@usethrottle/extension-bridge 0.2.0

package/dist/index.d.cts

@@ -0,0 +1,109 @@
+import { SessionContext } from './protocol.cjs';
+export { BRIDGE_PROTOCOL_VERSION, BRIDGE_SOURCE_HOST, BRIDGE_SOURCE_IFRAME, HostToIframeMessage, IframeToHostMessage, MESSAGE_NAMESPACE, NavigateMessage, ReadyMessage, RefreshMessage, ResizeMessage, SessionMessage, ToastMessage } from './protocol.cjs';
+
+/**
+ * @usethrottle/extension-bridge
+ *
+ * Runtime bridge for Throttle extensions running inside a dashboard iframe.
+ *
+ * Two sides:
+ *  - IFRAME (extension) side: `createBridge()` — handles the handshake, exposes
+ *    `bridge.api` for authenticated REST calls, and helpers for communicating
+ *    resize/toast/navigate events back to the host.
+ *  - HOST (dashboard) side: `createBridgeHost()` — listens for messages from the
+ *    iframe, calls `mintToken()` on `ready`/`refresh`, and routes UI events to
+ *    optional callbacks.
+ *
+ * WEBHOOK verification: import `verifyWebhook` from the subpath entry
+ * `@usethrottle/extension-bridge/webhook` (node-only; uses `node:crypto`).
+ */
+
+interface BridgeApiClient {
+    get(path: string): Promise<unknown>;
+    post(path: string, body?: unknown): Promise<unknown>;
+    patch(path: string, body?: unknown): Promise<unknown>;
+    del(path: string): Promise<unknown>;
+}
+interface Bridge {
+    /** Resolves when the first `session` message arrives from the host. */
+    ready: Promise<SessionContext>;
+    /** Typed REST client. Each method fetches with `Authorization: Bearer <token>`. */
+    api: BridgeApiClient;
+    /** Ask the host to resize the iframe to `heightPx` pixels. */
+    resize(heightPx: number): void;
+    /** Ask the host to show a toast notification. */
+    toast(message: string, level?: 'info' | 'success' | 'warning' | 'error'): void;
+    /** Ask the host to navigate the parent application. */
+    navigate(path: string): void;
+    /** Return the current session token, or null if no session has been received yet. */
+    getToken(): string | null;
+    /** Remove the message listener and clean up. */
+    destroy(): void;
+}
+type ThrottleBridge = Bridge;
+type BridgeSessionContext = SessionContext;
+type CreateBridgeOptions = CreateBridgeOpts;
+interface CreateBridgeOpts {
+    /**
+     * Base URL for `bridge.api` calls.
+     * Overridden by the `apiBaseUrl` field in the host's `session` message.
+     * Defaults to `https://api.usethrottle.dev` if neither is present.
+     */
+    apiBaseUrl?: string;
+    /**
+     * Expected origin of the parent dashboard. When set, inbound messages from
+     * other origins are silently ignored.
+     *
+     * When sending postMessage to the parent, the library targets:
+     *   1. `targetOrigin` if explicitly provided.
+     *   2. `document.referrer` origin if available.
+     *   3. `'*'` as a last resort (logs a console.warn).
+     *
+     * Set this in production to prevent cross-origin token leaks.
+     */
+    targetOrigin?: string;
+}
+/**
+ * Create a bridge instance inside an extension iframe.
+ *
+ * Call this once at startup.  Immediately posts a `ready` message to the
+ * parent window, then waits for the host to reply with a `session` message.
+ */
+declare function createBridge(opts?: CreateBridgeOpts): Bridge;
+interface MintTokenResult {
+    token: string;
+    /** ISO 8601 expiry timestamp. */
+    expiresAt: string;
+    context: SessionContext;
+}
+interface CreateBridgeHostOpts {
+    iframe: HTMLIFrameElement;
+    /** Origin of the extension iframe. Messages from other origins are ignored. */
+    targetOrigin: string;
+    /** Called on `ready` and `refresh` messages to produce a fresh signed token. */
+    mintToken: () => Promise<MintTokenResult>;
+    /**
+     * Throttle API base URL to send to the iframe in the `session` message.
+     * Defaults to `https://api.usethrottle.dev`.
+     */
+    apiBaseUrl?: string;
+    /** Called when the extension requests an iframe height change. */
+    onResize?: (heightPx: number) => void;
+    /** Called when the extension requests a toast notification. */
+    onToast?: (message: string, level?: 'info' | 'success' | 'warning' | 'error') => void;
+    /** Called when the extension requests a navigation. */
+    onNavigate?: (path: string) => void;
+}
+interface BridgeHost {
+    /** Remove the message listener and clean up. */
+    destroy(): void;
+}
+/**
+ * Create a bridge host inside the dashboard.
+ *
+ * Attaches a `message` listener on `window`.  Validates that messages come from
+ * `opts.iframe.contentWindow` at `opts.targetOrigin`.
+ */
+declare function createBridgeHost(opts: CreateBridgeHostOpts): BridgeHost;
+
+export { type Bridge, type BridgeApiClient, type BridgeHost, type BridgeSessionContext, type CreateBridgeHostOpts, type CreateBridgeOptions, type CreateBridgeOpts, type MintTokenResult, SessionContext, type ThrottleBridge, createBridge, createBridgeHost };

