@thor-commerce/app-bridge-react 0.6.0 → 0.6.1

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/navigation.ts","../src/core.ts","../src/react.tsx"],"sourcesContent":["export * from \"./core\";\nexport * from \"./navigation\";\nexport * from \"./react\";\n","export interface BridgeNavigationGoPayload {\n  path?: string;\n  href?: string;\n  pathname?: string;\n  search?: string;\n  hash?: string;\n}\n\nexport interface BridgeNavigationRedirectPayload extends BridgeNavigationGoPayload {}\n\nexport interface BridgeNavigationUpdatePayload {\n  path: string;\n  pathname: string;\n  search: string;\n  hash: string;\n}\n\nfunction normalizeSearch(search: string) {\n  if (!search) {\n    return \"\";\n  }\n\n  return search.startsWith(\"?\") ? search : `?${search}`;\n}\n\nfunction normalizeHash(hash: string) {\n  if (!hash) {\n    return \"\";\n  }\n\n  return hash.startsWith(\"#\") ? hash : `#${hash}`;\n}\n\nexport function buildNavigationUpdatePayload(path: string): BridgeNavigationUpdatePayload {\n  let pathname = path;\n  let search = \"\";\n  let hash = \"\";\n\n  const hashIndex = pathname.indexOf(\"#\");\n  if (hashIndex >= 0) {\n    hash = pathname.slice(hashIndex);\n    pathname = pathname.slice(0, hashIndex);\n  }\n\n  const searchIndex = pathname.indexOf(\"?\");\n  if (searchIndex >= 0) {\n    search = pathname.slice(searchIndex);\n    pathname = pathname.slice(0, searchIndex);\n  }\n\n  return {\n    path: `${pathname || \"/\"}${search}${hash}`,\n    pathname: pathname || \"/\",\n    search,\n    hash\n  };\n}\n\nexport function resolveNavigationDestination(payload: unknown): string | null {\n  if (typeof payload === \"string\") {\n    return payload;\n  }\n\n  if (!payload || typeof payload !== \"object\") {\n    return null;\n  }\n\n  const value = payload as BridgeNavigationGoPayload;\n\n  if (typeof value.path === \"string\" && value.path) {\n    return value.path;\n  }\n\n  if (typeof value.href === \"string\" && value.href) {\n    return value.href;\n  }\n\n  if (typeof value.pathname !== \"string\" || !value.pathname) {\n    return null;\n  }\n\n  return `${value.pathname}${normalizeSearch(value.search ?? \"\")}${normalizeHash(value.hash ?? \"\")}`;\n}\n","import {\n  resolveNavigationDestination,\n  type BridgeNavigationGoPayload,\n  type BridgeNavigationRedirectPayload\n} from \"./navigation\";\n\nexport type BridgeParticipant = \"embedded-app\" | \"dashboard\" | \"unknown\";\n\nexport type BridgeMessageKind = \"event\" | \"request\" | \"response\";\n\nexport interface BridgeErrorPayload {\n  code: string;\n  message: string;\n}\n\nexport interface BridgeMessage<TPayload = unknown> {\n  namespace: string;\n  version: \"1.0\";\n  kind: BridgeMessageKind;\n  id: string;\n  type: string;\n  source: BridgeParticipant;\n  target?: BridgeParticipant;\n  payload?: TPayload;\n  replyTo?: string;\n  error?: BridgeErrorPayload;\n}\n\nexport interface AppBridgeOptions {\n  clientId?: string;\n  source?: BridgeParticipant;\n  target?: BridgeParticipant;\n  namespace?: string;\n  targetOrigin?: string;\n  allowedOrigins?: string[];\n  requestTimeoutMs?: number;\n  selfWindow?: Window;\n  targetWindow?: Window | null;\n}\n\nexport interface RequestOptions {\n  timeoutMs?: number;\n}\n\nexport interface SessionTokenRequest {\n  clientId?: string;\n}\n\nexport interface SessionTokenResponse {\n  sessionToken?: string;\n  idToken: string;\n  exp?: number;\n  project?: string;\n}\n\nexport interface ReceivedBridgeMessage<TPayload = unknown> extends BridgeMessage<TPayload> {\n  origin: string;\n  rawEvent: MessageEvent<unknown>;\n}\n\nexport type BridgeEventHandler<TPayload = unknown> = (\n  message: ReceivedBridgeMessage<TPayload>\n) => void;\n\nexport type BridgeRequestHandler<TRequest = unknown, TResponse = unknown> = (\n  payload: TRequest,\n  message: ReceivedBridgeMessage<TRequest>\n) => TResponse | Promise<TResponse>;\n\nexport type Unsubscribe = () => void;\n\nconst DEFAULT_NAMESPACE = \"thorcommerce:app-bridge\";\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_REDIRECT_EVENT_TYPE = \"navigation:redirect\";\n\nfunction createMessageId() {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\") {\n    return crypto.randomUUID();\n  }\n\n  return `msg_${Date.now()}_${Math.random().toString(36).slice(2, 10)}`;\n}\n\nfunction resolveSelfWindow(explicitWindow?: Window) {\n  if (explicitWindow) {\n    return explicitWindow;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return window;\n  }\n\n  return undefined;\n}\n\nfunction resolveTargetWindow(selfWindow: Window | undefined, targetWindow?: Window | null) {\n  if (targetWindow) {\n    return targetWindow;\n  }\n\n  if (!selfWindow) {\n    return undefined;\n  }\n\n  if (selfWindow.parent && selfWindow.parent !== selfWindow) {\n    return selfWindow.parent;\n  }\n\n  return undefined;\n}\n\nfunction isDevelopmentEnvironment() {\n  const nodeEnv =\n    typeof globalThis !== \"undefined\" && \"process\" in globalThis\n      ? (\n          globalThis as typeof globalThis & {\n            process?: { env?: { NODE_ENV?: string } };\n          }\n        ).process?.env?.NODE_ENV\n      : undefined;\n\n  if (nodeEnv) {\n    return nodeEnv !== \"production\";\n  }\n\n  return true;\n}\n\nfunction hasAllowedOrigin(origin: string, allowedOrigins?: string[]) {\n  if (!allowedOrigins || allowedOrigins.length === 0) {\n    return true;\n  }\n\n  return allowedOrigins.includes(origin);\n}\n\nfunction isMessageTarget(value: unknown): value is Window {\n  return !!value && typeof (value as Window).postMessage === \"function\";\n}\n\nfunction omitUndefinedFields<T extends object>(value: T): T {\n  return Object.fromEntries(\n    Object.entries(value).filter(([, fieldValue]) => fieldValue !== undefined)\n  ) as T;\n}\n\nexport function isBridgeMessage<TPayload = unknown>(\n  value: unknown,\n  namespace = DEFAULT_NAMESPACE\n): value is BridgeMessage<TPayload> {\n  if (!value || typeof value !== \"object\") {\n    return false;\n  }\n\n  const message = value as Partial<BridgeMessage<TPayload>>;\n\n  return (\n    message.namespace === namespace &&\n    message.version === \"1.0\" &&\n    typeof message.kind === \"string\" &&\n    typeof message.id === \"string\" &&\n    typeof message.type === \"string\" &&\n    typeof message.source === \"string\"\n  );\n}\n\nexport class AppBridge {\n  private readonly namespace: string;\n  private readonly clientId?: string;\n  private readonly source: BridgeParticipant;\n  private readonly target: BridgeParticipant | undefined;\n  private readonly targetOrigin: string;\n  private readonly allowedOrigins?: string[];\n  private readonly selfWindow?: Window;\n  private readonly defaultTimeoutMs: number;\n  private targetWindow?: Window;\n  private readonly eventHandlers = new Map<string, Set<BridgeEventHandler>>();\n  private readonly requestHandlers = new Map<string, BridgeRequestHandler>();\n  private readonly pendingRequests = new Map<\n    string,\n    {\n      resolve: (value: unknown) => void;\n      reject: (error: Error) => void;\n      timeoutId: ReturnType<typeof setTimeout>;\n    }\n  >();\n  private readonly messageListener: (event: MessageEvent<unknown>) => void;\n\n  constructor(options: AppBridgeOptions = {}) {\n    this.namespace = options.namespace ?? DEFAULT_NAMESPACE;\n    this.clientId = options.clientId;\n    this.source = options.source ?? \"embedded-app\";\n    this.target = options.target;\n    this.targetOrigin = options.targetOrigin ?? \"*\";\n    this.allowedOrigins = options.allowedOrigins;\n    this.defaultTimeoutMs = options.requestTimeoutMs ?? DEFAULT_TIMEOUT_MS;\n    this.selfWindow = resolveSelfWindow(options.selfWindow);\n    this.targetWindow = resolveTargetWindow(this.selfWindow, options.targetWindow);\n    this.messageListener = (event) => {\n      this.handleMessage(event);\n    };\n\n    if (!this.selfWindow) {\n      throw new Error(\n        \"AppBridge requires a browser window. Pass selfWindow explicitly when constructing it outside global window scope.\"\n      );\n    }\n\n    if (this.targetOrigin === \"*\" && isDevelopmentEnvironment()) {\n      console.warn(\n        'AppBridge is using \"*\" as targetOrigin. Set targetOrigin explicitly for both the dashboard and embedded app in production.'\n      );\n    }\n\n    this.selfWindow.addEventListener(\"message\", this.messageListener);\n  }\n\n  setTargetWindow(targetWindow: Window | null) {\n    this.targetWindow = targetWindow ?? undefined;\n  }\n\n  hasTargetWindow() {\n    return this.targetWindow !== undefined;\n  }\n\n  redirect(payload: string | BridgeNavigationRedirectPayload) {\n    const destination = resolveNavigationDestination(payload);\n    if (!destination) {\n      throw new Error(\"AppBridge redirect requires a valid destination.\");\n    }\n\n    if (!this.targetWindow) {\n      this.navigateSelf(destination);\n      return;\n    }\n\n    this.postMessage<BridgeNavigationRedirectPayload>({\n      kind: \"event\",\n      type: DEFAULT_REDIRECT_EVENT_TYPE,\n      payload: typeof payload === \"string\" ? { href: payload } : payload\n    });\n  }\n\n  redirectToRemote(href: string) {\n    this.redirect({ href });\n  }\n\n  redirectToApp(path: string | BridgeNavigationGoPayload) {\n    this.redirect(typeof path === \"string\" ? { path } : path);\n  }\n\n  send<TPayload = unknown>(type: string, payload?: TPayload) {\n    this.postMessage({\n      kind: \"event\",\n      type,\n      payload\n    });\n  }\n\n  request<TRequest = unknown, TResponse = unknown>(\n    type: string,\n    payload?: TRequest,\n    options: RequestOptions = {}\n  ) {\n    const messageId = createMessageId();\n    const timeoutMs = options.timeoutMs ?? this.defaultTimeoutMs;\n\n    return new Promise<TResponse>((resolve, reject) => {\n      const timeoutId = setTimeout(() => {\n        this.pendingRequests.delete(messageId);\n        reject(new Error(`Bridge request timed out for \"${type}\" after ${timeoutMs}ms.`));\n      }, timeoutMs);\n\n      this.pendingRequests.set(messageId, {\n        resolve: (value) => resolve(value as TResponse),\n        reject,\n        timeoutId\n      });\n\n      try {\n        this.postMessage({\n          id: messageId,\n          kind: \"request\",\n          type,\n          payload\n        });\n      } catch (error) {\n        clearTimeout(timeoutId);\n        this.pendingRequests.delete(messageId);\n        reject(error instanceof Error ? error : new Error(\"Failed to send bridge request.\"));\n      }\n    });\n  }\n\n  getSessionToken(\n    request: SessionTokenRequest = {},\n    options: RequestOptions = {}\n  ) {\n    const resolvedRequest =\n      request.clientId || this.clientId\n        ? {\n            ...request,\n            clientId: request.clientId ?? this.clientId\n          }\n        : request;\n\n    return this.request<SessionTokenRequest, SessionTokenResponse>(\n      \"thor:session-token:get\",\n      resolvedRequest,\n      options\n    );\n  }\n\n  on<TPayload = unknown>(type: string, handler: BridgeEventHandler<TPayload>): Unsubscribe {\n    const handlers = this.eventHandlers.get(type) ?? new Set<BridgeEventHandler>();\n    handlers.add(handler as BridgeEventHandler);\n    this.eventHandlers.set(type, handlers);\n\n    return () => {\n      handlers.delete(handler as BridgeEventHandler);\n      if (handlers.size === 0) {\n        this.eventHandlers.delete(type);\n      }\n    };\n  }\n\n  onRequest<TRequest = unknown, TResponse = unknown>(\n    type: string,\n    handler: BridgeRequestHandler<TRequest, TResponse>\n  ): Unsubscribe {\n    this.requestHandlers.set(type, handler as BridgeRequestHandler);\n\n    return () => {\n      const registeredHandler = this.requestHandlers.get(type);\n      if (registeredHandler === handler) {\n        this.requestHandlers.delete(type);\n      }\n    };\n  }\n\n  destroy() {\n    if (this.selfWindow) {\n      this.selfWindow.removeEventListener(\"message\", this.messageListener);\n    }\n\n    for (const pendingRequest of this.pendingRequests.values()) {\n      clearTimeout(pendingRequest.timeoutId);\n      pendingRequest.reject(new Error(\"AppBridge destroyed before a response was received.