@salesforce/sf-embedding-bridge 2.2.2 → 2.2.3

package/dist/index.esm.js

@@ -1,5 +1,101 @@
-import { BOOTSTRAP_ENVELOPE_TYPE, PROTOCOL_NAME, HOST_META_DATA_PARAM, HEARTBEAT_TYPE, SHUTDOWN_TYPE, HOST_INITIALIZED_METHOD, EMBEDDING_INITIALIZED_METHOD, SfEmbeddingErrorCode, NON_RETRYABLE_CODES } from '@salesforce/sf-embedding-contract';
-import { MessageChannelTransport, JsonRpcClient, StandardErrorCode, makeJsonRpcError as makeJsonRpcError$1 } from '@salesforce/jsonrpc';
+import { JsonRpcClient, isJsonRpcRequest, StandardErrorCode, makeJsonRpcError as makeJsonRpcError$1, MessageChannelTransport } from '@salesforce/jsonrpc';
+
+// Bootstrap envelope vocabulary. Spec: EMBEDDING-PROTOCOL.md §3.1, §3.1.1,
+// MC-7/MC-8/MC-10 in §2.2.
+/** Wire identifier for this protocol. Carried verbatim on every bootstrap envelope. */
+const PROTOCOL_NAME = "sf-embedding";
+/** Discriminator for the host → embedding bootstrap envelope. */
+const BOOTSTRAP_ENVELOPE_TYPE = "sf-embedding.bootstrap";
+/** Discriminator for the embedding → host content-free heartbeat. */
+const HEARTBEAT_TYPE = "sf-embedding/ready";
+/**
+ * Discriminator for the embedding → host fail-closed shutdown signal
+ * (e.g., duplicate-transfer detection). Posted via window-level postMessage,
+ * not over the JSON-RPC port.
+ */
+const SHUTDOWN_TYPE = "sf-embedding/shutdown";
+
+// sf-embedding protocol-specific JSON-RPC error codes. Spec §8.2.
+//
+// Standard JSON-RPC codes (-32700, -32600..-32603) and transport-level codes
+// (PORT_CLOSED, SERIALIZATION_FAILURE, REQUEST_TIMEOUT, BACKPRESSURE,
+// REQUEST_CANCELLED) live in `@salesforce/jsonrpc`'s
+// `StandardErrorCode` and are NOT re-exported here. Consumers that need the
+// merged vocabulary compose them at the call site.
+/** sf-embedding protocol-specific error codes (§8.2 numeric assignments). */
+const SfEmbeddingErrorCode = {
+    /** Method exists at selected version but is not granted (§6.5). */
+    CAPABILITY_NOT_ALLOWED: -32010,
+    /** In-flight request gated on a capability that was just revoked (§6.6). */
+    CAPABILITY_REVOKED: -32011,
+    /** Frame arrived before the required handshake step completed (§5.2, §4.2). */
+    NOT_INITIALIZED: -32012,
+    /** Embedding's protocol version is not supported by the host (§4.2, §3.1.2). */
+    PROTOCOL_VERSION_MISMATCH: -32013,
+    /** Frame's origin does not match the bound peer origin (§3.1). */
+    ORIGIN_MISMATCH: -32014,
+    /** Catch-all — duplicate ui/select-version, duplicate ui/discover-capabilities, etc. */
+    PROTOCOL_VIOLATION: -32020,
+    /** Embedding observed a second valid bootstrap envelope and shut down (§3.1.2). */
+    BOOTSTRAP_DUPLICATE_TRANSFER: -32023,
+};
+/**
+ * Codes that are non-retryable by default (§8.4). Consumers building error
+ * payloads SHOULD set `retryable: false` automatically for these.
+ */
+const NON_RETRYABLE_CODES = new Set([
+    SfEmbeddingErrorCode.CAPABILITY_NOT_ALLOWED,
+    SfEmbeddingErrorCode.CAPABILITY_REVOKED,
+    SfEmbeddingErrorCode.ORIGIN_MISMATCH,
+]);
+
+// Bidirectional custom-event channel.
