forgeframe 0.0.2 → 0.0.4

package/dist/forgeframe.js

@@ -26,19 +26,19 @@ const p = {
   RESIZE: "resize",
   /** Emitted when component receives focus */
   FOCUS: "focus"
-}, I = {
+}, T = {
   /** Default JSON serialization */
   JSON: "json",
   /** Base64 encoding for binary or large data */
   BASE64: "base64",
   /** Dot notation for nested objects (e.g., "a.b.c=value") */
   DOTIFY: "dotify"
-}, T = {
+}, $ = {
   /** Request message expecting a response */
   REQUEST: "request",
   /** Response to a previous request */
   RESPONSE: "response"
-}, h = {
+}, u = {
   /** Host initialization complete */
   INIT: "forgeframe_init",
   /** Props update from consumer to host */
@@ -63,8 +63,14 @@ const p = {
   CONSUMER_EXPORT: "forgeframe_consumer_export",
   /** Get sibling components request */
   GET_SIBLINGS: "forgeframe_get_siblings"
-}, N = "__forgeframe__", ye = "0.0.1";
-class we {
+}, F = "__forgeframe__", _e = (() => {
+  if ("0.0.4".trim().length === 0)
+    throw new Error(
+      "ForgeFrame VERSION injection is missing. Configure __FORGEFRAME_VERSION__ in build/test tooling."
+    );
+  return "0.0.4";
+})();
+class Ee {
   /**
    * Internal storage for event listeners mapped by event name.
    * @internal
@@ -215,14 +221,14 @@ class we {
     return this.listeners.get(e)?.size ?? 0;
   }
 }
-function Ne() {
+function He() {
   const s = Date.now().toString(36), e = Math.random().toString(36).slice(2, 11);
   return `${s}_${e}`;
 }
-function z() {
+function N() {
   return Math.random().toString(36).slice(2, 11);
 }
-class Fe {
+class Le {
   /**
    * Array of registered cleanup tasks awaiting execution.
    * @internal
@@ -340,13 +346,13 @@ class Fe {
     this.tasks = [], this.cleaned = !1;
   }
 }
-function _e() {
+function be() {
   let s, e;
   return { promise: new Promise((n, i) => {
     s = n, e = i;
   }), resolve: s, reject: e };
 }
-function $e(s, e, t = "Operation timed out") {
+function ke(s, e, t = "Operation timed out") {
   return new Promise((n, i) => {
     const r = setTimeout(() => {
       i(new Error(`${t} (${e}ms)`));
@@ -359,10 +365,10 @@ function $e(s, e, t = "Operation timed out") {
   });
 }
 const j = "forgeframe:";
-function M(s) {
+function W(s) {
   return j + JSON.stringify(s);
 }
-function ke(s) {
+function Ae(s) {
   if (typeof s != "string" || !s.startsWith(j)) return null;
   try {
     const e = s.slice(j.length), t = JSON.parse(e);
@@ -374,16 +380,16 @@ function ke(s) {
 function ce(s, e, t, n) {
   return {
     id: s,
-    type: T.REQUEST,
+    type: $.REQUEST,
     name: e,
     data: t,
     source: n
   };
 }
-function Le(s, e, t, n) {
+function Ue(s, e, t, n) {
   return {
     id: s,
-    type: T.RESPONSE,
+    type: $.RESPONSE,
     name: "response",
     data: e,
     source: t,
@@ -393,7 +399,19 @@ function Le(s, e, t, n) {
     } : void 0
   };
 }
-class Ee {
+function Me(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function We(s) {
+  if (!s.includes("*"))
+    return null;
+  const e = s.split("*").map((t) => Me(t)).join(".*");
+  return new RegExp(`^${e}$`);
+}
+function ze(s, e) {
+  return s.global || s.sticky ? new RegExp(s.source, s.flags.replace(/[gy]/g, "")).test(e) : s.test(e);
+}
+class Pe {
   /**
    * Creates a new Messenger instance.
    *
@@ -417,6 +435,10 @@ class Ee {
   allowedOrigins = /* @__PURE__ */ new Set();
   /** @internal */
   allowedOriginPatterns = [];
+  /** @internal */
+  wildcardPatternRegistry = /* @__PURE__ */ new Map();
+  /** @internal */
+  sourceUidRegistry = /* @__PURE__ */ new WeakMap();
   /**
    * Adds a trusted domain that can send messages to this messenger.
    *
@@ -425,8 +447,13 @@ class Ee {
   addTrustedDomain(e) {
     if (Array.isArray(e))
       for (const t of e)
-        this.allowedOrigins.add(t);
-    else e instanceof RegExp ? this.allowedOriginPatterns.push(e) : this.allowedOrigins.add(e);
+        this.addTrustedDomain(t);
+    else if (e instanceof RegExp)
+      this.allowedOriginPatterns.push(e);
+    else {
+      const t = We(e);
+      t ? this.wildcardPatternRegistry.has(e) || (this.wildcardPatternRegistry.set(e, t), this.allowedOriginPatterns.push(t)) : this.allowedOrigins.add(e);
+    }
   }
   /**
    * Removes a trusted domain from this messenger.
@@ -436,8 +463,15 @@ class Ee {
   removeTrustedDomain(e) {
     if (Array.isArray(e))
       for (const t of e)
-        this.allowedOrigins.delete(t);
-    else e instanceof RegExp ? this.allowedOriginPatterns = this.allowedOriginPatterns.filter((t) => t !== e) : this.allowedOrigins.delete(e);
+        this.removeTrustedDomain(t);
+    else if (e instanceof RegExp)
+      this.allowedOriginPatterns = this.allowedOriginPatterns.filter((t) => t !== e);
+    else {
+      const t = this.wildcardPatternRegistry.get(e);
+      t && (this.allowedOriginPatterns = this.allowedOriginPatterns.filter(
+        (n) => n !== t
+      ), this.wildcardPatternRegistry.delete(e)), this.allowedOrigins.delete(e);
+    }
   }
   /**
    * Checks if an origin is trusted.
@@ -450,10 +484,21 @@ class Ee {
     if (this.allowedOrigins.has(e))
       return !0;
     for (const t of this.allowedOriginPatterns)
-      if (t.test(e))
+      if (ze(t, e))
         return !0;
     return !1;
   }
+  /**
+   * Resolves source identity from the browser event context.
+   * @internal
+   */
+  resolveVerifiedSource(e, t, n) {
+    const i = e, r = this.sourceUidRegistry.get(i);
+    if (r)
+      return { uid: r, domain: t };
+    const o = n && typeof n.uid == "string" && n.uid.length > 0 ? n.uid : N();
+    return this.sourceUidRegistry.set(i, o), { uid: o, domain: t };
+  }
   /**
    * Sends a message and waits for a response.
    *
@@ -470,10 +515,10 @@ class Ee {
   async send(e, t, n, i, r = 1e4) {
     if (this.destroyed)
       throw new Error("Messenger has been destroyed");
-    const o = z(), a = ce(o, n, i, {
+    const o = N(), a = ce(o, n, i, {
       uid: this.uid,
       domain: this.domain
-    }), c = _e(), l = setTimeout(() => {
+    }), c = be(), l = setTimeout(() => {
       this.pending.delete(o), c.reject(new Error(`Message "${n}" timed out after ${r}ms`));
     }, r);
     this.pending.set(o, {
@@ -481,9 +526,9 @@ class Ee {
       timeout: l
     });
     try {
-      e.postMessage(M(a), t);
-    } catch (u) {
-      throw this.pending.delete(o), clearTimeout(l), u;
+      e.postMessage(W(a), t);
+    } catch (h) {
+      throw this.pending.delete(o), clearTimeout(l), h;
     }
     return c.promise;
   }
@@ -500,11 +545,11 @@ class Ee {
   post(e, t, n, i) {
     if (this.destroyed)
       throw new Error("Messenger has been destroyed");
-    const r = z(), o = ce(r, n, i, {
+    const r = N(), o = ce(r, n, i, {
       uid: this.uid,
       domain: this.domain
     });
-    e.postMessage(M(o), t);
+    e.postMessage(W(o), t);
   }
   /**
    * Registers a handler for incoming messages of a specific type.