\"));\n    }\n\n    this.pendingRequests.clear();\n    this.eventHandlers.clear();\n    this.requestHandlers.clear();\n  }\n\n  private handleMessage(event: MessageEvent<unknown>) {\n    if (!hasAllowedOrigin(event.origin, this.allowedOrigins)) {\n      return;\n    }\n\n    if (!isBridgeMessage(event.data, this.namespace)) {\n      return;\n    }\n\n    const message = event.data;\n\n    if (this.target && message.target && message.target !== this.source) {\n      return;\n    }\n\n    const receivedMessage: ReceivedBridgeMessage = {\n      ...message,\n      origin: event.origin,\n      rawEvent: event\n    };\n\n    if (\n      message.kind === \"event\" &&\n      message.type === DEFAULT_REDIRECT_EVENT_TYPE &&\n      this.handleRedirectMessage(receivedMessage)\n    ) {\n      return;\n    }\n\n    if (message.kind === \"response\" && message.replyTo) {\n      this.resolvePendingRequest(message.replyTo, message);\n      return;\n    }\n\n    this.emitHandlers(message.type, receivedMessage);\n\n    if (message.kind === \"request\") {\n      void this.handleRequest(receivedMessage);\n    }\n  }\n\n  private emitHandlers(type: string, message: ReceivedBridgeMessage) {\n    const typeHandlers = this.eventHandlers.get(type);\n    if (typeHandlers) {\n      for (const handler of typeHandlers) {\n        handler(message);\n      }\n    }\n\n    if (type === \"*\") {\n      return;\n    }\n\n    const wildcardHandlers = this.eventHandlers.get(\"*\");\n    if (wildcardHandlers) {\n      for (const handler of wildcardHandlers) {\n        handler(message);\n      }\n    }\n  }\n\n  private async handleRequest(message: ReceivedBridgeMessage) {\n    const handler = this.requestHandlers.get(message.type);\n    if (!handler) {\n      return;\n    }\n\n    const replyTarget = isMessageTarget(message.rawEvent.source)\n      ? message.rawEvent.source\n      : this.targetWindow;\n\n    try {\n      const payload = await handler(message.payload, message);\n      this.postMessage(\n        {\n          kind: \"response\",\n          type: message.type,\n          payload,\n          replyTo: message.id\n        },\n        replyTarget\n      );\n    } catch (error) {\n      const bridgeError =\n        error instanceof Error\n          ? { code: \"request_handler_error\", message: error.message }\n          : { code: \"request_handler_error\", message: \"Unknown request handler error.\" };\n\n      this.postMessage(\n        {\n          kind: \"response\",\n          type: message.type,\n          error: bridgeError,\n          replyTo: message.id\n        },\n        replyTarget\n      );\n    }\n  }\n\n  private resolvePendingRequest(messageId: string, message: BridgeMessage) {\n    const pendingRequest = this.pendingRequests.get(messageId);\n    if (!pendingRequest) {\n      return;\n    }\n\n    clearTimeout(pendingRequest.timeoutId);\n    this.pendingRequests.delete(messageId);\n\n    if (message.error) {\n      pendingRequest.reject(new Error(`${message.error.code}: ${message.error.message}`));\n      return;\n    }\n\n    pendingRequest.resolve(message.payload);\n  }\n\n  private postMessage<TPayload = unknown>(\n    partialMessage: Pick<BridgeMessage<TPayload>, \"kind\" | \"type\"> &\n      Partial<Omit<BridgeMessage<TPayload>, \"namespace\" | \"version\" | \"source\">>,\n    targetWindowOverride?: Window\n  ) {\n    const targetWindow = targetWindowOverride ?? this.targetWindow;\n    if (!targetWindow) {\n      throw new Error(\n        \"AppBridge could not resolve a target window. Pass targetWindow explicitly or call setTargetWindow().\"\n      );\n    }\n\n    const message = omitUndefinedFields({\n      namespace: this.namespace,\n      version: \"1.0\",\n      id: partialMessage.id ?? createMessageId(),\n      kind: partialMessage.kind,\n      type: partialMessage.type,\n      source: this.source,\n      target: partialMessage.target ?? this.target,\n      payload: partialMessage.payload,\n      replyTo: partialMessage.replyTo,\n      error: partialMessage.error\n    }) as BridgeMessage<TPayload>;\n\n    targetWindow.postMessage(message, this.targetOrigin);\n  }\n\n  private handleRedirectMessage(message: ReceivedBridgeMessage): boolean {\n    const destination = resolveNavigationDestination(message.payload);\n    if (!destination) {\n      return false;\n    }\n\n    this.navigateSelf(destination);\n    return true;\n  }\n\n  private navigateSelf(destination: string) {\n    if (!this.selfWindow) {\n      throw new Error(\"AppBridge could not resolve a browser window for redirect.\");\n    }\n\n    this.selfWindow.location.assign(destination);\n  }\n}\n\nexport function createAppBridge(options: AppBridgeOptions = {}) {\n  return new AppBridge(options);\n}\n","import {\n  createContext,\n  useContext,\n  useEffect,\n  useRef,\n  useState,\n  type MutableRefObject,\n  type ReactNode\n} from \"react\";\n\nimport {\n  createAppBridge,\n  type AppBridge,\n  type AppBridgeOptions,\n  type ReceivedBridgeMessage\n} from \"./core\";\nimport {\n  buildNavigationUpdatePayload,\n  resolveNavigationDestination,\n  type BridgeNavigationGoPayload\n} from \"./navigation\";\n\nconst AppBridgeContext = createContext<AppBridge | null>(null);\n\nexport interface AppBridgeProviderProps\n  extends Omit<AppBridgeOptions, \"source\" | \"target\" | \"allowedOrigins\"> {\n  children: ReactNode;\n  clientId: string;\n  readyEventType?: string;\n  readyPayload?: unknown;\n  currentPath?: string | null;\n  navigationEventType?: string;\n  navigationUpdateEventType?: string;\n  onNavigate?: (\n    path: string,\n    message: ReceivedBridgeMessage<BridgeNavigationGoPayload>\n  ) => void;\n}\n\nexport function AppBridgeProvider({\n  children,\n  clientId,\n  currentPath,\n  navigationEventType = \"navigation:go\",\n  navigationUpdateEventType = \"navigation:update\",\n  namespace,\n  onNavigate,\n  readyEventType = \"app:ready\",\n  readyPayload,\n  requestTimeoutMs,\n  selfWindow,\n  targetOrigin,\n  targetWindow\n}: AppBridgeProviderProps) {\n  const [bridge, setBridge] = useState<AppBridge | null>(null);\n  const onNavigateRef = useRef(onNavigate);\n  const sessionTokenCacheRef = useRef<{\n    token: string;\n    expiresAt?: number;\n  } | null>(null);\n  const pendingSessionTokenRef = useRef<Promise<string> | null>(null);\n\n  useEffect(() => {\n    onNavigateRef.current = onNavigate;\n  }, [onNavigate]);\n\n  useEffect(() => {\n    if (typeof window === \"undefined\" && !selfWindow) {\n      return;\n    }\n\n    const resolvedTargetOrigin = targetOrigin ?? getReferrerOrigin(selfWindow);\n    const resolvedAllowedOrigins = resolvedTargetOrigin\n      ? [resolvedTargetOrigin]\n      : undefined;\n\n    const nextBridge = createAppBridge({\n      allowedOrigins: resolvedAllowedOrigins,\n      clientId,\n      namespace,\n      requestTimeoutMs,\n      selfWindow,\n      source: \"embedded-app\",\n      target: \"dashboard\",\n      targetOrigin: resolvedTargetOrigin,\n      targetWindow\n    });\n\n    setBridge(nextBridge);\n\n    return () => {\n      setBridge((currentBridge) => (currentBridge === nextBridge ? null : currentBridge));\n      nextBridge.destroy();\n    };\n  }, [\n    clientId,\n    namespace,\n    requestTimeoutMs,\n    selfWindow,\n    targetOrigin,\n    targetWindow\n  ]);\n\n  useEffect(() => {\n    if (!bridge || !bridge.hasTargetWindow()) {\n      return;\n    }\n\n    bridge.send(\n      readyEventType,\n      readyPayload ?? {\n        clientId\n      }\n    );\n  }, [bridge, clientId, readyEventType, readyPayload]);\n\n  useEffect(() => {\n    if (!bridge || !bridge.hasTargetWindow() || !currentPath) {\n      return;\n    }\n\n    bridge.send(navigationUpdateEventType, buildNavigationUpdatePayload(currentPath));\n  }, [bridge, currentPath, navigationUpdateEventType]);\n\n  useEffect(() => {\n    if (!bridge || !onNavigate) {\n      return;\n    }\n\n    return bridge.on<BridgeNavigationGoPayload>(navigationEventType, (message) => {\n      const destination = resolveNavigationDestination(message.payload);\n      if (!destination) {\n        return;\n      }\n\n      onNavigateRef.current?.(destination, message);\n    });\n  }, [bridge, navigationEventType, onNavigate]);\n\n  useEffect(() => {\n    if (!bridge || typeof window === \"undefined\") {\n      return;\n    }\n\n    const originalFetch = window.fetch.bind(window);\n\n    window.fetch = async (input: RequestInfo | URL, init?: RequestInit) => {\n      if (!shouldAttachSessionToken(input)) {\n        return originalFetch(input, init);\n      }\n\n      const existingAuthorization = getExistingAuthorization(input, init);\n      if (existingAuthorization) {\n        return originalFetch(input, init);\n      }\n\n      const nextHeaders = new Headers(\n        input instanceof Request ? input.headers : init?.headers\n      );\n      const sessionToken = await getSessionToken({\n        bridge,\n        clientId,\n        pendingSessionTokenRef,\n        sessionTokenCacheRef\n      });\n\n      nextHeaders.set(\"Authorization\", `Bearer ${sessionToken}`);\n\n      if (input instanceof Request) {\n        return originalFetch(\n          new Request(input, {\n            headers: nextHeaders\n          })\n        );\n      }\n\n      return originalFetch(input, {\n        ...init,\n        headers: nextHeaders\n      });\n    };\n\n    return () => {\n      window.fetch = originalFetch;\n    };\n  }, [bridge, clientId]);\n\n  return <AppBridgeContext.Provider value={bridge}>{children}</AppBridgeContext.Provider>;\n}\n\nexport function useAppBridge() {\n  return useContext(AppBridgeContext);\n}\n\nfunction getReferrerOrigin(explicitWindow?: Window) {\n  const resolvedWindow = explicitWindow ?? (typeof window !== \"undefined\" ? window : undefined);\n  const referrer = resolvedWindow?.document?.referrer;\n\n  if (!referrer) {\n    return undefined;\n  }\n\n  try {\n    return new URL(referrer).origin;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function getSessionToken({\n  bridge,\n  clientId,\n  pendingSessionTokenRef,\n  sessionTokenCacheRef\n}: {\n  bridge: AppBridge;\n  clientId: string;\n  pendingSessionTokenRef: MutableRefObject<Promise<string> | null>;\n  sessionTokenCacheRef: MutableRefObject<{\n    token: string;\n    expiresAt?: number;\n  } | null>;\n}) {\n  const cachedToken = sessionTokenCacheRef.current;\n  if (cachedToken && !isExpired(cachedToken.expiresAt)) {\n    return cachedToken.token;\n  }\n\n  if (pendingSessionTokenRef.current) {\n    return pendingSessionTokenRef.current;\n  }\n\n  const pendingToken = bridge\n    .getSessionToken({ clientId })\n    .then((response) => {\n      const token = response.sessionToken ?? response.idToken;\n      if (!token) {\n        throw new Error(\"Missing Thor embedded session token\");\n      }\n\n      sessionTokenCacheRef.current = {\n        token,\n        expiresAt: normalizeTokenExpiry(token, response.exp)\n      };\n      pendingSessionTokenRef.current = null;\n\n      return token;\n    })\n    .catch((error) => {\n      pendingSessionTokenRef.current = null;\n      throw error;\n    });\n\n  pendingSessionTokenRef.current = pendingToken;\n  return pendingToken;\n}\n\nfunction shouldAttachSessionToken(input: RequestInfo | URL) {\n  if (typeof window === \"undefined\") {\n    return false;\n  }\n\n  const requestUrl = resolveRequestUrl(input);\n  return requestUrl.origin === window.location.origin;\n}\n\nfunction resolveRequestUrl(input: RequestInfo | URL) {\n  if (input instanceof Request) {\n    return new URL(input.url);\n  }\n\n  if (input instanceof URL) {\n    return input;\n  }\n\n  return new URL(input, window.location.href);\n}\n\nfunction getExistingAuthorization(input: RequestInfo | URL, init?: RequestInit) {\n  if (input instanceof Request && input.headers.has(\"Authorization\")) {\n    return input.headers.get(\"Authorization\");\n  }\n\n  if (!init?.headers) {\n    return null;\n  }\n\n  return new Headers(init.headers).get(\"Authorization\");\n}\n\nfunction normalizeTokenExpiry(token: string, explicitExp?: number) {\n  const tokenExp = explicitExp ?? decodeJwtExpiry(token);\n  return tokenExp ? tokenExp * 1000 : undefined;\n}\n\nfunction decodeJwtExpiry(token: string) {\n  const [, payload] = token.split(\".