package/dist/index.d.ts

@@ -0,0 +1,109 @@
+import { SessionContext } from './protocol.js';
+export { BRIDGE_PROTOCOL_VERSION, BRIDGE_SOURCE_HOST, BRIDGE_SOURCE_IFRAME, HostToIframeMessage, IframeToHostMessage, MESSAGE_NAMESPACE, NavigateMessage, ReadyMessage, RefreshMessage, ResizeMessage, SessionMessage, ToastMessage } from './protocol.js';
+
+/**
+ * @usethrottle/extension-bridge
+ *
+ * Runtime bridge for Throttle extensions running inside a dashboard iframe.
+ *
+ * Two sides:
+ *  - IFRAME (extension) side: `createBridge()` — handles the handshake, exposes
+ *    `bridge.api` for authenticated REST calls, and helpers for communicating
+ *    resize/toast/navigate events back to the host.
+ *  - HOST (dashboard) side: `createBridgeHost()` — listens for messages from the
+ *    iframe, calls `mintToken()` on `ready`/`refresh`, and routes UI events to
+ *    optional callbacks.
+ *
+ * WEBHOOK verification: import `verifyWebhook` from the subpath entry
+ * `@usethrottle/extension-bridge/webhook` (node-only; uses `node:crypto`).
+ */
+
+interface BridgeApiClient {
+    get(path: string): Promise<unknown>;
+    post(path: string, body?: unknown): Promise<unknown>;
+    patch(path: string, body?: unknown): Promise<unknown>;
+    del(path: string): Promise<unknown>;
+}
+interface Bridge {
+    /** Resolves when the first `session` message arrives from the host. */
+    ready: Promise<SessionContext>;
+    /** Typed REST client. Each method fetches with `Authorization: Bearer <token>`. */
+    api: BridgeApiClient;
+    /** Ask the host to resize the iframe to `heightPx` pixels. */
+    resize(heightPx: number): void;
+    /** Ask the host to show a toast notification. */
+    toast(message: string, level?: 'info' | 'success' | 'warning' | 'error'): void;
+    /** Ask the host to navigate the parent application. */
+    navigate(path: string): void;
+    /** Return the current session token, or null if no session has been received yet. */
+    getToken(): string | null;
+    /** Remove the message listener and clean up. */
+    destroy(): void;
+}
+type ThrottleBridge = Bridge;
+type BridgeSessionContext = SessionContext;
+type CreateBridgeOptions = CreateBridgeOpts;
+interface CreateBridgeOpts {
+    /**
+     * Base URL for `bridge.api` calls.
+     * Overridden by the `apiBaseUrl` field in the host's `session` message.
+     * Defaults to `https://api.usethrottle.dev` if neither is present.
+     */
+    apiBaseUrl?: string;
+    /**
+     * Expected origin of the parent dashboard. When set, inbound messages from
+     * other origins are silently ignored.
+     *
+     * When sending postMessage to the parent, the library targets:
+     *   1. `targetOrigin` if explicitly provided.
+     *   2. `document.referrer` origin if available.
+     *   3. `'*'` as a last resort (logs a console.warn).
+     *
+     * Set this in production to prevent cross-origin token leaks.
+     */
+    targetOrigin?: string;
+}
+/**
+ * Create a bridge instance inside an extension iframe.
+ *
+ * Call this once at startup.  Immediately posts a `ready` message to the
+ * parent window, then waits for the host to reply with a `session` message.
+ */
+declare function createBridge(opts?: CreateBridgeOpts): Bridge;
+interface MintTokenResult {
+    token: string;
+    /** ISO 8601 expiry timestamp. */
+    expiresAt: string;
+    context: SessionContext;
+}
+interface CreateBridgeHostOpts {
+    iframe: HTMLIFrameElement;
+    /** Origin of the extension iframe. Messages from other origins are ignored. */
+    targetOrigin: string;
+    /** Called on `ready` and `refresh` messages to produce a fresh signed token. */
+    mintToken: () => Promise<MintTokenResult>;
+    /**
+     * Throttle API base URL to send to the iframe in the `session` message.
+     * Defaults to `https://api.usethrottle.dev`.
+     */
+    apiBaseUrl?: string;
+    /** Called when the extension requests an iframe height change. */
+    onResize?: (heightPx: number) => void;
+    /** Called when the extension requests a toast notification. */
+    onToast?: (message: string, level?: 'info' | 'success' | 'warning' | 'error') => void;
+    /** Called when the extension requests a navigation. */
+    onNavigate?: (path: string) => void;
+}
+interface BridgeHost {
+    /** Remove the message listener and clean up. */
+    destroy(): void;
+}
+/**
+ * Create a bridge host inside the dashboard.
+ *
+ * Attaches a `message` listener on `window`.  Validates that messages come from
+ * `opts.iframe.contentWindow` at `opts.targetOrigin`.
+ */
+declare function createBridgeHost(opts: CreateBridgeHostOpts): BridgeHost;
+
+export { type Bridge, type BridgeApiClient, type BridgeHost, type BridgeSessionContext, type CreateBridgeHostOpts, type CreateBridgeOptions, type CreateBridgeOpts, type MintTokenResult, SessionContext, type ThrottleBridge, createBridge, createBridgeHost };