@@ -526,8 +571,10 @@ class Ee {
     this.listener = (e) => {
       if (e.source === this.win || !this.isOriginTrusted(e.origin))
         return;
-      const t = ke(e.data);
-      t && this.handleMessage(t, e.source, e.origin);
+      const t = Ae(e.data);
+      if (!t) return;
+      const n = e.source;
+      !n || typeof n.postMessage != "function" || this.handleMessage(t, n, e.origin);
     }, this.win.addEventListener("message", this.listener);
   }
   /**
@@ -535,7 +582,7 @@ class Ee {
    * @internal
    */
   async handleMessage(e, t, n) {
-    if (e.type === T.RESPONSE) {
+    if (e.type === $.RESPONSE) {
       const i = this.pending.get(e.id);
       if (i)
         if (this.pending.delete(e.id), clearTimeout(i.timeout), e.error) {
@@ -545,24 +592,29 @@ class Ee {
           i.deferred.resolve(e.data);
       return;
     }
-    if (e.type === T.REQUEST) {
+    if (e.type === $.REQUEST) {
       const i = this.handlers.get(e.name);
       if (!i)
         return;
       let r, o;
       try {
-        r = await i(e.data, e.source);
+        const c = this.resolveVerifiedSource(
+          t,
+          n,
+          e.source
+        );
+        r = await i(e.data, c);
       } catch (c) {
         o = c instanceof Error ? c : new Error(String(c));
       }
-      const a = Le(
+      const a = Ue(
         e.id,
         r,
         { uid: this.uid, domain: this.domain },
         o
       );
       try {
-        t.postMessage(M(a), n);
+        t.postMessage(W(a), n);
       } catch {
       }
     }
@@ -623,7 +675,7 @@ class J {
       const i = this.localFunctions.keys().next().value;
       i && this.localFunctions.delete(i);
     }
-    const n = z();
+    const n = N();
     return this.localFunctions.set(n, e), this.currentBatchIds.add(n), {
       __type__: "function",
       __id__: n,
@@ -649,7 +701,7 @@ class J {
       const a = this.remoteFunctions.keys().next().value;
       a && this.remoteFunctions.delete(a);
     }
-    const o = async (...a) => this.messenger.send(t, n, h.CALL, {
+    const o = async (...a) => this.messenger.send(t, n, u.CALL, {
       id: e.__id__,
       args: a
     });
@@ -673,7 +725,7 @@ class J {
    */
   setupCallHandler() {
     this.messenger.on(
-      h.CALL,
+      u.CALL,
       async ({ id: e, args: t }) => {
         const n = this.localFunctions.get(e);
         if (!n)
@@ -762,58 +814,93 @@ function B(s, e, t = /* @__PURE__ */ new WeakSet()) {
   if (Array.isArray(s)) {
     if (t.has(s))
       throw new Error("Circular reference detected in props - arrays cannot contain circular references");
-    return t.add(s), s.map((n) => B(n, e, t));
+    t.add(s);
+    try {
+      return s.map((n) => B(n, e, t));
+    } finally {
+      t.delete(s);
+    }
   }
   if (typeof s == "object" && s !== null) {
     if (t.has(s))
       throw new Error("Circular reference detected in props - objects cannot contain circular references");
     t.add(s);
-    const n = {};
-    for (const [i, r] of Object.entries(s))
-      n[i] = B(r, e, t);
-    return n;
+    try {
+      const n = {};
+      for (const [i, r] of Object.entries(s))
+        n[i] = B(r, e, t);
+      return n;
+    } finally {
+      t.delete(s);
+    }
   }
   return s;
 }
-function q(s, e, t, n, i = /* @__PURE__ */ new WeakSet()) {
+function V(s, e, t, n, i = /* @__PURE__ */ new WeakSet()) {
   if (J.isFunctionRef(s))
     return e.deserialize(s, t, n);
   if (Array.isArray(s)) {
     if (i.has(s))
       throw new Error("Circular reference detected in serialized props");
-    return i.add(s), s.map(
-      (r) => q(r, e, t, n, i)
-    );
+    i.add(s);
+    try {
+      return s.map(
+        (r) => V(r, e, t, n, i)
+      );
+    } finally {
+      i.delete(s);
+    }
   }
   if (typeof s == "object" && s !== null) {
     if (i.has(s))
       throw new Error("Circular reference detected in serialized props");
     i.add(s);
-    const r = {};
-    for (const [o, a] of Object.entries(s))
-      r[o] = q(a, e, t, n, i);
-    return r;
+    try {
+      const r = {};
+      for (const [o, a] of Object.entries(s))
+        r[o] = V(a, e, t, n, i);
+      return r;
+    } finally {
+      i.delete(s);
+    }
   }
   return s;
 }
-function V(s = window) {
+function je(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function Be(s) {
+  if (!s.includes("*"))
+    return null;
+  const e = s.split("*").map((t) => je(t)).join(".*");
+  return new RegExp(`^${e}$`);
+}
+function Ve(s, e) {
+  return s.global || s.sticky ? new RegExp(s.source, s.flags.replace(/[gy]/g, "")).test(e) : s.test(e);
+}
+function q(s = window) {
   try {
     return s.location.origin;
   } catch {
     return "";
   }
 }
-function be(s, e = window) {
+function Re(s, e = window) {
   try {
     return s.location.origin === e.location.origin;
   } catch {
     return !1;
   }
 }
-function L(s, e) {
-  return typeof s == "string" ? s === "*" ? !0 : s === e : s instanceof RegExp ? s.test(e) : Array.isArray(s) ? s.some((t) => L(t, e)) : !1;
+function D(s, e) {
+  if (typeof s == "string") {
+    if (s === "*") return !0;
+    const t = Be(s);
+    return t ? t.test(e) : s === e;
+  }
+  return s instanceof RegExp ? Ve(s, e) : Array.isArray(s) ? s.some((t) => D(t, e)) : !1;
 }
-function Pe(s) {
+function Oe(s) {
   if (!s) return !0;
   try {
     return s.closed;
@@ -821,14 +908,14 @@ function Pe(s) {
     return !0;
   }
 }
-function He(s = window) {
+function qe(s = window) {
   try {
     return s.opener;
   } catch {
     return null;
   }
 }
-function Ae(s = window) {
+function Je(s = window) {
   try {
     const e = s.parent;
     return e && e !== s ? e : null;
@@ -836,54 +923,54 @@ function Ae(s = window) {
     return null;
   }
 }
-function Ue(s = window) {
+function Xe(s = window) {
   try {
     return s.parent !== s;
   } catch {
     return !0;
   }
 }
-function Me(s = window) {
+function Ke(s = window) {
   try {
     return s.opener !== null && s.opener !== void 0;
   } catch {
     return !1;
   }
 }
-const he = 32 * 1024;
-function We(s) {
-  const e = ze(s);
-  return `${N}${e}`;
+const ue = 32 * 1024;
+function Ye(s) {
+  const e = Ge(s);
+  return `${F}${e}`;
 }
-function Oe(s) {
-  if (!s || !s.startsWith(N))
+function xe(s) {
+  if (!s || !s.startsWith(F))
     return null;
-  const e = s.slice(N.length);
-  return je(e);
+  const e = s.slice(F.length);
+  return Ze(e);
 }
 function X(s = window) {
   try {
-    return s.name.startsWith(N);
+    return s.name.startsWith(F);
   } catch {
     return !1;
   }
 }
-function W(s, e = window) {
-  return Oe(e.name)?.tag === s;
+function z(s, e = window) {
+  return xe(e.name)?.tag === s;
 }
-function ze(s) {
+function Ge(s) {
   try {
     const e = JSON.stringify(s), t = btoa(encodeURIComponent(e)), n = new Blob([t]).size;
-    if (n > he)
+    if (n > ue)
       throw new Error(
-        `Payload size (${Math.round(n / 1024)}KB) exceeds maximum allowed size (${he / 1024}KB). Consider reducing the amount of data passed via props.`
+        `Payload size (${Math.round(n / 1024)}KB) exceeds maximum allowed size (${ue / 1024}KB). Consider reducing the amount of data passed via props.`
       );
     return t;
   } catch (e) {
     throw e instanceof Error && e.message.includes("Payload size") ? e : new Error(`Failed to encode payload: ${e}`);
   }
 }
-function je(s) {
+function Ze(s) {
   try {
     const e = decodeURIComponent(atob(s));
     return JSON.parse(e);
@@ -891,11 +978,11 @@ function je(s) {
     return null;
   }
 }
-function Be(s) {
+function Qe(s) {
   return {
     uid: s.uid,
     tag: s.tag,
-    version: ye,
+    version: _e,
     context: s.context,
     consumerDomain: s.consumerDomain,
     props: s.props,
@@ -903,27 +990,30 @@ function Be(s) {
     children: s.children
   };
 }
-function qe(s = window) {
-  return Oe(s.name);
+function et(s = window) {
+  return xe(s.name);
 }
-const ue = 100, E = /* @__PURE__ */ new Map();
-function Ve() {
+const he = 100, E = /* @__PURE__ */ new Map();
+function tt() {
   const s = [];
   for (const [e, t] of E.entries())
-    Pe(t) && s.push(e);
+    Oe(t) && s.push(e);
   for (const e of s)
     E.delete(e);
 }
-function Je(s, e) {
-  if (E.size >= ue && Ve(), E.size >= ue) {
+function st(s, e) {
+  if (E.size >= he && tt(), E.size >= he) {
     const t = E.keys().next().value;
     t && E.delete(t);
   }
   E.set(s, e);
 }
-function Xe(s) {
+function nt(s) {
   E.delete(s);
 }
+function it(s, e) {
+  return s.global || s.sticky ? new RegExp(s.source, s.flags.replace(/[gy]/g, "")).test(e) : s.test(e);
+}
 class y {
   /** @internal */
   _optional = !1;
@@ -1017,7 +1107,7 @@ class K extends y {
       issues: [
         { message: `String must be at most ${this._maxLength} characters` }
       ]
-    } : this._pattern && !this._pattern.test(t) ? {
+    } : this._pattern && !it(this._pattern, t) ? {
       issues: [
         {
           message: this._patternMessage || `String must match pattern ${this._pattern}`
@@ -1247,7 +1337,7 @@ class Y extends y {
     return e._max = -Number.MIN_VALUE, e;
   }
 }
-class Z extends y {
+class G extends y {
   /** @internal */
   _validate(e) {
     return typeof e != "boolean" ? {
@@ -1256,11 +1346,11 @@ class Z extends y {
   }
   /** @internal */
   _clone() {
-    const e = new Z();
+    const e = new G();
     return e._optional = this._optional, e._nullable = this._nullable, e._default = this._default, e;
   }
 }
-class G extends y {
+class Z extends y {
   /** @internal */
   _validate(e) {
     return typeof e != "function" ? {
@@ -1269,11 +1359,11 @@ class G extends y {
   }
   /** @internal */
   _clone() {
-    const e = new G();
+    const e = new Z();
     return e._optional = this._optional, e._nullable = this._nullable, e._default = this._default, e;
   }
 }
-class F extends y {
+class H extends y {
   /** @internal */
   _itemSchema;
   /** @internal */
@@ -1321,7 +1411,7 @@ class F extends y {
   }
   /** @internal */
   _clone() {
-    const e = new F();
+    const e = new H();
     return e._optional = this._optional, e._nullable = this._nullable, e._default = this._default, e._itemSchema = this._itemSchema, e._minLength = this._minLength, e._maxLength = this._maxLength, e;
   }
   /**
@@ -1337,7 +1427,7 @@ class F extends y {
    * ```
    */
   of(e) {
-    const t = new F();
+    const t = new H();
     return t._optional = this._optional, t._nullable = this._nullable, t._itemSchema = e, t._minLength = this._minLength, t._maxLength = this._maxLength, t;
   }
   /**
@@ -1380,7 +1470,7 @@ class F extends y {
     return this.min(1);
   }
 }
-class $ extends y {
+class L extends y {
   /** @internal */
   _shape;
   /** @internal */
@@ -1429,7 +1519,7 @@ class $ extends y {
   }
   /** @internal */
   _clone() {
-    const e = new $();
+    const e = new L();
     return e._optional = this._optional, e._nullable = this._nullable, e._default = this._default, e._shape = this._shape, e._strict = this._strict, e;
   }
   /**
@@ -1447,7 +1537,7 @@ class $ extends y {
    * ```
    */
   shape(e) {
-    const t = new $();
+    const t = new L();
     return t._optional = this._optional, t._nullable = this._nullable, t._shape = e, t._strict = this._strict, t;
   }
   /**
@@ -1552,7 +1642,7 @@ const d = {
    * prop.boolean().default(false)
    * ```
    */
-  boolean: () => new Z(),
+  boolean: () => new G(),
   /**
    * Creates a function schema.