\");\n  if (!payload || typeof window === \"undefined\") {\n    return undefined;\n  }\n\n  try {\n    const normalized = payload.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const padded = normalized.padEnd(\n      normalized.length + ((4 - (normalized.length % 4)) % 4),\n      \"=\"\n    );\n    const json = JSON.parse(window.atob(padded)) as { exp?: unknown };\n\n    return typeof json.exp === \"number\" ? json.exp : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction isExpired(expiresAt?: number) {\n  if (!expiresAt) {\n    return false;\n  }\n\n  return Date.now() >= expiresAt - 5_000;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACiBA,SAAS,gBAAgB,QAAgB;AACvC,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,SAAO,OAAO,WAAW,GAAG,IAAI,SAAS,IAAI,MAAM;AACrD;AAEA,SAAS,cAAc,MAAc;AACnC,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AAEA,SAAO,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI;AAC/C;AAEO,SAAS,6BAA6B,MAA6C;AACxF,MAAI,WAAW;AACf,MAAI,SAAS;AACb,MAAI,OAAO;AAEX,QAAM,YAAY,SAAS,QAAQ,GAAG;AACtC,MAAI,aAAa,GAAG;AAClB,WAAO,SAAS,MAAM,SAAS;AAC/B,eAAW,SAAS,MAAM,GAAG,SAAS;AAAA,EACxC;AAEA,QAAM,cAAc,SAAS,QAAQ,GAAG;AACxC,MAAI,eAAe,GAAG;AACpB,aAAS,SAAS,MAAM,WAAW;AACnC,eAAW,SAAS,MAAM,GAAG,WAAW;AAAA,EAC1C;AAEA,SAAO;AAAA,IACL,MAAM,GAAG,YAAY,GAAG,GAAG,MAAM,GAAG,IAAI;AAAA,IACxC,UAAU,YAAY;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,6BAA6B,SAAiC;AAC5E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,WAAW,OAAO,YAAY,UAAU;AAC3C,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ;AAEd,MAAI,OAAO,MAAM,SAAS,YAAY,MAAM,MAAM;AAChD,WAAO,MAAM;AAAA,EACf;AAEA,MAAI,OAAO,MAAM,SAAS,YAAY,MAAM,MAAM;AAChD,WAAO,MAAM;AAAA,EACf;AAEA,MAAI,OAAO,MAAM,aAAa,YAAY,CAAC,MAAM,UAAU;AACzD,WAAO;AAAA,EACT;AAEA,SAAO,GAAG,MAAM,QAAQ,GAAG,gBAAgB,MAAM,UAAU,EAAE,CAAC,GAAG,cAAc,MAAM,QAAQ,EAAE,CAAC;AAClG;;;ACXA,IAAM,oBAAoB;AAC1B,IAAM,qBAAqB;AAC3B,IAAM,8BAA8B;AAEpC,SAAS,kBAAkB;AACzB,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe,YAAY;AAC5E,WAAO,OAAO,WAAW;AAAA,EAC3B;AAEA,SAAO,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACrE;AAEA,SAAS,kBAAkB,gBAAyB;AAClD,MAAI,gBAAgB;AAClB,WAAO;AAAA,EACT;AAEA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,YAAgC,cAA8B;AACzF,MAAI,cAAc;AAChB,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,UAAU,WAAW,WAAW,YAAY;AACzD,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;AAEA,SAAS,2BAA2B;AAClC,QAAM,UACJ,OAAO,eAAe,eAAe,aAAa,aAE5C,WAGA,SAAS,KAAK,WAChB;AAEN,MAAI,SAAS;AACX,WAAO,YAAY;AAAA,EACrB;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAAgB,gBAA2B;AACnE,MAAI,CAAC,kBAAkB,eAAe,WAAW,GAAG;AAClD,WAAO;AAAA,EACT;AAEA,SAAO,eAAe,SAAS,MAAM;AACvC;AAEA,SAAS,gBAAgB,OAAiC;AACxD,SAAO,CAAC,CAAC,SAAS,OAAQ,MAAiB,gBAAgB;AAC7D;AAEA,SAAS,oBAAsC,OAAa;AAC1D,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,UAAU,MAAM,eAAe,MAAS;AAAA,EAC3E;AACF;AAEO,SAAS,gBACd,OACA,YAAY,mBACsB;AAClC,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAEhB,SACE,QAAQ,cAAc,aACtB,QAAQ,YAAY,SACpB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,OAAO,YACtB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,WAAW;AAE9B;AAEO,IAAM,YAAN,MAAgB;AAAA,EAsBrB,YAAY,UAA4B,CAAC,GAAG;AAZ5C,SAAiB,gBAAgB,oBAAI,IAAqC;AAC1E,SAAiB,kBAAkB,oBAAI,IAAkC;AACzE,SAAiB,kBAAkB,oBAAI,IAOrC;AAIA,SAAK,YAAY,QAAQ,aAAa;AACtC,SAAK,WAAW,QAAQ;AACxB,SAAK,SAAS,QAAQ,UAAU;AAChC,SAAK,SAAS,QAAQ;AACtB,SAAK,eAAe,QAAQ,gBAAgB;AAC5C,SAAK,iBAAiB,QAAQ;AAC9B,SAAK,mBAAmB,QAAQ,oBAAoB;AACpD,SAAK,aAAa,kBAAkB,QAAQ,UAAU;AACtD,SAAK,eAAe,oBAAoB,KAAK,YAAY,QAAQ,YAAY;AAC7E,SAAK,kBAAkB,CAAC,UAAU;AAChC,WAAK,cAAc,KAAK;AAAA,IAC1B;AAEA,QAAI,CAAC,KAAK,YAAY;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,KAAK,iBAAiB,OAAO,yBAAyB,GAAG;AAC3D,cAAQ;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAEA,SAAK,WAAW,iBAAiB,WAAW,KAAK,eAAe;AAAA,EAClE;AAAA,EAEA,gBAAgB,cAA6B;AAC3C,SAAK,eAAe,gBAAgB;AAAA,EACtC;AAAA,EAEA,kBAAkB;AAChB,WAAO,KAAK,iBAAiB;AAAA,EAC/B;AAAA,EAEA,SAAS,SAAmD;AAC1D,UAAM,cAAc,6BAA6B,OAAO;AACxD,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,kDAAkD;AAAA,IACpE;AAEA,QAAI,CAAC,KAAK,cAAc;AACtB,WAAK,aAAa,WAAW;AAC7B;AAAA,IACF;AAEA,SAAK,YAA6C;AAAA,MAChD,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS,OAAO,YAAY,WAAW,EAAE,MAAM,QAAQ,IAAI;AAAA,IAC7D,CAAC;AAAA,EACH;AAAA,EAEA,iBAAiB,MAAc;AAC7B,SAAK,SAAS,EAAE,KAAK,CAAC;AAAA,EACxB;AAAA,EAEA,cAAc,MAA0C;AACtD,SAAK,SAAS,OAAO,SAAS,WAAW,EAAE,KAAK,IAAI,IAAI;AAAA,EAC1D;AAAA,EAEA,KAAyB,MAAc,SAAoB;AACzD,SAAK,YAAY;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,QACE,MACA,SACA,UAA0B,CAAC,GAC3B;AACA,UAAM,YAAY,gBAAgB;AAClC,UAAM,YAAY,QAAQ,aAAa,KAAK;AAE5C,WAAO,IAAI,QAAmB,CAAC,SAAS,WAAW;AACjD,YAAM,YAAY,WAAW,MAAM;AACjC,aAAK,gBAAgB,OAAO,SAAS;AACrC,eAAO,IAAI,MAAM,iCAAiC,IAAI,WAAW,SAAS,KAAK,CAAC;AAAA,MAClF,GAAG,SAAS;AAEZ,WAAK,gBAAgB,IAAI,WAAW;AAAA,QAClC,SAAS,CAAC,UAAU,QAAQ,KAAkB;AAAA,QAC9C;AAAA,QACA;AAAA,MACF,CAAC;AAED,UAAI;AACF,aAAK,YAAY;AAAA,UACf,IAAI;AAAA,UACJ,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,qBAAa,SAAS;AACtB,aAAK,gBAAgB,OAAO,SAAS;AACrC,eAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,gCAAgC,CAAC;AAAA,MACrF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,gBACE,UAA+B,CAAC,GAChC,UAA0B,CAAC,GAC3B;AACA,UAAM,kBACJ,QAAQ,YAAY,KAAK,WACrB;AAAA,MACE,GAAG;AAAA,MACH,UAAU,QAAQ,YAAY,KAAK;AAAA,IACrC,IACA;AAEN,WAAO,KAAK;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,GAAuB,MAAc,SAAoD;AACvF,UAAM,WAAW,KAAK,cAAc,IAAI,IAAI,KAAK,oBAAI,IAAwB;AAC7E,aAAS,IAAI,OAA6B;AAC1C,SAAK,cAAc,IAAI,MAAM,QAAQ;AAErC,WAAO,MAAM;AACX,eAAS,OAAO,OAA6B;AAC7C,UAAI,SAAS,SAAS,GAAG;AACvB,aAAK,cAAc,OAAO,IAAI;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UACE,MACA,SACa;AACb,SAAK,gBAAgB,IAAI,MAAM,OAA+B;AAE9D,WAAO,MAAM;AACX,YAAM,oBAAoB,KAAK,gBAAgB,IAAI,IAAI;AACvD,UAAI,sBAAsB,SAAS;AACjC,aAAK,gBAAgB,OAAO,IAAI;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU;AACR,QAAI,KAAK,YAAY;AACnB,WAAK,WAAW,oBAAoB,WAAW,KAAK,eAAe;AAAA,IACrE;AAEA,eAAW,kBAAkB,KAAK,gBAAgB,OAAO,GAAG;AAC1D,mBAAa,eAAe,SAAS;AACrC,qBAAe,OAAO,IAAI,MAAM,qDAAqD,CAAC;AAAA,IACxF;AAEA,SAAK,gBAAgB,MAAM;AAC3B,SAAK,cAAc,MAAM;AACzB,SAAK,gBAAgB,MAAM;AAAA,EAC7B;AAAA,EAEQ,cAAc,OAA8B;AAClD,QAAI,CAAC,iBAAiB,MAAM,QAAQ,KAAK,cAAc,GAAG;AACxD;AAAA,IACF;AAEA,QAAI,CAAC,gBAAgB,MAAM,MAAM,KAAK,SAAS,GAAG;AAChD;AAAA,IACF;AAEA,UAAM,UAAU,MAAM;AAEtB,QAAI,KAAK,UAAU,QAAQ,UAAU,QAAQ,WAAW,KAAK,QAAQ;AACnE;AAAA,IACF;AAEA,UAAM,kBAAyC;AAAA,MAC7C,GAAG;AAAA,MACH,QAAQ,MAAM;AAAA,MACd,UAAU;AAAA,IACZ;AAEA,QACE,QAAQ,SAAS,WACjB,QAAQ,SAAS,+BACjB,KAAK,sBAAsB,eAAe,GAC1C;AACA;AAAA,IACF;AAEA,QAAI,QAAQ,SAAS,cAAc,QAAQ,SAAS;AAClD,WAAK,sBAAsB,QAAQ,SAAS,OAAO;AACnD;AAAA,IACF;AAEA,SAAK,aAAa,QAAQ,MAAM,eAAe;AAE/C,QAAI,QAAQ,SAAS,WAAW;AAC9B,WAAK,KAAK,cAAc,eAAe;AAAA,IACzC;AAAA,EACF;AAAA,EAEQ,aAAa,MAAc,SAAgC;AACjE,UAAM,eAAe,KAAK,cAAc,IAAI,IAAI;AAChD,QAAI,cAAc;AAChB,iBAAW,WAAW,cAAc;AAClC,gBAAQ,OAAO;AAAA,MACjB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB;AAAA,IACF;AAEA,UAAM,mBAAmB,KAAK,cAAc,IAAI,GAAG;AACnD,QAAI,kBAAkB;AACpB,iBAAW,WAAW,kBAAkB;AACtC,gBAAQ,OAAO;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,SAAgC;AAC1D,UAAM,UAAU,KAAK,gBAAgB,IAAI,QAAQ,IAAI;AACrD,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AAEA,UAAM,cAAc,gBAAgB,QAAQ,SAAS,MAAM,IACvD,QAAQ,SAAS,SACjB,KAAK;AAET,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,QAAQ,SAAS,OAAO;AACtD,WAAK;AAAA,QACH;AAAA,UACE,MAAM;AAAA,UACN,MAAM,QAAQ;AAAA,UACd;AAAA,UACA,SAAS,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,cACJ,iBAAiB,QACb,EAAE,MAAM,yBAAyB,SAAS,MAAM,QAAQ,IACxD,EAAE,MAAM,yBAAyB,SAAS,iCAAiC;AAEjF,WAAK;AAAA,QACH;AAAA,UACE,MAAM;AAAA,UACN,MAAM,QAAQ;AAAA,UACd,OAAO;AAAA,UACP,SAAS,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,sBAAsB,WAAmB,SAAwB;AACvE,UAAM,iBAAiB,KAAK,gBAAgB,IAAI,SAAS;AACzD,QAAI,CAAC,gBAAgB;AACnB;AAAA,IACF;AAEA,iBAAa,eAAe,SAAS;AACrC,SAAK,gBAAgB,OAAO,SAAS;AAErC,QAAI,QAAQ,OAAO;AACjB,qBAAe,OAAO,IAAI,MAAM,GAAG,QAAQ,MAAM,IAAI,KAAK,QAAQ,MAAM,OAAO,EAAE,CAAC;AAClF;AAAA,IACF;AAEA,mBAAe,QAAQ,QAAQ,OAAO;AAAA,EACxC;AAAA,EAEQ,YACN,gBAEA,sBACA;AACA,UAAM,eAAe,wBAAwB,KAAK;AAClD,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,oBAAoB;AAAA,MAClC,WAAW,KAAK;AAAA,MAChB,SAAS;AAAA,MACT,IAAI,eAAe,MAAM,gBAAgB;AAAA,MACzC,MAAM,eAAe;AAAA,MACrB,MAAM,eAAe;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,QAAQ,eAAe,UAAU,KAAK;AAAA,MACtC,SAAS,eAAe;AAAA,MACxB,SAAS,eAAe;AAAA,MACxB,OAAO,eAAe;AAAA,IACxB,CAAC;AAED,iBAAa,YAAY,SAAS,KAAK,YAAY;AAAA,EACrD;AAAA,EAEQ,sBAAsB,SAAyC;AACrE,UAAM,cAAc,6BAA6B,QAAQ,OAAO;AAChE,QAAI,CAAC,aAAa;AAChB,aAAO;AAAA,IACT;AAEA,SAAK,aAAa,WAAW;AAC7B,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa,aAAqB;AACxC,QAAI,CAAC,KAAK,YAAY;AACpB,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AAEA,SAAK,WAAW,SAAS,OAAO,WAAW;AAAA,EAC7C;AACF;AAEO,SAAS,gBAAgB,UAA4B,CAAC,GAAG;AAC9D,SAAO,IAAI,UAAU,OAAO;AAC9B;;;ACzgBA,mBAQO;AAmLE;AArKT,IAAM,uBAAmB,4BAAgC,IAAI;AAiBtD,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AAAA,EACtB,4BAA4B;AAAA,EAC5B;AAAA,EACA;AAAA,EACA,iBAAiB;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA2B;AACzB,QAAM,CAAC,QAAQ,SAAS,QAAI,uBAA2B,IAAI;AAC3D,QAAM,oBAAgB,qBAAO,UAAU;AACvC,QAAM,2BAAuB,qBAGnB,IAAI;AACd,QAAM,6BAAyB,qBAA+B,IAAI;AAElE,8BAAU,MAAM;AACd,kBAAc,UAAU;AAAA,EAC1B,GAAG,CAAC,UAAU,CAAC;AAEf,8BAAU,MAAM;AACd,QAAI,OAAO,WAAW,eAAe,CAAC,YAAY;AAChD;AAAA,IACF;AAEA,UAAM,uBAAuB,gBAAgB,kBAAkB,UAAU;AACzE,UAAM,yBAAyB,uBAC3B,CAAC,oBAAoB,IACrB;AAEJ,UAAM,aAAa,gBAAgB;AAAA,MACjC,gBAAgB;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,cAAc;AAAA,MACd;AAAA,IACF,CAAC;AAED,cAAU,UAAU;AAEpB,WAAO,MAAM;AACX,gBAAU,CAAC,kBAAmB,kBAAkB,aAAa,OAAO,aAAc;AAClF,iBAAW,QAAQ;AAAA,IACrB;AAAA,EACF,GAAG;AAAA,IACD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,8BAAU,MAAM;AACd,QAAI,CAAC,UAAU,CAAC,OAAO,gBAAgB,GAAG;AACxC;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,gBAAgB;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF,GAAG,CAAC,QAAQ,UAAU,gBAAgB,YAAY,CAAC;AAEnD,8BAAU,MAAM;AACd,QAAI,CAAC,UAAU,CAAC,OAAO,gBAAgB,KAAK,CAAC,aAAa;AACxD;AAAA,IACF;AAEA,WAAO,KAAK,2BAA2B,6BAA6B,WAAW,CAAC;AAAA,EAClF,GAAG,CAAC,QAAQ,aAAa,yBAAyB,CAAC;AAEnD,8BAAU,MAAM;AACd,QAAI,CAAC,UAAU,CAAC,YAAY;AAC1B;AAAA,IACF;AAEA,WAAO,OAAO,GAA8B,qBAAqB,CAAC,YAAY;AAC5E,YAAM,cAAc,6BAA6B,QAAQ,OAAO;AAChE,UAAI,CAAC,aAAa;AAChB;AAAA,MACF;AAEA,oBAAc,UAAU,aAAa,OAAO;AAAA,IAC9C,CAAC;AAAA,EACH,GAAG,CAAC,QAAQ,qBAAqB,UAAU,CAAC;AAE5C,8BAAU,MAAM;AACd,QAAI,CAAC,UAAU,OAAO,WAAW,aAAa;AAC5C;AAAA,IACF;AAEA,UAAM,gBAAgB,OAAO,MAAM,KAAK,MAAM;AAE9C,WAAO,QAAQ,OAAO,OAA0B,SAAuB;AACrE,UAAI,CAAC,yBAAyB,KAAK,GAAG;AACpC,eAAO,cAAc,OAAO,IAAI;AAAA,MAClC;AAEA,YAAM,wBAAwB,yBAAyB,OAAO,IAAI;AAClE,UAAI,uBAAuB;AACzB,eAAO,cAAc,OAAO,IAAI;AAAA,MAClC;AAEA,YAAM,cAAc,IAAI;AAAA,QACtB,iBAAiB,UAAU,MAAM,UAAU,MAAM;AAAA,MACnD;AACA,YAAM,eAAe,MAAM,gBAAgB;AAAA,QACzC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,kBAAY,IAAI,iBAAiB,UAAU,YAAY,EAAE;AAEzD,UAAI,iBAAiB,SAAS;AAC5B,eAAO;AAAA,UACL,IAAI,QAAQ,OAAO;AAAA,YACjB,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAEA,aAAO,cAAc,OAAO;AAAA,