@thor-commerce/app-bridge-react 0.5.0 → 0.6.0

package/README.md

@@ -24,6 +24,7 @@ const bridge = createAppBridge({
 bridge.send("app:ready", { version: "1.0.0" });
 
 const session = await bridge.request<undefined, { shopId: string }>("session:get");
+const sessionToken = await bridge.getSessionToken({ clientId: "your-client-id" });
 
 bridge.on("navigation:update", (message) => {
   console.log(message.payload);
@@ -38,12 +39,7 @@ import { ReactRouterAppBridgeProvider } from "@thor-commerce/app-bridge-react/re
 
 export default function App() {
   return (
-    <ReactRouterAppBridgeProvider
-      source="embedded-app"
-      target="dashboard"
-      targetOrigin="https://dashboard.thorcommerce.com"
-      allowedOrigins={["https://dashboard.thorcommerce.com"]}
-    >
+    <ReactRouterAppBridgeProvider clientId="your-client-id">
       <Outlet />
     </ReactRouterAppBridgeProvider>
   );
@@ -59,12 +55,7 @@ import { NextAppBridgeProvider } from "@thor-commerce/app-bridge-react/next";
 
 export function Providers({ children }: { children: React.ReactNode }) {
   return (
-    <NextAppBridgeProvider
-      source="embedded-app"
-      target="dashboard"
-      targetOrigin="https://dashboard.thorcommerce.com"
-      allowedOrigins={["https://dashboard.thorcommerce.com"]}
-    >
+    <NextAppBridgeProvider clientId="your-client-id">
       {children}
     </NextAppBridgeProvider>
   );
@@ -88,9 +79,10 @@ If you are not using React Router or Next.js, use `AppBridgeProvider` from the r
 - `AppBridgeProvider` manages the bridge lifecycle for React apps.
 - `useAppBridge()` gives access to the underlying bridge instance for advanced cases.
 - `ReactRouterAppBridgeProvider` and `NextAppBridgeProvider` are framework adapters with built-in navigation syncing.
-- `targetOrigin` should be set explicitly on both sides of the bridge. The `"*"` fallback is kept for local development compatibility, but it is unsafe for production.
+- `clientId` is the primary app identity input for the React providers. The provider infers the dashboard origin from `document.referrer` in embedded contexts.
 - `bridge.send(type, payload)` sends a fire-and-forget event.
 - `bridge.request(type, payload, options)` sends a request and waits for a response.
+- `bridge.getSessionToken({clientId}, options)` requests a short-lived embedded app session token from the dashboard.
 - `bridge.on(type, handler)` subscribes to events. Use `"*"` to listen to every incoming message.
 - `bridge.onRequest(type, handler)` registers a request handler that can reply with a value or promise.
 - `bridge.setTargetWindow(window)` updates the destination window after construction.

package/dist/{chunk-RWPS2DOE.js → chunk-X5YISVIL.js}

@@ -117,6 +117,7 @@ var AppBridge = class {
     this.requestHandlers = /* @__PURE__ */ new Map();
     this.pendingRequests = /* @__PURE__ */ new Map();
     this.namespace = options.namespace ?? DEFAULT_NAMESPACE;
+    this.clientId = options.clientId;
     this.source = options.source ?? "embedded-app";
     this.target = options.target;
     this.targetOrigin = options.targetOrigin ?? "*";
@@ -200,10 +201,14 @@ var AppBridge = class {
       }
     });
   }
-  getSessionToken(options = {}) {
+  getSessionToken(request = {}, options = {}) {
+    const resolvedRequest = request.clientId || this.clientId ? {
+      ...request,
+      clientId: request.clientId ?? this.clientId
+    } : request;
     return this.request(
       "thor:session-token:get",
-      void 0,
+      resolvedRequest,
       options
     );
   }
@@ -378,8 +383,8 @@ import {
 import { jsx } from "react/jsx-runtime";
 var AppBridgeContext = createContext(null);
 function AppBridgeProvider({
-  allowedOrigins,
   children,
+  clientId,
   currentPath,
   navigationEventType = "navigation:go",
   navigationUpdateEventType = "navigation:update",
@@ -389,14 +394,13 @@ function AppBridgeProvider({
   readyPayload,
   requestTimeoutMs,
   selfWindow,
-  source,
-  target,
   targetOrigin,
   targetWindow
 }) {
   const [bridge, setBridge] = useState(null);
   const onNavigateRef = useRef(onNavigate);
-  const allowedOriginsKey = allowedOrigins?.join("\n") ?? "";
+  const sessionTokenCacheRef = useRef(null);
+  const pendingSessionTokenRef = useRef(null);
   useEffect(() => {
     onNavigateRef.current = onNavigate;
   }, [onNavigate]);
@@ -404,14 +408,17 @@ function AppBridgeProvider({
     if (typeof window === "undefined" && !selfWindow) {
       return;
     }
+    const resolvedTargetOrigin = targetOrigin ?? getReferrerOrigin(selfWindow);
+    const resolvedAllowedOrigins = resolvedTargetOrigin ? [resolvedTargetOrigin] : void 0;
     const nextBridge = createAppBridge({
-      allowedOrigins: allowedOriginsKey ? allowedOriginsKey.split("\n") : void 0,
+      allowedOrigins: resolvedAllowedOrigins,
+      clientId,
       namespace,
       requestTimeoutMs,
       selfWindow,
-      source,
-      target,
-      targetOrigin,
+      source: "embedded-app",
+      target: "dashboard",
+      targetOrigin: resolvedTargetOrigin,
       targetWindow
     });
     setBridge(nextBridge);
@@ -420,12 +427,10 @@ function AppBridgeProvider({
       nextBridge.destroy();
     };
   }, [
-    allowedOriginsKey,
+    clientId,
     namespace,
     requestTimeoutMs,
     selfWindow,
-    source,
-    target,
     targetOrigin,
     targetWindow
   ]);
@@ -433,8 +438,13 @@ function AppBridgeProvider({
     if (!bridge || !bridge.hasTargetWindow()) {
       return;
     }
-    bridge.send(readyEventType, readyPayload);
-  }, [bridge, readyEventType, readyPayload]);
+    bridge.send(
+      readyEventType,
+      readyPayload ?? {
+        clientId
+      }
+    );
+  }, [bridge, clientId, readyEventType, readyPayload]);
   useEffect(() => {
     if (!bridge || !bridge.hasTargetWindow() || !currentPath) {
       return;
@@ -453,11 +463,145 @@ function AppBridgeProvider({
       onNavigateRef.current?.(destination, message);
     });
   }, [bridge, navigationEventType, onNavigate]);
+  useEffect(() => {
+    if (!bridge || typeof window === "undefined") {
+      return;
+    }
+    const originalFetch = window.fetch.bind(window);
+    window.fetch = async (input, init) => {
+      if (!shouldAttachSessionToken(input)) {
+        return originalFetch(input, init);
+      }
+      const existingAuthorization = getExistingAuthorization(input, init);
+      if (existingAuthorization) {
+        return originalFetch(input, init);
+      }
+      const nextHeaders = new Headers(
+        input instanceof Request ? input.headers : init?.headers
+      );
+      const sessionToken = await getSessionToken({
+        bridge,
+        clientId,
+        pendingSessionTokenRef,
+        sessionTokenCacheRef
+      });
+      nextHeaders.set("Authorization", `Bearer ${sessionToken}`);
+      if (input instanceof Request) {
+        return originalFetch(
+          new Request(input, {