    *
@@ -1565,7 +1655,7 @@ const d = {
    * prop.function<(data: { id: string }) => Promise<void>>()
    * ```
    */
-  function: () => new G(),
+  function: () => new Z(),
   /**
    * Creates an array schema.
    *
@@ -1578,7 +1668,7 @@ const d = {
    * prop.array().of(prop.number()).min(1).max(10)
    * ```
    */
-  array: () => new F(),
+  array: () => new H(),
   /**
    * Creates an object schema.
    *
@@ -1594,7 +1684,7 @@ const d = {
    * prop.object().shape({ key: prop.string() }).strict()
    * ```
    */
-  object: () => new $(),
+  object: () => new L(),
   /**
    * Creates a literal schema for exact value matching.
    *
@@ -1632,7 +1722,7 @@ const d = {
    * ```
    */
   any: () => new te()
-}, R = {
+}, P = {
   uid: {
     schema: d.string().optional(),
     sendToHost: !0
@@ -1700,54 +1790,62 @@ const d = {
   }
 };
 function b(s) {
-  return typeof s == "object" && s !== null && "~standard" in s && typeof s["~standard"] == "object" && s["~standard"] !== null && s["~standard"].version === 1 && typeof s["~standard"].validate == "function";
+  return typeof s == "object" && s !== null && "~standard" in s && typeof s["~standard"] == "object" && s["~standard"] !== null && s["~standard"].version === 1 && typeof s["~standard"].vendor == "string" && typeof s["~standard"].validate == "function";
 }
-function Ke(s, e, t) {
+function rt(s, e, t) {
   const n = s["~standard"].validate(e);
   if (n instanceof Promise)
     throw new Error(
       `Prop "${t}" uses an async schema. ForgeFrame only supports synchronous schema validation. Please use a synchronous schema or remove async operations (like database lookups) from your schema definition.`
     );
   if (n.issues) {
-    const i = n.issues.map((r) => `${Ye(r.path, t)}: ${r.message}`);
+    const i = n.issues.map((r) => `${ot(r.path, t)}: ${r.message}`);
     throw new Error(`Validation failed: ${i.join("; ")}`);
   }
   return n.value;
 }
-function Ye(s, e) {
+function ot(s, e) {
   if (!s || s.length === 0)
     return e;
-  const t = s.map((n) => typeof n == "object" && n !== null && "key" in n ? String(n.key) : String(n));
+  const t = s.map((n) => {
+    if (typeof n == "object" && n !== null) {
+      if ("key" in n && n.key !== void 0)
+        return String(n.key);
+      if ("index" in n && typeof n.index == "number")
+        return String(n.index);
+    }
+    return String(n);
+  });
   return `${e}.${t.join(".")}`;
 }
 function de(s, e, t) {
   const n = {
-    ...R,
+    ...P,
     ...e
   }, i = {};
   for (const [r, o] of Object.entries(n)) {
     const c = b(o) ? { schema: o } : o;
     let l;
-    const u = c.alias, w = r in s, _ = u && u in s;
+    const h = c.alias, w = r in s, _ = h && h in s;
     if (w)
       l = s[r];
     else if (_)
-      l = s[u];
+      l = s[h];
     else if (c.value)
       l = c.value(t);
     else if (c.default !== void 0)
       l = typeof c.default == "function" ? c.default(t) : c.default;
     else if (c.schema && b(c.schema)) {
-      const P = c.schema["~standard"].validate(void 0);
-      !(P instanceof Promise) && !P.issues && (l = P.value);
+      const R = c.schema["~standard"].validate(void 0);
+      !(R instanceof Promise) && !R.issues && (l = R.value);
     }
     l !== void 0 && c.decorate && (l = c.decorate({ value: l, props: i })), i[r] = l;
   }
   return i;
 }
-function Ze(s, e) {
+function fe(s, e) {
   const t = {
-    ...R,
+    ...P,
     ...e
   };
   for (const [n, i] of Object.entries(t)) {
@@ -1756,49 +1854,63 @@ function Ze(s, e) {
     if (o.required && a === void 0)
       throw new Error(`Prop "${n}" is required but was not provided`);
     if (o.schema && b(o.schema))
-      (a !== void 0 || r) && (a = Ke(o.schema, a, n), s[n] = a);
+      (a !== void 0 || r) && (a = rt(o.schema, a, n), s[n] = a);
     else if (a === void 0)
       continue;
     o.validate && o.validate({ value: a, props: s });
   }
 }
-function fe(s, e, t, n) {
+function pe(s, e, t, n) {
   const i = {
-    ...R,
+    ...P,
     ...e
   }, r = {};
   for (const [o, a] of Object.entries(i)) {
-    const l = b(a) ? { schema: a } : a, u = s[o];
+    const l = b(a) ? { schema: a } : a, h = s[o];
     if (l.sendToHost === !1 || l.sameDomain && !n) continue;
     if (l.trustedDomains) {
       const _ = l.trustedDomains;
-      if (!L(_, t)) continue;
+      if (!D(_, t)) continue;
     }
-    let w = u;
-    l.hostDecorate && u !== void 0 && (w = l.hostDecorate({ value: u, props: s })), r[o] = w;
+    let w = h;
+    l.hostDecorate && h !== void 0 && (w = l.hostDecorate({ value: h, props: s })), r[o] = w;
   }
   return r;
 }
-function Ge(s, e) {
+function at(s, e) {
   const t = new URLSearchParams(), n = {
-    ...R,
+    ...P,
     ...e
   };
   for (const [i, r] of Object.entries(n)) {
     const a = b(r) ? { schema: r } : r, c = s[i];
     if (c === void 0 || typeof c == "function" || !a.queryParam) continue;
     const l = typeof a.queryParam == "string" ? a.queryParam : i;
-    let u;
-    typeof a.queryParam == "function" ? u = a.queryParam({ value: c }) : typeof c == "object" ? u = JSON.stringify(c) : u = String(c), t.set(l, u);
+    let h;
+    typeof a.queryParam == "function" ? h = a.queryParam({ value: c }) : typeof c == "object" ? h = JSON.stringify(c) : h = String(c), t.set(l, h);
+  }
+  return t;
+}
+function ct(s, e) {
+  const t = new URLSearchParams(), n = {
+    ...P,
+    ...e
+  };
+  for (const [i, r] of Object.entries(n)) {
+    const a = b(r) ? { schema: r } : r, c = s[i];
+    if (c === void 0 || typeof c == "function" || !a.bodyParam) continue;
+    const l = typeof a.bodyParam == "string" ? a.bodyParam : i;
+    let h;
+    typeof a.bodyParam == "function" ? h = a.bodyParam({ value: c }) : typeof c == "object" ? h = JSON.stringify(c) : h = String(c), t.set(l, h);
   }
   return t;
 }
-function Re(s, e = "") {
+function Se(s, e = "") {
   const t = [];
   for (const [n, i] of Object.entries(s)) {
     const r = e ? `${e}.${n}` : n;
     if (i !== null && typeof i == "object" && !Array.isArray(i))
-      t.push(Re(i, r));
+      t.push(Se(i, r));
     else {
       const o = encodeURIComponent(JSON.stringify(i));
       t.push(`${r}=${o}`);
@@ -1806,7 +1918,7 @@ function Re(s, e = "") {
   }
   return t.filter(Boolean).join("&");
 }
-function Qe(s) {
+function lt(s) {
   const e = {};
   if (!s) return e;
   const t = s.split("&");
@@ -1822,54 +1934,54 @@ function Qe(s) {
     const a = i.split(".");
     let c = e;
     for (let l = 0; l < a.length - 1; l++) {
-      const u = a[l];
-      (!(u in c) || typeof c[u] != "object") && (c[u] = {}), c = c[u];
+      const h = a[l];
+      (!(h in c) || typeof c[h] != "object") && (c[h] = {}), c = c[h];
     }
     c[a[a.length - 1]] = o;
   }
   return e;
 }
-function et(s) {
+function ut(s) {
   return typeof s == "object" && s !== null && s.__type__ === "dotify" && typeof s.__value__ == "string";
 }
-function pe(s, e, t) {
+function me(s, e, t) {
   const n = {
-    ...R,
+    ...P,
     ...e
   }, i = {};
   for (const [r, o] of Object.entries(s)) {
     if (o === void 0) continue;
     const a = n[r];
-    i[r] = tt(o, a, t);
+    i[r] = ht(o, a, t);
   }
   return i;
 }
-function tt(s, e, t) {
+function ht(s, e, t) {
   if (typeof s == "function")
     return t.serialize(s);
-  const n = e?.serialization ?? I.JSON;
-  if (n === I.BASE64 && typeof s == "object") {
+  const n = e?.serialization ?? T.JSON;
+  if (n === T.BASE64 && typeof s == "object") {
     const i = JSON.stringify(s);
     return {
       __type__: "base64",
       __value__: btoa(encodeURIComponent(i))
