remote-components 0.0.51 → 0.1.0

package/dist/html/host.cjs

@@ -30,6 +30,51 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
+// src/shared/constants.ts
+var RC_PROTECTED_REMOTE_FETCH_PATHNAME, CORS_DOCS_URL;
+var init_constants = __esm({
+  "src/shared/constants.ts"() {
+    "use strict";
+    RC_PROTECTED_REMOTE_FETCH_PATHNAME = "/rc-fetch-protected-remote";
+    CORS_DOCS_URL = "https://vercel.com/docs/remote-components/concepts/cors-external-urls#accessing-cross-site-protected-remote-components";
+  }
+});
+
+// src/shared/client/protected-rc-fallback.ts
+function generateProtectedRcFallbackSrc(url) {
+  return `${RC_PROTECTED_REMOTE_FETCH_PATHNAME}?url=${encodeURIComponent(url)}`;
+}
+function isProxiedUrl(url) {
+  try {
+    return new URL(url, location.href).pathname === RC_PROTECTED_REMOTE_FETCH_PATHNAME;
+  } catch {
+    return false;
+  }
+}
+var init_protected_rc_fallback = __esm({
+  "src/shared/client/protected-rc-fallback.ts"() {
+    "use strict";
+    init_constants();
+  }
+});
+
+// src/shared/utils/abort.ts
+function isAbortError(error) {
+  if (error instanceof DOMException && error.name === "AbortError") {
+    return true;
+  }
+  if (error !== null && typeof error === "object" && "name" in error && error.name === "AbortError" && "message" in error && typeof error.message === "string") {
+    const e = error;
+    return typeof e.code === "number" || e.constructor?.name === "DOMException";
+  }
+  return false;
+}
+var init_abort = __esm({
+  "src/shared/utils/abort.ts"() {
+    "use strict";
+  }
+});
+
 // src/shared/error.ts
 function multipleRemoteComponentsError(url) {
   return new RemoteComponentsError(
@@ -42,10 +87,76 @@ function failedToFetchRemoteComponentError(url, { status, statusText }, help = "
     { cause: new Error(`${status} ${statusText}`) }
   );
 }
+async function errorFromFailedFetch(originalUrl, resolvedUrl, res) {
+  const isProxied = isProxiedUrl(resolvedUrl.href);
+  if (isProxied && res) {
+    const body = await res.text().catch(() => "");
+    return failedProxyFetchError(
+      originalUrl,
+      resolvedUrl.href,
+      res.status,
+      body
+    );
+  }
+  const fallback = failedToFetchRemoteComponentError(
+    originalUrl,
+    res ?? { status: 0, statusText: "No Response" }
+  );
+  if (!res)
+    return fallback;
+  try {
+    const body = await res.text();
+    const parser = new DOMParser();
+    const doc = parser.parseFromString(body, "text/html");
+    const errorTemplate = doc.querySelector(
+      "template[data-next-error-message]"
+    );
+    const errorMessage = errorTemplate?.getAttribute("data-next-error-message");
+    if (errorMessage) {
+      const error = new RemoteComponentsError(errorMessage);
+      const errorStack = errorTemplate?.getAttribute("data-next-error-stack");
+      if (errorStack) {
+        error.stack = errorStack;
+      }
+      return error;
+    }
+  } catch (parseError) {
+    if (isAbortError(parseError))
+      throw parseError;
+  }
+  return fallback;
+}
+function failedProxyFetchError(originalUrl, proxyUrl, status, responseBody) {
+  if (status === 404) {
+    return new RemoteComponentsError(
+      `Could not proxy the request to "${originalUrl}" \u2014 the proxy endpoint "${RC_PROTECTED_REMOTE_FETCH_PATHNAME}" returned 404.
+
+The host server needs middleware or a route that handles "${RC_PROTECTED_REMOTE_FETCH_PATHNAME}".