package/dist/index.js

@@ -0,0 +1,208 @@
+import {
+  BRIDGE_PROTOCOL_VERSION,
+  BRIDGE_SOURCE_HOST,
+  BRIDGE_SOURCE_IFRAME,
+  MESSAGE_NAMESPACE
+} from "./chunk-XBGZRIHG.js";
+
+// src/index.ts
+function createBridge(opts = {}) {
+  const { targetOrigin } = opts;
+  let resolvedApiBaseUrl = opts.apiBaseUrl ?? "https://api.usethrottle.dev";
+  let resolveReady;
+  const readyPromise = new Promise((resolve) => {
+    resolveReady = resolve;
+  });
+  let currentToken = null;
+  let currentExpiresAt = null;
+  let refreshPromise = null;
+  let resolveRefresh = null;
+  function isTokenExpiringSoon() {
+    if (!currentToken || !currentExpiresAt) return true;
+    return currentExpiresAt - Date.now() / 1e3 < 60;
+  }
+  function requestRefresh() {
+    if (!refreshPromise) {
+      refreshPromise = new Promise((resolve) => {
+        resolveRefresh = resolve;
+      });
+      postToParent({ type: "refresh" });
+    }
+    return refreshPromise;
+  }
+  function handleSession(msg) {
+    currentToken = msg.token;
+    currentExpiresAt = Math.floor(new Date(msg.expiresAt).getTime() / 1e3);
+    if (msg.apiBaseUrl) {
+      resolvedApiBaseUrl = msg.apiBaseUrl;
+    }
+    resolveReady(msg.context);
+    if (resolveRefresh) {
+      const r = resolveRefresh;
+      resolveRefresh = null;
+      refreshPromise = null;
+      r(msg.context);
+    }
+  }
+  function getParentTarget() {
+    if (targetOrigin) return targetOrigin;
+    if (typeof document !== "undefined" && document.referrer) {
+      try {
+        return new URL(document.referrer).origin;
+      } catch {
+      }
+    }
+    if (typeof console !== "undefined") {
+      console.warn(
+        '[ThrottleBridge] targetOrigin not set and document.referrer unavailable; posting to parent with origin="*". Set `targetOrigin` in production.'
+      );
+    }
+    return "*";
+  }
+  function onMessage(event) {
+    if (typeof window !== "undefined" && event.source !== null && event.source !== window.parent) return;
+    if (targetOrigin && event.origin !== targetOrigin) return;
+    const data = event.data;
+    if (!data || typeof data !== "object") return;
+    if (data["source"] !== BRIDGE_SOURCE_HOST) return;
+    if (data["type"] === "session") {
+      handleSession(data);
+    }
+  }
+  if (typeof window !== "undefined") {
+    window.addEventListener("message", onMessage);
+    postToParent({ type: "ready" });
+  }
+  function postToParent(payload) {
+    if (typeof window !== "undefined" && window.parent !== window) {
+      window.parent.postMessage(
+        { source: BRIDGE_SOURCE_IFRAME, ...payload },
+        getParentTarget()
+      );
+    }
+  }
+  async function apiFetch(method, path, body) {
+    if (isTokenExpiringSoon()) {
+      await requestRefresh();
+    }
+    const doFetch = async (token) => {
+      const headers = {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${token}`
+      };
+      const init = { method, headers };
+      if (body !== void 0) {
+        init.body = JSON.stringify(body);
+      }
+      const res2 = await fetch(`${resolvedApiBaseUrl}${path}`, init);
+      return res2;
+    };
+    let res = await doFetch(currentToken);
+    if (res.status === 401) {
+      await requestRefresh();
+      res = await doFetch(currentToken);
+    }
+    if (!res.ok) {
+      const text = await res.text().catch(() => "");
+      throw new Error(`ThrottleBridge fetch error: ${res.status} ${res.statusText} \u2014 ${text}`);
+    }
+    return res.json();
+  }
+  const api = {
+    get: (path) => apiFetch("GET", path),
+    post: (path, body) => apiFetch("POST", path, body),
+    patch: (path, body) => apiFetch("PATCH", path, body),
+    del: (path) => apiFetch("DELETE", path)
+  };
+  function destroy() {
+    if (typeof window !== "undefined") {
+      window.removeEventListener("message", onMessage);
+    }
+  }
+  return {
+    ready: readyPromise,
+    api,
+    resize(heightPx) {
+      postToParent({ type: "resize", height: heightPx });
+    },
+    toast(message, level) {
+      postToParent({ type: "toast", message, level });
+    },
+    navigate(path) {
+      postToParent({ type: "navigate", path });
+    },
+    getToken() {
+      return currentToken;
+    },
+    destroy
+  };
+}
+function createBridgeHost(opts) {
+  const {
+    iframe,
+    targetOrigin,
+    mintToken,
+    apiBaseUrl = "https://api.usethrottle.dev",
+    onResize,
+    onToast,
+    onNavigate
+  } = opts;
+  async function sendSession() {
+    const { token, expiresAt, context } = await mintToken();
+    iframe.contentWindow?.postMessage(
+      {
+        source: BRIDGE_SOURCE_HOST,
+        type: "session",
+        token,
+        expiresAt,
+        context,
+        apiBaseUrl
+      },
+      targetOrigin
+    );
+  }
+  async function onMessage(event) {
+    if (event.source !== iframe.contentWindow) return;
+    if (event.origin !== targetOrigin) return;
+    const data = event.data;
+    if (!data || typeof data !== "object") return;
+    if (data["source"] !== BRIDGE_SOURCE_IFRAME) return;
+    switch (data["type"]) {
+      case "ready":
+      case "refresh":
+        await sendSession();
+        break;
+      case "resize":
+        onResize?.(data["height"]);
+        break;
+      case "toast":
+        onToast?.(data["message"], data["level"]);
+        break;
+      case "navigate":
+        onNavigate?.(data["path"]);
+        break;
+    }
+  }
+  const boundListener = (event) => {
+    void onMessage(event);
+  };
+  if (typeof window !== "undefined") {
+    window.addEventListener("message", boundListener);
+  }
+  return {
+    destroy() {