     };
   }
-  return n === I.DOTIFY && typeof s == "object" && s !== null && !Array.isArray(s) ? {
+  return n === T.DOTIFY && typeof s == "object" && s !== null && !Array.isArray(s) ? {
     __type__: "dotify",
-    __value__: Re(s)
+    __value__: Se(s)
   } : B(s, t);
 }
-function me(s, e, t, n, i, r) {
+function ge(s, e, t, n, i, r) {
   const o = {
-    ...R,
+    ...P,
     ...e
   }, a = {};
   for (const [c, l] of Object.entries(s)) {
-    const u = o[c];
-    a[c] = st(
+    const h = o[c];
+    a[c] = dt(
       l,
-      u,
+      h,
       t,
       n,
       i,
@@ -1878,23 +1990,23 @@ function me(s, e, t, n, i, r) {
   }
   return a;
 }
-function st(s, e, t, n, i, r) {
-  if (nt(s))
+function dt(s, e, t, n, i, r) {
+  if (ft(s))
     try {
       const o = decodeURIComponent(atob(s.__value__));
       return JSON.parse(o);
     } catch {
       return s;
     }
-  if (et(s))
+  if (ut(s))
     try {
-      return Qe(s.__value__);
+      return lt(s.__value__);
     } catch {
       return s;
     }
-  return q(s, n, i, r);
+  return V(s, n, i, r);
 }
-function nt(s) {
+function ft(s) {
   return typeof s == "object" && s !== null && s.__type__ === "base64" && typeof s.__value__ == "string";
 }
 function O(s, e = "100%") {
@@ -1906,36 +2018,36 @@ function k(s, e) {
   const t = parseInt(s, 10);
   return isNaN(t) ? e : t;
 }
-function it(s) {
+function pt(s) {
   try {
     s.src = "about:blank", s.parentNode?.removeChild(s);
   } catch {
   }
 }
-function rt(s, e) {
-  ct(s, e);
+function mt(s, e) {
+  wt(s, e);
 }
-function ot(s) {
+function gt(s) {
   s.style.display = "", s.style.visibility = "visible";
 }
-function ge(s) {
+function ye(s) {
   s.style.display = "none", s.style.visibility = "hidden";
 }
-function at(s) {
+function yt(s) {
   try {
     s.focus(), s.contentWindow?.focus();
   } catch {
   }
 }
-function ct(s, e) {
+function wt(s, e) {
   e.width !== void 0 && (s.style.width = O(e.width)), e.height !== void 0 && (s.style.height = O(e.height));
 }
-class xe extends Error {
+class ve extends Error {
   constructor(e = "Popup blocked by browser") {
     super(e), this.name = "PopupOpenError";
   }
 }
-function lt(s) {
+function _t(s) {
   const { url: e, name: t, dimensions: n } = s, i = k(n.width, 500), r = k(n.height, 500), o = Math.floor(window.screenX + (window.outerWidth - i) / 2), a = Math.floor(window.screenY + (window.outerHeight - r) / 2), c = [
     `width=${i}`,
     `height=${r}`,
@@ -1949,23 +2061,23 @@ function lt(s) {
     "resizable=yes",
     "scrollbars=yes"
   ].join(","), l = window.open(e, t, c);
-  if (!l || dt(l))
-    throw new xe();
+  if (!l || Pt(l))
+    throw new ve();
   return l;
 }
-function ht(s) {
+function Et(s) {
   try {
     s.closed || s.close();
   } catch {
   }
 }
-function ut(s) {
+function bt(s) {
   try {
     s.closed || s.focus();
   } catch {
   }
 }
-function dt(s) {
+function Pt(s) {
   if (!s) return !0;
   try {
     return !!(s.closed || s.innerHeight === 0 || s.innerWidth === 0);
@@ -1973,7 +2085,7 @@ function dt(s) {
     return !0;
   }
 }
-function ft(s, e, t = {}) {
+function Rt(s, e, t = {}) {
   const {
     initialInterval: n = 100,
     // Start fast to catch quick closes
@@ -1989,7 +2101,7 @@ function ft(s, e, t = {}) {
     } catch (w) {
       console.error("Error in popup close callback:", w);
     }
-  }, u = () => {
+  }, h = () => {
     if (!c) {
       try {
         if (s.closed) {
@@ -2000,14 +2112,14 @@ function ft(s, e, t = {}) {
         l();
         return;
       }
-      o = Math.min(o * r, i), a = setTimeout(u, o);
+      o = Math.min(o * r, i), a = setTimeout(h, o);
     }
   };
-  return a = setTimeout(u, o), () => {
+  return a = setTimeout(h, o), () => {
     c = !0, clearTimeout(a);
   };
 }
-function pt(s, e) {
+function Ot(s, e) {
   try {
     const t = k(e.width, s.outerWidth), n = k(
       e.height,
@@ -2017,7 +2129,23 @@ function pt(s, e) {
   } catch {
   }
 }
-function mt(s) {
+const we = "forgeframe-spinner-style";
+function xt(s, e) {
+  const t = s.getElementById(we);
+  if (t) {
+    const i = t.getAttribute("nonce");
+    if (!e || i === e)
+      return;
+    t.remove();
+  }
+  const n = s.createElement("style");
+  n.id = we, e && n.setAttribute("nonce", e), n.textContent = `
+    @keyframes forgeframe-spin {
+      to { transform: rotate(360deg); }
+    }
+  `, (s.head ?? s.documentElement).appendChild(n);
+}
+function St(s) {
   const { doc: e, dimensions: t, uid: n, tag: i } = s, r = e.createElement("div");
   return r.id = `forgeframe-container-${n}`, r.setAttribute("data-forgeframe-tag", i), Object.assign(r.style, {
     display: "inline-block",
@@ -2027,8 +2155,10 @@ function mt(s) {
     overflow: "hidden"
   }), r;
 }
-function gt(s) {
-  const { doc: e, dimensions: t, cspNonce: n } = s, i = e.createElement("div");
+function vt(s) {
+  const { doc: e, dimensions: t, cspNonce: n } = s;
+  xt(e, n);
+  const i = e.createElement("div");
   Object.assign(i.style, {
     display: "flex",
     alignItems: "center",
@@ -2042,33 +2172,27 @@ function gt(s) {
     zIndex: "100"
   });
   const r = e.createElement("div");
-  Object.assign(r.style, {
+  return Object.assign(r.style, {
     width: "40px",
     height: "40px",
     border: "3px solid #e0e0e0",
     borderTopColor: "#3498db",
     borderRadius: "50%",
     animation: "forgeframe-spin 1s linear infinite"
-  });
-  const o = e.createElement("style");
-  return n && o.setAttribute("nonce", n), o.textContent = `
-    @keyframes forgeframe-spin {
-      to { transform: rotate(360deg); }
-    }
-  `, i.appendChild(o), i.appendChild(r), i;
+  }), i.appendChild(r), i;
 }
-function yt(s, e = 200) {
+function Dt(s, e = 200) {
   return new Promise((t) => {
     s.style.opacity = "0", s.style.transition = `opacity ${e}ms ease-in`, s.offsetHeight, s.style.opacity = "1", setTimeout(t, e);
   });
 }
-function wt(s, e = 200) {
+function It(s, e = 200) {
   return new Promise((t) => {
     s.style.transition = `opacity ${e}ms ease-out`, s.style.opacity = "0", setTimeout(t, e);
   });
 }
-async function _t(s, e, t) {
-  e && (await wt(e, 150), e.remove()), t.style.display = "", t.style.visibility = "visible", t.style.opacity = "0", await yt(t, 150);
+async function Ct(s, e, t) {
+  e && (await It(e, 150), e.remove()), t.style.display = "", t.style.visibility = "visible", t.style.opacity = "0", await Dt(t, 150);
 }
 class se {
   /** Event emitter for lifecycle events. */
@@ -2115,6 +2239,8 @@ class se {
   /** @internal */
   initPromise = null;
   /** @internal */
+  hostInitialized = !1;
+  /** @internal */
   rendered = !1;
   /** @internal */
   destroyed = !1;
@@ -2125,11 +2251,11 @@ class se {
    * @param props - Initial props to pass to the component
    */
   constructor(e, t = {}) {
-    this._uid = Ne(), this.options = this.normalizeOptions(e), this.context = this.options.defaultContext, this.event = new we(), this.cleanup = new Fe();
+    this._uid = He(), this.options = this.normalizeOptions(e), this.context = this.options.defaultContext, this.event = new Ee(), this.cleanup = new Le();
     const n = this.createPropContext();
     this.props = de(t, this.options.props, n);
     const i = this.buildTrustedDomains();
-    this.messenger = new Ee(this.uid, window, V(), i), this.bridge = new J(this.messenger), this.setupMessageHandlers(), this.setupCleanup();
+    this.messenger = new Pe(this.uid, window, q(), i), this.bridge = new J(this.messenger), this.setupMessageHandlers(), this.setupCleanup();
   }
   /**
    * Builds the list of trusted domains for messenger communication.