+
+Proxying requires two pieces:
+  1. resolveClientUrl={proxyClientRequestsThroughHost} on <RemoteComponent>
+  2. Middleware or a route for "${RC_PROTECTED_REMOTE_FETCH_PATHNAME}" on the host server
+
+Docs: ${CORS_DOCS_URL}`
+    );
+  }
+  if (status === 403) {
+    const detail = responseBody ? ` ${responseBody}` : "";
+    return new RemoteComponentsError(
+      `Proxied request to "${proxyUrl}" was forbidden.${detail} See: ${CORS_DOCS_URL}`
+    );
+  }
+  return new RemoteComponentsError(
+    `Proxied request for "${originalUrl}" via "${proxyUrl}" failed with status ${status}. See: ${CORS_DOCS_URL}`
+  );
+}
 var RemoteComponentsError;
 var init_error = __esm({
   "src/shared/error.ts"() {
     "use strict";
+    init_protected_rc_fallback();
+    init_constants();
+    init_abort();
     RemoteComponentsError = class extends Error {
       code = "REMOTE_COMPONENTS_ERROR";
       constructor(message, options) {
@@ -62,9 +173,6 @@ function logDebug(location2, message) {
     console.debug(`[${PREFIX}:${location2}]: ${message}`);
   }
 }
-function logInfo(location2, message) {
-  console.info(`[${PREFIX}:${location2}]: ${message}`);
-}
 function logWarn(location2, message) {
   console.warn(`[${PREFIX}:${location2}]: ${message}`);
 }
@@ -75,10 +183,24 @@ function logError(location2, message, cause) {
     })
   );
 }
+function warnCrossOriginFetchError(logLocation, url) {
+  try {
+    const parsed = typeof url === "string" ? new URL(url) : url;
+    if (typeof location === "undefined" || parsed.origin === location.origin) {
+      return;
+    }
+    logWarn(
+      logLocation,
+      `Failed to fetch cross-origin resource "${parsed.href}". If this is a protected deployment, ensure withRemoteComponentsHost middleware is configured in your host and that the remote URL is included in allowedProxyUrls. See: ${CORS_DOCS_URL}`
+    );
+  } catch {
+  }
+}
 var PREFIX, DEBUG;
 var init_logger = __esm({
   "src/shared/utils/logger.ts"() {
     "use strict";
+    init_constants();
     init_error();
     PREFIX = "remote-components";
     DEBUG = typeof window !== "undefined" && localStorage.getItem("RC_DEBUG") === "true";
@@ -270,26 +392,6 @@ var init_shared_modules = __esm({
   }
 });
 
-// src/shared/constants.ts
-var RC_PROTECTED_REMOTE_FETCH_PATHNAME;
-var init_constants = __esm({
-  "src/shared/constants.ts"() {
-    "use strict";
-    RC_PROTECTED_REMOTE_FETCH_PATHNAME = "/rc-fetch-protected-remote";
-  }
-});
-
-// src/shared/client/protected-rc-fallback.ts
-function generateProtectedRcFallbackSrc(url) {
-  return `${RC_PROTECTED_REMOTE_FETCH_PATHNAME}?url=${encodeURIComponent(url)}`;
-}
-var init_protected_rc_fallback = __esm({
-  "src/shared/client/protected-rc-fallback.ts"() {
-    "use strict";
-    init_constants();
-  }
-});
-
 // src/shared/client/webpack-patterns.ts
 var NEXT_BUNDLE_PATH_RE;
 var init_webpack_patterns = __esm({
@@ -300,7 +402,7 @@ var init_webpack_patterns = __esm({
 });
 
 // src/shared/client/script-loader.ts
-async function loadScripts(scripts) {
+async function loadScripts(scripts, resolveClientUrl) {
   await Promise.all(
     scripts.map((script) => {
       return new Promise((resolve, reject) => {
@@ -309,42 +411,29 @@ async function loadScripts(scripts) {
           script.src.replace(NEXT_BUNDLE_PATH_RE, "/_next/"),
           location.origin
         ).href;
-        const loadScriptWithProtectedRcFallback = (src, isFallback = false) => {
-          const newScript = document.createElement("script");
-          newScript.onload = () => {