+      if (typeof window !== "undefined") {
+        window.removeEventListener("message", boundListener);
+      }
+    }
+  };
+}
+export {
+  BRIDGE_PROTOCOL_VERSION,
+  BRIDGE_SOURCE_HOST,
+  BRIDGE_SOURCE_IFRAME,
+  MESSAGE_NAMESPACE,
+  createBridge,
+  createBridgeHost
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @usethrottle/extension-bridge\n *\n * Runtime bridge for Throttle extensions running inside a dashboard iframe.\n *\n * Two sides:\n *  - IFRAME (extension) side: `createBridge()` — handles the handshake, exposes\n *    `bridge.api` for authenticated REST calls, and helpers for communicating\n *    resize/toast/navigate events back to the host.\n *  - HOST (dashboard) side: `createBridgeHost()` — listens for messages from the\n *    iframe, calls `mintToken()` on `ready`/`refresh`, and routes UI events to\n *    optional callbacks.\n *\n * WEBHOOK verification: import `verifyWebhook` from the subpath entry\n * `@usethrottle/extension-bridge/webhook` (node-only; uses `node:crypto`).\n */\n\n// Re-export protocol types + constants so dashboard host imports the SAME shapes\nexport type {\n  SessionContext,\n  IframeToHostMessage,\n  HostToIframeMessage,\n  ReadyMessage,\n  RefreshMessage,\n  ResizeMessage,\n  ToastMessage,\n  NavigateMessage,\n  SessionMessage,\n} from './protocol.js';\n\nexport {\n  MESSAGE_NAMESPACE,\n  BRIDGE_SOURCE_IFRAME,\n  BRIDGE_SOURCE_HOST,\n  BRIDGE_PROTOCOL_VERSION,\n} from './protocol.js';\n\n// ---------------------------------------------------------------------------\n// Internal imports from protocol\n// ---------------------------------------------------------------------------\n\nimport {\n  BRIDGE_SOURCE_IFRAME,\n  BRIDGE_SOURCE_HOST,\n} from './protocol.js';\n\nimport type { SessionContext } from './protocol.js';\n\n// ---------------------------------------------------------------------------\n// IFRAME side — Bridge\n// ---------------------------------------------------------------------------\n\nexport interface BridgeApiClient {\n  get(path: string): Promise<unknown>;\n  post(path: string, body?: unknown): Promise<unknown>;\n  patch(path: string, body?: unknown): Promise<unknown>;\n  del(path: string): Promise<unknown>;\n}\n\nexport interface Bridge {\n  /** Resolves when the first `session` message arrives from the host. */\n  ready: Promise<SessionContext>;\n  /** Typed REST client. Each method fetches with `Authorization: Bearer <token>`. */\n  api: BridgeApiClient;\n  /** Ask the host to resize the iframe to `heightPx` pixels. */\n  resize(heightPx: number): void;\n  /** Ask the host to show a toast notification. */\n  toast(message: string, level?: 'info' | 'success' | 'warning' | 'error'): void;\n  /** Ask the host to navigate the parent application. */\n  navigate(path: string): void;\n  /** Return the current session token, or null if no session has been received yet. */\n  getToken(): string | null;\n  /** Remove the message listener and clean up. */\n  destroy(): void;\n}\n\n// Canonical spec name aliases for public consumers\nexport type ThrottleBridge = Bridge;\nexport type BridgeSessionContext = SessionContext;\nexport type CreateBridgeOptions = CreateBridgeOpts;\n\nexport interface CreateBridgeOpts {\n  /**\n   * Base URL for `bridge.api` calls.\n   * Overridden by the `apiBaseUrl` field in the host's `session` message.\n   * Defaults to `https://api.usethrottle.dev` if neither is present.\n   */\n  apiBaseUrl?: string;\n  /**\n   * Expected origin of the parent dashboard. When set, inbound messages from\n   * other origins are silently ignored.\n   *\n   * When sending postMessage to the parent, the library targets:\n   *   1. `targetOrigin` if explicitly provided.\n   *   2. `document.referrer` origin if available.\n   *   3. `'*'` as a last resort (logs a console.warn).\n   *\n   * Set this in production to prevent cross-origin token leaks.\n   */\n  targetOrigin?: string;\n}\n\n/**\n * Create a bridge instance inside an extension iframe.\n *\n * Call this once at startup.  Immediately posts a `ready` message to the\n * parent window, then waits for the host to reply with a `session` message.\n */\nexport function createBridge(opts: CreateBridgeOpts = {}): Bridge {\n  const { targetOrigin } = opts;\n  // apiBaseUrl can be overridden by the session message; start with the option\n  // or the default Throttle API base.\n  let resolvedApiBaseUrl = opts.apiBaseUrl ?? 'https://api.usethrottle.dev';\n\n  let resolveReady!: (ctx: SessionContext) => void;\n\n  const readyPromise = new Promise<SessionContext>((resolve) => {\n    resolveReady = resolve;\n  });\n\n  // Current token state\n  let currentToken: string | null = null;\n  let currentExpiresAt: number | null = null; // Unix seconds\n\n  // Pending refresh waiters\n  let refreshPromise: Promise<SessionContext> | null = null;\n  let resolveRefresh: ((ctx: SessionContext) => void) | null = null;\n\n  function isTokenExpiringSoon(): boolean {\n    if (!currentToken || !currentExpiresAt) return true;\n    return currentExpiresAt - Date.now() / 1000 < 60;\n  }\n\n  function requestRefresh(): Promise<SessionContext> {\n    if (!refreshPromise) {\n      refreshPromise = new Promise<SessionContext>((resolve) => {\n        resolveRefresh = resolve;\n      });\n      postToParent({ type: 'refresh' });\n    }\n    return refreshPromise;\n  }\n\n  function handleSession(msg: {\n    token: string;\n    expiresAt: string;\n    context: SessionContext;\n    apiBaseUrl?: string;\n  }) {\n    currentToken = msg.token;\n    currentExpiresAt = Math.floor(new Date(msg.expiresAt).getTime() / 1000);\n\n    // Host may override the API base URL\n    if (msg.apiBaseUrl) {\n      resolvedApiBaseUrl = msg.apiBaseUrl;\n    }\n\n    // Resolve the initial ready promise (idempotent — Promise ignores second resolve)\n    resolveReady(msg.context);\n\n    // Resolve any pending refresh waiter\n    if (resolveRefresh) {\n      const r = resolveRefresh;\n      resolveRefresh = null;\n      refreshPromise = null;\n      r(msg.context);\n    }\n  }\n\n  // Determine the target origin for outgoing postMessage calls.