@@ -2137,15 +2263,8 @@ class se {
    */
   buildTrustedDomains() {
     const e = [], t = this.resolveUrlOrigin(this.resolveUrl());
-    if (t && (e.push(t), this.dynamicUrlTrustedOrigin = t), this.options.domain) {
-      if (typeof this.options.domain == "string")
-        e.push(this.options.domain);
-      else if (Array.isArray(this.options.domain))
-        e.push(...this.options.domain);
-      else if (this.options.domain instanceof RegExp)
-        return this.options.domain;
-    }
-    return e.length > 0 ? e : void 0;
+    if (t && (e.push(t), this.dynamicUrlTrustedOrigin = t), this.options.domain && (typeof this.options.domain == "string" ? e.push(this.options.domain) : Array.isArray(this.options.domain) ? e.push(...this.options.domain) : this.options.domain instanceof RegExp && e.push(this.options.domain)), e.length !== 0)
+      return e.length === 1 ? e[0] : e;
   }
   /**
    * Renders the component into a DOM container.
@@ -2170,11 +2289,18 @@ class se {
       throw new Error("Component has been destroyed");
     if (this.rendered)
       throw new Error("Component has already been rendered");
-    this.context = t ?? this.options.defaultContext, this.checkEligibility(), Ze(this.props, this.options.props), this.options.validate?.({ props: this.props }), this.container = this.resolveContainer(e), this.event.emit(f.PRERENDER), this.callPropCallback("onPrerender"), await this.prerender(), this.event.emit(f.PRERENDERED), this.callPropCallback("onPrerendered"), this.event.emit(f.RENDER), this.callPropCallback("onRender"), await this.open(), await this.waitForHost(), this.context === p.IFRAME && this.iframe && this.prerenderElement && (await _t(
-      this.container,
-      this.prerenderElement,
-      this.iframe
-    ), this.prerenderElement = null), this.rendered = !0, this.event.emit(f.RENDERED), this.callPropCallback("onRendered"), this.event.emit(f.DISPLAY), this.callPropCallback("onDisplay");
+    this.context = t ?? this.options.defaultContext, this.checkEligibility(), fe(this.props, this.options.props), this.options.validate?.({ props: this.props }), this.container = this.resolveContainer(e), this.event.emit(f.PRERENDER), this.callPropCallback("onPrerender"), await this.prerender(), this.event.emit(f.PRERENDERED), this.callPropCallback("onPrerendered"), this.event.emit(f.RENDER), this.callPropCallback("onRender");
+    try {
+      await this.open(), await this.waitForHost(), this.context === p.IFRAME && this.iframe && this.prerenderElement && (await Ct(
+        this.container,
+        this.prerenderElement,
+        this.iframe
+      ), this.prerenderElement = null);
+    } catch (n) {
+      throw await this.destroy().catch(() => {
+      }), n;
+    }
+    this.rendered = !0, this.event.emit(f.RENDERED), this.callPropCallback("onRendered"), this.event.emit(f.DISPLAY), this.callPropCallback("onDisplay");
   }
   /**
    * Renders the component into a container in a different window.
@@ -2206,7 +2332,7 @@ class se {
    * For iframes, focuses the iframe element. For popups, brings the window to front.
    */
   async focus() {
-    this.context === p.IFRAME && this.iframe ? at(this.iframe) : this.context === p.POPUP && this.hostWindow && ut(this.hostWindow), this.event.emit(f.FOCUS), this.callPropCallback("onFocus");
+    this.context === p.IFRAME && this.iframe ? yt(this.iframe) : this.context === p.POPUP && this.hostWindow && bt(this.hostWindow), this.event.emit(f.FOCUS), this.callPropCallback("onFocus");
   }
   /**
    * Resizes the component to the specified dimensions.
@@ -2214,7 +2340,7 @@ class se {
    * @param dimensions - New width and height for the component
    */
   async resize(e) {
-    this.context === p.IFRAME && this.iframe ? rt(this.iframe, e) : this.context === p.POPUP && this.hostWindow && pt(this.hostWindow, e), this.event.emit(f.RESIZE, e), this.callPropCallback("onResize", e);
+    this.context === p.IFRAME && this.iframe ? mt(this.iframe, e) : this.context === p.POPUP && this.hostWindow && Ot(this.hostWindow, e), this.event.emit(f.RESIZE, e), this.callPropCallback("onResize", e);
   }
   /**
    * Shows the component if hidden.
@@ -2223,7 +2349,7 @@ class se {
    * Only applicable to iframe context.
    */
   async show() {
-    this.context === p.IFRAME && this.iframe && ot(this.iframe);
+    this.context === p.IFRAME && this.iframe && gt(this.iframe);
   }
   /**
    * Hides the component.
@@ -2232,13 +2358,13 @@ class se {
    * Only applicable to iframe context.
    */
   async hide() {
-    this.context === p.IFRAME && this.iframe && ge(this.iframe);
+    this.context === p.IFRAME && this.iframe && ye(this.iframe);
   }
   /**
    * Updates the component props and sends them to the host.
    *
    * @remarks
-   * Props are normalized and serialized before being sent to the host window.
+   * Props are normalized and validated before being sent to the host window.
    *
    * @param newProps - Partial props object to merge with existing props
    */
@@ -2248,19 +2374,19 @@ class se {
       this.options.props,
       t
     );
-    this.options.validate?.({ props: n });
+    fe(n, this.options.props), this.options.validate?.({ props: n });
     const i = this.resolveUrl(n), r = this.resolveUrlOrigin(i);
     if (this.rendered && this.openedHostDomain && r && r !== this.openedHostDomain)
       throw new Error(
         `Cannot change component URL origin after render (from "${this.openedHostDomain}" to "${r}")`
       );
-    if (this.props = n, this.rendered || this.syncTrustedDomainForUrl(i), this.hostWindow && !Pe(this.hostWindow)) {
-      const o = this.openedHostDomain ?? this.getHostDomain(), a = fe(
+    if (this.props = n, this.rendered || this.syncTrustedDomainForUrl(i), this.hostWindow && !Oe(this.hostWindow)) {
+      const o = this.openedHostDomain ?? this.getHostDomain(), a = pe(
         n,
         this.options.props,
         o,
-        be(this.hostWindow)
-      ), c = pe(
+        Re(this.hostWindow)
+      ), c = me(
         a,
         this.options.props,
         this.bridge
@@ -2268,7 +2394,7 @@ class se {
       await this.messenger.send(
         this.hostWindow,
         o,
-        h.PROPS,
+        u.PROPS,
         c
       );
     }
@@ -2334,7 +2460,7 @@ class se {
    * @internal
    */
   isExplicitDomainTrust(e) {
-    return !this.options.domain || this.options.domain instanceof RegExp ? !1 : typeof this.options.domain == "string" ? this.options.domain === e : this.options.domain.includes(e);
+    return this.options.domain ? D(this.options.domain, e) : !1;
   }
   /**
    * Ensures the messenger trusts the origin for a resolved host URL.