+const EVENTS_DISPATCH_METHOD = "ui/events/dispatch";
+const EVENTS_SUBSCRIBE_METHOD = "ui/events/subscribe";
+const EVENTS_UNSUBSCRIBE_METHOD = "ui/events/unsubscribe";
+
+// Host LWC reserved DOM event names and detail shapes. Spec §12.3.
+//
+// These are dispatched by the host LWC on its own element so application
+// code on the page can react. The embedding never observes them.
+/** Event names the host LWC dispatches on its own element. Reserved by the protocol. */
+const HostLwcEvent = {
+    /** Synchronous with `ui/discover-capabilities` response; session reaches READY. */
+    READY: "sf-embedding.component.ready",
+    /** Misconfiguration, bootstrap failure, embedding-reported fatal, or protocol violation. */
+    ERROR: "sf-embedding.component.error",
+};
+
+// Host-supplied iframe URL metadata (per ADR 0029). Spec §3.1, MC-8/MC-10.
+/** URL query-parameter name carrying the JSON-encoded `HostMetaData`. */
+const HOST_META_DATA_PARAM = "hostMetaData";
+
+// Shared error class for inbound-request handlers on either side of the wire.
+// Routers translate it into a JSON-RPC error response with the carried `code`;
+// any other thrown value falls back to INTERNAL_ERROR (-32603).
+/** Throw from a request handler to surface a specific JSON-RPC error code. */
+class JsonRpcHandlerError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "JsonRpcHandlerError";
+    }
+}
+
+// JSON-RPC method names on the wire today.
+/** Host announces session identity to the embedding over the port. */
+const HOST_INITIALIZED_METHOD = "ui/notifications/host-initialized";
+/** Embedding acknowledges receipt of `host-initialized`. Fire-and-forget. */
+const EMBEDDING_INITIALIZED_METHOD = "ui/notifications/embedding-initialized";
+
+// Resize hint channel: embedding → host, fire-and-forget. CSS pixels.
+const RESIZE_METHOD = "ui/notifications/resize";
+
+// UI-state subscription axis. Snapshot in subscribe response; full-replacement change pushes.
+const UI_STATE_SUBSCRIBE_METHOD = "ui/subscribe/ui-state";
+const UI_STATE_UNSUBSCRIBE_METHOD = "ui/unsubscribe/ui-state";
+const UI_STATE_CHANGED_METHOD = "ui/notifications/ui-state-changed";
 
 // Bootstrap envelope validator for the iframe (embedding) side of the
 // sf-embedding handshake.
@@ -89,6 +185,7 @@ function readHostMetaData(search) {
     return { instanceId, hostAppOrigin };
 }
 
+const BRIDGE_PROTOCOL_VERSION = "1.0.0";
 class BootstrapFailureError extends Error {
     reason;
     constructor(reason) {
@@ -103,7 +200,8 @@ function installBootstrapListener() {
         return Promise.reject(new BootstrapFailureError("MISSING_HOST_METADATA"));
     }
     return new Promise((resolve) => {
-        let accepted = false;
+        // Non-null after first accept; needed to close on duplicate transfer.
+        let acceptedPort = null;
         const handler = (event) => {
             const result = validateBootstrapEnvelope({
                 data: event.data,
@@ -113,7 +211,7 @@ function installBootstrapListener() {
                 expectedSource: window.parent,
                 allowedOrigins: [meta.hostAppOrigin],
                 expectedInstanceId: meta.instanceId,
-                alreadyAccepted: accepted,
+                alreadyAccepted: acceptedPort !== null,
             });
             if (!result.ok) {
                 if (result.reason === "DUPLICATE_TRANSFER") {
@@ -123,18 +221,26 @@ function installBootstrapListener() {
                     catch {
                         // ignore
                     }
+                    // Cannot disambiguate which envelope is real; fail closed.