-            if (isFallback) {
-              logInfo(
-                "ScriptLoader",
-                `Successfully loaded <script src="${newSrc}"> using fallback.`
-              );
-            }
-            resolve();
-          };
-          newScript.onerror = () => {
-            if (!isFallback) {
-              const fallbackSrc = generateProtectedRcFallbackSrc(newSrc);
-              logWarn(
-                "ScriptLoader",
-                `Failed to load <script src="${newSrc}"> for Remote Component. Trying fallback with ${RC_PROTECTED_REMOTE_FETCH_PATHNAME} (withRemoteComponentsHost)...`
-              );
-              loadScriptWithProtectedRcFallback(fallbackSrc, true);
-            } else {
-              logError(
-                "ScriptLoader",
-                `Failed to load fallback for <script src="${newSrc}"> for Remote Component.`
-              );
-              reject(
-                new RemoteComponentsError(
-                  `Failed to load <script src="${newSrc}"> for Remote Component. Check the URL is correct.`
-                )
-              );
-            }
-          };
-          newScript.src = src;
-          newScript.async = true;
-          document.head.appendChild(newScript);
+        const resolvedSrc = resolveClientUrl?.(newSrc) ?? newSrc;
+        const newScript = document.createElement("script");
+        newScript.onload = () => resolve();
+        newScript.onerror = () => {
+          const isProxied = isProxiedUrl(resolvedSrc);
+          if (isProxied) {
+            reject(
+              new RemoteComponentsError(
+                `Failed to load script "${newSrc}" via proxy "${resolvedSrc}". Ensure withRemoteComponentsHost middleware is configured and "${RC_PROTECTED_REMOTE_FETCH_PATHNAME}" is in the matcher. See: ${CORS_DOCS_URL}`
+              )
+            );
+          } else {
+            warnCrossOriginFetchError("ScriptLoader", newSrc);
+            reject(
+              new RemoteComponentsError(
+                `Failed to load <script src="${newSrc}"> for Remote Component. Check the URL is correct.`
+              )
+            );
+          }
         };
-        loadScriptWithProtectedRcFallback(newSrc);
+        newScript.src = resolvedSrc;
+        newScript.async = true;
+        document.head.appendChild(newScript);
       });
     })
   );
@@ -385,67 +474,6 @@ var init_const = __esm({
   }
 });
 
-// src/shared/utils/abort.ts
-function isAbortError(error) {
-  if (error instanceof DOMException && error.name === "AbortError") {
-    return true;
-  }
-  if (error !== null && typeof error === "object" && "name" in error && error.name === "AbortError" && "message" in error && typeof error.message === "string") {
-    const e = error;
-    return typeof e.code === "number" || e.constructor?.name === "DOMException";
-  }
-  return false;
-}
-var init_abort = __esm({
-  "src/shared/utils/abort.ts"() {
-    "use strict";
-  }
-});
-
-// src/shared/client/fetch-with-protected-rc-fallback.ts
-async function fetchWithProtectedRcFallback(url, init) {
-  try {
-    const res = await fetch(url, init);
-    return res;
-  } catch (error) {
-    if (isAbortError(error)) {
-      throw error;
-    }
-    const parsedUrl = new URL(url);
-    if (typeof document === "object" && typeof document.location === "object" && document.location.origin !== parsedUrl.origin) {
-      logWarn(
-        "FetchRemoteComponent",
-        "Request failed due to CORS, attempting to fetch it via the withRemoteComponentsHost proxy."