+            headers: nextHeaders
+          })
+        );
+      }
+      return originalFetch(input, {
+        ...init,
+        headers: nextHeaders
+      });
+    };
+    return () => {
+      window.fetch = originalFetch;
+    };
+  }, [bridge, clientId]);
   return /* @__PURE__ */ jsx(AppBridgeContext.Provider, { value: bridge, children });
 }
 function useAppBridge() {
   return useContext(AppBridgeContext);
 }
+function getReferrerOrigin(explicitWindow) {
+  const resolvedWindow = explicitWindow ?? (typeof window !== "undefined" ? window : void 0);
+  const referrer = resolvedWindow?.document?.referrer;
+  if (!referrer) {
+    return void 0;
+  }
+  try {
+    return new URL(referrer).origin;
+  } catch {
+    return void 0;
+  }
+}
+async function getSessionToken({
+  bridge,
+  clientId,
+  pendingSessionTokenRef,
+  sessionTokenCacheRef
+}) {
+  const cachedToken = sessionTokenCacheRef.current;
+  if (cachedToken && !isExpired(cachedToken.expiresAt)) {
+    return cachedToken.token;
+  }
+  if (pendingSessionTokenRef.current) {
+    return pendingSessionTokenRef.current;
+  }
+  const pendingToken = bridge.getSessionToken({ clientId }).then((response) => {
+    const token = response.sessionToken ?? response.idToken;
+    if (!token) {
+      throw new Error("Missing Thor embedded session token");
+    }
+    sessionTokenCacheRef.current = {
+      token,
+      expiresAt: normalizeTokenExpiry(token, response.exp)
+    };
+    pendingSessionTokenRef.current = null;
+    return token;
+  }).catch((error) => {
+    pendingSessionTokenRef.current = null;
+    throw error;
+  });
+  pendingSessionTokenRef.current = pendingToken;
+  return pendingToken;
+}
+function shouldAttachSessionToken(input) {
+  if (typeof window === "undefined") {
+    return false;
+  }
+  const requestUrl = resolveRequestUrl(input);
+  return requestUrl.origin === window.location.origin;
+}
+function resolveRequestUrl(input) {
+  if (input instanceof Request) {
+    return new URL(input.url);
+  }
+  if (input instanceof URL) {
+    return input;
+  }
+  return new URL(input, window.location.href);
+}
+function getExistingAuthorization(input, init) {
+  if (input instanceof Request && input.headers.has("Authorization")) {
+    return input.headers.get("Authorization");
+  }
+  if (!init?.headers) {
+    return null;
+  }
+  return new Headers(init.headers).get("Authorization");
+}
+function normalizeTokenExpiry(token, explicitExp) {
+  const tokenExp = explicitExp ?? decodeJwtExpiry(token);
+  return tokenExp ? tokenExp * 1e3 : void 0;
+}
+function decodeJwtExpiry(token) {
+  const [, payload] = token.split(".");
+  if (!payload || typeof window === "undefined") {
+    return void 0;
+  }
+  try {
+    const normalized = payload.replace(/-/g, "+").replace(/_/g, "/");
+    const padded = normalized.padEnd(
+      normalized.length + (4 - normalized.length % 4) % 4,
+      "="
+    );
+    const json = JSON.parse(window.atob(padded));
+    return typeof json.exp === "number" ? json.exp : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function isExpired(expiresAt) {
+  if (!expiresAt) {
+    return false;
+  }
+  return Date.now() >= expiresAt - 5e3;
+}
 
 export {
   buildNavigationUpdatePayload,
@@ -468,4 +612,4 @@ export {
   AppBridgeProvider,
   useAppBridge
 };
-//# sourceMappingURL=chunk-RWPS2DOE.js.map
+//# sourceMappingURL=chunk-X5YISVIL.js.map

package/dist/chunk-X5YISVIL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/navigation.ts","../src/core.ts","../src/react.tsx"],"sourcesContent":["export interface BridgeNavigationGoPayload {\n  path?: string;\n  href?: string;\n  pathname?: string;\n  search?: string;\n  hash?: string;\n}\n\nexport interface BridgeNavigationRedirectPayload extends BridgeNavigationGoPayload {}\n\nexport interface BridgeNavigationUpdatePayload {\n  path: string;\n  pathname: string;\n  search: string;\n  hash: string;\n}\n\nfunction normalizeSearch(search: string) {\n  if (!search) {\n    return \"\";\n  }\n\n  return search.startsWith(\"?\") ? search : `?${search}`;\n}\n\nfunction normalizeHash(hash: string) {\n  if (!hash) {\n    return \"\";\n  }\n\n  return hash.startsWith(\"#\") ? hash : `#${hash}`;\n}\n\nexport function buildNavigationUpdatePayload(path: string): BridgeNavigationUpdatePayload {\n  let pathname = path;\n  let search = \"\";\n  let hash = \"\";\n\n  const hashIndex = pathname.indexOf(\"#\");\n  if (hashIndex >= 0) {\n    hash = pathname.slice(hashIndex);\n    pathname = pathname.slice(0, hashIndex);\n  }\n\n  const searchIndex = pathname.indexOf(\"?\");\n  if (searchIndex >= 0) {\n    search = pathname.slice(searchIndex);\n    pathname = pathname.slice(0, searchIndex);\n  }\n\n  return {\n    path: `${pathname || \"/\"}${search}${hash}`,\n    pathname: pathname || \"/\",\n    search,\n    hash\n  };\n}\n\nexport function resolveNavigationDestination(payload: unknown): string | null {\n  if (typeof payload === \"string\") {\n    return payload;\n  }\n\n  if (!payload || typeof payload !== \"object\") {\n    return null;\n  }\n\n  const value = payload as BridgeNavigationGoPayload;\n\n  if (typeof value.path === \"string\" && value.path) {\n    return value.path;\n  }\n\n  if (typeof value.href === \"string\" && value.href) {\n    return value.href;\n  }\n\n  if (typeof value.pathname !== \"string\" || !value.pathname) {\n    return null;\n  }\n\n  return `${value.pathname}${normalizeSearch(value.search ?? \"\")}${normalizeHash(value.hash ?? \"\")}`;\n}\n","import {\n  resolveNavigationDestination,\n  type BridgeNavigationGoPayload,\n  type BridgeNavigationRedirectPayload\n} from \"./navigation\";\n\nexport type BridgeParticipant = \"embedded-app\" | \"dashboard\" | \"unknown\";\n\nexport type BridgeMessageKind = \"event\" | \"request\" | \"response\";\n\nexport interface BridgeErrorPayload {\n  code: string;\n  message: string;\n}\n\nexport interface BridgeMessage<TPayload = unknown> {\n  namespace: string;\n  version: \"1.0\";\n  kind: BridgeMessageKind;\n  id: string;\n  type: string;\n  source: BridgeParticipant;\n  target?: BridgeParticipant;\n  payload?: TPayload;\n  replyTo?: string;\n  error?: BridgeErrorPayload;\n}\n\nexport interface AppBridgeOptions {\n  clientId?: string;\n  source?: BridgeParticipant;\n  target?: BridgeParticipant;\n  namespace?: string;\n  targetOrigin?: string;\n  allowedOrigins?: string[];\n  requestTimeoutMs?: number;\n  selfWindow?: Window;\n  targetWindow?: Window | null;\n}\n\nexport interface RequestOptions {\n  timeoutMs?: number;\n}\n\nexport interface SessionTokenRequest {\n  clientId?: string;\n}\n\nexport interface SessionTokenResponse {\n  sessionToken?: string;\n  idToken: string;\n  exp?: number;\n  project?: string;\n}\n\nexport interface ReceivedBridgeMessage<TPayload = unknown> extends BridgeMessage<TPayload> {\n  origin: string;\n  rawEvent: MessageEvent<unknown>;\n}\n\nexport type BridgeEventHandler<TPayload = unknown> = (\n  message: ReceivedBridgeMessage<TPayload>\n) => void;\n\nexport type BridgeRequestHandler<TRequest = unknown, TResponse = unknown> = (\n  payload: TRequest,\n  message: ReceivedBridgeMessage<TRequest>\n) => TResponse | Promise<TResponse>;\n\nexport type Unsubscribe = () => void;\n\nconst DEFAULT_NAMESPACE = \"thorcommerce:app-bridge\";\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_REDIRECT_EVENT_TYPE = \"navigation:redirect\";\n\nfunction createMessageId() {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\") {\n    return crypto.randomUUID();\n  }\n\n  return `msg_${Date.now()}_${Math.random().toString(36).slice(2, 10)}`;\n}\n\nfunction resolveSelfWindow(explicitWindow?: Window) {\n  if (explicitWindow) {\n    return explicitWindow;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return window;\n  }\n\n  return undefined;\n}\n\nfunction resolveTargetWindow(selfWindow: Window | undefined, targetWindow?: Window | null) {\n  if (targetWindow) {\n    return targetWindow;\n  }\n\n  if (!selfWindow) {\n    return undefined;\n  }\n\n  if (selfWindow.parent && selfWindow.parent !== selfWindow) {\n    return selfWindow.parent;\n  }\n\n  return undefined;\n}\n\nfunction isDevelopmentEnvironment() {\n  const nodeEnv =\n    typeof globalThis !== \"undefined\" && \"process\" in globalThis\n      ? (\n          globalThis as typeof globalThis & {\n            process?: { env?: { NODE_ENV?: string } };\n          }\n        ).process?.env?.NODE_ENV\n      : undefined;\n\n  if (nodeEnv) {\n    return nodeEnv !== \"production\";\n  }\n\n  return true;\n}\n\nfunction hasAllowedOrigin(origin: string, allowedOrigins?: string[]) {\n  if (!allowedOrigins || allowedOrigins.length === 0) {\n    return true;\n  }\n\n  return allowedOrigins.includes(origin);\n}\n\nfunction isMessageTarget(value: unknown): value is Window {\n  return !!value && typeof (value as Window).postMessage === \"function\";\n}\n\nfunction omitUndefinedFields<T extends object>(value: T): T {\n  return Object.fromEntries(\n    Object.entries(value).filter(([, fieldValue]) => fieldValue !== undefined)\n  ) as T;\n}\n\nexport function isBridgeMessage<TPayload = unknown>(\n  value: unknown,\n  namespace = DEFAULT_NAMESPACE\n): value is BridgeMessage<TPayload> {\n  if (!value || typeof value !== \"object\") {\n    return false;\n  }\n\n  const message = value as Partial<BridgeMessage<TPayload>>;\n\n  return (\n    message.namespace === namespace &&\n    message.version === \"1.0\" &&\n    typeof message.kind === \"string\" &&\n    typeof message.id === \"string\" &&\n    typeof message.type === \"string\" &&\n    typeof message.source === \"string\"\n  );\n}\n\nexport class AppBridge {\n  private readonly namespace: string;\n  private readonly clientId?: string;\n  private readonly source: BridgeParticipant;\n  private readonly target: BridgeParticipant | undefined;\n  private readonly targetOrigin: string;\n  private readonly allowedOrigins?: string[];\n  private readonly selfWindow?: Window;\n  private readonly defaultTimeoutMs: number;\n  private targetWindow?: Window;\n  private readonly eventHandlers = new Map<string, Set<BridgeEventHandler>>();\n  private readonly requestHandlers = new Map<string, BridgeRequestHandler>();\n  private readonly pendingRequests = new Map<\n    string,\n    {\n      resolve: (value: unknown) => void;\n      reject: (error: Error) => void;\n      timeoutId: ReturnType<typeof setTimeout>;\n    }\n  >();\n  private readonly messageListener: (event: MessageEvent<unknown>) => void;\n\n  constructor(options: AppBridgeOptions = {}) {\n    this.namespace = options.namespace ?? DEFAULT_NAMESPACE;\n    this.clientId = options.clientId;\n    this.source = options.source ?? \"embedded-app\";\n    this.target = options.target;\n    this.targetOrigin = options.targetOrigin ?? \"*\";\n    this.allowedOrigins = options.allowedOrigins;\n    this.defaultTimeoutMs = options.requestTimeoutMs ?? DEFAULT_TIMEOUT_MS;\n    this.selfWindow = resolveSelfWindow(options.selfWindow);\n    this.targetWindow = resolveTargetWindow(this.selfWindow, options.targetWindow);\n    this.messageListener = (event) => {\n      this.handleMessage(event);\n    };\n\n    if (!this.selfWindow) {\n      throw new Error(\n        \"AppBridge requires a browser window. Pass selfWindow explicitly when constructing it outside global window scope.\"\n      );\n    }\n\n    if (this.targetOrigin === \"*\" && isDevelopmentEnvironment()) {\n      console.warn(\n        'AppBridge is using \"*\" as targetOrigin. Set targetOrigin explicitly for both the dashboard and embedded app in production.'\n      );\n    }\n\n    this.selfWindow.addEventListener(\"message\", this.messageListener);\n  }\n\n  setTargetWindow(targetWindow: Window | null) {\n    this.targetWindow = targetWindow ?? undefined;\n  }\n\n  hasTargetWindow() {\n    return this.targetWindow !== undefined;\n  }\n\n  redirect(payload: string | BridgeNavigationRedirectPayload) {\n    const destination = resolveNavigationDestination(payload);\n    if (!destination) {\n      throw new Error(\"AppBridge redirect requires a valid destination.\");\n    }\n\n    if (!this.targetWindow) {\n      this.navigateSelf(destination);\n      return;\n    }\n\n    this.postMessage<BridgeNavigationRedirectPayload>({\n      kind: \"event\",\n      type: DEFAULT_REDIRECT_EVENT_TYPE,\n      payload: typeof payload === \"string\" ? { href: payload } : payload\n    });\n  }\n\n  redirectToRemote(href: string) {\n    this.redirect({ href });\n  }\n\n  redirectToApp(path: string | BridgeNavigationGoPayload) {\n    this.redirect(typeof path === \"string\" ? { path } : path);\n  }\n\n  send<TPayload = unknown>(type: string, payload?: TPayload) {\n    this.postMessage({\n      kind: \"event\",\n      type,\n      payload\n    });\n  }\n\n  request<TRequest = unknown, TResponse = unknown>(\n    type: string,\n    payload?: TRequest,\n    options: RequestOptions = {}\n  ) {\n    const messageId = createMessageId();\n    const timeoutMs = options.timeoutMs ?? this.defaultTimeoutMs;\n\n    return new Promise<TResponse>((resolve, reject) => {\n      const timeoutId = setTimeout(() => {\n        this.pendingRequests.delete(messageId);\n        reject(new Error(`Bridge request timed out for \"${type}\" after ${timeoutMs}ms.`));\n      }, timeoutMs);\n\n      this.pendingRequests.set(messageId, {\n        resolve: (value) => resolve(value as TResponse),\n        reject,\n        timeoutId\n      });\n\n      try {\n        this.postMessage({\n          id: messageId,\n          kind: \"request\",\n          type,\n          payload\n        });\n      } catch (error) {\n        clearTimeout(timeoutId);\n        this.pendingRequests.delete(messageId);\n        reject(error instanceof Error ? error : new Error(\"Failed to send bridge request.