+                    try {
+                        acceptedPort?.close();
+                    }
+                    catch {
+                        // already-closed ports throw on some runtimes
+                    }
+                    acceptedPort = null;
+                    console.error("[sf-embedding]", "DUPLICATE_PORT_TRANSFER: session shut down");
                     window.removeEventListener("message", handler);
                 }
                 return;
             }
-            accepted = true;
+            acceptedPort = result.port;
             resolve({ port: result.port, hostMetaData: meta });
-            // Listener stays registered per spec §3.1 — a second valid
-            // envelope MUST trigger the fail-closed shutdown branch above.
+            // Listener stays registered: a second valid envelope must shut down.
         };
         window.addEventListener("message", handler);
         try {
-            window.parent.postMessage({ type: HEARTBEAT_TYPE, instanceId: meta.instanceId }, meta.hostAppOrigin);
+            window.parent.postMessage({ type: HEARTBEAT_TYPE, instanceId: meta.instanceId, protocolVersion: BRIDGE_PROTOCOL_VERSION }, meta.hostAppOrigin);
         }
         catch {
             // ignore
@@ -142,10 +248,310 @@ function installBootstrapListener() {
     });
 }
 
+/**
+ * EmbeddingResizer - Handles dynamic iframe/container resizing
+ * Uses ResizeObserver to monitor element size changes and notify the host
+ */
+class EmbeddingResizer {
+    #observer = null;
+    #targetElement;
+    #onResize;
+    #onReady;
+    #waitForDOMReady;
+    #lastHeight = -1;
+    #scheduled = false;
+    #isObserving = false;
+    constructor(options) {
+        this.#targetElement = options.targetElement || document.body;
+        this.#onResize = options.onResize;
+        this.#onReady = options.onReady;
+        this.#waitForDOMReady = options.waitForDOMReady ?? true;
+    }
+    /**
+     * Start observing the target element for size changes
+     */
+    start() {
+        if (this.#isObserving) {
+            return;
+        }
+        if (this.#waitForDOMReady && document.readyState === "loading") {
+            document.addEventListener("DOMContentLoaded", () => this.#startObserver(), { once: true });
+        }
+        else {
+            this.#startObserver();
+        }
+    }
+    /**
+     * Stop observing and clean up resources
+     */
+    stop() {
+        if (this.#observer) {
+            this.#observer.disconnect();
+            this.#observer = null;
+        }
+        this.#isObserving = false;
+        this.#lastHeight = -1;
+        this.#scheduled = false;
+    }
+    /**
+     * Get the current observed height
+     */
+    getLastHeight() {
+        return this.#lastHeight;
+    }
+    /**
+     * Check if currently observing
+     */
+    isObserving() {
+        return this.#isObserving;
+    }
+    #startObserver = () => {
+        this.#observer = new ResizeObserver((entries) => {
+            this.#handleResize(entries);
+        });
+        this.#observer.observe(this.#targetElement, { box: "border-box" });
+        this.#isObserving = true;
+        // Invoke ready callback if provided
+        if (this.#onReady) {
+            this.#onReady();
+        }
+    };
+    #handleResize = (entries) => {
+        if (!entries || entries.length === 0) {
+            return;
+        }
+        const entry = entries[0];
+        const measuredHeight = this.#extractHeight(entry);
+        const heightPx = Math.max(0, Math.ceil(Number(measuredHeight)));
+        if (!Number.isFinite(heightPx)) {
+            return;
+        }
+        if (heightPx === this.#lastHeight) {
+            return;
+        }
+        this.#lastHeight = heightPx;
+        if (!this.#scheduled) {
+            this.#scheduled = true;
+            // eslint-disable-next-line @lwc/lwc/no-async-operation
+            requestAnimationFrame(() => {
+                this.#scheduled = false;
+                if (!this.#isObserving)
+                    return;
+                try {
+                    this.#onResize(this.#lastHeight);
+                }
+                catch {
+                    // Swallow: a throwing consumer (e.g. disposed bridge) must not wedge the rAF loop.