QAC1B,GAAG;AAAA,QACH,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,WAAO,MAAM;AACX,aAAO,QAAQ;AAAA,IACjB;AAAA,EACF,GAAG,CAAC,QAAQ,QAAQ,CAAC;AAErB,SAAO,4CAAC,iBAAiB,UAAjB,EAA0B,OAAO,QAAS,UAAS;AAC7D;AAEO,SAAS,eAAe;AAC7B,aAAO,yBAAW,gBAAgB;AACpC;AAEA,SAAS,kBAAkB,gBAAyB;AAClD,QAAM,iBAAiB,mBAAmB,OAAO,WAAW,cAAc,SAAS;AACnF,QAAM,WAAW,gBAAgB,UAAU;AAE3C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AAEA,MAAI;AACF,WAAO,IAAI,IAAI,QAAQ,EAAE;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,gBAAgB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,cAAc,qBAAqB;AACzC,MAAI,eAAe,CAAC,UAAU,YAAY,SAAS,GAAG;AACpD,WAAO,YAAY;AAAA,EACrB;AAEA,MAAI,uBAAuB,SAAS;AAClC,WAAO,uBAAuB;AAAA,EAChC;AAEA,QAAM,eAAe,OAClB,gBAAgB,EAAE,SAAS,CAAC,EAC5B,KAAK,CAAC,aAAa;AAClB,UAAM,QAAQ,SAAS,gBAAgB,SAAS;AAChD,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,qCAAqC;AAAA,IACvD;AAEA,yBAAqB,UAAU;AAAA,MAC7B;AAAA,MACA,WAAW,qBAAqB,OAAO,SAAS,GAAG;AAAA,IACrD;AACA,2BAAuB,UAAU;AAEjC,WAAO;AAAA,EACT,CAAC,EACA,MAAM,CAAC,UAAU;AAChB,2BAAuB,UAAU;AACjC,UAAM;AAAA,EACR,CAAC;AAEH,yBAAuB,UAAU;AACjC,SAAO;AACT;AAEA,SAAS,yBAAyB,OAA0B;AAC1D,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,kBAAkB,KAAK;AAC1C,SAAO,WAAW,WAAW,OAAO,SAAS;AAC/C;AAEA,SAAS,kBAAkB,OAA0B;AACnD,MAAI,iBAAiB,SAAS;AAC5B,WAAO,IAAI,IAAI,MAAM,GAAG;AAAA,EAC1B;AAEA,MAAI,iBAAiB,KAAK;AACxB,WAAO;AAAA,EACT;AAEA,SAAO,IAAI,IAAI,OAAO,OAAO,SAAS,IAAI;AAC5C;AAEA,SAAS,yBAAyB,OAA0B,MAAoB;AAC9E,MAAI,iBAAiB,WAAW,MAAM,QAAQ,IAAI,eAAe,GAAG;AAClE,WAAO,MAAM,QAAQ,IAAI,eAAe;AAAA,EAC1C;AAEA,MAAI,CAAC,MAAM,SAAS;AAClB,WAAO;AAAA,EACT;AAEA,SAAO,IAAI,QAAQ,KAAK,OAAO,EAAE,IAAI,eAAe;AACtD;AAEA,SAAS,qBAAqB,OAAe,aAAsB;AACjE,QAAM,WAAW,eAAe,gBAAgB,KAAK;AACrD,SAAO,WAAW,WAAW,MAAO;AACtC;AAEA,SAAS,gBAAgB,OAAe;AACtC,QAAM,CAAC,EAAE,OAAO,IAAI,MAAM,MAAM,GAAG;AACnC,MAAI,CAAC,WAAW,OAAO,WAAW,aAAa;AAC7C,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,aAAa,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC/D,UAAM,SAAS,WAAW;AAAA,MACxB,WAAW,UAAW,IAAK,WAAW,SAAS,KAAM;AAAA,MACrD;AAAA,IACF;AACA,UAAM,OAAO,KAAK,MAAM,OAAO,KAAK,MAAM,CAAC;AAE3C,WAAO,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,WAAoB;AACrC,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAEA,SAAO,KAAK,IAAI,KAAK,YAAY;AACnC;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/navigation.ts","../src/core.ts","../src/react.tsx"],"sourcesContent":["export * from \"./core\";\nexport * from \"./navigation\";\nexport * from \"./react\";\n","export interface BridgeNavigationGoPayload {\n  path?: string;\n  href?: string;\n  pathname?: string;\n  search?: string;\n  hash?: string;\n}\n\nexport interface BridgeNavigationRedirectPayload extends BridgeNavigationGoPayload {}\n\nexport interface BridgeNavigationUpdatePayload {\n  path: string;\n  pathname: string;\n  search: string;\n  hash: string;\n}\n\nexport const EMBEDDED_LAUNCH_PARAMS = [\n  \"appLoadId\",\n  \"embedded\",\n  \"hmac\",\n  \"host\",\n  \"id_token\",\n  \"link_source\",\n  \"locale\",\n  \"project\",\n  \"protocol\",\n  \"session\",\n  \"shop\",\n  \"tenant\",\n  \"timestamp\"\n] as const;\n\nconst NAVIGATION_BASE_URL = \"https://embedded-app.local\";\n\nfunction normalizeSearch(search: string) {\n  if (!search) {\n    return \"\";\n  }\n\n  return search.startsWith(\"?\") ? search : `?${search}`;\n}\n\nfunction normalizeHash(hash: string) {\n  if (!hash) {\n    return \"\";\n  }\n\n  return hash.startsWith(\"#\") ? hash : `#${hash}`;\n}\n\nexport function buildNavigationUpdatePayload(path: string): BridgeNavigationUpdatePayload {\n  const sanitizedPath = sanitizeEmbeddedAppPath(path) ?? path;\n  let pathname = sanitizedPath;\n  let search = \"\";\n  let hash = \"\";\n\n  const hashIndex = pathname.indexOf(\"#\");\n  if (hashIndex >= 0) {\n    hash = pathname.slice(hashIndex);\n    pathname = pathname.slice(0, hashIndex);\n  }\n\n  const searchIndex = pathname.indexOf(\"?\");\n  if (searchIndex >= 0) {\n    search = pathname.slice(searchIndex);\n    pathname = pathname.slice(0, searchIndex);\n  }\n\n  return {\n    path: `${pathname || \"/\"}${search}${hash}`,\n    pathname: pathname || \"/\",\n    search,\n    hash\n  };\n}\n\nexport function sanitizeEmbeddedAppPath(path: string | undefined) {\n  if (!path) {\n    return path;\n  }\n\n  const trimmedPath = path.trim();\n  if (!trimmedPath) {\n    return trimmedPath;\n  }\n\n  const url = new URL(trimmedPath, NAVIGATION_BASE_URL);\n  let changed = false;\n\n  for (const key of EMBEDDED_LAUNCH_PARAMS) {\n    if (url.searchParams.has(key)) {\n      url.searchParams.delete(key);\n      changed = true;\n    }\n  }\n\n  if (!changed) {\n    return trimmedPath;\n  }\n\n  if (/^https?:\\/\\//i.test(trimmedPath)) {\n    return url.toString();\n  }\n\n  return `${url.pathname}${url.search}${url.hash}`;\n}\n\nexport function resolveLocalNavigationPath(\n  href: string,\n  currentOrigin: string\n): string | null {\n  if (!href || href.startsWith(\"#\")) {\n    return null;\n  }\n\n  let destination: URL;\n  try {\n    destination = new URL(href, currentOrigin);\n  } catch {\n    return null;\n  }\n\n  if (destination.origin !== currentOrigin) {\n    return null;\n  }\n\n  return sanitizeEmbeddedAppPath(\n    `${destination.pathname}${destination.search}${destination.hash}`\n  ) ?? null;\n}\n\nexport function resolveNavigationDestination(payload: unknown): string | null {\n  if (typeof payload === \"string\") {\n    return sanitizeEmbeddedAppPath(payload) ?? null;\n  }\n\n  if (!payload || typeof payload !== \"object\") {\n    return null;\n  }\n\n  const value = payload as BridgeNavigationGoPayload;\n\n  if (typeof value.path === \"string\" && value.path) {\n    return sanitizeEmbeddedAppPath(value.path) ?? null;\n  }\n\n  if (typeof value.href === \"string\" && value.href) {\n    return sanitizeEmbeddedAppPath(value.href) ?? null;\n  }\n\n  if (typeof value.pathname !== \"string\" || !value.pathname) {\n    return null;\n  }\n\n  return (\n    sanitizeEmbeddedAppPath(\n      `${value.pathname}${normalizeSearch(value.search ?? \"\")}${normalizeHash(value.hash ?? \"\")}`\n    ) ?? null\n  );\n}\n","import {\n  resolveNavigationDestination,\n  type BridgeNavigationGoPayload,\n  type BridgeNavigationRedirectPayload\n} from \"./navigation\";\n\nexport type BridgeParticipant = \"embedded-app\" | \"dashboard\" | \"unknown\";\n\nexport type BridgeMessageKind = \"event\" | \"request\" | \"response\";\n\nexport interface BridgeErrorPayload {\n  code: string;\n  message: string;\n}\n\nexport interface BridgeMessage<TPayload = unknown> {\n  namespace: string;\n  version: \"1.0\";\n  kind: BridgeMessageKind;\n  id: string;\n  type: string;\n  source: BridgeParticipant;\n  target?: BridgeParticipant;\n  payload?: TPayload;\n  replyTo?: string;\n  error?: BridgeErrorPayload;\n}\n\nexport interface AppBridgeOptions {\n  clientId?: string;\n  source?: BridgeParticipant;\n  target?: BridgeParticipant;\n  namespace?: string;\n  targetOrigin?: string;\n  allowedOrigins?: string[];\n  requestTimeoutMs?: number;\n  selfWindow?: Window;\n  targetWindow?: Window | null;\n}\n\nexport interface RequestOptions {\n  timeoutMs?: number;\n}\n\nexport interface SessionTokenRequest {\n  clientId?: string;\n}\n\nexport interface SessionTokenResponse {\n  sessionToken?: string;\n  idToken: string;\n  exp?: number;\n  project?: string;\n}\n\nexport interface ReceivedBridgeMessage<TPayload = unknown> extends BridgeMessage<TPayload> {\n  origin: string;\n  rawEvent: MessageEvent<unknown>;\n}\n\nexport type BridgeEventHandler<TPayload = unknown> = (\n  message: ReceivedBridgeMessage<TPayload>\n) => void;\n\nexport type BridgeRequestHandler<TRequest = unknown, TResponse = unknown> = (\n  payload: TRequest,\n  message: ReceivedBridgeMessage<TRequest>\n) => TResponse | Promise<TResponse>;\n\nexport type Unsubscribe = () => void;\n\nconst DEFAULT_NAMESPACE = \"thorcommerce:app-bridge\";\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_REDIRECT_EVENT_TYPE = \"navigation:redirect\";\n\nfunction createMessageId() {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\") {\n    return crypto.randomUUID();\n  }\n\n  return `msg_${Date.now()}_${Math.random().toString(36).slice(2, 10)}`;\n}\n\nfunction resolveSelfWindow(explicitWindow?: Window) {\n  if (explicitWindow) {\n    return explicitWindow;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return window;\n  }\n\n  return undefined;\n}\n\nfunction resolveTargetWindow(selfWindow: Window | undefined, targetWindow?: Window | null) {\n  if (targetWindow) {\n    return targetWindow;\n  }\n\n  if (!selfWindow) {\n    return undefined;\n  }\n\n  if (selfWindow.parent && selfWindow.parent !== selfWindow) {\n    return selfWindow.parent;\n  }\n\n  return undefined;\n}\n\nfunction isDevelopmentEnvironment() {\n  const nodeEnv =\n    typeof globalThis !== \"undefined\" && \"process\" in globalThis\n      ? (\n          globalThis as typeof globalThis & {\n            process?: { env?: { NODE_ENV?: string } };\n          }\n        ).process?.env?.NODE_ENV\n      : undefined;\n\n  if (nodeEnv) {\n    return nodeEnv !== \"production\";\n  }\n\n  return true;\n}\n\nfunction hasAllowedOrigin(origin: string, allowedOrigins?: string[]) {\n  if (!allowedOrigins || allowedOrigins.length === 0) {\n    return true;\n  }\n\n  return allowedOrigins.includes(origin);\n}\n\nfunction isMessageTarget(value: unknown): value is Window {\n  return !!value && typeof (value as Window).postMessage === \"function\";\n}\n\nfunction omitUndefinedFields<T extends object>(value: T): T {\n  return Object.fromEntries(\n    Object.entries(value).filter(([, fieldValue]) => fieldValue !== undefined)\n  ) as T;\n}\n\nexport function isBridgeMessage<TPayload = unknown>(\n  value: unknown,\n  namespace = DEFAULT_NAMESPACE\n): value is BridgeMessage<TPayload> {\n  if (!value || typeof value !== \"object\") {\n    return false;\n  }\n\n  const message = value as Partial<BridgeMessage<TPayload>>;\n\n  return (\n    message.namespace === namespace &&\n    message.version === \"1.0\" &&\n    typeof message.kind === \"string\" &&\n    typeof message.id === \"string\" &&\n    typeof message.type === \"string\" &&\n    typeof message.source === \"string\"\n  );\n}\n\nexport class AppBridge {\n  private readonly namespace: string;\n  private readonly clientId?: string;\n  private readonly source: BridgeParticipant;\n  private readonly target: BridgeParticipant | undefined;\n  private readonly targetOrigin: string;\n  private readonly allowedOrigins?: string[];\n  private readonly selfWindow?: Window;\n  private readonly defaultTimeoutMs: number;\n  private targetWindow?: Window;\n  private readonly eventHandlers = new Map<string, Set<BridgeEventHandler>>();\n  private readonly requestHandlers = new Map<string, BridgeRequestHandler>();\n  private readonly pendingRequests = new Map<\n    string,\n    {\n      resolve: (value: unknown) => void;\n      reject: (error: Error) => void;\n      timeoutId: ReturnType<typeof setTimeout>;\n    }\n  >();\n  private readonly messageListener: (event: MessageEvent<unknown>) => void;\n\n  constructor(options: AppBridgeOptions = {}) {\n    this.namespace = options.namespace ?? DEFAULT_NAMESPACE;\n    this.clientId = options.clientId;\n    this.source = options.source ?? \"embedded-app\";\n    this.target = options.target;\n    this.targetOrigin = options.targetOrigin ?? \"*\";\n    this.allowedOrigins = options.allowedOrigins;\n    this.defaultTimeoutMs = options.requestTimeoutMs ?? DEFAULT_TIMEOUT_MS;\n    this.selfWindow = resolveSelfWindow(options.selfWindow);\n    this.targetWindow = resolveTargetWindow(this.selfWindow, options.targetWindow);\n    this.messageListener = (event) => {\n      this.handleMessage(event);\n    };\n\n    if (!this.selfWindow) {\n      throw new Error(\n        \"AppBridge requires a browser window. Pass selfWindow explicitly when constructing it outside global window scope.