\"));\n      }\n    });\n  }\n\n  getSessionToken(\n    request: SessionTokenRequest = {},\n    options: RequestOptions = {}\n  ) {\n    const resolvedRequest =\n      request.clientId || this.clientId\n        ? {\n            ...request,\n            clientId: request.clientId ?? this.clientId\n          }\n        : request;\n\n    return this.request<SessionTokenRequest, SessionTokenResponse>(\n      \"thor:session-token:get\",\n      resolvedRequest,\n      options\n    );\n  }\n\n  on<TPayload = unknown>(type: string, handler: BridgeEventHandler<TPayload>): Unsubscribe {\n    const handlers = this.eventHandlers.get(type) ?? new Set<BridgeEventHandler>();\n    handlers.add(handler as BridgeEventHandler);\n    this.eventHandlers.set(type, handlers);\n\n    return () => {\n      handlers.delete(handler as BridgeEventHandler);\n      if (handlers.size === 0) {\n        this.eventHandlers.delete(type);\n      }\n    };\n  }\n\n  onRequest<TRequest = unknown, TResponse = unknown>(\n    type: string,\n    handler: BridgeRequestHandler<TRequest, TResponse>\n  ): Unsubscribe {\n    this.requestHandlers.set(type, handler as BridgeRequestHandler);\n\n    return () => {\n      const registeredHandler = this.requestHandlers.get(type);\n      if (registeredHandler === handler) {\n        this.requestHandlers.delete(type);\n      }\n    };\n  }\n\n  destroy() {\n    if (this.selfWindow) {\n      this.selfWindow.removeEventListener(\"message\", this.messageListener);\n    }\n\n    for (const pendingRequest of this.pendingRequests.values()) {\n      clearTimeout(pendingRequest.timeoutId);\n      pendingRequest.reject(new Error(\"AppBridge destroyed before a response was received.\"));\n    }\n\n    this.pendingRequests.clear();\n    this.eventHandlers.clear();\n    this.requestHandlers.clear();\n  }\n\n  private handleMessage(event: MessageEvent<unknown>) {\n    if (!hasAllowedOrigin(event.origin, this.allowedOrigins)) {\n      return;\n    }\n\n    if (!isBridgeMessage(event.data, this.namespace)) {\n      return;\n    }\n\n    const message = event.data;\n\n    if (this.target && message.target && message.target !== this.source) {\n      return;\n    }\n\n    const receivedMessage: ReceivedBridgeMessage = {\n      ...message,\n      origin: event.origin,\n      rawEvent: event\n    };\n\n    if (\n      message.kind === \"event\" &&\n      message.type === DEFAULT_REDIRECT_EVENT_TYPE &&\n      this.handleRedirectMessage(receivedMessage)\n    ) {\n      return;\n    }\n\n    if (message.kind === \"response\" && message.replyTo) {\n      this.resolvePendingRequest(message.replyTo, message);\n      return;\n    }\n\n    this.emitHandlers(message.type, receivedMessage);\n\n    if (message.kind === \"request\") {\n      void this.handleRequest(receivedMessage);\n    }\n  }\n\n  private emitHandlers(type: string, message: ReceivedBridgeMessage) {\n    const typeHandlers = this.eventHandlers.get(type);\n    if (typeHandlers) {\n      for (const handler of typeHandlers) {\n        handler(message);\n      }\n    }\n\n    if (type === \"*\") {\n      return;\n    }\n\n    const wildcardHandlers = this.eventHandlers.get(\"*\");\n    if (wildcardHandlers) {\n      for (const handler of wildcardHandlers) {\n        handler(message);\n      }\n    }\n  }\n\n  private async handleRequest(message: ReceivedBridgeMessage) {\n    const handler = this.requestHandlers.get(message.type);\n    if (!handler) {\n      return;\n    }\n\n    const replyTarget = isMessageTarget(message.rawEvent.source)\n      ? message.rawEvent.source\n      : this.targetWindow;\n\n    try {\n      const payload = await handler(message.payload, message);\n      this.postMessage(\n        {\n          kind: \"response\",\n          type: message.type,\n          payload,\n          replyTo: message.id\n        },\n        replyTarget\n      );\n    } catch (error) {\n      const bridgeError =\n        error instanceof Error\n          ? { code: \"request_handler_error\", message: error.message }\n          : { code: \"request_handler_error\", message: \"Unknown request handler error.\" };\n\n      this.postMessage(\n        {\n          kind: \"response\",\n          type: message.type,\n          error: bridgeError,\n          replyTo: message.id\n        },\n        replyTarget\n      );\n    }\n  }\n\n  private resolvePendingRequest(messageId: string, message: BridgeMessage) {\n    const pendingRequest = this.pendingRequests.get(messageId);\n    if (!pendingRequest) {\n      return;\n    }\n\n    clearTimeout(pendingRequest.timeoutId);\n    this.pendingRequests.delete(messageId);\n\n    if (message.error) {\n      pendingRequest.reject(new Error(`${message.error.code}: ${message.error.message}`));\n      return;\n    }\n\n    pendingRequest.resolve(message.payload);\n  }\n\n  private postMessage<TPayload = unknown>(\n    partialMessage: Pick<BridgeMessage<TPayload>, \"kind\" | \"type\"> &\n      Partial<Omit<BridgeMessage<TPayload>, \"namespace\" | \"version\" | \"source\">>,\n    targetWindowOverride?: Window\n  ) {\n    const targetWindow = targetWindowOverride ?? this.targetWindow;\n    if (!targetWindow) {\n      throw new Error(\n        \"AppBridge could not resolve a target window. Pass targetWindow explicitly or call setTargetWindow().\"\n      );\n    }\n\n    const message = omitUndefinedFields({\n      namespace: this.namespace,\n      version: \"1.0\",\n      id: partialMessage.id ?? createMessageId(),\n      kind: partialMessage.kind,\n      type: partialMessage.type,\n      source: this.source,\n      target: partialMessage.target ?? this.target,\n      payload: partialMessage.payload,\n      replyTo: partialMessage.replyTo,\n      error: partialMessage.error\n    }) as BridgeMessage<TPayload>;\n\n    targetWindow.postMessage(message, this.targetOrigin);\n  }\n\n  private handleRedirectMessage(message: ReceivedBridgeMessage): boolean {\n    const destination = resolveNavigationDestination(message.payload);\n    if (!destination) {\n      return false;\n    }\n\n    this.navigateSelf(destination);\n    return true;\n  }\n\n  private navigateSelf(destination: string) {\n    if (!this.selfWindow) {\n      throw new Error(\"AppBridge could not resolve a browser window for redirect.