+                }
+            });
+        }
+    };
+    #extractHeight = (entry) => {
+        // Try borderBoxSize first (more accurate)
+        if (entry.borderBoxSize) {
+            if (Array.isArray(entry.borderBoxSize)) {
+                return entry.borderBoxSize[0]?.blockSize || 0;
+            }
+            // Some browsers return a single object instead of array
+            return entry.borderBoxSize.blockSize || 0;
+        }
+        // Fallback to contentRect
+        if (entry.contentRect && typeof entry.contentRect.height === "number") {
+            return entry.contentRect.height;
+        }
+        // Last resort: getBoundingClientRect
+        if (entry.target && typeof entry.target.getBoundingClientRect === "function") {
+            return entry.target.getBoundingClientRect().height;
+        }
+        return 0;
+    };
+}
+
+/**
+ * JSON-RPC plumbing shared by both peers of the sf-embedding protocol.
+ *
+ * Two layers live here:
+ *
+ *  - `BridgeClient` — the OUTBOUND half plus inbound responses/notifications.
+ *    Extends the library `JsonRpcClient`, so it already correlates outbound
+ *    `send()` requests with their inbound responses, dispatches inbound
+ *    notifications to `onNotification` handlers, and stamps every outbound
+ *    frame with a `_meta.traceId`. It owns the single `Transport`.
+ *
+ *  - `JsonRpcRouter` — the INBOUND-REQUEST half. It HOLDS a `BridgeClient`
+ *    and adds the one thing the client deliberately lacks: routing inbound
+ *    JSON-RPC *requests* to registered handlers and replying success/error
+ *    on the same transport (echoing `_meta` for tracing). Notifications,
+ *    responses, and outbound traffic are delegated straight to the client —
+ *    no duplicate handler tables.
+ *
+ * Request vs response/notification dispatch does not collide on the shared
+ * transport: `JsonRpcClient` ignores frames carrying both an `id` and a
+ * `method` (requests), so the router is free to claim them.
+ *
+ * Each peer subclasses `JsonRpcRouter` (see `HostBridge` /
+ * `EmbeddingBridge`): the subclass registers its inbound handlers in the
+ * constructor and exposes named methods for its outbound requests.
+ */
+// makeJsonRpcError is the upstream factory; sf-embedding's NON_RETRYABLE_CODES wrapper
+// (in sf-embedding-bridge/src/errors.ts) is bypassed here because `utils` cannot depend
+// on the bridge package. A ratchet test in sf-embedding-contract guards the invariant
+// that NON_RETRYABLE_CODES never overlaps the upstream RETRYABLE set.
+function isRequestHandlerError(err) {
+    return err instanceof Error && typeof err.code === "number";
+}
+/**
+ * Outbound + response/notification half of a JSON-RPC peer, bound to one
+ * transport. Promotes the library client's `protected` send/notify/register
+ * methods to a `public` surface the router (and its subclasses) can call, and
+ * exposes `post`/`subscribe` so the router can reply to and listen for inbound
+ * requests over the same transport.
+ *
+ * Stamps `_meta.traceId` on every outbound frame; both peers want tracing.