\n  function getParentTarget(): string {\n    if (targetOrigin) return targetOrigin;\n    if (typeof document !== 'undefined' && document.referrer) {\n      try {\n        return new URL(document.referrer).origin;\n      } catch {\n        // ignore\n      }\n    }\n    // Last resort — wildcard. Warn the developer.\n    if (typeof console !== 'undefined') {\n      console.warn(\n        '[ThrottleBridge] targetOrigin not set and document.referrer unavailable; ' +\n          'posting to parent with origin=\"*\". Set `targetOrigin` in production.',\n      );\n    }\n    return '*';\n  }\n\n  function onMessage(event: MessageEvent) {\n    // Source-window guard: only accept messages from the direct parent.\n    // Skip the check when event.source is null (e.g. jsdom synthetic events in tests).\n    if (typeof window !== 'undefined' && event.source !== null && event.source !== window.parent) return;\n\n    // Origin guard\n    if (targetOrigin && event.origin !== targetOrigin) return;\n\n    const data = event.data as Record<string, unknown>;\n    if (!data || typeof data !== 'object') return;\n    if (data['source'] !== BRIDGE_SOURCE_HOST) return;\n\n    if (data['type'] === 'session') {\n      handleSession(data as Parameters<typeof handleSession>[0]);\n    }\n  }\n\n  if (typeof window !== 'undefined') {\n    window.addEventListener('message', onMessage);\n    // Announce readiness to the parent\n    postToParent({ type: 'ready' });\n  }\n\n  function postToParent(payload: Record<string, unknown>) {\n    if (typeof window !== 'undefined' && window.parent !== window) {\n      window.parent.postMessage(\n        { source: BRIDGE_SOURCE_IFRAME, ...payload },\n        getParentTarget(),\n      );\n    }\n  }\n\n  async function apiFetch(method: string, path: string, body?: unknown): Promise<unknown> {\n    // Proactively refresh if within 60s of expiry\n    if (isTokenExpiringSoon()) {\n      await requestRefresh();\n    }\n\n    const doFetch = async (token: string) => {\n      const headers: Record<string, string> = {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${token}`,\n      };\n      const init: RequestInit = { method, headers };\n      if (body !== undefined) {\n        init.body = JSON.stringify(body);\n      }\n      const res = await fetch(`${resolvedApiBaseUrl}${path}`, init);\n      return res;\n    };\n\n    let res = await doFetch(currentToken!);\n\n    if (res.status === 401) {\n      // Token rejected — request a fresh one and retry once\n      await requestRefresh();\n      res = await doFetch(currentToken!);\n    }\n\n    if (!res.ok) {\n      const text = await res.text().catch(() => '');\n      throw new Error(`ThrottleBridge fetch error: ${res.status} ${res.statusText} — ${text}`);\n    }\n\n    return res.json();\n  }\n\n  const api: BridgeApiClient = {\n    get: (path) => apiFetch('GET', path),\n    post: (path, body) => apiFetch('POST', path, body),\n    patch: (path, body) => apiFetch('PATCH', path, body),\n    del: (path) => apiFetch('DELETE', path),\n  };\n\n  function destroy() {\n    if (typeof window !== 'undefined') {\n      window.removeEventListener('message', onMessage);\n    }\n  }\n\n  return {\n    ready: readyPromise,\n    api,\n    resize(heightPx: number) {\n      postToParent({ type: 'resize', height: heightPx });\n    },\n    toast(message: string, level?: 'info' | 'success' | 'warning' | 'error') {\n      postToParent({ type: 'toast', message, level });\n    },\n    navigate(path: string) {\n      postToParent({ type: 'navigate', path });\n    },\n    getToken() {\n      return currentToken;\n    },\n    destroy,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// HOST side — BridgeHost\n// ---------------------------------------------------------------------------\n\nexport interface MintTokenResult {\n  token: string;\n  /** ISO 8601 expiry timestamp. */\n  expiresAt: string;\n  context: SessionContext;\n}\n\nexport interface CreateBridgeHostOpts {\n  iframe: HTMLIFrameElement;\n  /** Origin of the extension iframe. Messages from other origins are ignored. */\n  targetOrigin: string;\n  /** Called on `ready` and `refresh` messages to produce a fresh signed token. */\n  mintToken: () => Promise<MintTokenResult>;\n  /**\n   * Throttle API base URL to send to the iframe in the `session` message.\n   * Defaults to `https://api.usethrottle.dev`.\n   */\n  apiBaseUrl?: string;\n  /** Called when the extension requests an iframe height change. */\n  onResize?: (heightPx: number) => void;\n  /** Called when the extension requests a toast notification. */\n  onToast?: (message: string, level?: 'info' | 'success' | 'warning' | 'error') => void;\n  /** Called when the extension requests a navigation. */\n  onNavigate?: (path: string) => void;\n}\n\nexport interface BridgeHost {\n  /** Remove the message listener and clean up. */\n  destroy(): void;\n}\n\n/**\n * Create a bridge host inside the dashboard.\n *\n * Attaches a `message` listener on `window`.  Validates that messages come from\n * `opts.iframe.contentWindow` at `opts.targetOrigin`.