\");\n    }\n\n    this.selfWindow.location.assign(destination);\n  }\n}\n\nexport function createAppBridge(options: AppBridgeOptions = {}) {\n  return new AppBridge(options);\n}\n","import {\n  createContext,\n  useContext,\n  useEffect,\n  useRef,\n  useState,\n  type MutableRefObject,\n  type ReactNode\n} from \"react\";\n\nimport {\n  createAppBridge,\n  type AppBridge,\n  type AppBridgeOptions,\n  type ReceivedBridgeMessage\n} from \"./core\";\nimport {\n  buildNavigationUpdatePayload,\n  resolveNavigationDestination,\n  type BridgeNavigationGoPayload\n} from \"./navigation\";\n\nconst AppBridgeContext = createContext<AppBridge | null>(null);\n\nexport interface AppBridgeProviderProps\n  extends Omit<AppBridgeOptions, \"source\" | \"target\" | \"allowedOrigins\"> {\n  children: ReactNode;\n  clientId: string;\n  readyEventType?: string;\n  readyPayload?: unknown;\n  currentPath?: string | null;\n  navigationEventType?: string;\n  navigationUpdateEventType?: string;\n  onNavigate?: (\n    path: string,\n    message: ReceivedBridgeMessage<BridgeNavigationGoPayload>\n  ) => void;\n}\n\nexport function AppBridgeProvider({\n  children,\n  clientId,\n  currentPath,\n  navigationEventType = \"navigation:go\",\n  navigationUpdateEventType = \"navigation:update\",\n  namespace,\n  onNavigate,\n  readyEventType = \"app:ready\",\n  readyPayload,\n  requestTimeoutMs,\n  selfWindow,\n  targetOrigin,\n  targetWindow\n}: AppBridgeProviderProps) {\n  const [bridge, setBridge] = useState<AppBridge | null>(null);\n  const onNavigateRef = useRef(onNavigate);\n  const sessionTokenCacheRef = useRef<{\n    token: string;\n    expiresAt?: number;\n  } | null>(null);\n  const pendingSessionTokenRef = useRef<Promise<string> | null>(null);\n\n  useEffect(() => {\n    onNavigateRef.current = onNavigate;\n  }, [onNavigate]);\n\n  useEffect(() => {\n    if (typeof window === \"undefined\" && !selfWindow) {\n      return;\n    }\n\n    const resolvedTargetOrigin = targetOrigin ?? getReferrerOrigin(selfWindow);\n    const resolvedAllowedOrigins = resolvedTargetOrigin\n      ? [resolvedTargetOrigin]\n      : undefined;\n\n    const nextBridge = createAppBridge({\n      allowedOrigins: resolvedAllowedOrigins,\n      clientId,\n      namespace,\n      requestTimeoutMs,\n      selfWindow,\n      source: \"embedded-app\",\n      target: \"dashboard\",\n      targetOrigin: resolvedTargetOrigin,\n      targetWindow\n    });\n\n    setBridge(nextBridge);\n\n    return () => {\n      setBridge((currentBridge) => (currentBridge === nextBridge ? null : currentBridge));\n      nextBridge.destroy();\n    };\n  }, [\n    clientId,\n    namespace,\n    requestTimeoutMs,\n    selfWindow,\n    targetOrigin,\n    targetWindow\n  ]);\n\n  useEffect(() => {\n    if (!bridge || !bridge.hasTargetWindow()) {\n      return;\n    }\n\n    bridge.send(\n      readyEventType,\n      readyPayload ?? {\n        clientId\n      }\n    );\n  }, [bridge, clientId, readyEventType, readyPayload]);\n\n  useEffect(() => {\n    if (!bridge || !bridge.hasTargetWindow() || !currentPath) {\n      return;\n    }\n\n    bridge.send(navigationUpdateEventType, buildNavigationUpdatePayload(currentPath));\n  }, [bridge, currentPath, navigationUpdateEventType]);\n\n  useEffect(() => {\n    if (!bridge || !onNavigate) {\n      return;\n    }\n\n    return bridge.on<BridgeNavigationGoPayload>(navigationEventType, (message) => {\n      const destination = resolveNavigationDestination(message.payload);\n      if (!destination) {\n        return;\n      }\n\n      onNavigateRef.current?.(destination, message);\n    });\n  }, [bridge, navigationEventType, onNavigate]);\n\n  useEffect(() => {\n    if (!bridge || typeof window === \"undefined\") {\n      return;\n    }\n\n    const originalFetch = window.fetch.bind(window);\n\n    window.fetch = async (input: RequestInfo | URL, init?: RequestInit) => {\n      if (!shouldAttachSessionToken(input)) {\n        return originalFetch(input, init);\n      }\n\n      const existingAuthorization = getExistingAuthorization(input, init);\n      if (existingAuthorization) {\n        return originalFetch(input, init);\n      }\n\n      const nextHeaders = new Headers(\n        input instanceof Request ? input.headers : init?.headers\n      );\n      const sessionToken = await getSessionToken({\n        bridge,\n        clientId,\n        pendingSessionTokenRef,\n        sessionTokenCacheRef\n      });\n\n      nextHeaders.set(\"Authorization\", `Bearer ${sessionToken}`);\n\n      if (input instanceof Request) {\n        return originalFetch(\n          new Request(input, {\n            headers: nextHeaders\n          })\n        );\n      }\n\n      return originalFetch(input, {\n        ...init,\n        headers: nextHeaders\n      });\n    };\n\n    return () => {\n      window.fetch = originalFetch;\n    };\n  }, [bridge, clientId]);\n\n  return <AppBridgeContext.Provider value={bridge}>{children}</AppBridgeContext.Provider>;\n}\n\nexport function useAppBridge() {\n  return useContext(AppBridgeContext);\n}\n\nfunction getReferrerOrigin(explicitWindow?: Window) {\n  const resolvedWindow = explicitWindow ?? (typeof window !== \"undefined\" ? window : undefined);\n  const referrer = resolvedWindow?.document?.referrer;\n\n  if (!referrer) {\n    return undefined;\n  }\n\n  try {\n    return new URL(referrer).origin;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function getSessionToken({\n  bridge,\n  clientId,\n  pendingSessionTokenRef,\n  sessionTokenCacheRef\n}: {\n  bridge: AppBridge;\n  clientId: string;\n  pendingSessionTokenRef: MutableRefObject<Promise<string> | null>;\n  sessionTokenCacheRef: MutableRefObject<{\n    token: string;\n    expiresAt?: number;\n  } | null>;\n}) {\n  const cachedToken = sessionTokenCacheRef.current;\n  if (cachedToken && !isExpired(cachedToken.expiresAt)) {\n    return cachedToken.token;\n  }\n\n  if (pendingSessionTokenRef.current) {\n    return pendingSessionTokenRef.current;\n  }\n\n  const pendingToken = bridge\n    .getSessionToken({ clientId })\n    .then((response) => {\n      const token = response.sessionToken ?? response.idToken;\n      if (!token) {\n        throw new Error(\"Missing Thor embedded session token\");\n      }\n\n      sessionTokenCacheRef.current = {\n        token,\n        expiresAt: normalizeTokenExpiry(token, response.exp)\n      };\n      pendingSessionTokenRef.current = null;\n\n      return token;\n    })\n    .catch((error) => {\n      pendingSessionTokenRef.current = null;\n      throw error;\n    });\n\n  pendingSessionTokenRef.current = pendingToken;\n  return pendingToken;\n}\n\nfunction shouldAttachSessionToken(input: RequestInfo | URL) {\n  if (typeof window === \"undefined\") {\n    return false;\n  }\n\n  const requestUrl = resolveRequestUrl(input);\n  return requestUrl.origin === window.location.origin;\n}\n\nfunction resolveRequestUrl(input: RequestInfo | URL) {\n  if (input instanceof Request) {\n    return new URL(input.url);\n  }\n\n  if (input instanceof URL) {\n    return input;\n  }\n\n  return new URL(input, window.location.href);\n}\n\nfunction getExistingAuthorization(input: RequestInfo | URL, init?: RequestInit) {\n  if (input instanceof Request && input.headers.has(\"Authorization\")) {\n    return input.headers.get(\"Authorization\");\n  }\n\n  if (!init?.headers) {\n    return null;\n  }\n\n  return new Headers(init.headers).get(\"Authorization\");\n}\n\nfunction normalizeTokenExpiry(token: string, explicitExp?: number) {\n  const tokenExp = explicitExp ?? decodeJwtExpiry(token);\n  return tokenExp ? tokenExp * 1000 : undefined;\n}\n\nfunction decodeJwtExpiry(token: string) {\n  const [, payload] = token.split(\".