+ */
+class BridgeClient extends JsonRpcClient {
+    sharedTransport;
+    constructor(transport) {
+        super(transport);
+        this.sharedTransport = transport;
+    }
+    /** Send a request and await its correlated response. */
+    send(method, params) {
+        return this.request(method, params);
+    }
+    /** Send a fire-and-forget notification. */
+    notify(method, params) {
+        this.sendNotification(method, params);
+    }
+    /** Register an inbound-notification handler. */
+    onNotification(method, handler) {
+        this.registerNotificationHandler(method, handler);
+    }
+    /** @internal — used by JsonRpcRouter to reply to inbound requests. */
+    post(frame) {
+        this.sharedTransport.post(frame);
+    }
+    /** @internal — used by JsonRpcRouter to claim inbound requests. */
+    subscribe(callback) {
+        return this.sharedTransport.onMessage(callback);
+    }
+    /** Tear down the underlying transport if it is disposable (e.g. MessageChannelTransport closes its port). */
+    dispose() {
+        const transport = this.sharedTransport;
+        if (typeof transport.dispose === "function") {
+            transport.dispose();
+        }
+    }
+    /** Mints `_meta.traceId` for every outbound request and notification. */
+    getOutboundMeta(_method) {
+        return { traceId: crypto.randomUUID() };
+    }
+}
+/**
+ * Inbound-request router. Holds a `BridgeClient` for everything else
+ * (outbound requests/notifications, inbound responses, inbound notifications)
+ * and adds inbound-request routing + replies on the shared transport.
+ *
+ * Subclass it per peer: register handlers in the constructor, add named
+ * outbound methods that call `send`/`notify`.
+ */
+class JsonRpcRouter {
+    client;
+    requestHandlers = new Map();
+    log;
+    unsubscribe = null;
+    constructor(client, log = () => { }) {
+        this.client = client;
+        this.log = log;
+        // Claim inbound *requests*; the client already handles responses and
+        // notifications on the same transport and ignores request frames.
+        this.unsubscribe = this.client.subscribe((data) => this.handle(data));
+    }
+    /** Register a handler for an inbound request method. Returns a disposer; re-registering overwrites. */
+    onRequest(method, handler) {
+        this.requestHandlers.set(method, handler);
+        return () => {
+            if (this.requestHandlers.get(method) === handler) {
+                this.requestHandlers.delete(method);
+            }
+        };
+    }
+    /** Register an inbound-notification handler (delegates to the client). */
+    onNotification(method, handler) {
+        this.client.onNotification(method, handler);
+    }
+    /** Send an outbound request and await its response (delegates to the client). */
+    send(method, params) {
+        return this.client.send(method, params);
+    }
+    /** Send an outbound notification (delegates to the client). */
+    notify(method, params) {
+        this.client.notify(method, params);
+    }
+    /**
+     * Tear down: drop the inbound-request subscription, clear handlers, and
+     * dispose the client's transport (closes the port). Idempotent.
+     */
+    dispose() {
+        if (this.unsubscribe) {
+            this.unsubscribe();
+            this.unsubscribe = null;
+        }
+        this.requestHandlers.clear();
+        this.client.dispose();
+    }
+    /** Route one inbound frame. Only requests are handled here; the rest is the client's. */
+    handle(data) {
+        if (!isJsonRpcRequest(data))
+            return;
+        this.handleRequest(data);
+    }
+    handleRequest(req) {
+        const handler = this.requestHandlers.get(req.method);
+        if (!handler) {
+            this.respondError(req.id, StandardErrorCode.METHOD_NOT_FOUND, `Method not found: ${req.method}`, req._meta);
+            return;
+        }
+        Promise.resolve()
+            .then(() => handler(req.params, req._meta))
+            .then((result) => this.respondSuccess(req.id, result, req._meta), (err) => {
+            const code = isRequestHandlerError(err) ? err.code : StandardErrorCode.INTERNAL_ERROR;
+            const message = err instanceof Error ? err.message : String(err);
+            this.respondError(req.id, code, message, req._meta);
+        });
+    }
+    respondSuccess(id, result, meta) {
+        const frame = { jsonrpc: "2.0", id, result };
+        if (meta)
+            frame._meta = meta;
+        this.postSafely(frame);
+    }
+    respondError(id, code, message, meta) {
+        const frame = {
+            jsonrpc: "2.0",
+            id,
+            error: makeJsonRpcError$1(code, { message }),
+        };
+        if (meta)
+            frame._meta = meta;
+        this.postSafely(frame);
+    }
+    postSafely(frame) {
+        try {
+            this.client.post(frame);
+        }
+        catch (err) {
+            // Transport.post should not throw on transient failure, but guard so a
+            // misbehaving transport can't take down request handling.