-      );
-      const proxiedRes = await fetch(
-        generateProtectedRcFallbackSrc(parsedUrl.href),
-        init?.signal ? { signal: init.signal } : void 0
-      );
-      if (proxiedRes.status === 200) {
-        logInfo(
-          "FetchRemoteComponent",
-          `Successfully fetched ${parsedUrl.href} with fallback withRemoteComponentsHost proxy`
-        );
-        return proxiedRes;
-      } else {
-        logError(
-          "FetchRemoteComponent",
-          `Could not proxy remote: [response status ${proxiedRes.status}] ${await proxiedRes.text()}`
-        );
-      }
-    }
-    throw error;
-  }
-}
-var init_fetch_with_protected_rc_fallback = __esm({
-  "src/shared/client/fetch-with-protected-rc-fallback.ts"() {
-    "use strict";
-    init_protected_rc_fallback();
-    init_abort();
-    init_logger();
-  }
-});
-
 // src/shared/client/turbopack-patterns.ts
 var REMOTE_SHARED_MARKER_RE, REMOTE_SHARED_ASSIGNMENT_RE, ASYNC_MODULE_LOADER_RE, ASYNC_MODULE_RESOLVE_RE, ASYNC_MODULE_ALL_RE, TURBOPACK_GLOBAL_RE;
 var init_turbopack_patterns = __esm({
@@ -461,7 +489,7 @@ var init_turbopack_patterns = __esm({
 });
 
 // src/shared/client/chunk-loader.ts
-function createChunkLoader(runtime) {
+function createChunkLoader(runtime, resolveClientUrl) {
   return function __turbopack_chunk_load__(chunkId, scriptBundle) {
     logDebug("ChunkLoader", `Loading chunk: "${chunkId}"`);
     const self = globalThis;
@@ -501,9 +529,10 @@ function createChunkLoader(runtime) {
       logDebug("ChunkLoader", `Returning cached promise for: "${url}"`);
       return self.__remote_components_turbopack_chunk_loader_promise__[url];
     }
-    logDebug("ChunkLoader", `Fetching chunk from: "${url}"`);
+    const resolvedUrl = resolveClientUrl?.(url) ?? url;
+    logDebug("ChunkLoader", `Fetching chunk from: "${resolvedUrl}"`);
     self.__remote_components_turbopack_chunk_loader_promise__[url] = new Promise((resolve, reject) => {
-      fetchWithProtectedRcFallback(url).then((res) => res.text()).then((code) => {
+      fetch(resolvedUrl).then((res) => res.text()).then((code) => {
         const hasTurbopack = TURBOPACK_GLOBAL_RE.test(code);
         if (hasTurbopack) {
           return handleTurbopackChunk(code, bundle ?? "", url);
@@ -516,7 +545,19 @@ function createChunkLoader(runtime) {
           "ChunkLoader",
           `First 500 chars of chunk: ${code.slice(0, 500)}`
         );
-      }).then(resolve).catch(reject);
+      }).then(resolve).catch((error) => {
+        const isProxied = isProxiedUrl(resolvedUrl);
+        if (isProxied) {
+          reject(
+            new RemoteComponentsError(
+              `Failed to load chunk "${url}" via proxy "${resolvedUrl}". Ensure withRemoteComponentsHost middleware is configured and "${RC_PROTECTED_REMOTE_FETCH_PATHNAME}" is in the matcher. See: ${CORS_DOCS_URL}`
+            )
+          );
+        } else {
+          warnCrossOriginFetchError("ChunkLoader", url);
+          reject(error);
+        }
+      });
     });
     return self.__remote_components_turbopack_chunk_loader_promise__[url];
   };
@@ -661,10 +702,11 @@ async function handleTurbopackChunk(code, bundle, url) {
 var init_chunk_loader = __esm({
   "src/shared/client/chunk-loader.ts"() {
     "use strict";
+    init_constants();
     init_error();
     init_logger();
     init_const();
-    init_fetch_with_protected_rc_fallback();
+    init_protected_rc_fallback();
     init_turbopack_patterns();
   }
 });
@@ -1035,7 +1077,7 @@ var init_shared_modules2 = __esm({
