(origin, id) {
+    #handleConnectionReady() {
         this.#connected = true;
-        this.#hostAppOrigin = origin;
-        this.#instanceId = id;
         // use super to escape the override
         super.dispatchEvent(new CustomEvent("connected"));
     }
@@ -231,18 +274,12 @@ class ExternalEmbedBridge extends EventTarget {
         });
         this.#resizer.start();
     }
-    #getHostAppOrigin(type) {
-        return this.#hostAppOrigin || (type === "bridge-ready" ? "*" : null);
-    }
     #sendToHost(type, data) {
-        const origin = this.#getHostAppOrigin(type);
-        if (!origin)
-            return;
         try {
-            const message = this.#instanceId ? { type, data, id: this.#instanceId } : { type, data };
+            const message = { type, data, id: this.#instanceId };
             // eslint-disable-next-line no-console
             console.log("[Bridge] Sending message to host:", message);
-            window.parent.postMessage(message, origin);
+            window.parent.postMessage(message, this.#hostAppOrigin);
         }
         catch (error) {
             // eslint-disable-next-line no-console
@@ -284,6 +321,11 @@ class ExternalEmbedBridge extends EventTarget {
     // Override dispatchEvent to forward custom events to the host via post message
     dispatchEvent(event) {
         const result = super.dispatchEvent(event);
+        if (!this.#connected) {
+            // eslint-disable-next-line no-console
+            console.warn("[Bridge] dispatchEvent: bridge not connected, dropping", event.type);
+            return result;
+        }
         this.#sendToHost("custom-event", {
             eventType: event.type,
             detail: event.detail,

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@salesforce/experimental-mfe-bridge",
-    "version": "2.2.1-rc.2",
+    "version": "2.2.1-rc.7",
     "private": false,
     "description": "EventTarget-Based Embed ↔ Host Communication for UI Embedding",
     "license": "SEE LICENSE IN LICENSE.txt",
@@ -25,10 +25,12 @@
         "clean": "rimraf dist"
     },
     "devDependencies": {
-        "utils": "2.2.1-rc.2"
+        "utils": "2.2.1-rc.7"
     },
     "files": [
         "dist/",
+        "!dist/__tests__/",
+        "!dist/__mocks__/",
         "!dist/*.test.js",
         "!dist/*.map",
         "README.md",