+            this.log("response post threw —", err);
+        }
+    }
+}
+
 /** Identity emitted on `ui/notifications/embedding-initialized`. */
 const EMBEDDING_INFO = {
     name: "@salesforce/sf-embedding-bridge",
-    version: "2.2.2",
+    version: "2.2.3",
 };
 
 class SessionFailureError extends Error {
@@ -159,10 +565,20 @@ class SessionFailureError extends Error {
         }
     }
 }
-class SessionClient extends JsonRpcClient {
-    waitForHostInitialized() {
-        return new Promise((resolve) => {
-            this.registerNotificationHandler(HOST_INITIALIZED_METHOD, (params) => {
+/**
+ * Embedding-side peer. One object that routes inbound requests (via
+ * `JsonRpcRouter`), handles inbound notifications, and exposes named methods
+ * for the embedding's outbound traffic. Register inbound handlers in the
+ * constructor; add outbound methods as the protocol grows.
+ */
+class EmbeddingBridge extends JsonRpcRouter {
+    hostInitialized;
+    resizer = null;
+    constructor(transport) {
+        super(new BridgeClient(transport));
+        // Resolve when the host announces it has initialized.
+        this.hostInitialized = new Promise((resolve) => {
+            this.onNotification(HOST_INITIALIZED_METHOD, (params) => {
                 const payload = params && typeof params === "object" && !Array.isArray(params)
                     ? params
                     : {};
@@ -170,48 +586,119 @@ class SessionClient extends JsonRpcClient {
             });
         });
     }
+    /** Await the host's `host-initialized` notification. */
+    waitForHostInitialized() {
+        return this.hostInitialized;
+    }
+    /** Announce that the embedding has initialized. */
     sendInitializedNotification() {
         const params = { embeddingInfo: EMBEDDING_INFO };
-        this.sendNotification(EMBEDDING_INITIALIZED_METHOD, params);
+        this.notify(EMBEDDING_INITIALIZED_METHOD, params);
+    }
+    /** Subscribe to host UI-state. Returns the initial snapshot + active subscription id. */
+    sendUiStateSubscribe() {
+        return this.send(UI_STATE_SUBSCRIBE_METHOD, {});
+    }
+    /** Tear down an active UI-state subscription. */
+    sendUiStateUnsubscribe(subscriptionId) {
+        return this.send(UI_STATE_UNSUBSCRIBE_METHOD, { subscriptionId });
+    }
+    /** Register a handler for `ui/notifications/ui-state-changed`. */
+    onUiStateChanged(handler) {
+        this.onNotification(UI_STATE_CHANGED_METHOD, handler);
+    }
+    /** Fire-and-forget dispatch of a custom event (bidirectional `ui/events/dispatch`).
+     * `options` controls DOM-event flags on the receiving side; defaults bubble + composed = true. */
+    sendEventDispatch(eventType, detail, options) {
+        const params = { eventType, detail, ...options };
+        this.notify(EVENTS_DISPATCH_METHOD, params);
+    }
+    /** Subscribe to host-driven events. One subscription per session — local fan-out by eventType is the SDK's job. */
+    sendEventSubscribe() {
+        return this.send(EVENTS_SUBSCRIBE_METHOD, {});
+    }
+    /** Tear down a host-event subscription. */
+    sendEventUnsubscribe(subscriptionId) {
+        return this.send(EVENTS_UNSUBSCRIBE_METHOD, { subscriptionId });
+    }
+    /** Register a handler for inbound `ui/events/dispatch` (host → embedding). */
+    onEventDispatch(handler) {
+        this.onNotification(EVENTS_DISPATCH_METHOD, handler);
+    }
+    /** Fire-and-forget resize hint (`ui/notifications/resize`). */
+    sendResize(dimensions) {
+        this.notify(RESIZE_METHOD, dimensions);
+    }
+    /** Attach an auto-emit resizer; stopped on dispose. Replaces any prior resizer. */
+    attachResizer(resizer) {
+        if (this.resizer && this.resizer !== resizer)
+            this.resizer.stop();
+        this.resizer = resizer;
+    }
+    dispose() {
+        this.resizer?.stop();
+        this.resizer = null;
+        super.dispose();
     }
 }
-function rejectOnAbort(signal) {
+// `cleanup` lets the caller drop our listener from the consumer-owned signal once the race resolves.