\");\n  if (!payload || typeof window === \"undefined\") {\n    return undefined;\n  }\n\n  try {\n    const normalized = payload.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const padded = normalized.padEnd(\n      normalized.length + ((4 - (normalized.length % 4)) % 4),\n      \"=\"\n    );\n    const json = JSON.parse(window.atob(padded)) as { exp?: unknown };\n\n    return typeof json.exp === \"number\" ? json.exp : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction isExpired(expiresAt?: number) {\n  if (!expiresAt) {\n    return false;\n  }\n\n  return Date.now() >= expiresAt - 5_000;\n}\n"],"mappings":";AAiBA,SAAS,gBAAgB,QAAgB;AACvC,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,SAAO,OAAO,WAAW,GAAG,IAAI,SAAS,IAAI,MAAM;AACrD;AAEA,SAAS,cAAc,MAAc;AACnC,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AAEA,SAAO,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI;AAC/C;AAEO,SAAS,6BAA6B,MAA6C;AACxF,MAAI,WAAW;AACf,MAAI,SAAS;AACb,MAAI,OAAO;AAEX,QAAM,YAAY,SAAS,QAAQ,GAAG;AACtC,MAAI,aAAa,GAAG;AAClB,WAAO,SAAS,MAAM,SAAS;AAC/B,eAAW,SAAS,MAAM,GAAG,SAAS;AAAA,EACxC;AAEA,QAAM,cAAc,SAAS,QAAQ,GAAG;AACxC,MAAI,eAAe,GAAG;AACpB,aAAS,SAAS,MAAM,WAAW;AACnC,eAAW,SAAS,MAAM,GAAG,WAAW;AAAA,EAC1C;AAEA,SAAO;AAAA,IACL,MAAM,GAAG,YAAY,GAAG,GAAG,MAAM,GAAG,IAAI;AAAA,IACxC,UAAU,YAAY;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,6BAA6B,SAAiC;AAC5E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,WAAW,OAAO,YAAY,UAAU;AAC3C,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ;AAEd,MAAI,OAAO,MAAM,SAAS,YAAY,MAAM,MAAM;AAChD,WAAO,MAAM;AAAA,EACf;AAEA,MAAI,OAAO,MAAM,SAAS,YAAY,MAAM,MAAM;AAChD,WAAO,MAAM;AAAA,EACf;AAEA,MAAI,OAAO,MAAM,aAAa,YAAY,CAAC,MAAM,UAAU;AACzD,WAAO;AAAA,EACT;AAEA,SAAO,GAAG,MAAM,QAAQ,GAAG,gBAAgB,MAAM,UAAU,EAAE,CAAC,GAAG,cAAc,MAAM,QAAQ,EAAE,CAAC;AAClG;;;ACXA,IAAM,oBAAoB;AAC1B,IAAM,qBAAqB;AAC3B,IAAM,8BAA8B;AAEpC,SAAS,kBAAkB;AACzB,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe,YAAY;AAC5E,WAAO,OAAO,WAAW;AAAA,EAC3B;AAEA,SAAO,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACrE;AAEA,SAAS,kBAAkB,gBAAyB;AAClD,MAAI,gBAAgB;AAClB,WAAO;AAAA,EACT;AAEA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,YAAgC,cAA8B;AACzF,MAAI,cAAc;AAChB,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,UAAU,WAAW,WAAW,YAAY;AACzD,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;AAEA,SAAS,2BAA2B;AAClC,QAAM,UACJ,OAAO,eAAe,eAAe,aAAa,aAE5C,WAGA,SAAS,KAAK,WAChB;AAEN,MAAI,SAAS;AACX,WAAO,YAAY;AAAA,EACrB;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAAgB,gBAA2B;AACnE,MAAI,CAAC,kBAAkB,eAAe,WAAW,GAAG;AAClD,WAAO;AAAA,EACT;AAEA,SAAO,eAAe,SAAS,MAAM;AACvC;AAEA,SAAS,gBAAgB,OAAiC;AACxD,SAAO,CAAC,CAAC,SAAS,OAAQ,MAAiB,gBAAgB;AAC7D;AAEA,SAAS,oBAAsC,OAAa;AAC1D,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,UAAU,MAAM,eAAe,MAAS;AAAA,EAC3E;AACF;AAEO,SAAS,gBACd,OACA,YAAY,mBACsB;AAClC,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAEhB,SACE,QAAQ,cAAc,aACtB,QAAQ,YAAY,SACpB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,OAAO,YACtB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,WAAW;AAE9B;AAEO,IAAM,YAAN,MAAgB;AAAA,EAsBrB,YAAY,UAA4B,CAAC,GAAG;AAZ5C,SAAiB,gBAAgB,oBAAI,IAAqC;AAC1E,SAAiB,kBAAkB,oBAAI,IAAkC;AACzE,SAAiB,kBAAkB,oBAAI,IAOrC;AAIA,SAAK,YAAY,QAAQ,aAAa;AACtC,SAAK,WAAW,QAAQ;AACxB,SAAK,SAAS,QAAQ,UAAU;AAChC,SAAK,SAAS,QAAQ;AACtB,SAAK,eAAe,QAAQ,gBAAgB;AAC5C,SAAK,iBAAiB,QAAQ;AAC9B,SAAK,mBAAmB,QAAQ,oBAAoB;AACpD,SAAK,aAAa,kBAAkB,QAAQ,UAAU;AACtD,SAAK,eAAe,oBAAoB,KAAK,YAAY,QAAQ,YAAY;AAC7E,SAAK,kBAAkB,CAAC,UAAU;AAChC,WAAK,cAAc,KAAK;AAAA,IAC1B;AAEA,QAAI,CAAC,KAAK,YAAY;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,KAAK,iBAAiB,OAAO,yBAAyB,GAAG;AAC3D,cAAQ;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAEA,SAAK,WAAW,iBAAiB,WAAW,KAAK,eAAe;AAAA,EAClE;AAAA,EAEA,gBAAgB,cAA6B;AAC3C,SAAK,eAAe,gBAAgB;AAAA,EACtC;AAAA,EAEA,kBAAkB;AAChB,WAAO,KAAK,iBAAiB;AAAA,EAC/B;AAAA,EAEA,SAAS,SAAmD;AAC1D,UAAM,cAAc,6BAA6B,OAAO;AACxD,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,kDAAkD;AAAA,IACpE;AAEA,QAAI,CAAC,KAAK,cAAc;AACtB,WAAK,aAAa,WAAW;AAC7B;AAAA,IACF;AAEA,SAAK,YAA6C;AAAA,MAChD,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS,OAAO,YAAY,WAAW,EAAE,MAAM,QAAQ,IAAI;AAAA,IAC7D,CAAC;AAAA,EACH;AAAA,EAEA,iBAAiB,MAAc;AAC7B,SAAK,SAAS,EAAE,KAAK,CAAC;AAAA,EACxB;AAAA,EAEA,cAAc,MAA0C;AACtD,SAAK,SAAS,OAAO,SAAS,WAAW,EAAE,KAAK,IAAI,IAAI;AAAA,EAC1D;AAAA,EAEA,KAAyB,MAAc,SAAoB;AACzD,SAAK,YAAY;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,QACE,MACA,SACA,UAA0B,CAAC,GAC3B;AACA,UAAM,YAAY,gBAAgB;AAClC,UAAM,YAAY,QAAQ,aAAa,KAAK;AAE5C,WAAO,IAAI,QAAmB,CAAC,SAAS,WAAW;AACjD,YAAM,YAAY,WAAW,MAAM;AACjC,aAAK,gBAAgB,OAAO,SAAS;AACrC,eAAO,IAAI,MAAM,iCAAiC,IAAI,WAAW,SAAS,KAAK,CAAC;AAAA,MAClF,GAAG,SAAS;AAEZ,WAAK,gBAAgB,IAAI,WAAW;AAAA,QAClC,SAAS,CAAC,UAAU,QAAQ,KAAkB;AAAA,QAC9C;AAAA,QACA;AAAA,MACF,CAAC;AAED,UAAI;AACF,aAAK,YAAY;AAAA,UACf,IAAI;AAAA,UACJ,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,qBAAa,SAAS;AACtB,aAAK,gBAAgB,OAAO,SAAS;AACrC,eAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,gCAAgC,CAAC;AAAA,MACrF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,gBACE,UAA+B,CAAC,GAChC,UAA0B,CAAC,GAC3B;AACA,UAAM,kBACJ,QAAQ,YAAY,KAAK,WACrB;AAAA,MACE,GAAG;AAAA,MACH,UAAU,QAAQ,YAAY,KAAK;AAAA,IACrC,IACA;AAEN,WAAO,KAAK;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,GAAuB,MAAc,SAAoD;AACvF,UAAM,WAAW,KAAK,cAAc,IAAI,IAAI,KAAK,oBAAI,IAAwB;AAC7E,aAAS,IAAI,OAA6B;AAC1C,SAAK,cAAc,IAAI,MAAM,QAAQ;AAErC,WAAO,MAAM;AACX,eAAS,OAAO,OAA6B;AAC7C,UAAI,SAAS,SAAS,GAAG;AACvB,aAAK,cAAc,OAAO,IAAI;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UACE,MACA,SACa;AACb,SAAK,gBAAgB,IAAI,MAAM,OAA+B;AAE9D,WAAO,MAAM;AACX,YAAM,oBAAoB,KAAK,gBAAgB,IAAI,IAAI;AACvD,UAAI,sBAAsB,SAAS;AACjC,aAAK,gBAAgB,OAAO,IAAI;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU;AACR,QAAI,KAAK,YAAY;AACnB,WAAK,WAAW,oBAAoB,WAAW,KAAK,eAAe;AAAA,IACrE;AAEA,eAAW,kBAAkB,KAAK,gBAAgB,OAAO,GAAG;AAC1D,mBAAa,eAAe,SAAS;AACrC,qBAAe,OAAO,IAAI,MAAM,qDAAqD,CAAC;AAAA,IACxF;AAEA,SAAK,gBAAgB,MAAM;AAC3B,SAAK,cAAc,MAAM;AACzB,SAAK,gBAAgB,MAAM;AAAA,EAC7B;AAAA,EAEQ,cAAc,OAA8B;AAClD,QAAI,CAAC,iBAAiB,MAAM,QAAQ,KAAK,cAAc,GAAG;AACxD;AAAA,IACF;AAEA,QAAI,CAAC,gBAAgB,MAAM,MAAM,KAAK,SAAS,GAAG;AAChD;AAAA,IACF;AAEA,UAAM,UAAU,MAAM;AAEtB,QAAI,KAAK,UAAU,QAAQ,UAAU,QAAQ,WAAW,KAAK,QAAQ;AACnE;AAAA,IACF;AAEA,UAAM,kBAAyC;AAAA,MAC7C,GAAG;AAAA,MACH,QAAQ,MAAM;AAAA,MACd,UAAU;AAAA,IACZ;AAEA,QACE,QAAQ,SAAS,WACjB,QAAQ,SAAS,+BACjB,KAAK,sBAAsB,eAAe,GAC1C;AACA;AAAA,IACF;AAEA,QAAI,QAAQ,SAAS,cAAc,QAAQ,SAAS;AAClD,WAAK,sBAAsB,QAAQ,SAAS,OAAO;AACnD;AAAA,IACF;AAEA,SAAK,aAAa,QAAQ,MAAM,eAAe;AAE/C,QAAI,QAAQ,SAAS,WAAW;AAC9B,WAAK,KAAK,cAAc,eAAe;AAAA,IACzC;AAAA,EACF;AAAA,EAEQ,aAAa,MAAc,SAAgC;AACjE,UAAM,eAAe,KAAK,cAAc,IAAI,IAAI;AAChD,QAAI,cAAc;AAChB,iBAAW,WAAW,cAAc;AAClC,gBAAQ,OAAO;AAAA,MACjB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB;AAAA,IACF;AAEA,UAAM,mBAAmB,KAAK,cAAc,IAAI,GAAG;AACnD,QAAI,kBAAkB;AACpB,iBAAW,WAAW,kBAAkB;AACtC,gBAAQ,OAAO;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