\"\n      );\n    }\n\n    if (this.targetOrigin === \"*\" && isDevelopmentEnvironment()) {\n      console.warn(\n        'AppBridge is using \"*\" as targetOrigin. Set targetOrigin explicitly for both the dashboard and embedded app in production.'\n      );\n    }\n\n    this.selfWindow.addEventListener(\"message\", this.messageListener);\n  }\n\n  setTargetWindow(targetWindow: Window | null) {\n    this.targetWindow = targetWindow ?? undefined;\n  }\n\n  hasTargetWindow() {\n    return this.targetWindow !== undefined;\n  }\n\n  redirect(payload: string | BridgeNavigationRedirectPayload) {\n    const destination = resolveNavigationDestination(payload);\n    if (!destination) {\n      throw new Error(\"AppBridge redirect requires a valid destination.\");\n    }\n\n    if (!this.targetWindow) {\n      this.navigateSelf(destination);\n      return;\n    }\n\n    this.postMessage<BridgeNavigationRedirectPayload>({\n      kind: \"event\",\n      type: DEFAULT_REDIRECT_EVENT_TYPE,\n      payload: typeof payload === \"string\" ? { href: payload } : payload\n    });\n  }\n\n  redirectToRemote(href: string) {\n    this.redirect({ href });\n  }\n\n  redirectToApp(path: string | BridgeNavigationGoPayload) {\n    this.redirect(typeof path === \"string\" ? { path } : path);\n  }\n\n  send<TPayload = unknown>(type: string, payload?: TPayload) {\n    this.postMessage({\n      kind: \"event\",\n      type,\n      payload\n    });\n  }\n\n  request<TRequest = unknown, TResponse = unknown>(\n    type: string,\n    payload?: TRequest,\n    options: RequestOptions = {}\n  ) {\n    const messageId = createMessageId();\n    const timeoutMs = options.timeoutMs ?? this.defaultTimeoutMs;\n\n    return new Promise<TResponse>((resolve, reject) => {\n      const timeoutId = setTimeout(() => {\n        this.pendingRequests.delete(messageId);\n        reject(new Error(`Bridge request timed out for \"${type}\" after ${timeoutMs}ms.`));\n      }, timeoutMs);\n\n      this.pendingRequests.set(messageId, {\n        resolve: (value) => resolve(value as TResponse),\n        reject,\n        timeoutId\n      });\n\n      try {\n        this.postMessage({\n          id: messageId,\n          kind: \"request\",\n          type,\n          payload\n        });\n      } catch (error) {\n        clearTimeout(timeoutId);\n        this.pendingRequests.delete(messageId);\n        reject(error instanceof Error ? error : new Error(\"Failed to send bridge request.\"));\n      }\n    });\n  }\n\n  getSessionToken(\n    request: SessionTokenRequest = {},\n    options: RequestOptions = {}\n  ) {\n    const resolvedRequest =\n      request.clientId || this.clientId\n        ? {\n            ...request,\n            clientId: request.clientId ?? this.clientId\n          }\n        : request;\n\n    return this.request<SessionTokenRequest, SessionTokenResponse>(\n      \"thor:session-token:get\",\n      resolvedRequest,\n      options\n    );\n  }\n\n  on<TPayload = unknown>(type: string, handler: BridgeEventHandler<TPayload>): Unsubscribe {\n    const handlers = this.eventHandlers.get(type) ?? new Set<BridgeEventHandler>();\n    handlers.add(handler as BridgeEventHandler);\n    this.eventHandlers.set(type, handlers);\n\n    return () => {\n      handlers.delete(handler as BridgeEventHandler);\n      if (handlers.size === 0) {\n        this.eventHandlers.delete(type);\n      }\n    };\n  }\n\n  onRequest<TRequest = unknown, TResponse = unknown>(\n    type: string,\n    handler: BridgeRequestHandler<TRequest, TResponse>\n  ): Unsubscribe {\n    this.requestHandlers.set(type, handler as BridgeRequestHandler);\n\n    return () => {\n      const registeredHandler = this.requestHandlers.get(type);\n      if (registeredHandler === handler) {\n        this.requestHandlers.delete(type);\n      }\n    };\n  }\n\n  destroy() {\n    if (this.selfWindow) {\n      this.selfWindow.removeEventListener(\"message\", this.messageListener);\n    }\n\n    for (const pendingRequest of this.pendingRequests.values()) {\n      clearTimeout(pendingRequest.timeoutId);\n      pendingRequest.reject(new Error(\"AppBridge destroyed before a response was received.\"));\n    }\n\n    this.pendingRequests.clear();\n    this.eventHandlers.clear();\n    this.requestHandlers.clear();\n  }\n\n  private handleMessage(event: MessageEvent<unknown>) {\n    if (!hasAllowedOrigin(event.origin, this.allowedOrigins)) {\n      return;\n    }\n\n    if (!isBridgeMessage(event.data, this.namespace)) {\n      return;\n    }\n\n    const message = event.data;\n\n    if (this.target && message.target && message.target !== this.source) {\n      return;\n    }\n\n    const receivedMessage: ReceivedBridgeMessage = {\n      ...message,\n      origin: event.origin,\n      rawEvent: event\n    };\n\n    if (\n      message.kind === \"event\" &&\n      message.type === DEFAULT_REDIRECT_EVENT_TYPE &&\n      this.handleRedirectMessage(receivedMessage)\n    ) {\n      return;\n    }\n\n    if (message.kind === \"response\" && message.replyTo) {\n      this.resolvePendingRequest(message.replyTo, message);\n      return;\n    }\n\n    this.emitHandlers(message.type, receivedMessage);\n\n    if (message.kind === \"request\") {\n      void this.handleRequest(receivedMessage);\n    }\n  }\n\n  private emitHandlers(type: string, message: ReceivedBridgeMessage) {\n    const typeHandlers = this.eventHandlers.get(type);\n    if (typeHandlers) {\n      for (const handler of typeHandlers) {\n        handler(message);\n      }\n    }\n\n    if (type === \"*\") {\n      return;\n    }\n\n    const wildcardHandlers = this.eventHandlers.get(\"*\");\n    if (wildcardHandlers) {\n      for (const handler of wildcardHandlers) {\n        handler(message);\n      }\n    }\n  }\n\n  private async handleRequest(message: ReceivedBridgeMessage) {\n    const handler = this.requestHandlers.get(message.type);\n    if (!handler) {\n      return;\n    }\n\n    const replyTarget = isMessageTarget(message.rawEvent.source)\n      ? message.rawEvent.source\n      : this.targetWindow;\n\n    try {\n      const payload = await handler(message.payload, message);\n      this.postMessage(\n        {\n          kind: \"response\",\n          type: message.type,\n          payload,\n          replyTo: message.id\n        },\n        replyTarget\n      );\n    } catch (error) {\n      const bridgeError =\n        error instanceof Error\n          ? { code: \"request_handler_error\", message: error.message }\n          : { code: \"request_handler_error\", message: \"Unknown request handler error.\" };\n\n      this.postMessage(\n        {\n          kind: \"response\",\n          type: message.type,\n          error: bridgeError,\n          replyTo: message.id\n        },\n        replyTarget\n      );\n    }\n  }\n\n  private resolvePendingRequest(messageId: string, message: BridgeMessage) {\n    const pendingRequest = this.pendingRequests.get(messageId);\n    if (!pendingRequest) {\n      return;\n    }\n\n    clearTimeout(pendingRequest.timeoutId);\n    this.pendingRequests.delete(messageId);\n\n    if (message.error) {\n      pendingRequest.reject(new Error(`${message.error.code}: ${message.error.message}`));\n      return;\n    }\n\n    pendingRequest.resolve(message.payload);\n  }\n\n  private postMessage<TPayload = unknown>(\n    partialMessage: Pick<BridgeMessage<TPayload>, \"kind\" | \"type\"> &\n      Partial<Omit<BridgeMessage<TPayload>, \"namespace\" | \"version\" | \"source\">>,\n    targetWindowOverride?: Window\n  ) {\n    const targetWindow = targetWindowOverride ?? this.targetWindow;\n    if (!targetWindow) {\n      throw new Error(\n        \"AppBridge could not resolve a target window. Pass targetWindow explicitly or call setTargetWindow().\"\n      );\n    }\n\n    const message = omitUndefinedFields({\n      namespace: this.namespace,\n      version: \"1.0\",\n      id: partialMessage.id ?? createMessageId(),\n      kind: partialMessage.kind,\n      type: partialMessage.type,\n      source: this.source,\n      target: partialMessage.target ?? this.target,\n      payload: partialMessage.payload,\n      replyTo: partialMessage.replyTo,\n      error: partialMessage.error\n    }) as BridgeMessage<TPayload>;\n\n    targetWindow.postMessage(message, this.targetOrigin);\n  }\n\n  private handleRedirectMessage(message: ReceivedBridgeMessage): boolean {\n    const destination = resolveNavigationDestination(message.payload);\n    if (!destination) {\n      return false;\n    }\n\n    this.navigateSelf(destination);\n    return true;\n  }\n\n  private navigateSelf(destination: string) {\n    if (!this.selfWindow) {\n      throw new Error(\"AppBridge could not resolve a browser window for redirect.\");\n    }\n\n    this.selfWindow.location.assign(destination);\n  }\n}\n\nexport function createAppBridge(options: AppBridgeOptions = {}) {\n  return new AppBridge(options);\n}\n","import {\n  createContext,\n  useContext,\n  useEffect,\n  useRef,\n  useState,\n  type MutableRefObject,\n  type ReactNode\n} from \"react\";\n\nimport {\n  createAppBridge,\n  type AppBridge,\n  type AppBridgeOptions,\n  type ReceivedBridgeMessage\n} from \"./core\";\nimport {\n  buildNavigationUpdatePayload,\n  resolveLocalNavigationPath,\n  resolveNavigationDestination,\n  sanitizeEmbeddedAppPath,\n  type BridgeNavigationGoPayload\n} from \"./navigation\";\n\nconst AppBridgeContext = createContext<AppBridge | null>(null);\n\nexport interface AppBridgeProviderProps\n  extends Omit<AppBridgeOptions, \"source\" | \"target\" | \"allowedOrigins\"> {\n  children: ReactNode;\n  clientId: string;\n  readyEventType?: string;\n  readyPayload?: unknown;\n  currentPath?: string | null;\n  navigationEventType?: string;\n  navigationUpdateEventType?: string;\n  onNavigate?: (\n    path: string,\n    message?: ReceivedBridgeMessage<BridgeNavigationGoPayload>\n  ) => void;\n}\n\nexport function AppBridgeProvider({\n  children,\n  clientId,\n  currentPath,\n  navigationEventType = \"navigation:go\",\n  navigationUpdateEventType = \"navigation:update\",\n  namespace,\n  onNavigate,\n  readyEventType = \"app:ready\",\n  readyPayload,\n  requestTimeoutMs,\n  selfWindow,\n  targetOrigin,\n  targetWindow\n}: AppBridgeProviderProps) {\n  const [bridge, setBridge] = useState<AppBridge | null>(null);\n  const onNavigateRef = useRef(onNavigate);\n  const sessionTokenCacheRef = useRef<{\n    token: string;\n    expiresAt?: number;\n  } | null>(null);\n  const pendingSessionTokenRef = useRef<Promise<string> | null>(null);\n\n  useEffect(() => {\n    onNavigateRef.current = onNavigate;\n  }, [onNavigate]);\n\n  useEffect(() => {\n    if (typeof window === \"undefined\" && !selfWindow) {\n      return;\n    }\n\n    const resolvedTargetOrigin = targetOrigin ?? getReferrerOrigin(selfWindow);\n    const resolvedAllowedOrigins = resolvedTargetOrigin\n      ? [resolvedTargetOrigin]\n      : undefined;\n\n    const nextBridge = createAppBridge({\n      allowedOrigins: resolvedAllowedOrigins,\n      clientId,\n      namespace,\n      requestTimeoutMs,\n      selfWindow,\n      source: \"embedded-app\",\n      target: \"dashboard\",\n      targetOrigin: resolvedTargetOrigin,\n      targetWindow\n    });\n\n    setBridge(nextBridge);\n\n    return () => {\n      setBridge((currentBridge) => (currentBridge === nextBridge ? null : currentBridge));\n      nextBridge.destroy();\n    };\n  }, [\n    clientId,\n    namespace,\n    requestTimeoutMs,\n    selfWindow,\n    targetOrigin,\n    targetWindow\n  ]);\n\n  useEffect(() => {\n    if (!bridge || !bridge.hasTargetWindow()) {\n      return;\n    }\n\n    bridge.send(\n      readyEventType,\n      readyPayload ?? {\n        clientId\n      }\n    );\n  }, [bridge, clientId, readyEventType, readyPayload]);\n\n  useEffect(() => {\n    if (!bridge || !bridge.hasTargetWindow() || !currentPath) {\n      return;\n    }\n\n    bridge.send(navigationUpdateEventType, buildNavigationUpdatePayload(currentPath));\n  }, [bridge, currentPath, navigationUpdateEventType]);\n\n  useEffect(() => {\n    if (!bridge || !onNavigate) {\n      return;\n    }\n\n    return bridge.on<BridgeNavigationGoPayload>(navigationEventType, (message) => {\n      const destination = resolveNavigationDestination(message.payload);\n      if (!destination) {\n        return;\n      }\n\n      onNavigateRef.current?.