@@ -2394,10 +2520,10 @@ class se {
    */
   async prerender() {
     if (!this.container) return;
-    const e = this.options.prerenderTemplate ?? gt, t = this.options.containerTemplate ?? mt, n = this.resolveDimensions(), i = this.props.cspNonce;
+    const e = this.options.prerenderTemplate ?? vt, t = this.options.containerTemplate ?? St, n = this.resolveDimensions(), i = this.props.cspNonce;
     if (this.context === p.IFRAME) {
       const c = this.buildWindowName();
-      this.iframe = this.createIframeElement(c), ge(this.iframe);
+      this.iframe = this.createIframeElement(c), ye(this.iframe);
     }
     const r = {
       uid: this.uid,
@@ -2460,60 +2586,88 @@ class se {
   async open() {
     const e = this.resolveUrl();
     this.syncTrustedDomainForUrl(e), this.openedHostDomain = this.resolveUrlOrigin(e);
-    const t = this.buildUrl(e);
+    const t = this.buildUrl(e), n = this.buildBodyParams(), i = n.toString().length > 0;
     if (this.context === p.IFRAME) {
       if (!this.iframe)
         throw new Error("Iframe not created during prerender");
-      this.iframe.src = t, this.hostWindow = this.iframe.contentWindow;
+      i ? this.submitBodyForm(this.iframe.name, t, n) : this.iframe.src = t, this.hostWindow = this.iframe.contentWindow;
     } else {
-      const n = this.buildWindowName();
-      this.hostWindow = lt({
-        url: t,
-        name: n,
+      const r = this.buildWindowName();
+      this.hostWindow = _t({
+        url: i ? "about:blank" : t,
+        name: r,
         dimensions: this.resolveDimensions()
+      }), i && this.submitBodyForm(r, t, n);
+      const o = Rt(this.hostWindow, () => {
+        this.close();
       });
-      const i = ft(this.hostWindow, () => {
-        this.destroy();
-      });
-      this.cleanup.register(i);
+      this.cleanup.register(o);
     }
-    this.hostWindow && Je(this.uid, this.hostWindow);
+    this.hostWindow && st(this.uid, this.hostWindow);
   }
   /**
    * Builds the URL for the host window including query parameters.
    * @internal
    */
   buildUrl(e = this.resolveUrl()) {
-    const n = Ge(this.props, this.options.props).toString();
+    const n = at(this.props, this.options.props).toString();
     if (!n) return e;
     const i = e.includes("?") ? "&" : "?";
     return `${e}${i}${n}`;
   }
+  /**
+   * Builds POST body parameters from props marked with bodyParam.
+   * @internal
+   */
+  buildBodyParams() {
+    return ct(this.props, this.options.props);
+  }
+  /**
+   * Submits a hidden form to navigate a target window via POST.
+   * @internal
+   */
+  submitBodyForm(e, t, n) {
+    const i = this.container?.ownerDocument ?? document, r = i.body ?? i.documentElement;
+    if (!r)
+      throw new Error("Document root is unavailable for bodyParam form submission");
+    const o = i.createElement("form");
+    o.method = "POST", o.action = t, o.target = e, o.style.display = "none";
+    for (const [a, c] of n.entries()) {
+      const l = i.createElement("input");
+      l.type = "hidden", l.name = a, l.value = c, o.appendChild(l);
+    }
+    r.appendChild(o);
+    try {
+      o.submit();
+    } finally {
+      o.remove();
+    }
+  }
   /**
    * Builds the window.name payload for the host window.
    * @internal
    */
   buildWindowName() {
-    const e = this.getHostDomain(), t = fe(
+    const e = this.getHostDomain(), t = pe(
       this.props,
       this.options.props,
       e,
       !1
       // Assume cross-domain for initial payload
-    ), n = pe(
+    ), n = me(
       t,
       this.options.props,
       this.bridge
-    ), i = this.buildNestedHostRefs(), r = Be({
+    ), i = this.buildNestedHostRefs(), r = Qe({
       uid: this.uid,
       tag: this.options.tag,
       context: this.context,
-      consumerDomain: V(),
+      consumerDomain: q(),
       props: n,
       exports: this.createConsumerExports(),
       children: i
     });
-    return We(r);
+    return Ye(r);
   }
   /**
    * Builds component references for nested host components.
@@ -2523,7 +2677,7 @@ class se {
     if (!this.options.children) return;
     const e = this.options.children({ props: this.props }), t = {};
     for (const [n, i] of Object.entries(e)) {
-      const r = St(i);
+      const r = At(i);
       if (!r)
         throw new Error(`Nested component "${n}" is missing component metadata`);
       if (typeof r.url != "string")
@@ -2546,14 +2700,14 @@ class se {
    */
   createConsumerExports() {
     return {
-      init: h.INIT,
-      close: h.CLOSE,
-      resize: h.RESIZE,
-      show: h.SHOW,
-      hide: h.HIDE,
-      onError: h.ERROR,
-      updateProps: h.PROPS,
-      export: h.EXPORT
+      init: u.INIT,
+      close: u.CLOSE,
+      resize: u.RESIZE,
+      show: u.SHOW,
+      hide: u.HIDE,
+      onError: u.ERROR,
+      updateProps: u.PROPS,
+      export: u.EXPORT
     };
   }
   /**
@@ -2568,15 +2722,20 @@ class se {
    * @internal
    */
   async waitForHost() {
-    this.initPromise = _e();
+    if (this.hostInitialized)
+      return;
+    const e = be();
+    this.initPromise = e;
     try {
-      await $e(
-        this.initPromise.promise,
+      await ke(
+        e.promise,
         this.options.timeout,
         `Host component "${this.options.tag}" (uid: ${this._uid}) did not initialize within ${this.options.timeout}ms. Check that the host page loads correctly and calls the initialization code.`
       );
-    } catch (e) {
-      throw this.handleError(e), e;
+    } catch (t) {
+      throw this.handleError(t), t;
+    } finally {
+      this.initPromise === e && (this.initPromise = null);
     }
   }
   /**
@@ -2584,34 +2743,54 @@ class se {
    * @internal
    */
   setupMessageHandlers() {
-    this.messenger.on(h.INIT, () => (this.initPromise && this.initPromise.resolve(), { success: !0 })), this.messenger.on(h.CLOSE, async () => (await this.close(), { success: !0 })), this.messenger.on(h.RESIZE, async (e) => (await this.resize(e), { success: !0 })), this.messenger.on(h.FOCUS, async () => (await this.focus(), { success: !0 })), this.messenger.on(h.SHOW, async () => (await this.show(), { success: !0 })), this.messenger.on(h.HIDE, async () => (await this.hide(), { success: !0 })), this.messenger.on(
-      h.ERROR,
+    this.setupHostLifecycleHandlers(), this.setupHostDataHandlers();
+  }
+  /**
+   * Sets up host lifecycle command handlers.
+   * @internal
+   */
+  setupHostLifecycleHandlers() {
+    this.messenger.on(u.INIT, () => (this.hostInitialized = !0, this.initPromise && this.initPromise.resolve(), { success: !0 })), this.messenger.on(u.CLOSE, async () => (await this.close(), { success: !0 })), this.messenger.on(u.RESIZE, async (e) => (await this.resize(e), { success: !0 })), this.messenger.on(u.FOCUS, async () => (await this.focus(), { success: !0 })), this.messenger.on(u.SHOW, async () => (await this.show(), { success: !0 })), this.messenger.on(u.HIDE, async () => (await this.hide(), { success: !0 })), this.messenger.on(
+      u.ERROR,
       async (e) => {
         const t = new Error(e.message);
         return t.stack = e.stack, this.handleError(t), { success: !0 };
       }
-    ), this.messenger.on(h.EXPORT, async (e) => (this.exports = e, { success: !0 })), this.messenger.on(h.CONSUMER_EXPORT, async (e) => (this.consumerExports = e, { success: !0 })), this.messenger.on(
-      h.GET_SIBLINGS,
-      async (e) => {
-        const t = [], n = vt(e.tag);
-        if (n)
-          for (const i of n.instances)
-            i.uid !== e.uid && t.push({
-              uid: i.uid,
-              tag: e.tag,
-              exports: i.exports
-            });
-        return t;
-      }
     );
   }
+  /**
+   * Sets up host data exchange handlers.
+   * @internal
+   */
+  setupHostDataHandlers() {
+    this.messenger.on(u.EXPORT, async (e) => (this.exports = e, { success: !0 })), this.messenger.on(u.CONSUMER_EXPORT, async (e) => (this.consumerExports = e, { success: !0 })), this.messenger.on(
+      u.GET_SIBLINGS,
+      async (e) => this.getSiblingInstances(e)
+    );
+  }
+  /**
+   * Gets sibling component instances for a request.
+   * @internal
+   */
+  getSiblingInstances(e) {
+    const t = [], n = kt(e.tag);
+    if (!n)
+      return t;
+    for (const i of n.instances)
+      i.uid !== e.uid && t.push({
+        uid: i.uid,
+        tag: e.tag,
+        exports: i.exports
+      });
+    return t;
+  }
   /**
    * Registers cleanup handlers for the instance.