 });
 
 // src/shared/client/webpack-adapter.ts
-async function setupWebpackRuntime(runtime, scripts = [], url = new URL(location.href), bundle, shared = {}, remoteShared = {}) {
+async function setupWebpackRuntime(runtime, scripts = [], url = new URL(location.href), bundle, shared = {}, remoteShared = {}, resolveClientUrl) {
   const self = globalThis;
   if (!self.__remote_bundle_url__) {
     self.__remote_bundle_url__ = {};
@@ -1047,7 +1089,7 @@ async function setupWebpackRuntime(runtime, scripts = [], url = new URL(location
       self.__original_webpack_chunk_load__ = self.__webpack_chunk_load__;
       self.__original_webpack_require__ = self.__webpack_require__;
     }
-    self.__webpack_chunk_load__ = createChunkLoader(runtime);
+    self.__webpack_chunk_load__ = createChunkLoader(runtime, resolveClientUrl);
     self.__webpack_require__ = createModuleRequire(runtime);
     self.__webpack_require_type__ = runtime;
     if (self.__remote_webpack_require__ && runtime === RUNTIME_TURBOPACK) {
@@ -1141,27 +1183,21 @@ var init_webpack_adapter = __esm({
 });
 
 // src/shared/client/static-loader.ts
-async function importViaProxy(absoluteSrc) {
-  const proxyUrl = new URL(
-    generateProtectedRcFallbackSrc(absoluteSrc),
-    location.href
-  ).href;
-  const response = await fetch(proxyUrl);
+async function importViaCallback(absoluteSrc, resolveClientUrl) {
+  const resolvedUrl = resolveClientUrl(absoluteSrc) ?? absoluteSrc;
+  const fetchUrl = new URL(resolvedUrl, location.href).href;
+  const response = await fetch(fetchUrl);
   if (!response.ok)
-    throw new Error(`Proxy fetch failed: ${response.status}`);
-  logInfo(
-    "StaticLoader",
-    `Successfully loaded ${absoluteSrc} via protected RC proxy fallback.`
-  );
+    throw new Error(`Proxied fetch failed: ${response.status}`);
   const content = (await response.text()).replace(/import\.meta\.url/g, JSON.stringify(absoluteSrc)).replace(
     /\b(from|import)\s*(["'])(\.\.?\/[^"']+)\2/g,
     (_, keyword, quote, relativePath) => {
       const absoluteImportUrl = new URL(relativePath, absoluteSrc).href;
-      const absoluteProxyUrl = new URL(
-        generateProtectedRcFallbackSrc(absoluteImportUrl),
+      const resolvedImportUrl = new URL(
+        resolveClientUrl(absoluteImportUrl) ?? absoluteImportUrl,
         location.href
       ).href;
-      return `${keyword} ${quote}${absoluteProxyUrl}${quote}`;
+      return `${keyword} ${quote}${resolvedImportUrl}${quote}`;
     }
   );
   const moduleBlobUrl = URL.createObjectURL(
@@ -1195,6 +1231,20 @@ async function importViaProxy(absoluteSrc) {
     delete registry[absoluteSrc];
   return mod;
 }
+async function importDirectly(absoluteSrc) {
+  try {
+    return await import(
+      /* @vite-ignore */
+      /* webpackIgnore: true */
+      absoluteSrc
+    );
+  } catch (importError) {
+    if (!absoluteSrc.startsWith("blob:")) {
+      warnCrossOriginFetchError("StaticLoader", absoluteSrc);
+    }
+    throw importError;
+  }
+}
 function resolveScriptSrc(script, url) {
   const rawSrc = typeof script.getAttribute === "function" ? script.getAttribute("src") ?? script.src : script.src;
   if (!rawSrc && script.textContent) {
@@ -1207,24 +1257,7 @@ function resolveScriptSrc(script, url) {
   }
   return rawSrc;
 }
-async function importScriptMod(absoluteSrc) {
-  try {
-    return await import(
-      /* @vite-ignore */
-      /* webpackIgnore: true */
-      absoluteSrc
-    );
-  } catch (importError) {
-    if (absoluteSrc.startsWith("blob:"))