(destination, message);\n    });\n  }, [bridge, navigationEventType, onNavigate]);\n\n  useEffect(() => {\n    if (\n      !bridge ||\n      !onNavigate ||\n      typeof document === \"undefined\" ||\n      typeof window === \"undefined\"\n    ) {\n      return;\n    }\n\n    const handleLocalNavigation = (path: string) => {\n      const sanitizedPath = sanitizeEmbeddedAppPath(path);\n      if (!sanitizedPath) {\n        return;\n      }\n\n      onNavigateRef.current?.(sanitizedPath);\n    };\n\n    const handleDocumentClick = (event: MouseEvent) => {\n      if (\n        event.defaultPrevented ||\n        event.button !== 0 ||\n        event.metaKey ||\n        event.altKey ||\n        event.ctrlKey ||\n        event.shiftKey\n      ) {\n        return;\n      }\n\n      const target = event.target;\n      if (!(target instanceof Element)) {\n        return;\n      }\n\n      const anchor = target.closest(\"a[href]\");\n      if (!(anchor instanceof HTMLAnchorElement)) {\n        return;\n      }\n\n      if (anchor.hasAttribute(\"download\")) {\n        return;\n      }\n\n      const targetWindow = anchor.target.toLowerCase();\n      const href = anchor.getAttribute(\"href\");\n      if (!href) {\n        return;\n      }\n\n      if (targetWindow === \"_top\" || targetWindow === \"_parent\") {\n        event.preventDefault();\n        bridge.redirectToRemote(anchor.href);\n        return;\n      }\n\n      if (targetWindow && targetWindow !== \"_self\") {\n        return;\n      }\n\n      const nextPath = resolveLocalNavigationPath(href, window.location.origin);\n      if (!nextPath) {\n        return;\n      }\n\n      event.preventDefault();\n      handleLocalNavigation(nextPath);\n    };\n\n    const originalOpen = window.open.bind(window);\n    window.open = (url?: string | URL, target?: string, features?: string) => {\n      if (url == null) {\n        return originalOpen(url, target, features);\n      }\n\n      const href = typeof url === \"string\" ? url : url.toString();\n      const targetName = (target ?? \"\").toLowerCase();\n\n      if (targetName === \"_top\" || targetName === \"_parent\") {\n        bridge.redirectToRemote(new URL(href, window.location.href).toString());\n        return null;\n      }\n\n      if (!targetName || targetName === \"_self\") {\n        const nextPath = resolveLocalNavigationPath(href, window.location.origin);\n        if (nextPath) {\n          handleLocalNavigation(nextPath);\n          return window;\n        }\n      }\n\n      return originalOpen(url, target, features);\n    };\n\n    document.addEventListener(\"click\", handleDocumentClick, true);\n\n    return () => {\n      document.removeEventListener(\"click\", handleDocumentClick, true);\n      window.open = originalOpen;\n    };\n  }, [bridge, onNavigate]);\n\n  useEffect(() => {\n    if (!bridge || typeof window === \"undefined\") {\n      return;\n    }\n\n    const originalFetch = window.fetch.bind(window);\n\n    window.fetch = async (input: RequestInfo | URL, init?: RequestInit) => {\n      if (!shouldAttachSessionToken(input)) {\n        return originalFetch(input, init);\n      }\n\n      const existingAuthorization = getExistingAuthorization(input, init);\n      if (existingAuthorization) {\n        return originalFetch(input, init);\n      }\n\n      const nextHeaders = new Headers(\n        input instanceof Request ? input.headers : init?.headers\n      );\n      const sessionToken = await getSessionToken({\n        bridge,\n        clientId,\n        pendingSessionTokenRef,\n        sessionTokenCacheRef\n      });\n\n      nextHeaders.set(\"Authorization\", `Bearer ${sessionToken}`);\n      if (!nextHeaders.has(\"X-Requested-With\")) {\n        nextHeaders.set(\"X-Requested-With\", \"XMLHttpRequest\");\n      }\n\n      if (input instanceof Request) {\n        return originalFetch(\n          new Request(input, {\n            headers: nextHeaders\n          })\n        );\n      }\n\n      return originalFetch(input, {\n        ...init,\n        headers: nextHeaders\n      });\n    };\n\n    return () => {\n      window.fetch = originalFetch;\n    };\n  }, [bridge, clientId]);\n\n  return <AppBridgeContext.Provider value={bridge}>{children}</AppBridgeContext.Provider>;\n}\n\nexport function useAppBridge() {\n  return useContext(AppBridgeContext);\n}\n\nfunction getReferrerOrigin(explicitWindow?: Window) {\n  const resolvedWindow = explicitWindow ?? (typeof window !== \"undefined\" ? window : undefined);\n  const referrer = resolvedWindow?.document?.referrer;\n\n  if (!referrer) {\n    return undefined;\n  }\n\n  try {\n    return new URL(referrer).origin;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function getSessionToken({\n  bridge,\n  clientId,\n  pendingSessionTokenRef,\n  sessionTokenCacheRef\n}: {\n  bridge: AppBridge;\n  clientId: string;\n  pendingSessionTokenRef: MutableRefObject<Promise<string> | null>;\n  sessionTokenCacheRef: MutableRefObject<{\n    token: string;\n    expiresAt?: number;\n  } | null>;\n}) {\n  const cachedToken = sessionTokenCacheRef.current;\n  if (cachedToken && !isExpired(cachedToken.expiresAt)) {\n    return cachedToken.token;\n  }\n\n  if (pendingSessionTokenRef.current) {\n    return pendingSessionTokenRef.current;\n  }\n\n  const pendingToken = bridge\n    .getSessionToken({ clientId })\n    .then((response) => {\n      const token = response.sessionToken ?? response.idToken;\n      if (!token) {\n        throw new Error(\"Missing Thor embedded session token\");\n      }\n\n      sessionTokenCacheRef.current = {\n        token,\n        expiresAt: normalizeTokenExpiry(token, response.exp)\n      };\n      pendingSessionTokenRef.current = null;\n\n      return token;\n    })\n    .catch((error) => {\n      pendingSessionTokenRef.current = null;\n      throw error;\n    });\n\n  pendingSessionTokenRef.current = pendingToken;\n  return pendingToken;\n}\n\nfunction shouldAttachSessionToken(input: RequestInfo | URL) {\n  if (typeof window === \"undefined\") {\n    return false;\n  }\n\n  const requestUrl = resolveRequestUrl(input);\n  return requestUrl.origin === window.location.origin;\n}\n\nfunction resolveRequestUrl(input: RequestInfo | URL) {\n  if (input instanceof Request) {\n    return new URL(input.url);\n  }\n\n  if (input instanceof URL) {\n    return input;\n  }\n\n  return new URL(input, window.location.href);\n}\n\nfunction getExistingAuthorization(input: RequestInfo | URL, init?: RequestInit) {\n  if (input instanceof Request && input.headers.has(\"Authorization\")) {\n    return input.headers.get(\"Authorization\");\n  }\n\n  if (!init?.headers) {\n    return null;\n  }\n\n  return new Headers(init.headers).get(\"Authorization\");\n}\n\nfunction normalizeTokenExpiry(token: string, explicitExp?: number) {\n  const tokenExp = explicitExp ?? decodeJwtExpiry(token);\n  return tokenExp ? tokenExp * 1000 : undefined;\n}\n\nfunction decodeJwtExpiry(token: string) {\n  const [, payload] = token.split(\".\");\n  if (!payload || typeof window === \"undefined\") {\n    return undefined;\n  }\n\n  try {\n    const normalized = payload.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const padded = normalized.padEnd(\n      normalized.length + ((4 - (normalized.length % 4)) % 4),\n      \"=\"\n    );\n    const json = JSON.parse(window.atob(padded)) as { exp?: unknown };\n\n    return typeof json.exp === \"number\" ? json.exp : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction isExpired(expiresAt?: number) {\n  if (!expiresAt) {\n    return false;\n  }\n\n  return Date.now() >= expiresAt - 5_000;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACiBO,IAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,sBAAsB;AAE5B,SAAS,gBAAgB,QAAgB;AACvC,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,SAAO,OAAO,WAAW,GAAG,IAAI,SAAS,IAAI,MAAM;AACrD;AAEA,SAAS,cAAc,MAAc;AACnC,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AAEA,SAAO,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI;AAC/C;AAEO,SAAS,6BAA6B,MAA6C;AACxF,QAAM,gBAAgB,wBAAwB,IAAI,KAAK;AACvD,MAAI,WAAW;AACf,MAAI,SAAS;AACb,MAAI,OAAO;AAEX,QAAM,YAAY,SAAS,QAAQ,GAAG;AACtC,MAAI,aAAa,GAAG;AAClB,WAAO,SAAS,MAAM,SAAS;AAC/B,eAAW,SAAS,MAAM,GAAG,SAAS;AAAA,EACxC;AAEA,QAAM,cAAc,SAAS,QAAQ,GAAG;AACxC,MAAI,eAAe,GAAG;AACpB,aAAS,SAAS,MAAM,WAAW;AACnC,eAAW,SAAS,MAAM,GAAG,WAAW;AAAA,EAC1C;AAEA,SAAO;AAAA,IACL,MAAM,GAAG,YAAY,GAAG,GAAG,MAAM,GAAG,IAAI;AAAA,IACxC,UAAU,YAAY;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,wBAAwB,MAA0B;AAChE,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK,KAAK;AAC9B,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,IAAI,IAAI,aAAa,mBAAmB;AACpD,MAAI,UAAU;AAEd,aAAW,OAAO,wBAAwB;AACxC,QAAI,IAAI,aAAa,IAAI,GAAG,GAAG;AAC7B,UAAI,aAAa,OAAO,GAAG;AAC3B,gBAAU;AAAA,IACZ;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AAEA,MAAI,gBAAgB,KAAK,WAAW,GAAG;AACrC,WAAO,IAAI,SAAS;AAAA,EACtB;AAEA,SAAO,GAAG,IAAI,QAAQ,GAAG,IAAI,MAAM,GAAG,IAAI,IAAI;AAChD;AAEO,SAAS,2BACd,MACA,eACe;AACf,MAAI,CAAC,QAAQ,KAAK,WAAW,GAAG,GAAG;AACjC,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,kBAAc,IAAI,IAAI,MAAM,aAAa;AAAA,EAC3C,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI,YAAY,WAAW,eAAe;AACxC,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,GAAG,YAAY,QAAQ,GAAG,YAAY,MAAM,GAAG,YAAY,IAAI;AAAA,EACjE,KAAK;AACP;AAEO,SAAS,6BAA6B,SAAiC;AAC5E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO,wBAAwB,OAAO,KAAK;AAAA,EAC7C;AAEA,MAAI,CAAC,WAAW,OAAO,YAAY,UAAU;AAC3C,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ;AAEd,MAAI,OAAO,MAAM,SAAS,YAAY,MAAM,MAAM;AAChD,WAAO,wBAAwB,MAAM,IAAI,KAAK;AAAA,EAChD;AAEA,MAAI,OAAO,MAAM,SAAS,YAAY,MAAM,MAAM;AAChD,WAAO,wBAAwB,MAAM,IAAI,KAAK;AAAA,EAChD;AAEA,MAAI,OAAO,MAAM,aAAa,YAAY,CAAC,MAAM,UAAU;AACzD,WAAO;AAAA,EACT;AAEA,SACE;AAAA,IACE,GAAG,MAAM,QAAQ,GAAG,gBAAgB,MAAM,UAAU,EAAE,CAAC,GAAG,cAAc,MAAM,QAAQ,EAAE,CAAC;AAAA,EAC3F,KAAK;AAET;;;ACzFA,IAAM,oBAAoB;AAC1B,IAAM,qBAAqB;AAC3B,IAAM,8BAA8B;AAEpC,SAAS,kBAAkB;AACzB,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe,YAAY;AAC5E,WAAO,OAAO,WAAW;AAAA,EAC3B;AAEA,SAAO,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACrE;AAEA,SAAS,kBAAkB,gBAAyB;AAClD,MAAI,gBAAgB;AAClB,WAAO;AAAA,EACT;AAEA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,YAAgC,cAA8B;AACzF,MAAI,cAAc;AAChB,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,UAAU,WAAW,WAAW,YAAY;AACzD,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;AAEA,SAAS,2BAA2B;AAClC,QAAM,UACJ,OAAO,eAAe,eAAe,aAAa,aAE5C,WAGA,SAAS,KAAK,WAChB;AAEN,MAAI,SAAS;AACX,WAAO,YAAY;AAAA,EACrB;AAEA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAAgB,gBAA2B;AACnE,MAAI,CAAC,kBAAkB,eAAe,WAAW,GAAG;AAClD,WAAO;AAAA,EACT;AAEA,SAAO,eAAe,SAAS,MAAM;AACvC;AAEA,SAAS,gBAAgB,OAAiC;AACxD,SAAO,CAAC,CAAC,SAAS,OAAQ,MAAiB,gBAAgB;AAC7D;AAEA,SAAS,oBAAsC,OAAa;AAC1D,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,UAAU,MAAM,eAAe,MAAS;AAAA,EAC3E;AACF;AAEO,SAAS,gBACd,OACA,YAAY,mBACsB;AAClC,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,EACT;AAEA,QAAM,UAAU;AAEhB,SACE,QAAQ,cAAc,aACtB,QAAQ,YAAY,SACpB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,OAAO,YACtB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,WAAW;AAE9B;AAEO,IAAM,YAAN,MAAgB;AAAA,EAsBrB,YAAY,UAA4B,CAAC,GAAG;AAZ5C,SAAiB,gBAAgB,oBAAI,IAAqC;AAC1E,SAAiB,kBAAkB,oBAAI,IAAkC;AACzE,SAAiB,kBAAkB,oBAAI,IAOrC;AAIA,SAAK,YAAY,QAAQ,aAAa;AACtC,SAAK,WAAW,QAAQ;AACxB,SAAK,SAAS,QAAQ,UAAU;AAChC,SAAK,SAAS,QAAQ;AACtB,SAAK,eAAe,QAAQ,gBAAgB;AAC5C,SAAK,iBAAiB,QAAQ;AAC9B,SAAK,mBAAmB,QAAQ,oBAAoB;AACpD,SAAK,aAAa,kBAAkB,QAAQ,UAAU;AACtD,SAAK,eAAe,oBAAoB,KAAK,YAAY,QAAQ,YAAY;AAC7E,SAAK,kBAAkB,CAAC,UAAU;AAChC,WAAK,cAAc,KAAK;AAAA,IAC1B;AAEA,QAAI,CAAC,KAAK,YAAY;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,KAAK,iBAAiB,OAAO,yBAAyB,GAAG;AAC3D,cAAQ;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAEA,SAAK,WAAW,iBAAiB,WAAW,KAAK,eAAe;AAAA,EAClE;AAAA,EAEA,gBAAgB,cAA6B;AAC3C,SAAK,eAAe,gBAAgB;AAAA,EACtC;AAAA,EAEA,kBAAkB;AAChB,WAAO,KAAK,iBAAiB;AAAA,EAC/B;AAAA,EAEA,SAAS,SAAmD;AAC1D,UAAM,cAAc,6BAA6B,OAAO;AACxD,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,kDAAkD;AAAA,IACpE;AAEA,QAAI,CAAC,KAAK,cAAc;AACtB,WAAK,aAAa,WAAW;AAC7B;AAAA,IACF;AAEA,SAAK,YAA6C;AAAA,MAChD,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS,OAAO,YAAY,WAAW,EAAE,MAAM,QAAQ,IAAI;AAAA,IAC7D,CAAC;AAAA,EACH;AAAA,EAEA,iBAAiB,MAAc;AAC7B,SAAK,SAAS,EAAE,KAAK,CAAC;AAAA,EACxB;AAAA,EAEA,cAAc,MAA0C;AACtD,SAAK,SAAS,OAAO,SAAS,WAAW,EAAE,KAAK,IAAI,IAAI;AAAA,EAC1D;AAAA,EAEA,KAAyB,MAAc,SAAoB;AACzD,SAAK,YAAY;AAAA,MACf,MAAM;AAAA,MACN;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,QACE,MACA,SACA,UAA0B,CAAC,GAC3B;AACA,UAAM,YAAY,gBAAgB;AAClC,UAAM,YAAY,QAAQ,aAAa,KAAK;AAE5C,WAAO,IAAI,QAAmB,CAAC,SAAS,WAAW;AACjD,YAAM,YAAY,WAAW,MAAM;AACjC,aAAK,gBAAgB,OAAO,SAAS;AACrC,eAAO,IAAI,MAAM,iCAAiC,IAAI,WAAW,SAAS,KAAK,CAAC;AAAA,MAClF,GAAG,SAAS;AAEZ,WAAK,gBAAgB,IAAI,WAAW;AAAA,QAClC,SAAS,CAAC,UAAU,QAAQ,KAAkB;AAAA,QAC9C;AAAA,QACA;AAAA,MACF,CAAC;AAED,UAAI;AACF,aAAK,YAAY;AAAA,UACf,IAAI;AAAA,UACJ,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,qBAAa,SAAS;AACtB,aAAK,gBAAgB,OAAO,SAAS;AACrC,eAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,gCAAgC,CAAC;AAAA,MACrF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,gBACE,UAA+B,CAAC,GAChC,UAA0B,CAAC,GAC3B;AACA,UAAM,kBACJ,QAAQ,YAAY,KAAK,WACrB;AAAA,MACE,GAAG;AAAA,MACH,UAAU,QAAQ,YAAY,KAAK;AAAA,IACrC,IACA;AAEN,WAAO,KAAK;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,GAAuB,MAAc,SAAoD;AACvF,UAAM,WAAW,KAAK,cAAc,IAAI,IAAI,KAAK,oBAAI,IAAwB;AAC7E,aAAS,IAAI,OAA6B;AAC1C,SAAK,cAAc,IAAI,MAAM,QAAQ;AAErC,WAAO,MAAM;AACX,eAAS,OAAO,OAA6B;AAC7C,UAAI,SAAS,SAAS,GAAG;AACvB,aAAK,cAAc,OAAO,IAAI;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UACE,MACA,SACa;AACb,SAAK,gBAAgB,IAAI,MAAM,OAA+B;AAE9D,WAAO,MAAM;AACX,YAAM,oBAAoB,KAAK,gBAAgB,IAAI,IAAI;AACvD,UAAI,sBAAsB,SAAS;AACjC,aAAK,gBAAgB,OAAO,IAAI;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU;AACR,QAAI,KAAK,YAAY;AACnB,WAAK,WAAW,oBAAoB,WAAW,KAAK,eAAe;AAAA,IACrE;AAEA,eAAW,kBAAkB,KAAK,gBAAgB,OAAO,GAAG;AAC1D,mBAAa,eAAe,SAAS;AACrC,qBAAe,OAAO,IAAI,MAAM,qDAAqD,CAAC;AAAA,IACxF;AAEA,SAAK,gBAAgB,MAAM;AAC3B,SAAK,cAAc,MAAM;AACzB,SAAK,gBAAgB,MAAM;AAAA,EAC7B;AAAA,EAEQ,cAAc,OAA8B;AAClD,QAAI,CAAC,iBAAiB,MAAM,QAAQ,KAAK,cAAc,GAAG;AACxD;AAAA,IACF;AAEA,QAAI,CAAC,gBAAgB,MAAM,MAAM,KAAK,SAAS,GAAG;AAChD;AAAA,IACF;AAEA,UAAM,UAAU,MAAM;AAEtB,QAAI,KAAK,UAAU,QAAQ,UAAU,QAAQ,WAAW,KAAK,QAAQ;AACnE;AAAA,IACF;AAEA,UAAM,kBAAyC;AAAA,MAC7C,GAAG;AAAA,MACH,QAAQ,MAAM;AAAA,MACd,UAAU;AAAA,IACZ;AAEA,QACE,QAAQ,SAAS,WACjB,QAAQ,SAAS,+BACjB,KAAK,sBAAsB,eAAe,GAC1C;AACA;AAAA,IACF;AAEA,QAAI,QAAQ,SAAS,cAAc,QAAQ,SAAS;AAClD,WAAK,sBAAsB,QAAQ,SAAS,OAAO;AACnD;AAAA,IACF;AAEA,SAAK,aAAa,QAAQ,MAAM,eAAe;AAE/C,QAAI,QAAQ,SAAS,WAAW;AAC9B,WAAK,KAAK,cAAc,eAAe;AAAA,IACzC;AAAA,EACF;AAAA,EAEQ,aAAa,MAAc,SAAgC;AACjE,UAAM,eAAe,KAAK,cAAc,IAAI,IAAI;AAChD,QAAI,cAAc;AAChB,iBAAW,WAAW,cAAc;AAClC,gBAAQ,OAAO;AAAA,MACjB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB;AAAA,IACF;AAEA,UAAM,mBAAmB,KAAK,cAAc,IAAI,GAAG;AACnD,QAAI,kBAAkB;AACpB,iBAAW,WAAW,kBAAkB;AACtC,gBAAQ,OAAO;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,SAAgC;AAC1D,UAAM,UAAU,KAAK,gBAAgB,IAAI,QAAQ,IAAI;AACrD,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AAEA,UAAM,cAAc,gBAAgB,QAAQ,SAAS,MAAM,IACvD,QAAQ,SAAS,SACjB,KAAK;AAET,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,QAAQ,SAAS,OAAO;AACtD,WAAK;AAAA,QACH;AAAA,UACE,MAAM;AAAA,UACN,MAAM,QAAQ;AAAA,UACd;AAAA,UACA,SAAS,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,cACJ,iBAAiB,QACb,EAAE,MAAM,yBAAyB,SAAS,MAAM,QAAQ,IACxD,EAAE,MAAM,yBAAyB,SAAS,iCAAiC;AAEjF,WAAK;AAAA,QACH;AAAA,UACE,MAAM;AAAA,UACN,MAAM,QAAQ;AAAA,UACd,OAAO;AAAA,UACP,SAAS,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,sBAAsB,WAAmB,SAAwB;AACvE,UAAM,iBAAiB,KAAK,gBAAgB,IAAI,SAAS;AACzD,QAAI,CAAC,gBAAgB;AACnB;AAAA,IACF;AAEA,iBAAa,eAAe,SAAS;AACrC,SAAK,gBAAgB,OAAO,SAAS;AAErC,QAAI,QAAQ,OAAO;AACjB,qBAAe,OAAO,IAAI,MAAM,GAAG,QAAQ,MAAM,IAAI,KAAK,QAAQ,MAAM,OAAO,EAAE,CAAC;AAClF;AAAA,IACF;AAEA,mBAAe,QAAQ,QAAQ,OAAO;AAAA,EACxC;AAAA,EAEQ,YACN,gBAEA,sBACA;AACA,UAAM,eAAe,wBAAwB,KAAK;AAClD,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,oBAAoB;AAAA,MAClC,WAAW,KAAK;AAAA,MAChB,SAAS;AAAA,MACT,IAAI,eAAe,MAAM,gBAAgB;AAAA,MACzC,MAAM,eAAe;AAAA,MACrB,MAAM,eAAe;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,QAAQ,eAAe,UAAU,KAAK;AAAA,MACtC,SAAS,eAAe;AAAA,MACxB,SAAS,eAAe;AAAA,MACxB,OAAO,eAAe;AAAA,IACxB,CAAC;AAED,iBAAa,YAAY,SAAS,KAAK,YAAY;AAAA,EACrD;AAAA,EAEQ,sBAAsB,SAAyC;AACrE,UAAM,cAAc,6BAA6B,QAAQ,OAAO;AAChE,QAAI,CAAC,aAAa;AAChB,aAAO;AAAA,IACT;AAEA,SAAK,aAAa,WAAW;AAC7B,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa,aAAqB;AACxC,QAAI,CAAC,KAAK,YAAY;AACpB,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AAEA,SAAK,WAAW,SAAS,OAAO,WAAW;AAAA,EAC7C;AACF;AAEO,SAAS,gBAAgB,UAA4B,CAAC,GAAG;AAC9D,SAAO,IAAI,UAAU,OAAO;AAC9B;;;ACzgBA,mBAQO;AA+RE;AA/QT,IAAM,uBAAmB,4BAAgC,IAAI;AAiBtD,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AAAA,EACtB,4BAA4B;AAAA,EAC5B;AAAA,EACA;AAAA,EACA,iBAAiB;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA2B;AACzB,QAAM,CAAC,QAAQ,SAAS,QAAI,uBAA2B,IAAI;AAC3D,QAAM,oBAAgB,qBAAO,UAAU;AACvC,QAAM,2BAAuB,qBAGnB,IAAI;AACd,QAAM,6BAAyB,qBAA+B,IAAI;AAElE,8BAAU,MAAM;AACd,kBAAc,UAAU;AAAA,EAC1B,GAAG,CAAC,UAAU,CAAC;AAEf,8BAAU,MAAM;AACd,QAAI,OAAO,WAAW,eAAe,CAAC,YAAY;AAChD;AAAA,IACF;AAEA,UAAM,uBAAuB,gBAAgB,kBAAkB,UAAU;AACzE,UAAM,yBAAyB,uBAC3B,CAAC,oBAAoB,IACrB;AAEJ,UAAM,aAAa,gBAAgB;AAAA,MACjC,gBAAgB;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,cAAc;AAAA,MACd;AAAA,IACF,CAAC;AAED,cAAU,UAAU;AAEpB,WAAO,MAAM;AACX,gBAAU,CAAC,kBAAmB,kBAAkB,aAAa,OAAO,aAAc;AAClF,iBAAW,QAAQ;AAAA,IACrB;AAAA,EACF,GAAG;AAAA,IACD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,8BAAU,MAAM;AACd,QAAI,CAAC,UAAU,CAAC,OAAO,gBAAgB,GAAG;AACxC;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,gBAAgB;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF,GAAG,CAAC,QAAQ,UAAU,gBAAgB,YAAY,CAAC;AAEnD,8BAAU,MAAM;AACd,QAAI,CAAC,UAAU,CAAC,OAAO,gBAAgB,KAAK,CAAC,aAAa;AACxD;AAAA,IACF;AAEA,WAAO,KAAK,2BAA2B,6BAA6B,WAAW,CAAC;AAAA,EAClF,GAAG,CAAC,QAAQ,aAAa,yBAAyB,CAAC;AAEnD,8BAAU,MAAM;AACd,QAAI,CAAC,UAAU,CAAC,YAAY;AAC1B;AAAA,IACF;AAEA,WAAO,OAAO,GAA8B,qBAAqB,CAAC,YAAY;AAC5E,YAAM,cAAc,6BAA6B,QAAQ,OAAO;AAChE,UAAI,CAAC,aAAa;AAChB;AAAA,MACF;AAEA,oBAAc,UAAU,aAAa,OAAO;AAAA,IAC9C,CAAC;AAAA,EACH,GAAG,CAAC,QAAQ,qBAAqB,UAAU,CAAC;AAE5C,8BAAU,MAAM;AACd,QACE,CAAC,UACD,CAAC,cACD,OAAO,aAAa,eACpB,OAAO,WAAW,aAClB;AACA;AAAA,IACF;AAEA,UAAM,wBAAwB,CAAC,SAAiB;AAC9C,YAAM,gBAAgB,wBAAwB,IAAI;AAClD,UAAI,CAAC,eAAe;AAClB;AAAA,MACF;AAEA,oBAAc,UAAU,aAAa;AAAA,IACvC;AAEA,UAAM,sBAAsB,CAAC,UAAsB;AACjD,UACE,MAAM,oBACN,MAAM,WAAW,KACjB,MAAM,WACN,MAAM,UACN,MAAM,WACN,MAAM,UACN;AACA;AAAA,MACF;AAEA,YAAM,SAAS,MAAM;AACrB,UAAI,EAAE,kBAAkB,UAAU;AAChC;AAAA,MACF;AAEA,YAAM,SAAS,OAAO,QAAQ,SAAS;AACvC,UAAI,EAAE,kBAAkB,oBAAoB;AAC1C;AAAA,MACF;AAEA,UAAI,OAAO,aAAa,UAAU,GAAG;AACnC;AAAA,MACF;AAEA,YAAMA,gBAAe,OAAO,OAAO,YAAY;AAC/C,YAAM,OAAO,OAAO,aAAa,MAAM;AACvC,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AAEA,UAAIA,kBAAiB,UAAUA,kBAAiB,WAAW;AACzD,cAAM,eAAe;AACrB,eAAO,iBAAiB,OAAO,IAAI;AACnC;AAAA,MACF;AAEA,UAAIA,iBAAgBA,kBAAiB,SAAS;AAC5C;AAAA,MACF;AAEA,YAAM,WAAW,2BAA2B,MAAM,OAAO,SAAS,MAAM;AACxE,UAAI,CAAC,UAAU;AACb;AAAA,MACF;AAEA,YAAM,eAAe;AACrB,4BAAsB,QAAQ;AAAA,IAChC;AAEA,UAAM,eAAe,OAAO,KAAK,KAAK,MAAM;AAC5C,WAAO,OAAO,CAAC,KAAoB,QAAiB,aAAsB;AACxE,UAAI,OAAO,MAAM;AACf,eAAO,aAAa,KAAK,QAAQ,QAAQ;AAAA,MAC3C;AAEA,YAAM,OAAO,OAAO,QAAQ,WAAW,MAAM,IAAI,SAAS;AAC1D,YAAM,cAAc,UAAU,IAAI,YAAY;AAE9C,UAAI,eAAe,UAAU,eAAe,WAAW;AACrD,eAAO,iBAAiB,IAAI,IAAI,MAAM,OAAO,SAAS,IAAI,EAAE,SAAS,CAAC;AACtE,eAAO;AAAA,MACT;AAEA,UAAI,CAAC,cAAc,eAAe,SAAS;AACzC,cAAM,WAAW,2BAA2B,MAAM,OAAO,SAAS,MAAM;AACxE,YAAI,UAAU;AACZ,gCAAsB,QAAQ;AAC9B,iBAAO;AAAA,QACT;AAAA,MACF;AAEA,aAAO,aAAa,KAAK,QAAQ,QAAQ;AAAA,IAC3C;AAEA,aAAS,iBAAiB,SAAS,qBAAqB,IAAI;AAE5D,WAAO,MAAM;AACX,eAAS,oBAAoB,SAAS,qBAAqB,IAAI;AAC/D,aAAO,OAAO;AAAA,IAChB;AAAA,EACF,GAAG,CAAC,QAAQ,UAAU,CAAC;AAEvB,8BAAU,MAAM;AACd,QAAI,CAAC,UAAU,OAAO,WAAW,aAAa;AAC5C;AAAA,IACF;AAEA,UAAM,gBAAgB,OAAO,MAAM,KAAK,MAAM;AAE9C,WAAO,QAAQ,OAAO,OAA0B,SAAuB;AACrE,UAAI,CAAC,yBAAyB,KAAK,GAAG;AACpC,eAAO,cAAc,OAAO,IAAI;AAAA,MAClC;AAEA,YAAM,wBAAwB,yBAAyB,OAAO,IAAI;AAClE,UAAI,uBAAuB;AACzB,eAAO,cAAc,OAAO,IAAI;AAAA,MAClC;AAEA,YAAM,cAAc,IAAI;AAAA,QACtB,iBAAiB,UAAU,MAAM,UAAU,MAAM;AAAA,MACnD;AACA,YAAM,eAAe,MAAM,gBAAgB;AAAA,QACzC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,kBAAY,IAAI,iBAAiB,UAAU,YAAY,EAAE;AACzD,UAAI,CAAC,YAAY,IAAI,kBAAkB,GAAG;AACxC,oBAAY,IAAI,oBAAoB,gBAAgB;AAAA,MACtD;AAEA,UAAI,iBAAiB,SAAS;AAC5B,eAAO;AAAA,UACL,IAAI,QAAQ,OAAO;AAAA,YACjB,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAEA,aAAO,cAAc,OAAO;AAAA,QAC1B,GAAG;AAAA,QACH,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAEA,WAAO,MAAM;AACX,aAAO,QAAQ;AAAA,IACjB;AAAA,EACF,GAAG,CAAC,QAAQ,QAAQ,CAAC;AAErB,SAAO,4CAAC,iBAAiB,UAAjB,EAA0B,OAAO,QAAS,UAAS;AAC7D;AAEO,SAAS,eAAe;AAC7B,aAAO,yBAAW,gBAAgB;AACpC;AAEA,SAAS,kBAAkB,gBAAyB;AAClD,QAAM,iBAAiB,mBAAmB,OAAO,WAAW,cAAc,SAAS;AACnF,QAAM,WAAW,gBAAgB,UAAU;AAE3C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AAEA,MAAI;AACF,WAAO,IAAI,IAAI,QAAQ,EAAE;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,gBAAgB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,cAAc,qBAAqB;AACzC,MAAI,eAAe,CAAC,UAAU,YAAY,SAAS,GAAG;AACpD,WAAO,YAAY;AAAA,EACrB;AAEA,MAAI,uBAAuB,SAAS;AAClC,WAAO,uBAAuB;AAAA,EAChC;AAEA,QAAM,eAAe,OAClB,gBAAgB,EAAE,SAAS,CAAC,EAC5B,KAAK,CAAC,aAAa;AAClB,UAAM,QAAQ,SAAS,gBAAgB,SAAS;AAChD,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,qCAAqC;AAAA,IACvD;AAEA,yBAAqB,UAAU;AAAA,MAC7B;AAAA,MACA,WAAW,qBAAqB,OAAO,SAAS,GAAG;AAAA,IACrD;AACA,2BAAuB,UAAU;AAEjC,WAAO;AAAA,EACT,CAAC,EACA,MAAM,CAAC,UAAU;AAChB,2BAAuB,UAAU;AACjC,UAAM;AAAA,EACR,CAAC;AAEH,yBAAuB,UAAU;AACjC,SAAO;AACT;AAEA,SAAS,yBAAyB,OAA0B;AAC1D,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,kBAAkB,KAAK;AAC1C,SAAO,WAAW,WAAW,OAAO,SAAS;AAC/C;AAEA,SAAS,kBAAkB,OAA0B;AACnD,MAAI,iBAAiB,SAAS;AAC5B,WAAO,IAAI,IAAI,MAAM,GAAG;AAAA,EAC1B;AAEA,MAAI,iBAAiB,KAAK;AACxB,WAAO;AAAA,EACT;AAEA,SAAO,IAAI,IAAI,OAAO,OAAO,SAAS,IAAI;AAC5C;AAEA,SAAS,yBAAyB,OAA0B,MAAoB;AAC9E,MAAI,iBAAiB,WAAW,MAAM,QAAQ,IAAI,eAAe,GAAG;AAClE,WAAO,MAAM,QAAQ,IAAI,eAAe;AAAA,EAC1C;AAEA,MAAI,CAAC,MAAM,SAAS;AAClB,WAAO;AAAA,EACT;AAEA,SAAO,IAAI,QAAQ,KAAK,OAAO,EAAE,IAAI,eAAe;AACtD;AAEA,SAAS,qBAAqB,OAAe,aAAsB;AACjE,QAAM,WAAW,eAAe,gBAAgB,KAAK;AACrD,SAAO,WAAW,WAAW,MAAO;AACtC;AAEA,SAAS,gBAAgB,OAAe;AACtC,QAAM,CAAC,EAAE,OAAO,IAAI,MAAM,MAAM,GAAG;AACnC,MAAI,CAAC,WAAW,OAAO,WAAW,aAAa;AAC7C,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,aAAa,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC/D,UAAM,SAAS,WAAW;AAAA,MACxB,WAAW,UAAW,IAAK,WAAW,SAAS,KAAM;AAAA,MACrD;AAAA,IACF;AACA,UAAM,OAAO,KAAK,MAAM,OAAO,KAAK,MAAM,CAAC;AAE3C,WAAO,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,WAAoB;AACrC,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAEA,SAAO,KAAK,IAAI,KAAK,YAAY;AACnC;","names":["targetWindow"]}