    * @internal
    */
   setupCleanup() {
     this.cleanup.register(() => {
-      this.messenger.destroy(), this.bridge.destroy(), Xe(this.uid);
+      this.messenger.destroy(), this.bridge.destroy(), nt(this.uid);
     });
   }
   /**
@@ -2644,10 +2823,11 @@ class se {
   async destroy() {
     this.destroyed || (this.destroyed = !0, this.initPromise && (this.initPromise.reject(
       new Error(`Component "${this.options.tag}" was destroyed before initialization completed`)
-    ), this.initPromise = null), this.iframe && (it(this.iframe), this.iframe = null), this.context === p.POPUP && this.hostWindow && ht(this.hostWindow), this.hostWindow = null, this.openedHostDomain = null, this.dynamicUrlTrustedOrigin = null, this.prerenderElement && (this.prerenderElement.remove(), this.prerenderElement = null), await this.cleanup.cleanup(), this.event.emit(f.DESTROY), this.callPropCallback("onDestroy"), this.event.removeAllListeners());
+    ), this.initPromise = null), this.hostInitialized = !1, this.iframe && (pt(this.iframe), this.iframe = null), this.context === p.POPUP && this.hostWindow && Et(this.hostWindow), this.hostWindow = null, this.openedHostDomain = null, this.dynamicUrlTrustedOrigin = null, this.prerenderElement && (this.prerenderElement.remove(), this.prerenderElement = null), await this.cleanup.cleanup(), this.event.emit(f.DESTROY), this.callPropCallback("onDestroy"), this.event.removeAllListeners());
   }
 }
-class Et {
+const De = "Could not resolve consumer window";
+class Tt {
   /**
    * Creates a new HostComponent instance.
    *
@@ -2657,7 +2837,13 @@ class Et {
    * @param deferInit - Whether to defer INIT until a later explicit flush
    */
   constructor(e, t = {}, n, i = !1) {
-    this.propDefinitions = t, this.allowedConsumerDomains = n, this.deferInit = i, this.uid = e.uid, this.tag = e.tag, this.consumerDomain = e.consumerDomain, this.validateConsumerDomain(), this.event = new we(), this.messenger = new Ee(this.uid, window, V(), this.consumerDomain), this.setupMessageHandlers(), this.consumerWindow = this.resolveConsumerWindow(), this.bridge = new J(this.messenger), this.hostProps = this.buildHostProps(e), this.exposeHostProps(), this.deferInit || this.flushInit();
+    this.propDefinitions = t, this.allowedConsumerDomains = n, this.deferInit = i, this.uid = e.uid, this.tag = e.tag, this.consumerDomain = e.consumerDomain, this.validateConsumerDomain(), this.event = new Ee(), this.messenger = new Pe(this.uid, window, q(), this.consumerDomain);
+    let r = null;
+    try {
+      this.setupMessageHandlers(), this.consumerWindow = this.resolveConsumerWindow(), r = new J(this.messenger), this.bridge = r, this.hostProps = this.buildHostProps(e), this.exposeHostProps(), this.deferInit || this.flushInit();
+    } catch (o) {
+      throw r?.destroy(), this.messenger.destroy(), this.event.removeAllListeners(), this.propsHandlers.clear(), o;
+    }
   }
   /** The hostProps object containing props and control methods passed from the consumer. */
   hostProps;
@@ -2729,7 +2915,7 @@ class Et {
    * @internal
    */
   validateConsumerDomain() {
-    if (this.allowedConsumerDomains && !L(this.allowedConsumerDomains, this.consumerDomain))
+    if (this.allowedConsumerDomains && !D(this.allowedConsumerDomains, this.consumerDomain))
       throw new Error(
         `Consumer domain "${this.consumerDomain}" is not allowed for component "${this.tag}"`
       );
@@ -2747,22 +2933,22 @@ class Et {
    * @internal
    */
   resolveConsumerWindow() {
-    if (Ue()) {
-      const e = Ae();
+    if (Xe()) {
+      const e = Je();
       if (e) return e;
     }
-    if (Me()) {
-      const e = He();
+    if (Ke()) {
+      const e = qe();
       if (e) return e;
     }
-    throw new Error("Could not resolve consumer window");
+    throw new Error(De);
   }
   /**
    * Builds the hostProps object with deserialized props and control methods.
    * @internal
    */
   buildHostProps(e) {
-    const t = me(
+    const t = ge(
       e.props,
       this.propDefinitions,
       this.messenger,
@@ -2801,7 +2987,7 @@ class Et {
       await this.messenger.send(
         this.consumerWindow,
         this.consumerDomain,
-        h.INIT,
+        u.INIT,
         { uid: this.uid, tag: this.tag }
       );
     } catch (e) {
@@ -2829,7 +3015,7 @@ class Et {
     await this.messenger.send(
       this.consumerWindow,
       this.consumerDomain,
-      h.CLOSE,
+      u.CLOSE,
       {}
     );
   }
@@ -2841,7 +3027,7 @@ class Et {
     window.focus(), await this.messenger.send(
       this.consumerWindow,
       this.consumerDomain,
-      h.FOCUS,
+      u.FOCUS,
       {}
     );
   }
@@ -2853,7 +3039,7 @@ class Et {
     await this.messenger.send(
       this.consumerWindow,
       this.consumerDomain,
-      h.RESIZE,
+      u.RESIZE,
       e
     );
   }
@@ -2865,7 +3051,7 @@ class Et {
     await this.messenger.send(
       this.consumerWindow,
       this.consumerDomain,
-      h.SHOW,
+      u.SHOW,
       {}
     );
   }
@@ -2877,7 +3063,7 @@ class Et {
     await this.messenger.send(
       this.consumerWindow,
       this.consumerDomain,
-      h.HIDE,
+      u.HIDE,
       {}
     );
   }
@@ -2898,7 +3084,7 @@ class Et {
     await this.messenger.send(
       this.consumerWindow,
       this.consumerDomain,
-      h.ERROR,
+      u.ERROR,
       {
         message: e.message,
         stack: e.stack
@@ -2913,7 +3099,7 @@ class Et {
     await this.messenger.send(
       this.consumerWindow,
       this.consumerDomain,
-      h.EXPORT,
+      u.EXPORT,
       e
     );
   }
@@ -2925,7 +3111,7 @@ class Et {
     await this.messenger.send(
       this.consumerWindow,
       this.consumerDomain,
-      h.CONSUMER_EXPORT,
+      u.CONSUMER_EXPORT,
       e
     );
   }
@@ -2937,7 +3123,7 @@ class Et {
     return await this.messenger.send(
       this.consumerWindow,
       this.consumerDomain,
-      h.GET_SIBLINGS,
+      u.GET_SIBLINGS,
       { uid: this.uid, tag: this.tag, options: e }
     ) ?? [];
   }
@@ -2950,7 +3136,7 @@ class Et {
     const t = {};
     for (const [n, i] of Object.entries(e))
       try {
-        t[n] = Se({
+        t[n] = Ce({
           tag: i.tag,
           url: i.url,
           props: i.props,
@@ -2967,9 +3153,9 @@ class Et {
    * @internal
    */
   setupMessageHandlers() {
-    this.messenger.on(h.PROPS, (e) => {
+    this.messenger.on(u.PROPS, (e) => {
       try {
-        const t = me(
+        const t = ge(
           e,
           this.propDefinitions,
           this.messenger,
@@ -2977,7 +3163,7 @@ class Et {
           this.consumerWindow,
           this.consumerDomain
         );
-        Object.assign(this.hostProps, t);
+        this.consumerProps = t, Object.assign(this.hostProps, t), this.hostProps.consumer.props = this.consumerProps;
         for (const n of this.propsHandlers)
           try {
             n(t);
@@ -3003,8 +3189,8 @@ function ne(s, e, t = {}) {
   if (g) {
     if (e) {
       const i = g.getProps().getConsumerDomain();
-      if (!L(e, i))
-        throw Rt(), new Error(
+      if (!D(e, i))
+        throw Ht(), new Error(
           `Consumer domain "${i}" is not allowed for this host component`
         );
     }
@@ -3012,28 +3198,37 @@ function ne(s, e, t = {}) {
   }
   if (!X())
     return null;
-  const n = qe();
-  return n ? (g = new Et(
-    n,
-    s,
-    e,
-    t.deferInit ?? !1
-  ), g) : (console.error("Failed to parse ForgeFrame payload from window.name"), null);
-}
-function bt() {
+  const n = et();
+  if (!n)
+    return console.error("Failed to parse ForgeFrame payload from window.name"), null;
+  try {
+    g = new Tt(
+      n,
+      s,
+      e,
+      t.deferInit ?? !1
+    );
+  } catch (i) {
+    if (i instanceof Error && i.message === De)
+      return null;
+    throw i;
+  }
+  return g;
+}
+function Nt() {
   return X();
 }