,SAAgC;AAC1D,UAAM,UAAU,KAAK,gBAAgB,IAAI,QAAQ,IAAI;AACrD,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AAEA,UAAM,cAAc,gBAAgB,QAAQ,SAAS,MAAM,IACvD,QAAQ,SAAS,SACjB,KAAK;AAET,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,QAAQ,SAAS,OAAO;AACtD,WAAK;AAAA,QACH;AAAA,UACE,MAAM;AAAA,UACN,MAAM,QAAQ;AAAA,UACd;AAAA,UACA,SAAS,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,cACJ,iBAAiB,QACb,EAAE,MAAM,yBAAyB,SAAS,MAAM,QAAQ,IACxD,EAAE,MAAM,yBAAyB,SAAS,iCAAiC;AAEjF,WAAK;AAAA,QACH;AAAA,UACE,MAAM;AAAA,UACN,MAAM,QAAQ;AAAA,UACd,OAAO;AAAA,UACP,SAAS,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,sBAAsB,WAAmB,SAAwB;AACvE,UAAM,iBAAiB,KAAK,gBAAgB,IAAI,SAAS;AACzD,QAAI,CAAC,gBAAgB;AACnB;AAAA,IACF;AAEA,iBAAa,eAAe,SAAS;AACrC,SAAK,gBAAgB,OAAO,SAAS;AAErC,QAAI,QAAQ,OAAO;AACjB,qBAAe,OAAO,IAAI,MAAM,GAAG,QAAQ,MAAM,IAAI,KAAK,QAAQ,MAAM,OAAO,EAAE,CAAC;AAClF;AAAA,IACF;AAEA,mBAAe,QAAQ,QAAQ,OAAO;AAAA,EACxC;AAAA,EAEQ,YACN,gBAEA,sBACA;AACA,UAAM,eAAe,wBAAwB,KAAK;AAClD,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,oBAAoB;AAAA,MAClC,WAAW,KAAK;AAAA,MAChB,SAAS;AAAA,MACT,IAAI,eAAe,MAAM,gBAAgB;AAAA,MACzC,MAAM,eAAe;AAAA,MACrB,MAAM,eAAe;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,QAAQ,eAAe,UAAU,KAAK;AAAA,MACtC,SAAS,eAAe;AAAA,MACxB,SAAS,eAAe;AAAA,MACxB,OAAO,eAAe;AAAA,IACxB,CAAC;AAED,iBAAa,YAAY,SAAS,KAAK,YAAY;AAAA,EACrD;AAAA,EAEQ,sBAAsB,SAAyC;AACrE,UAAM,cAAc,6BAA6B,QAAQ,OAAO;AAChE,QAAI,CAAC,aAAa;AAChB,aAAO;AAAA,IACT;AAEA,SAAK,aAAa,WAAW;AAC7B,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa,aAAqB;AACxC,QAAI,CAAC,KAAK,YAAY;AACpB,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AAEA,SAAK,WAAW,SAAS,OAAO,WAAW;AAAA,EAC7C;AACF;AAEO,SAAS,gBAAgB,UAA4B,CAAC,GAAG;AAC9D,SAAO,IAAI,UAAU,OAAO;AAC9B;;;ACzgBA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAmLE;AArKT,IAAM,mBAAmB,cAAgC,IAAI;AAiBtD,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AAAA,EACtB,4BAA4B;AAAA,EAC5B;AAAA,EACA;AAAA,EACA,iBAAiB;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA2B;AACzB,QAAM,CAAC,QAAQ,SAAS,IAAI,SAA2B,IAAI;AAC3D,QAAM,gBAAgB,OAAO,UAAU;AACvC,QAAM,uBAAuB,OAGnB,IAAI;AACd,QAAM,yBAAyB,OAA+B,IAAI;AAElE,YAAU,MAAM;AACd,kBAAc,UAAU;AAAA,EAC1B,GAAG,CAAC,UAAU,CAAC;AAEf,YAAU,MAAM;AACd,QAAI,OAAO,WAAW,eAAe,CAAC,YAAY;AAChD;AAAA,IACF;AAEA,UAAM,uBAAuB,gBAAgB,kBAAkB,UAAU;AACzE,UAAM,yBAAyB,uBAC3B,CAAC,oBAAoB,IACrB;AAEJ,UAAM,aAAa,gBAAgB;AAAA,MACjC,gBAAgB;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,cAAc;AAAA,MACd;AAAA,IACF,CAAC;AAED,cAAU,UAAU;AAEpB,WAAO,MAAM;AACX,gBAAU,CAAC,kBAAmB,kBAAkB,aAAa,OAAO,aAAc;AAClF,iBAAW,QAAQ;AAAA,IACrB;AAAA,EACF,GAAG;AAAA,IACD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,YAAU,MAAM;AACd,QAAI,CAAC,UAAU,CAAC,OAAO,gBAAgB,GAAG;AACxC;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,gBAAgB;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF,GAAG,CAAC,QAAQ,UAAU,gBAAgB,YAAY,CAAC;AAEnD,YAAU,MAAM;AACd,QAAI,CAAC,UAAU,CAAC,OAAO,gBAAgB,KAAK,CAAC,aAAa;AACxD;AAAA,IACF;AAEA,WAAO,KAAK,2BAA2B,6BAA6B,WAAW,CAAC;AAAA,EAClF,GAAG,CAAC,QAAQ,aAAa,yBAAyB,CAAC;AAEnD,YAAU,MAAM;AACd,QAAI,CAAC,UAAU,CAAC,YAAY;AAC1B;AAAA,IACF;AAEA,WAAO,OAAO,GAA8B,qBAAqB,CAAC,YAAY;AAC5E,YAAM,cAAc,6BAA6B,QAAQ,OAAO;AAChE,UAAI,CAAC,aAAa;AAChB;AAAA,MACF;AAEA,oBAAc,UAAU,aAAa,OAAO;AAAA,IAC9C,CAAC;AAAA,EACH,GAAG,CAAC,QAAQ,qBAAqB,UAAU,CAAC;AAE5C,YAAU,MAAM;AACd,QAAI,CAAC,UAAU,OAAO,WAAW,aAAa;AAC5C;AAAA,IACF;AAEA,UAAM,gBAAgB,OAAO,MAAM,KAAK,MAAM;AAE9C,WAAO,QAAQ,OAAO,OAA0B,SAAuB;AACrE,UAAI,CAAC,yBAAyB,KAAK,GAAG;AACpC,eAAO,cAAc,OAAO,IAAI;AAAA,MAClC;AAEA,YAAM,wBAAwB,yBAAyB,OAAO,IAAI;AAClE,UAAI,uBAAuB;AACzB,eAAO,cAAc,OAAO,IAAI;AAAA,MAClC;AAEA,YAAM,cAAc,IAAI;AAAA,QACtB,iBAAiB,UAAU,MAAM,UAAU,MAAM;AAAA,MACnD;AACA,YAAM,eAAe,MAAM,gBAAgB;AAAA,QACzC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,kBAAY,IAAI,iBAAiB,UAAU,YAAY,EAAE;AAEzD,UAAI,iBAAiB,SAAS;AAC5B,eAAO;AAAA,UACL,IAAI,QAAQ,OAAO;AAAA,YACjB,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAEA,aAAO,cAAc,OAAO;AAAA,QAC1B,GAAG;AAAA,QACH,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,WAAO,MAAM;AACX,aAAO,QAAQ;AAAA,IACjB;AAAA,EACF,GAAG,CAAC,QAAQ,QAAQ,CAAC;AAErB,SAAO,oBAAC,iBAAiB,UAAjB,EAA0B,OAAO,QAAS,UAAS;AAC7D;AAEO,SAAS,eAAe;AAC7B,SAAO,WAAW,gBAAgB;AACpC;AAEA,SAAS,kBAAkB,gBAAyB;AAClD,QAAM,iBAAiB,mBAAmB,OAAO,WAAW,cAAc,SAAS;AACnF,QAAM,WAAW,gBAAgB,UAAU;AAE3C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AAEA,MAAI;AACF,WAAO,IAAI,IAAI,QAAQ,EAAE;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,gBAAgB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,cAAc,qBAAqB;AACzC,MAAI,eAAe,CAAC,UAAU,YAAY,SAAS,GAAG;AACpD,WAAO,YAAY;AAAA,EACrB;AAEA,MAAI,uBAAuB,SAAS;AAClC,WAAO,uBAAuB;AAAA,EAChC;AAEA,QAAM,eAAe,OAClB,gBAAgB,EAAE,SAAS,CAAC,EAC5B,KAAK,CAAC,aAAa;AAClB,UAAM,QAAQ,SAAS,gBAAgB,SAAS;AAChD,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,qCAAqC;AAAA,IACvD;AAEA,yBAAqB,UAAU;AAAA,MAC7B;AAAA,MACA,WAAW,qBAAqB,OAAO,SAAS,GAAG;AAAA,IACrD;AACA,2BAAuB,UAAU;AAEjC,WAAO;AAAA,EACT,CAAC,EACA,MAAM,CAAC,UAAU;AAChB,2BAAuB,UAAU;AACjC,UAAM;AAAA,EACR,CAAC;AAEH,yBAAuB,UAAU;AACjC,SAAO;AACT;AAEA,SAAS,yBAAyB,OAA0B;AAC1D,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,kBAAkB,KAAK;AAC1C,SAAO,WAAW,WAAW,OAAO,SAAS;AAC/C;AAEA,SAAS,kBAAkB,OAA0B;AACnD,MAAI,iBAAiB,SAAS;AAC5B,WAAO,IAAI,IAAI,MAAM,GAAG;AAAA,EAC1B;AAEA,MAAI,iBAAiB,KAAK;AACxB,WAAO;AAAA,EACT;AAEA,SAAO,IAAI,IAAI,OAAO,OAAO,SAAS,IAAI;AAC5C;AAEA,SAAS,yBAAyB,OAA0B,MAAoB;AAC9E,MAAI,iBAAiB,WAAW,MAAM,QAAQ,IAAI,eAAe,GAAG;AAClE,WAAO,MAAM,QAAQ,IAAI,eAAe;AAAA,EAC1C;AAEA,MAAI,CAAC,MAAM,SAAS;AAClB,WAAO;AAAA,EACT;AAEA,SAAO,IAAI,QAAQ,KAAK,OAAO,EAAE,IAAI,eAAe;AACtD;AAEA,SAAS,qBAAqB,OAAe,aAAsB;AACjE,QAAM,WAAW,eAAe,gBAAgB,KAAK;AACrD,SAAO,WAAW,WAAW,MAAO;AACtC;AAEA,SAAS,gBAAgB,OAAe;AACtC,QAAM,CAAC,EAAE,OAAO,IAAI,MAAM,MAAM,GAAG;AACnC,MAAI,CAAC,WAAW,OAAO,WAAW,aAAa;AAC7C,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,aAAa,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC/D,UAAM,SAAS,WAAW;AAAA,MACxB,WAAW,UAAW,IAAK,WAAW,SAAS,KAAM;AAAA,MACrD;AAAA,IACF;AACA,UAAM,OAAO,KAAK,MAAM,OAAO,KAAK,MAAM,CAAC;AAE3C,WAAO,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,WAAoB;AACrC,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAEA,SAAO,KAAK,IAAI,KAAK,YAAY;AACnC;","names":[]}

package/dist/index.cjs

@@ -149,6 +149,7 @@ var AppBridge = class {
     this.requestHandlers = /* @__PURE__ */ new Map();
     this.pendingRequests = /* @__PURE__ */ new Map();
     this.namespace = options.namespace ?? DEFAULT_NAMESPACE;
+    this.clientId = options.clientId;
     this.source = options.source ?? "embedded-app";
     this.target = options.target;
     this.targetOrigin = options.targetOrigin ?? "*";
@@ -232,10 +233,14 @@ var AppBridge = class {
       }
     });
   }
-  getSessionToken(options = {}) {
+  getSessionToken(request = {}, options = {}) {
+    const resolvedRequest = request.clientId || this.clientId ? {
+      ...request,
+      clientId: request.clientId ?? this.clientId
+    } : request;
     return this.request(
       "thor:session-token:get",