+function rejectOnAbort(signal, cleanup) {
     if (!signal)
         return new Promise(() => { });
     if (signal.aborted)
         return Promise.reject(new SessionFailureError("ABORTED"));
     return new Promise((_, reject) => {
-        signal.addEventListener("abort", () => reject(new SessionFailureError("ABORTED")), { once: true });
+        signal.addEventListener("abort", () => reject(new SessionFailureError("ABORTED")), {
+            once: true,
+            signal: cleanup,
+        });
     });
 }
 let sessionPromise = null;
-/**
- * Bootstraps the sf-embedding session. Single-attempt per iframe — recovery
- * from failure requires a host-driven remount (`port1` is one-shot; a new
- * session needs a new `MessageChannel` + `instanceId`).
- */
+/** Single-attempt per iframe; recovery from failure requires a host-driven remount. */
 function bootstrapSession(options = {}) {
     if (sessionPromise)
         return sessionPromise;
     sessionPromise = installBootstrapListener()
         .then(async (capture) => {
         const transport = new MessageChannelTransport(capture.port);
-        const client = new SessionClient(transport);
-        const hostInitialized = await Promise.race([
-            client.waitForHostInitialized(),
-            rejectOnAbort(options.signal),
-        ]);
-        client.sendInitializedNotification();
-        return {
-            client,
-            hostMetaData: capture.hostMetaData,
-            hostInitialized,
-        };
+        const bridge = new EmbeddingBridge(transport);
+        const abortCleanup = new AbortController();
+        try {
+            const hostInitialized = await Promise.race([
+                bridge.waitForHostInitialized(),
+                rejectOnAbort(options.signal, abortCleanup.signal),
+            ]);
+            bridge.sendInitializedNotification();
+            const handle = {
+                bridge,
+                hostMetaData: capture.hostMetaData,
+                hostInitialized,
+            };
+            // Auto-emit resize hints on document.body (height-only, RAF-coalesced).
+            // Bridge owns the resizer's lifecycle so dispose() stops the observer.
+            const resizer = new EmbeddingResizer({
+                waitForDOMReady: true,
+                onResize: (height) => bridge.sendResize({ height }),
+            });
+            bridge.attachResizer(resizer);
+            resizer.start();
+            return handle;
+        }
+        catch (err) {
+            // Abort or unexpected failure after construction: dispose so the port doesn't leak.
+            bridge.dispose();
+            throw err;
+        }
+        finally {
+            // Detach our abort listener from the consumer-owned signal.