-      throw importError;
-    logWarn(
-      "StaticLoader",
-      `Direct import of ${absoluteSrc} failed, attempting via protected RC proxy fallback.`
-    );
-    return importViaProxy(absoluteSrc);
-  }
-}
-async function loadStaticRemoteComponent(scripts, url) {
+async function loadStaticRemoteComponent(scripts, url, resolveClientUrl) {
   const self = globalThis;
   if (self.__remote_script_entrypoint_mount__?.[url.href]) {
     self.__remote_script_entrypoint_mount__[url.href] = /* @__PURE__ */ new Set();
@@ -1237,7 +1270,7 @@ async function loadStaticRemoteComponent(scripts, url) {
       try {
         const src = resolveScriptSrc(script, url);
         const absoluteSrc = new URL(src, url).href;
-        const mod = await importScriptMod(absoluteSrc);
+        const mod = resolveClientUrl ? await importViaCallback(absoluteSrc, resolveClientUrl) : await importDirectly(absoluteSrc);
         if (src.startsWith("blob:")) {
           URL.revokeObjectURL(src);
         }
@@ -1302,7 +1335,6 @@ var init_static_loader = __esm({
   "src/shared/client/static-loader.ts"() {
     "use strict";
     init_logger();
-    init_protected_rc_fallback();
   }
 });
 
@@ -1512,7 +1544,7 @@ var webpack_exports = {};
 __export(webpack_exports, {
   webpackRuntime: () => webpackRuntime
 });
-async function webpackRuntime(bundle, shared, remoteShared) {
+async function webpackRuntime(bundle, shared, remoteShared, resolveClientUrl) {
   const self = globalThis;
   if (!self.__DISABLE_WEBPACK_EXEC__) {
     self.__DISABLE_WEBPACK_EXEC__ = {};
@@ -1555,7 +1587,7 @@ async function webpackRuntime(bundle, shared, remoteShared) {
         }
       ];
     });
-    await loadScripts(scriptSrcs);
+    await loadScripts(scriptSrcs, resolveClientUrl);
     const hostShared = {
       ...sharedPolyfills(shared),
       ...self.__remote_component_host_shared_modules__,
@@ -1612,7 +1644,7 @@ var turbopack_exports = {};
 __export(turbopack_exports, {
   turbopackRuntime: () => turbopackRuntime
 });
-async function turbopackRuntime(url, bundle, shared, remoteShared) {
+async function turbopackRuntime(url, bundle, shared, remoteShared, resolveClientUrl) {
   const self = globalThis;
   const hostShared = {
     ...sharedPolyfills(shared),
@@ -1626,7 +1658,8 @@ async function turbopackRuntime(url, bundle, shared, remoteShared) {
     url,
     bundle,
     hostShared,
-    remoteShared
+    remoteShared,
+    resolveClientUrl
   );
   const {
     default: { createFromReadableStream }
@@ -1640,7 +1673,8 @@ async function turbopackRuntime(url, bundle, shared, remoteShared) {
       url,
       bundle,
       hostShared,
-      remoteShared
+      remoteShared,
+      resolveClientUrl
     );
   }
   return {
@@ -1666,7 +1700,7 @@ var script_exports = {};
 __export(script_exports, {
   scriptRuntime: () => scriptRuntime
 });
-function scriptRuntime() {
+function scriptRuntime(resolveClientUrl) {
   const self = globalThis;
   return {
     self,
@@ -1676,7 +1710,7 @@ function scriptRuntime() {
       Component: null,
       App: null
     }),
-    preloadScripts: loadStaticRemoteComponent
+    preloadScripts: (scripts, url) => loadStaticRemoteComponent(scripts, url, resolveClientUrl)
   };
 }
 var init_script = __esm({
@@ -1689,6 +1723,7 @@ var init_script = __esm({
 // src/html/host/index.tsx
 var host_exports = {};
 __export(host_exports, {
+  proxyClientRequestsThroughHost: () => proxyClientRequestsThroughHost,
   registerSharedModules: () => registerSharedModules
 });
 module.exports = __toCommonJS(host_exports);