-function Pt() {
+function $t() {
   return X();
 }
-function Ot() {
+function Ft() {
   return window.hostProps;
 }
-function Rt() {
+function Ht() {
   g && (g.destroy(), g = null), delete window.hostProps;
 }
-const C = /* @__PURE__ */ new Map(), ve = /* @__PURE__ */ Symbol("forgeframe.component.options");
-function xt(s) {
+const I = /* @__PURE__ */ new Map(), Ie = /* @__PURE__ */ Symbol("forgeframe.component.options");
+function Lt(s) {
   if (!s.tag)
     throw new Error("Component tag is required");
   if (!/^[a-z][a-z0-9-]*$/.test(s.tag))
@@ -3050,14 +3245,14 @@ function xt(s) {
         `Invalid component URL "${s.url}". Must be a valid absolute or relative URL.`
       );
     }
-  if (C.has(s.tag))
+  if (I.has(s.tag))
     throw new Error(`Component "${s.tag}" is already registered`);
 }
-function Se(s) {
-  xt(s);
+function Ce(s) {
+  Lt(s);
   const e = [];
   let t;
-  if (W(s.tag)) {
+  if (z(s.tag)) {
     const i = ne(s.props, s.allowedConsumerDomains);
     i && (t = i.hostProps);
   }
@@ -3068,34 +3263,34 @@ function Se(s) {
       o !== -1 && e.splice(o, 1);
     }), r;
   };
-  return n.instances = e, n.isHost = () => W(s.tag), n.isEmbedded = () => W(s.tag), n.hostProps = t, n[ve] = s, n.canRenderTo = async (i) => {
+  return n.instances = e, n.isHost = () => z(s.tag), n.isEmbedded = () => z(s.tag), n.hostProps = t, n[Ie] = s, n.canRenderTo = async (i) => {
     try {
-      return !!(be(i) || s.domain);
+      return !!(Re(i) || s.domain);
     } catch {
       return !1;
     }
-  }, C.set(s.tag, n), n;
+  }, I.set(s.tag, n), n;
 }
-function vt(s) {
-  return C.get(s);
+function kt(s) {
+  return I.get(s);
 }
-function St(s) {
-  return s[ve];
+function At(s) {
+  return s[Ie];
 }
-async function Ct(s) {
+async function Ut(s) {
   await s.close();
 }
-async function Ce(s) {
-  const e = C.get(s);
+async function Te(s) {
+  const e = I.get(s);
   if (!e) return;
   const t = [...e.instances];
   await Promise.all(t.map((n) => n.close()));
 }
-async function Dt() {
-  const s = Array.from(C.keys());
-  await Promise.all(s.map((e) => Ce(e)));
+async function Mt() {
+  const s = Array.from(I.keys());
+  await Promise.all(s.map((e) => Te(e)));
 }
-function It(s, e) {
+function Wt(s, e) {
   const t = Object.keys(s), n = Object.keys(e);
   if (t.length !== n.length)
     return !1;
@@ -3104,37 +3299,37 @@ function It(s, e) {
       return !1;
   return !0;
 }
-function Tt(s, e) {
+function zt(s, e) {
   const { React: t } = e, { createElement: n, useRef: i, useEffect: r, useState: o, forwardRef: a } = t, c = a(
     function(w, _) {
       const {
-        onRendered: P,
+        onRendered: R,
         onError: x,
         onClose: ie,
-        context: De,
+        context: Ne,
         className: re,
         style: oe,
-        ...H
-      } = w, D = i(null), A = i(null), U = i(null), [ae, Ie] = o(null);
+        ...A
+      } = w, C = i(null), U = i(null), M = i(null), [ae, $e] = o(null);
       return r(() => {
-        const v = D.current;
-        if (!v) return;
-        const m = s(H);
-        return A.current = m, P && m.event.once("rendered", P), ie && m.event.once("close", ie), x && m.event.on("error", x), m.render(v, De).catch((S) => {
-          Ie(S), x?.(S);
+        const S = C.current;
+        if (!S) return;
+        const m = s(A);
+        return U.current = m, R && m.event.once("rendered", R), ie && m.event.once("close", ie), x && m.event.on("error", x), m.render(S, Ne).catch((v) => {
+          $e(v), x?.(v);
         }), () => {
           m.close().catch(() => {
-          }), A.current = null, U.current = null;
+          }), U.current = null, M.current = null;
         };
       }, []), r(() => {
-        const v = A.current;
-        if (!v) return;
-        const m = H, S = U.current;
-        S && It(S, m) || (U.current = m, v.updateProps(m).catch((Te) => {
-          x?.(Te);
+        const S = U.current;
+        if (!S) return;
+        const m = A, v = M.current;
+        v && Wt(v, m) || (M.current = m, S.updateProps(m).catch((Fe) => {
+          x?.(Fe);
         }));
-      }, [H, x]), r(() => {
-        _ && typeof _ == "object" && D.current && (_.current = D.current);
+      }, [A, x]), r(() => {
+        _ && typeof _ == "object" && C.current && (_.current = C.current);
       }, [_]), ae ? n(
         "div",
         {
@@ -3143,7 +3338,7 @@ function Tt(s, e) {
         },
         `Error: ${ae.message}`
       ) : n("div", {
-        ref: D,
+        ref: C,
         className: re,
         style: {
           display: "inline-block",
@@ -3154,13 +3349,13 @@ function Tt(s, e) {
   ), l = `ForgeFrame(${s.name || "Component"})`;
   return c.displayName = l, c;
 }
-function Ft(s) {
+function Bt(s) {
   return function(t) {
-    return Tt(t, { React: s });
+    return zt(t, { React: s });
   };
 }
 ne(void 0, void 0, { deferInit: !0 });
-const $t = {
+const Vt = {
   /**
    * Create a new component definition.
    *
@@ -3185,23 +3380,23 @@ const $t = {
    * await instance.render('#container');
    * ```
    */
-  create: Se,
+  create: Ce,
   /**
    * Destroy a single component instance.
    *
    * @param instance - The component instance to destroy
    */
-  destroy: Ct,
+  destroy: Ut,
   /**
    * Destroy all instances of a specific component by tag.
    *
    * @param tag - The component tag name
    */
-  destroyByTag: Ce,
+  destroyByTag: Te,
   /**
    * Destroy all ForgeFrame component instances.
    */
-  destroyAll: Dt,
+  destroyAll: Mt,
   /**
    * Check if the current window is a host component context.
    *
@@ -3211,7 +3406,7 @@ const $t = {
    *
    * @returns True if running inside a ForgeFrame iframe/popup
    */
-  isHost: bt,
+  isHost: Nt,
   /**
    * Check if the current window is embedded by ForgeFrame.
    *
@@ -3220,7 +3415,7 @@ const $t = {
    *
    * @returns True if running inside a ForgeFrame iframe/popup
    */
-  isEmbedded: Pt,
+  isEmbedded: $t,
   /**
    * Get hostProps from the current host window.
    *
@@ -3229,7 +3424,7 @@ const $t = {
    *
    * @returns The hostProps object if in host context, undefined otherwise
    */
-  getHostProps: Ot,
+  getHostProps: Ft,
   /**
    * Flush host initialization in embedded contexts.
    *
@@ -3245,7 +3440,7 @@ const $t = {
    * Serialization strategy constants.
    * @see {@link PROP_SERIALIZATION}
    */
-  PROP_SERIALIZATION: I,
+  PROP_SERIALIZATION: T,
   /**
    * Rendering context constants (IFRAME, POPUP).
    * @see {@link CONTEXT}
@@ -3259,11 +3454,11 @@ const $t = {
   /**
    * Error thrown when popup window fails to open.
    */
-  PopupOpenError: xe,
+  PopupOpenError: ve,
   /**
    * Current library version.
    */
-  VERSION: ye,
+  VERSION: _e,
   /**
    * Check if a value is a Standard Schema (Zod, Valibot, ArkType, etc.)
    *
@@ -3307,32 +3502,32 @@ const $t = {
 };
 export {
   te as AnySchema,
-  F as ArraySchema,
-  Z as BooleanSchema,
+  H as ArraySchema,
+  G as BooleanSchema,
   p as CONTEXT,
   f as EVENT,
   ee as EnumSchema,
-  $t as ForgeFrame,
-  G as FunctionSchema,
+  Vt as ForgeFrame,
+  Z as FunctionSchema,
   Q as LiteralSchema,
   Y as NumberSchema,
-  $ as ObjectSchema,
-  I as PROP_SERIALIZATION,
-  xe as PopupOpenError,
+  L as ObjectSchema,
+  T as PROP_SERIALIZATION,
+  ve as PopupOpenError,
   y as PropSchema,
   K as StringSchema,
-  ye as VERSION,
-  Se as create,
-  Tt as createReactComponent,
-  $t as default,
-  Ct as destroy,
-  Dt as destroyAll,
-  Ce as destroyByTag,
-  Ot as getHostProps,
+  _e as VERSION,
+  Ce as create,
+  zt as createReactComponent,
+  Vt as default,
+  Ut as destroy,
+  Mt as destroyAll,
+  Te as destroyByTag,
+  Ft as getHostProps,
   ne as initHost,
-  Pt as isEmbedded,
-  bt as isHost,
+  $t as isEmbedded,
+  Nt as isHost,
   b as isStandardSchema,
   d as prop,
-  Ft as withReactComponent
+  Bt as withReactComponent
 };