-      void 0,
+      resolvedRequest,
       options
     );
   }
@@ -404,8 +409,8 @@ var import_react = require("react");
 var import_jsx_runtime = require("react/jsx-runtime");
 var AppBridgeContext = (0, import_react.createContext)(null);
 function AppBridgeProvider({
-  allowedOrigins,
   children,
+  clientId,
   currentPath,
   navigationEventType = "navigation:go",
   navigationUpdateEventType = "navigation:update",
@@ -415,14 +420,13 @@ function AppBridgeProvider({
   readyPayload,
   requestTimeoutMs,
   selfWindow,
-  source,
-  target,
   targetOrigin,
   targetWindow
 }) {
   const [bridge, setBridge] = (0, import_react.useState)(null);
   const onNavigateRef = (0, import_react.useRef)(onNavigate);
-  const allowedOriginsKey = allowedOrigins?.join("\n") ?? "";
+  const sessionTokenCacheRef = (0, import_react.useRef)(null);
+  const pendingSessionTokenRef = (0, import_react.useRef)(null);
   (0, import_react.useEffect)(() => {
     onNavigateRef.current = onNavigate;
   }, [onNavigate]);
@@ -430,14 +434,17 @@ function AppBridgeProvider({
     if (typeof window === "undefined" && !selfWindow) {
       return;
     }
+    const resolvedTargetOrigin = targetOrigin ?? getReferrerOrigin(selfWindow);
+    const resolvedAllowedOrigins = resolvedTargetOrigin ? [resolvedTargetOrigin] : void 0;
     const nextBridge = createAppBridge({
-      allowedOrigins: allowedOriginsKey ? allowedOriginsKey.split("\n") : void 0,
+      allowedOrigins: resolvedAllowedOrigins,
+      clientId,
       namespace,
       requestTimeoutMs,
       selfWindow,
-      source,
-      target,
-      targetOrigin,
+      source: "embedded-app",
+      target: "dashboard",
+      targetOrigin: resolvedTargetOrigin,
       targetWindow
     });
     setBridge(nextBridge);
@@ -446,12 +453,10 @@ function AppBridgeProvider({
       nextBridge.destroy();
     };
   }, [
-    allowedOriginsKey,
+    clientId,
     namespace,
     requestTimeoutMs,
     selfWindow,
-    source,
-    target,
     targetOrigin,
     targetWindow
   ]);
@@ -459,8 +464,13 @@ function AppBridgeProvider({
     if (!bridge || !bridge.hasTargetWindow()) {
       return;
     }
-    bridge.send(readyEventType, readyPayload);
-  }, [bridge, readyEventType, readyPayload]);
+    bridge.send(
+      readyEventType,
+      readyPayload ?? {
+        clientId
+      }
+    );
+  }, [bridge, clientId, readyEventType, readyPayload]);
   (0, import_react.useEffect)(() => {
     if (!bridge || !bridge.hasTargetWindow() || !currentPath) {
       return;
@@ -479,11 +489,145 @@ function AppBridgeProvider({
       onNavigateRef.current?.(destination, message);
     });
   }, [bridge, navigationEventType, onNavigate]);
+  (0, import_react.useEffect)(() => {
+    if (!bridge || typeof window === "undefined") {
+      return;
+    }
+    const originalFetch = window.fetch.bind(window);
+    window.fetch = async (input, init) => {
+      if (!shouldAttachSessionToken(input)) {
+        return originalFetch(input, init);
+      }
+      const existingAuthorization = getExistingAuthorization(input, init);
+      if (existingAuthorization) {
+        return originalFetch(input, init);
+      }
+      const nextHeaders = new Headers(
+        input instanceof Request ? input.headers : init?.headers
+      );
+      const sessionToken = await getSessionToken({
+        bridge,
+        clientId,
+        pendingSessionTokenRef,
+        sessionTokenCacheRef
+      });
+      nextHeaders.set("Authorization", `Bearer ${sessionToken}`);
+      if (input instanceof Request) {
+        return originalFetch(
+          new Request(input, {
+            headers: nextHeaders
+          })
+        );
+      }
+      return originalFetch(input, {
+        ...init,
+        headers: nextHeaders
+      });
+    };
+    return () => {
+      window.fetch = originalFetch;
+    };
+  }, [bridge, clientId]);
   return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(AppBridgeContext.Provider, { value: bridge, children });
 }
 function useAppBridge() {
   return (0, import_react.useContext)(AppBridgeContext);
 }
+function getReferrerOrigin(explicitWindow) {
+  const resolvedWindow = explicitWindow ?? (typeof window !== "undefined" ? window : void 0);
+  const referrer = resolvedWindow?.document?.referrer;
+  if (!referrer) {
+    return void 0;
+  }
+  try {
+    return new URL(referrer).origin;
+  } catch {
+    return void 0;
+  }
+}
+async function getSessionToken({
+  bridge,
+  clientId,
+  pendingSessionTokenRef,
+  sessionTokenCacheRef
+}) {
+  const cachedToken = sessionTokenCacheRef.current;
+  if (cachedToken && !isExpired(cachedToken.expiresAt)) {
+    return cachedToken.token;
+  }
+  if (pendingSessionTokenRef.current) {
+    return pendingSessionTokenRef.current;
+  }
+  const pendingToken = bridge.getSessionToken({ clientId }).then((response) => {
+    const token = response.sessionToken ?? response.idToken;
+    if (!token) {
+      throw new Error("Missing Thor embedded session token");
+    }
+    sessionTokenCacheRef.current = {
+      token,
+      expiresAt: normalizeTokenExpiry(token, response.exp)
+    };
+    pendingSessionTokenRef.current = null;
+    return token;
+  }).catch((error) => {
+    pendingSessionTokenRef.current = null;
+    throw error;
+  });
+  pendingSessionTokenRef.current = pendingToken;
+  return pendingToken;
+}
+function shouldAttachSessionToken(input) {
+  if (typeof window === "undefined") {
+    return false;
+  }
+  const requestUrl = resolveRequestUrl(input);
+  return requestUrl.origin === window.location.origin;
+}
+function resolveRequestUrl(input) {
+  if (input instanceof Request) {
+    return new URL(input.url);
+  }
+  if (input instanceof URL) {
+    return input;
+  }
+  return new URL(input, window.location.href);
+}
+function getExistingAuthorization(input, init) {
+  if (input instanceof Request && input.headers.has("Authorization")) {
+    return input.headers.get("Authorization");
+  }
+  if (!init?.headers) {
+    return null;
+  }
+  return new Headers(init.headers).get("Authorization");
+}
+function normalizeTokenExpiry(token, explicitExp) {
+  const tokenExp = explicitExp ?? decodeJwtExpiry(token);
+  return tokenExp ? tokenExp * 1e3 : void 0;
+}
+function decodeJwtExpiry(token) {
+  const [, payload] = token.split(".");
+  if (!payload || typeof window === "undefined") {
+    return void 0;
+  }
+  try {
+    const normalized = payload.replace(/-/g, "+").replace(/_/g, "/");
+    const padded = normalized.padEnd(
+      normalized.length + (4 - normalized.length % 4) % 4,
+      "="
+    );
+    const json = JSON.parse(window.atob(padded));
+    return typeof json.exp === "number" ? json.exp : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function isExpired(expiresAt) {
+  if (!expiresAt) {
+    return false;
+  }
+  return Date.now() >= expiresAt - 5e3;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AppBridge,