\n */\nexport function createBridgeHost(opts: CreateBridgeHostOpts): BridgeHost {\n  const {\n    iframe,\n    targetOrigin,\n    mintToken,\n    apiBaseUrl = 'https://api.usethrottle.dev',\n    onResize,\n    onToast,\n    onNavigate,\n  } = opts;\n\n  async function sendSession() {\n    const { token, expiresAt, context } = await mintToken();\n    iframe.contentWindow?.postMessage(\n      {\n        source: BRIDGE_SOURCE_HOST,\n        type: 'session',\n        token,\n        expiresAt,\n        context,\n        apiBaseUrl,\n      },\n      targetOrigin,\n    );\n  }\n\n  async function onMessage(event: MessageEvent) {\n    // Source + origin guard\n    if (event.source !== iframe.contentWindow) return;\n    if (event.origin !== targetOrigin) return;\n\n    const data = event.data as Record<string, unknown>;\n    if (!data || typeof data !== 'object') return;\n    if (data['source'] !== BRIDGE_SOURCE_IFRAME) return;\n\n    switch (data['type']) {\n      case 'ready':\n      case 'refresh':\n        await sendSession();\n        break;\n\n      case 'resize':\n        onResize?.(data['height'] as number);\n        break;\n\n      case 'toast':\n        onToast?.(data['message'] as string, data['level'] as 'info' | 'success' | 'warning' | 'error' | undefined);\n        break;\n\n      case 'navigate':\n        onNavigate?.(data['path'] as string);\n        break;\n    }\n  }\n\n  const boundListener = (event: Event) => {\n    void onMessage(event as MessageEvent);\n  };\n\n  if (typeof window !== 'undefined') {\n    window.addEventListener('message', boundListener);\n  }\n\n  return {\n    destroy() {\n      if (typeof window !== 'undefined') {\n        window.removeEventListener('message', boundListener);\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;AA4GO,SAAS,aAAa,OAAyB,CAAC,GAAW;AAChE,QAAM,EAAE,aAAa,IAAI;AAGzB,MAAI,qBAAqB,KAAK,cAAc;AAE5C,MAAI;AAEJ,QAAM,eAAe,IAAI,QAAwB,CAAC,YAAY;AAC5D,mBAAe;AAAA,EACjB,CAAC;AAGD,MAAI,eAA8B;AAClC,MAAI,mBAAkC;AAGtC,MAAI,iBAAiD;AACrD,MAAI,iBAAyD;AAE7D,WAAS,sBAA+B;AACtC,QAAI,CAAC,gBAAgB,CAAC,iBAAkB,QAAO;AAC/C,WAAO,mBAAmB,KAAK,IAAI,IAAI,MAAO;AAAA,EAChD;AAEA,WAAS,iBAA0C;AACjD,QAAI,CAAC,gBAAgB;AACnB,uBAAiB,IAAI,QAAwB,CAAC,YAAY;AACxD,yBAAiB;AAAA,MACnB,CAAC;AACD,mBAAa,EAAE,MAAM,UAAU,CAAC;AAAA,IAClC;AACA,WAAO;AAAA,EACT;AAEA,WAAS,cAAc,KAKpB;AACD,mBAAe,IAAI;AACnB,uBAAmB,KAAK,MAAM,IAAI,KAAK,IAAI,SAAS,EAAE,QAAQ,IAAI,GAAI;AAGtE,QAAI,IAAI,YAAY;AAClB,2BAAqB,IAAI;AAAA,IAC3B;AAGA,iBAAa,IAAI,OAAO;AAGxB,QAAI,gBAAgB;AAClB,YAAM,IAAI;AACV,uBAAiB;AACjB,uBAAiB;AACjB,QAAE,IAAI,OAAO;AAAA,IACf;AAAA,EACF;AAGA,WAAS,kBAA0B;AACjC,QAAI,aAAc,QAAO;AACzB,QAAI,OAAO,aAAa,eAAe,SAAS,UAAU;AACxD,UAAI;AACF,eAAO,IAAI,IAAI,SAAS,QAAQ,EAAE;AAAA,MACpC,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,QAAI,OAAO,YAAY,aAAa;AAClC,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,WAAS,UAAU,OAAqB;AAGtC,QAAI,OAAO,WAAW,eAAe,MAAM,WAAW,QAAQ,MAAM,WAAW,OAAO,OAAQ;AAG9F,QAAI,gBAAgB,MAAM,WAAW,aAAc;AAEnD,UAAM,OAAO,MAAM;AACnB,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,QAAI,KAAK,QAAQ,MAAM,mBAAoB;AAE3C,QAAI,KAAK,MAAM,MAAM,WAAW;AAC9B,oBAAc,IAA2C;AAAA,IAC3D;AAAA,EACF;AAEA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,iBAAiB,WAAW,SAAS;AAE5C,iBAAa,EAAE,MAAM,QAAQ,CAAC;AAAA,EAChC;AAEA,WAAS,aAAa,SAAkC;AACtD,QAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAC7D,aAAO,OAAO;AAAA,QACZ,EAAE,QAAQ,sBAAsB,GAAG,QAAQ;AAAA,QAC3C,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,SAAS,QAAgB,MAAc,MAAkC;AAEtF,QAAI,oBAAoB,GAAG;AACzB,YAAM,eAAe;AAAA,IACvB;AAEA,UAAM,UAAU,OAAO,UAAkB;AACvC,YAAM,UAAkC;AAAA,QACtC,gBAAgB;AAAA,QAChB,eAAe,UAAU,KAAK;AAAA,MAChC;AACA,YAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,UAAI,SAAS,QAAW;AACtB,aAAK,OAAO,KAAK,UAAU,IAAI;AAAA,MACjC;AACA,YAAMA,OAAM,MAAM,MAAM,GAAG,kBAAkB,GAAG,IAAI,IAAI,IAAI;AAC5D,aAAOA;AAAA,IACT;AAEA,QAAI,MAAM,MAAM,QAAQ,YAAa;AAErC,QAAI,IAAI,WAAW,KAAK;AAEtB,YAAM,eAAe;AACrB,YAAM,MAAM,QAAQ,YAAa;AAAA,IACnC;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE;AAC5C,YAAM,IAAI,MAAM,+BAA+B,IAAI,MAAM,IAAI,IAAI,UAAU,WAAM,IAAI,EAAE;AAAA,IACzF;AAEA,WAAO,IAAI,KAAK;AAAA,EAClB;AAEA,QAAM,MAAuB;AAAA,IAC3B,KAAK,CAAC,SAAS,SAAS,OAAO,IAAI;AAAA,IACnC,MAAM,CAAC,MAAM,SAAS,SAAS,QAAQ,MAAM,IAAI;AAAA,IACjD,OAAO,CAAC,MAAM,SAAS,SAAS,SAAS,MAAM,IAAI;AAAA,IACnD,KAAK,CAAC,SAAS,SAAS,UAAU,IAAI;AAAA,EACxC;AAEA,WAAS,UAAU;AACjB,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,oBAAoB,WAAW,SAAS;AAAA,IACjD;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO;AAAA,IACP;AAAA,IACA,OAAO,UAAkB;AACvB,mBAAa,EAAE,MAAM,UAAU,QAAQ,SAAS,CAAC;AAAA,IACnD;AAAA,IACA,MAAM,SAAiB,OAAkD;AACvE,mBAAa,EAAE,MAAM,SAAS,SAAS,MAAM,CAAC;AAAA,IAChD;AAAA,IACA,SAAS,MAAc;AACrB,mBAAa,EAAE,MAAM,YAAY,KAAK,CAAC;AAAA,IACzC;AAAA,IACA,WAAW;AACT,aAAO;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AA2CO,SAAS,iBAAiB,MAAwC;AACvE,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,iBAAe,cAAc;AAC3B,UAAM,EAAE,OAAO,WAAW,QAAQ,IAAI,MAAM,UAAU;AACtD,WAAO,eAAe;AAAA,MACpB;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,UAAU,OAAqB;AAE5C,QAAI,MAAM,WAAW,OAAO,cAAe;AAC3C,QAAI,MAAM,WAAW,aAAc;AAEnC,UAAM,OAAO,MAAM;AACnB,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,QAAI,KAAK,QAAQ,MAAM,qBAAsB;AAE7C,YAAQ,KAAK,MAAM,GAAG;AAAA,MACpB,KAAK;AAAA,MACL,KAAK;AACH,cAAM,YAAY;AAClB;AAAA,MAEF,KAAK;AACH,mBAAW,KAAK,QAAQ,CAAW;AACnC;AAAA,MAEF,KAAK;AACH,kBAAU,KAAK,SAAS,GAAa,KAAK,OAAO,CAAyD;AAC1G;AAAA,MAEF,KAAK;AACH,qBAAa,KAAK,MAAM,CAAW;AACnC;AAAA,IACJ;AAAA,EACF;AAEA,QAAM,gBAAgB,CAAC,UAAiB;AACtC,SAAK,UAAU,KAAqB;AAAA,EACtC;AAEA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,iBAAiB,WAAW,aAAa;AAAA,EAClD;AAEA,SAAO;AAAA,IACL,UAAU;AACR,UAAI,OAAO,WAAW,aAAa;AACjC,eAAO,oBAAoB,WAAW,aAAa;AAAA,MACrD;AAAA,IACF;AAAA,EACF;AACF;","names":["res"]}