+            abortCleanup.abort();
+        }
     })
         .catch((err) => {
         if (err instanceof SessionFailureError)
             throw err;
-        if (err instanceof Error && "reason" in err) {
+        if (err instanceof BootstrapFailureError) {
             throw new SessionFailureError(err.reason, err);
         }
         throw err;
@@ -239,5 +726,5 @@ function makeJsonRpcError(code, options = {}) {
     return makeJsonRpcError$1(code, options);
 }
 
-export { BootstrapFailureError, ErrorCode, SessionFailureError, bootstrapSession, isBootstrapEnvelope, makeJsonRpcError, readHostMetaData, validateBootstrapEnvelope };
+export { BOOTSTRAP_ENVELOPE_TYPE, BootstrapFailureError, BridgeClient, EMBEDDING_INITIALIZED_METHOD, EVENTS_DISPATCH_METHOD, EVENTS_SUBSCRIBE_METHOD, EVENTS_UNSUBSCRIBE_METHOD, EmbeddingBridge, ErrorCode, HEARTBEAT_TYPE, HOST_INITIALIZED_METHOD, HOST_META_DATA_PARAM, HostLwcEvent, JsonRpcHandlerError, JsonRpcRouter, NON_RETRYABLE_CODES, PROTOCOL_NAME, RESIZE_METHOD, SHUTDOWN_TYPE, SessionFailureError, SfEmbeddingErrorCode, UI_STATE_CHANGED_METHOD, UI_STATE_SUBSCRIBE_METHOD, UI_STATE_UNSUBSCRIBE_METHOD, bootstrapSession, isBootstrapEnvelope, makeJsonRpcError, readHostMetaData, validateBootstrapEnvelope };
 //# sourceMappingURL=index.esm.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@salesforce/sf-embedding-bridge",
-    "version": "2.2.2",
+    "version": "2.2.3",
     "private": false,
     "description": "JSON-RPC 2.0 bridge for the sf-embedding host ↔ embedding protocol",
     "license": "SEE LICENSE IN LICENSE.txt",
@@ -21,11 +21,18 @@
         "test": "jest --passWithNoTests"
     },
     "dependencies": {
-        "@salesforce/sf-embedding-contract": "2.2.2",
-        "@salesforce/jsonrpc": "^9.13.0"
+        "@salesforce/jsonrpc": "^10.12.3"
+    },
+    "devDependencies": {
+        "@salesforce/sf-embedding-contract": "2.2.3",
+        "utils": "2.2.3"
     },
     "files": [
         "dist/",
+        "!dist/__tests__/",
+        "!dist/__mocks__/",
+        "!dist/*.test.js",
+        "!dist/*.map",
         "README.md",
         "LICENSE.txt"
     ],

package/dist/bootstrap-envelope.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bootstrap-envelope.d.ts","sourceRoot":"","sources":["../src/bootstrap-envelope.ts"],"names":[],"mappings":"AAUA,OAAO,EAA2B,KAAK,iBAAiB,EAAiB,MAAM,mCAAmC,CAAC;AAEnH,MAAM,MAAM,kCAAkC,GACxC,eAAe,GACf,cAAc,GACd,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,oBAAoB,CAAC;AAE3B,MAAM,MAAM,iCAAiC,GACvC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kCAAkC,CAAA;CAAE,CAAC;AAEhE,MAAM,WAAW,gCAAgC;IAC7C,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAClC,cAAc,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC1C,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;CAC5B;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAQ9E;AAED,kGAAkG;AAClG,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,gCAAgC,GAAG,iCAAiC,CAYpH"}

package/dist/bootstrap-listener.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bootstrap-listener.d.ts","sourceRoot":"","sources":["../src/bootstrap-listener.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,YAAY,EAAiB,MAAM,mCAAmC,CAAC;AAKrG,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,YAAY,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAE7D,qBAAa,qBAAsB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;gBAC5B,MAAM,EAAE,sBAAsB;CAK7C;AAED,wBAAgB,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAkDrE"}

package/dist/bootstrap-session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bootstrap-session.d.ts","sourceRoot":"","sources":["../src/bootstrap-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAA2B,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAIH,KAAK,YAAY,EACpB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,KAAK,sBAAsB,EAA4B,MAAM,sBAAsB,CAAC;AAG7F,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,YAAY,CAAC;IAC3B,eAAe,EAAE,sBAAsB,CAAC;CAC3C;AAED,MAAM,MAAM,oBAAoB,GAAG,sBAAsB,GAAG,SAAS,CAAC;AAEtE,qBAAa,mBAAoB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;gBAC1B,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC,EAAE,OAAO;CAQ5D;AAED,MAAM,WAAW,uBAAuB;IACpC;;;;OAIG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACxB;AA+BD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,OAAO,CAAC,aAAa,CAAC,CA+B9F"}