package/dist/index.d.cts

@@ -16,7 +16,10 @@ interface BridgeNavigationUpdatePayload {
     search: string;
     hash: string;
 }
+declare const EMBEDDED_LAUNCH_PARAMS: readonly ["appLoadId", "embedded", "hmac", "host", "id_token", "link_source", "locale", "project", "protocol", "session", "shop", "tenant", "timestamp"];
 declare function buildNavigationUpdatePayload(path: string): BridgeNavigationUpdatePayload;
+declare function sanitizeEmbeddedAppPath(path: string | undefined): string | undefined;
+declare function resolveLocalNavigationPath(href: string, currentOrigin: string): string | null;
 declare function resolveNavigationDestination(payload: unknown): string | null;
 
 type BridgeParticipant = "embedded-app" | "dashboard" | "unknown";
@@ -112,9 +115,9 @@ interface AppBridgeProviderProps extends Omit<AppBridgeOptions, "source" | "targ
     currentPath?: string | null;
     navigationEventType?: string;
     navigationUpdateEventType?: string;
-    onNavigate?: (path: string, message: ReceivedBridgeMessage<BridgeNavigationGoPayload>) => void;
+    onNavigate?: (path: string, message?: ReceivedBridgeMessage<BridgeNavigationGoPayload>) => void;
 }
 declare function AppBridgeProvider({ children, clientId, currentPath, navigationEventType, navigationUpdateEventType, namespace, onNavigate, readyEventType, readyPayload, requestTimeoutMs, selfWindow, targetOrigin, targetWindow }: AppBridgeProviderProps): react_jsx_runtime.JSX.Element;
 declare function useAppBridge(): AppBridge | null;
 
-export { AppBridge, type AppBridgeOptions, AppBridgeProvider, type AppBridgeProviderProps, type BridgeErrorPayload, type BridgeEventHandler, type BridgeMessage, type BridgeMessageKind, type BridgeNavigationGoPayload, type BridgeNavigationRedirectPayload, type BridgeNavigationUpdatePayload, type BridgeParticipant, type BridgeRequestHandler, type ReceivedBridgeMessage, type RequestOptions, type SessionTokenRequest, type SessionTokenResponse, type Unsubscribe, buildNavigationUpdatePayload, createAppBridge, isBridgeMessage, resolveNavigationDestination, useAppBridge };
+export { AppBridge, type AppBridgeOptions, AppBridgeProvider, type AppBridgeProviderProps, type BridgeErrorPayload, type BridgeEventHandler, type BridgeMessage, type BridgeMessageKind, type BridgeNavigationGoPayload, type BridgeNavigationRedirectPayload, type BridgeNavigationUpdatePayload, type BridgeParticipant, type BridgeRequestHandler, EMBEDDED_LAUNCH_PARAMS, type ReceivedBridgeMessage, type RequestOptions, type SessionTokenRequest, type SessionTokenResponse, type Unsubscribe, buildNavigationUpdatePayload, createAppBridge, isBridgeMessage, resolveLocalNavigationPath, resolveNavigationDestination, sanitizeEmbeddedAppPath, useAppBridge };

package/dist/index.d.ts

@@ -16,7 +16,10 @@ interface BridgeNavigationUpdatePayload {
     search: string;
     hash: string;
 }
+declare const EMBEDDED_LAUNCH_PARAMS: readonly ["appLoadId", "embedded", "hmac", "host", "id_token", "link_source", "locale", "project", "protocol", "session", "shop", "tenant", "timestamp"];
 declare function buildNavigationUpdatePayload(path: string): BridgeNavigationUpdatePayload;
+declare function sanitizeEmbeddedAppPath(path: string | undefined): string | undefined;
+declare function resolveLocalNavigationPath(href: string, currentOrigin: string): string | null;
 declare function resolveNavigationDestination(payload: unknown): string | null;
 
 type BridgeParticipant = "embedded-app" | "dashboard" | "unknown";
@@ -112,9 +115,9 @@ interface AppBridgeProviderProps extends Omit<AppBridgeOptions, "source" | "targ
     currentPath?: string | null;
     navigationEventType?: string;
     navigationUpdateEventType?: string;
-    onNavigate?: (path: string, message: ReceivedBridgeMessage<BridgeNavigationGoPayload>) => void;
+    onNavigate?: (path: string, message?: ReceivedBridgeMessage<BridgeNavigationGoPayload>) => void;
 }
 declare function AppBridgeProvider({ children, clientId, currentPath, navigationEventType, navigationUpdateEventType, namespace, onNavigate, readyEventType, readyPayload, requestTimeoutMs, selfWindow, targetOrigin, targetWindow }: AppBridgeProviderProps): react_jsx_runtime.JSX.Element;
 declare function useAppBridge(): AppBridge | null;
 
-export { AppBridge, type AppBridgeOptions, AppBridgeProvider, type AppBridgeProviderProps, type BridgeErrorPayload, type BridgeEventHandler, type BridgeMessage, type BridgeMessageKind, type BridgeNavigationGoPayload, type BridgeNavigationRedirectPayload, type BridgeNavigationUpdatePayload, type BridgeParticipant, type BridgeRequestHandler, type ReceivedBridgeMessage, type RequestOptions, type SessionTokenRequest, type SessionTokenResponse, type Unsubscribe, buildNavigationUpdatePayload, createAppBridge, isBridgeMessage, resolveNavigationDestination, useAppBridge };
+export { AppBridge, type AppBridgeOptions, AppBridgeProvider, type AppBridgeProviderProps, type BridgeErrorPayload, type BridgeEventHandler, type BridgeMessage, type BridgeMessageKind, type BridgeNavigationGoPayload, type BridgeNavigationRedirectPayload, type BridgeNavigationUpdatePayload, type BridgeParticipant, type BridgeRequestHandler, EMBEDDED_LAUNCH_PARAMS, type ReceivedBridgeMessage, type RequestOptions, type SessionTokenRequest, type SessionTokenResponse, type Unsubscribe, buildNavigationUpdatePayload, createAppBridge, isBridgeMessage, resolveLocalNavigationPath, resolveNavigationDestination, sanitizeEmbeddedAppPath, useAppBridge };

package/dist/index.js

@@ -1,19 +1,25 @@
 import {
   AppBridge,
   AppBridgeProvider,
+  EMBEDDED_LAUNCH_PARAMS,
   buildNavigationUpdatePayload,
   createAppBridge,
   isBridgeMessage,
+  resolveLocalNavigationPath,
   resolveNavigationDestination,
+  sanitizeEmbeddedAppPath,
   useAppBridge
-} from "./chunk-X5YISVIL.js";
+} from "./chunk-P5H5AHVK.js";
 export {
   AppBridge,
   AppBridgeProvider,
+  EMBEDDED_LAUNCH_PARAMS,
   buildNavigationUpdatePayload,
   createAppBridge,
   isBridgeMessage,
+  resolveLocalNavigationPath,
   resolveNavigationDestination,
+  sanitizeEmbeddedAppPath,
   useAppBridge
 };
 //# sourceMappingURL=index.js.map

package/dist/next.cjs

@@ -24,12 +24,29 @@ __export(next_exports, {
   NextAppBridgeProvider: () => NextAppBridgeProvider
 });
 module.exports = __toCommonJS(next_exports);
+var import_react2 = require("react");
 var import_navigation3 = require("next/navigation");
 
 // src/react.tsx
 var import_react = require("react");
 
 // src/navigation.ts
+var EMBEDDED_LAUNCH_PARAMS = [
+  "appLoadId",
+  "embedded",
+  "hmac",
+  "host",
+  "id_token",
+  "link_source",
+  "locale",
+  "project",
+  "protocol",
+  "session",
+  "shop",
+  "tenant",
+  "timestamp"
+];
+var NAVIGATION_BASE_URL = "https://embedded-app.local";
 function normalizeSearch(search) {
   if (!search) {
     return "";
@@ -43,7 +60,8 @@ function normalizeHash(hash) {
   return hash.startsWith("#") ? hash : `#${hash}`;
 }
 function buildNavigationUpdatePayload(path) {
-  let pathname = path;
+  const sanitizedPath = sanitizeEmbeddedAppPath(path) ?? path;
+  let pathname = sanitizedPath;
   let search = "";
   let hash = "";
   const hashIndex = pathname.indexOf("#");
@@ -63,24 +81,67 @@ function buildNavigationUpdatePayload(path) {
     hash
   };
 }
+function sanitizeEmbeddedAppPath(path) {
+  if (!path) {
+    return path;
+  }
+  const trimmedPath = path.trim();
+  if (!trimmedPath) {
+    return trimmedPath;
+  }
+  const url = new URL(trimmedPath, NAVIGATION_BASE_URL);
+  let changed = false;
+  for (const key of EMBEDDED_LAUNCH_PARAMS) {
+    if (url.searchParams.has(key)) {
+      url.searchParams.delete(key);
+      changed = true;
+    }
+  }
+  if (!changed) {
+    return trimmedPath;
+  }
+  if (/^https?:\/\//i.test(trimmedPath)) {
+    return url.toString();
+  }
+  return `${url.pathname}${url.search}${url.hash}`;
+}
+function resolveLocalNavigationPath(href, currentOrigin) {
+  if (!href || href.startsWith("#")) {
+    return null;
+  }
+  let destination;
+  try {
+    destination = new URL(href, currentOrigin);
+  } catch {
+    return null;
+  }
+  if (destination.origin !== currentOrigin) {
+    return null;
+  }
+  return sanitizeEmbeddedAppPath(
+    `${destination.pathname}${destination.search}${destination.hash}`
+  ) ?? null;
+}
 function resolveNavigationDestination(payload) {
   if (typeof payload === "string") {
-    return payload;
+    return sanitizeEmbeddedAppPath(payload) ?? null;
   }
   if (!payload || typeof payload !== "object") {
     return null;
   }
   const value = payload;
   if (typeof value.path === "string" && value.path) {
-    return value.path;
+    return sanitizeEmbeddedAppPath(value.path) ?? null;
   }
   if (typeof value.href === "string" && value.href) {
-    return value.href;
+    return sanitizeEmbeddedAppPath(value.href) ?? null;
   }
   if (typeof value.pathname !== "string" || !value.pathname) {
     return null;
   }
-  return `${value.pathname}${normalizeSearch(value.search ?? "")}${normalizeHash(value.hash ?? "")}`;
+  return sanitizeEmbeddedAppPath(
+    `${value.pathname}${normalizeSearch(value.search ?? "")}${normalizeHash(value.hash ?? "")}`
+  ) ?? null;
 }
 
 // src/core.ts
@@ -487,6 +548,78 @@ function AppBridgeProvider({
       onNavigateRef.current?.(destination, message);
     });
   }, [bridge, navigationEventType, onNavigate]);
+  (0, import_react.useEffect)(() => {
+    if (!bridge || !onNavigate || typeof document === "undefined" || typeof window === "undefined") {
+      return;
+    }
+    const handleLocalNavigation = (path) => {
+      const sanitizedPath = sanitizeEmbeddedAppPath(path);
+      if (!sanitizedPath) {
+        return;
+      }
+      onNavigateRef.current?.(sanitizedPath);
+    };
+    const handleDocumentClick = (event) => {
+      if (event.defaultPrevented || event.button !== 0 || event.metaKey || event.altKey || event.ctrlKey || event.shiftKey) {
+        return;
+      }
+      const target = event.target;
+      if (!(target instanceof Element)) {
+        return;
+      }
+      const anchor = target.closest("a[href]");
+      if (!(anchor instanceof HTMLAnchorElement)) {
+        return;
+      }
+      if (anchor.hasAttribute("download")) {
+        return;
+      }
+      const targetWindow2 = anchor.target.toLowerCase();
+      const href = anchor.getAttribute("href");
+      if (!href) {
+        return;
+      }
+      if (targetWindow2 === "_top" || targetWindow2 === "_parent") {
+        event.preventDefault();
+        bridge.redirectToRemote(anchor.href);
+        return;
+      }
+      if (targetWindow2 && targetWindow2 !== "_self") {
+        return;
+      }
+      const nextPath = resolveLocalNavigationPath(href, window.location.origin);
+      if (!nextPath) {
+        return;
+      }
+      event.preventDefault();
+      handleLocalNavigation(nextPath);
+    };
+    const originalOpen = window.open.bind(window);
+    window.open = (url, target, features) => {
+      if (url == null) {
+        return originalOpen(url, target, features);
+      }
+      const href = typeof url === "string" ? url : url.toString();
+      const targetName = (target ?? "").toLowerCase();
+      if (targetName === "_top" || targetName === "_parent") {
+        bridge.redirectToRemote(new URL(href, window.location.href).toString());
+        return null;
+      }
+      if (!targetName || targetName === "_self") {
+        const nextPath = resolveLocalNavigationPath(href, window.location.origin);
+        if (nextPath) {
+          handleLocalNavigation(nextPath);
+          return window;
+        }
+      }
+      return originalOpen(url, target, features);
+    };
+    document.addEventListener("click", handleDocumentClick, true);
+    return () => {
+      document.removeEventListener("click", handleDocumentClick, true);
+      window.open = originalOpen;
+    };
+  }, [bridge, onNavigate]);
   (0, import_react.useEffect)(() => {
     if (!bridge || typeof window === "undefined") {
       return;
@@ -510,6 +643,9 @@ function AppBridgeProvider({
         sessionTokenCacheRef
       });
       nextHeaders.set("Authorization", `Bearer ${sessionToken}`);
+      if (!nextHeaders.has("X-Requested-With")) {
+        nextHeaders.set("X-Requested-With", "XMLHttpRequest");
+      }
       if (input instanceof Request) {
         return originalFetch(
           new Request(input, {
@@ -635,11 +771,21 @@ function NextAppBridgeProvider({
   const searchParams = (0, import_navigation3.useSearchParams)();
   const search = searchParams?.toString();
   const currentPath = pathname ? `${pathname}${search ? `?${search}` : ""}` : null;
+  const sanitizedPath = (0, import_react2.useMemo)(
+    () => sanitizeEmbeddedAppPath(currentPath ?? void 0) ?? null,
+    [currentPath]
+  );
+  (0, import_react2.useEffect)(() => {
+    if (!currentPath || !sanitizedPath || currentPath === sanitizedPath) {
+      return;
+    }
+    router.replace(sanitizedPath);
+  }, [currentPath, router, sanitizedPath]);
   return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(
     AppBridgeProvider,
     {
       ...props,
-      currentPath,
+      currentPath: sanitizedPath,
       onNavigate: (path) => {
         router.push(path);
       },