package/dist/protocol.cjs

@@ -0,0 +1,40 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/protocol.ts
+var protocol_exports = {};
+__export(protocol_exports, {
+  BRIDGE_PROTOCOL_VERSION: () => BRIDGE_PROTOCOL_VERSION,
+  BRIDGE_SOURCE_HOST: () => BRIDGE_SOURCE_HOST,
+  BRIDGE_SOURCE_IFRAME: () => BRIDGE_SOURCE_IFRAME,
+  MESSAGE_NAMESPACE: () => MESSAGE_NAMESPACE
+});
+module.exports = __toCommonJS(protocol_exports);
+var MESSAGE_NAMESPACE = "throttle:bridge";
+var BRIDGE_SOURCE_IFRAME = "throttle-extension-bridge";
+var BRIDGE_SOURCE_HOST = "throttle-extension-host";
+var BRIDGE_PROTOCOL_VERSION = 1;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  BRIDGE_PROTOCOL_VERSION,
+  BRIDGE_SOURCE_HOST,
+  BRIDGE_SOURCE_IFRAME,
+  MESSAGE_NAMESPACE
+});
+//# sourceMappingURL=protocol.cjs.map

package/dist/protocol.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/protocol.ts"],"sourcesContent":["/**\n * @usethrottle/extension-bridge — postMessage protocol types\n *\n * Both the extension iframe and the dashboard host import from this file\n * to ensure both sides of the channel use identical message shapes.\n */\n\n/** Discriminant prefix used in all bridge message payloads. */\nexport const MESSAGE_NAMESPACE = 'throttle:bridge' as const;\n\n/** `source` field set on every message sent BY the extension iframe. */\nexport const BRIDGE_SOURCE_IFRAME = 'throttle-extension-bridge' as const;\n\n/** `source` field set on every message sent BY the dashboard host. */\nexport const BRIDGE_SOURCE_HOST = 'throttle-extension-host' as const;\n\n/** Incremented when the handshake protocol changes in a breaking way. */\nexport const BRIDGE_PROTOCOL_VERSION = 1 as const;\n\nexport interface SessionContext {\n  user: { id: string; email: string };\n  workspace: { id: string; slug: string };\n  application: { id: string; slug: string };\n  mode: 'test' | 'live';\n  installationId: string;\n  extensionId: string;\n  version: string;\n  role: string;\n  scopes: string[];\n}\n\nexport interface ReadyMessage { source: typeof BRIDGE_SOURCE_IFRAME; type: 'ready'; }\nexport interface RefreshMessage { source: typeof BRIDGE_SOURCE_IFRAME; type: 'refresh'; }\nexport interface ResizeMessage { source: typeof BRIDGE_SOURCE_IFRAME; type: 'resize'; height: number; }\nexport interface ToastMessage { source: typeof BRIDGE_SOURCE_IFRAME; type: 'toast'; message: string; level?: 'info' | 'success' | 'warning' | 'error'; }\nexport interface NavigateMessage { source: typeof BRIDGE_SOURCE_IFRAME; type: 'navigate'; path: string; }\nexport type IframeToHostMessage = ReadyMessage | RefreshMessage | ResizeMessage | ToastMessage | NavigateMessage;\n\nexport interface SessionMessage {\n  source: typeof BRIDGE_SOURCE_HOST;\n  type: 'session';\n  token: string;\n  expiresAt: string;\n  context: SessionContext;\n  apiBaseUrl: string;\n}\nexport type HostToIframeMessage = SessionMessage;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQO,IAAM,oBAAoB;AAG1B,IAAM,uBAAuB;AAG7B,IAAM,qBAAqB;AAG3B,IAAM,0BAA0B;","names":[]}

package/dist/protocol.d.cts

@@ -0,0 +1,70 @@
+/**
+ * @usethrottle/extension-bridge — postMessage protocol types
+ *
+ * Both the extension iframe and the dashboard host import from this file
+ * to ensure both sides of the channel use identical message shapes.
+ */
+/** Discriminant prefix used in all bridge message payloads. */
+declare const MESSAGE_NAMESPACE: "throttle:bridge";
+/** `source` field set on every message sent BY the extension iframe. */
+declare const BRIDGE_SOURCE_IFRAME: "throttle-extension-bridge";
+/** `source` field set on every message sent BY the dashboard host. */
+declare const BRIDGE_SOURCE_HOST: "throttle-extension-host";
+/** Incremented when the handshake protocol changes in a breaking way. */
+declare const BRIDGE_PROTOCOL_VERSION: 1;
+interface SessionContext {
+    user: {
+        id: string;
+        email: string;
+    };
+    workspace: {
+        id: string;
+        slug: string;
+    };
+    application: {
+        id: string;
+        slug: string;
+    };
+    mode: 'test' | 'live';
+    installationId: string;
+    extensionId: string;
+    version: string;
+    role: string;
+    scopes: string[];
+}
+interface ReadyMessage {
+    source: typeof BRIDGE_SOURCE_IFRAME;
+    type: 'ready';
+}
+interface RefreshMessage {
+    source: typeof BRIDGE_SOURCE_IFRAME;
+    type: 'refresh';
+}
+interface ResizeMessage {
+    source: typeof BRIDGE_SOURCE_IFRAME;
+    type: 'resize';
+    height: number;
+}
+interface ToastMessage {
+    source: typeof BRIDGE_SOURCE_IFRAME;
+    type: 'toast';
+    message: string;
+    level?: 'info' | 'success' | 'warning' | 'error';
+}
+interface NavigateMessage {
+    source: typeof BRIDGE_SOURCE_IFRAME;
+    type: 'navigate';
+    path: string;
+}
+type IframeToHostMessage = ReadyMessage | RefreshMessage | ResizeMessage | ToastMessage | NavigateMessage;
+interface SessionMessage {
+    source: typeof BRIDGE_SOURCE_HOST;
+    type: 'session';
+    token: string;
+    expiresAt: string;
+    context: SessionContext;
+    apiBaseUrl: string;
+}
+type HostToIframeMessage = SessionMessage;
+
+export { BRIDGE_PROTOCOL_VERSION, BRIDGE_SOURCE_HOST, BRIDGE_SOURCE_IFRAME, type HostToIframeMessage, type IframeToHostMessage, MESSAGE_NAMESPACE, type NavigateMessage, type ReadyMessage, type RefreshMessage, type ResizeMessage, type SessionContext, type SessionMessage, type ToastMessage };

package/dist/protocol.d.ts

@@ -0,0 +1,70 @@
+/**
+ * @usethrottle/extension-bridge — postMessage protocol types
+ *
+ * Both the extension iframe and the dashboard host import from this file
+ * to ensure both sides of the channel use identical message shapes.
+ */
+/** Discriminant prefix used in all bridge message payloads. */
+declare const MESSAGE_NAMESPACE: "throttle:bridge";
+/** `source` field set on every message sent BY the extension iframe. */
+declare const BRIDGE_SOURCE_IFRAME: "throttle-extension-bridge";
+/** `source` field set on every message sent BY the dashboard host. */
+declare const BRIDGE_SOURCE_HOST: "throttle-extension-host";
+/** Incremented when the handshake protocol changes in a breaking way. */
+declare const BRIDGE_PROTOCOL_VERSION: 1;
+interface SessionContext {
+    user: {
+        id: string;
+        email: string;
+    };
+    workspace: {
+        id: string;
+        slug: string;
+    };
+    application: {
+        id: string;
+        slug: string;
+    };
+    mode: 'test' | 'live';
+    installationId: string;
+    extensionId: string;
+    version: string;
+    role: string;
+    scopes: string[];
+}
+interface ReadyMessage {
+    source: typeof BRIDGE_SOURCE_IFRAME;
+    type: 'ready';
+}
+interface RefreshMessage {
+    source: typeof BRIDGE_SOURCE_IFRAME;
+    type: 'refresh';
+}
+interface ResizeMessage {
+    source: typeof BRIDGE_SOURCE_IFRAME;
+    type: 'resize';
+    height: number;
+}
+interface ToastMessage {
+    source: typeof BRIDGE_SOURCE_IFRAME;
+    type: 'toast';
+    message: string;
+    level?: 'info' | 'success' | 'warning' | 'error';
+}
+interface NavigateMessage {
+    source: typeof BRIDGE_SOURCE_IFRAME;
+    type: 'navigate';
+    path: string;
+}
+type IframeToHostMessage = ReadyMessage | RefreshMessage | ResizeMessage | ToastMessage | NavigateMessage;
+interface SessionMessage {
+    source: typeof BRIDGE_SOURCE_HOST;
+    type: 'session';
+    token: string;
+    expiresAt: string;
+    context: SessionContext;
+    apiBaseUrl: string;
+}
+type HostToIframeMessage = SessionMessage;
+
+export { BRIDGE_PROTOCOL_VERSION, BRIDGE_SOURCE_HOST, BRIDGE_SOURCE_IFRAME, type HostToIframeMessage, type IframeToHostMessage, MESSAGE_NAMESPACE, type NavigateMessage, type ReadyMessage, type RefreshMessage, type ResizeMessage, type SessionContext, type SessionMessage, type ToastMessage };

package/dist/protocol.js

@@ -0,0 +1,13 @@
+import {
+  BRIDGE_PROTOCOL_VERSION,
+  BRIDGE_SOURCE_HOST,
+  BRIDGE_SOURCE_IFRAME,
+  MESSAGE_NAMESPACE
+} from "./chunk-XBGZRIHG.js";
+export {
+  BRIDGE_PROTOCOL_VERSION,
+  BRIDGE_SOURCE_HOST,
+  BRIDGE_SOURCE_IFRAME,
+  MESSAGE_NAMESPACE
+};
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}