@@ -1707,7 +1742,7 @@ var tagNames = [
   "script",
   "link"
 ];
-function applyOriginToNodes(doc, url) {
+function applyOriginToNodes(doc, url, resolveClientUrl) {
   if (url.origin !== location.origin) {
     const nodes = doc.querySelectorAll(
       tagNames.map(
@@ -1716,12 +1751,15 @@ function applyOriginToNodes(doc, url) {
     );
     nodes.forEach((node) => {
       if (node.hasAttribute("src") && /^[./]+\/?/.test(node.getAttribute("src") ?? "")) {
-        node.src = new URL(node.getAttribute("src") ?? "/", url).href;
+        const absoluteSrc = new URL(node.getAttribute("src") ?? "/", url).href;
+        const isScript = node.tagName.toLowerCase() === "script";
+        node.src = isScript ? absoluteSrc : resolveClientUrl?.(absoluteSrc) ?? absoluteSrc;
       }
       if (node.hasAttribute("href") && /^[./]+\/?/.test(node.getAttribute("href") ?? "")) {
+        const absoluteHref = new URL(node.getAttribute("href") ?? "/", url).href;
         node.setAttribute(
           "href",
-          new URL(node.getAttribute("href") ?? "/", url).href
+          resolveClientUrl?.(absoluteHref) ?? absoluteHref
         );
       }
       if (node.hasAttribute("srcset")) {
@@ -1730,7 +1768,8 @@ function applyOriginToNodes(doc, url) {
           if (!urlPart)
             return entry;
           const absoluteUrl = new URL(urlPart, url).href;
-          return descriptor ? `${absoluteUrl} ${descriptor}` : absoluteUrl;
+          const resolvedUrl = resolveClientUrl?.(absoluteUrl) ?? absoluteUrl;
+          return descriptor ? `${resolvedUrl} ${descriptor}` : resolvedUrl;
         }).join(", ");
         if (srcSet) {
           node.setAttribute("srcset", srcSet);
@@ -1742,7 +1781,8 @@ function applyOriginToNodes(doc, url) {
           if (!urlPart)
             return entry;
           const absoluteUrl = new URL(urlPart, url).href;
-          return descriptor ? `${absoluteUrl} ${descriptor}` : absoluteUrl;
+          const resolvedUrl = resolveClientUrl?.(absoluteUrl) ?? absoluteUrl;
+          return descriptor ? `${resolvedUrl} ${descriptor}` : resolvedUrl;
         }).join(", ");
         if (srcSet) {
           node.setAttribute("imagesrcset", srcSet);
@@ -1752,6 +1792,34 @@ function applyOriginToNodes(doc, url) {
   }
 }
 
+// src/shared/client/proxy-through-host.ts
+init_protected_rc_fallback();
+function withRemoteSrc(resolveClientUrl, remoteSrc) {
+  return (url) => resolveClientUrl(remoteSrc, url);
+}
+var proxyClientRequestsThroughHost = (remoteSrc, url) => {
+  if (typeof location === "undefined") {
+    return void 0;
+  }
+  const remoteOrigin = new URL(remoteSrc, location.href).origin;
+  if (remoteOrigin === location.origin) {
+    return void 0;
+  }
+  try {
+    const parsed = new URL(url, location.href);
+    if (parsed.origin === remoteOrigin) {
+      return generateProtectedRcFallbackSrc(url);
+    }
+  } catch {
+  }
+  return void 0;
+};
+
+// src/shared/client/default-resolve-client-url.ts
+function bindResolveClientUrl(prop, remoteSrc) {
+  return prop ? withRemoteSrc(prop, remoteSrc) : void 0;
+}
+
 // src/shared/client/remote-component.ts
 init_error();
 
@@ -1846,7 +1914,7 @@ init_webpack_adapter();
 init_error();
 
 // src/shared/ssr/fetch-with-hooks.ts
-init_fetch_with_protected_rc_fallback();
+init_logger();
 
 // src/shared/ssr/fetch-headers.ts
 function remoteFetchHeaders() {
@@ -1884,7 +1952,12 @@ async function fetchWithHooks(url, additionalInit, options = {}) {
   };
   let res = await onRequest?.(url, init, hookOptions);
   if (!res) {
-    res = await fetchWithProtectedRcFallback(url, init);
+    try {
+      res = await fetch(url, init);
+    } catch (error) {
+      warnCrossOriginFetchError("FetchRemoteComponent", url);
+      throw error;
+    }
   }
   const transformedRes = await onResponse?.(url, res, hookOptions);
   if (transformedRes) {
@@ -1907,7 +1980,8 @@ async function attachStyles({
   signal,
   baseUrl,
   remoteComponentSrc,
-  root
+  root,
+  resolveClientUrl
 }) {
   const appendedLinks = [];
   let abortReject = null;
@@ -1942,9 +2016,13 @@ async function attachStyles({
         });
         for (const attr of link.attributes) {
           if (attr.name === "href") {
+            const absoluteHref = new URL(
+              attr.value,
+              baseUrl ?? location.origin
+            ).href;
             newLink.setAttribute(
               attr.name,
-              new URL(attr.value, baseUrl ?? location.origin).href
+              resolveClientUrl?.(absoluteHref) ?? absoluteHref
             );
           } else {
             newLink.setAttribute(attr.name, attr.value);
@@ -1978,7 +2056,7 @@ async function attachStyles({
 
 // src/html/host/runtime/index.ts
 init_error();
-async function getRuntime(type, url, bundle, shared, remoteShared) {
+async function getRuntime(type, url, bundle, shared, remoteShared, resolveClientUrl) {
   if (typeof globalThis.process === "undefined") {
     globalThis.process = {
       env: {}
@@ -1986,13 +2064,24 @@ async function getRuntime(type, url, bundle, shared, remoteShared) {
   }
   if (type === "webpack") {
     const { webpackRuntime: webpackRuntime2 } = await Promise.resolve().then(() => (init_webpack(), webpack_exports));
-    return webpackRuntime2(bundle ?? "default", shared, remoteShared);
+    return webpackRuntime2(
+      bundle ?? "default",
+      shared,
+      remoteShared,
+      resolveClientUrl
+    );
   } else if (type === "turbopack") {
     const { turbopackRuntime: turbopackRuntime2 } = await Promise.resolve().then(() => (init_turbopack(), turbopack_exports));
-    return turbopackRuntime2(url, bundle, shared, remoteShared);
+    return turbopackRuntime2(
+      url,
+      bundle,
+      shared,
+      remoteShared,
+      resolveClientUrl
+    );
   } else if (type === "script") {
     const { scriptRuntime: scriptRuntime2 } = await Promise.resolve().then(() => (init_script(), script_exports));
-    return scriptRuntime2();
+    return scriptRuntime2(resolveClientUrl);
   }
   throw new RemoteComponentsError(
     `Remote Components runtime "${type}" is not supported. Supported runtimes are "webpack", "turbopack", and "script".`
@@ -2017,6 +2106,7 @@ if (typeof HTMLElement !== "undefined") {
     reactRoot;
     onRequest;
     onResponse;
+    resolveClientUrl;
     /** Current AbortController for the loading operation - can be used to cancel loading via controller.abort() */
     abortController;
     static get observedAttributes() {
@@ -2123,13 +2213,18 @@ if (typeof HTMLElement !== "undefined") {
           this.name = url.hash.slice(1);
         }
       }
+      const resolveClientUrl = url ? bindResolveClientUrl(this.resolveClientUrl, url.href) : void 0;
       if (!remoteComponentChild && url) {
         const fetchInit = {
           credentials: this.getAttribute("credentials") || "same-origin"
         };
+        const resolvedUrl = new URL(
+          resolveClientUrl?.(url.href) ?? url.href,
+          window.location.href
+        );
         let res;
         try {
-          res = await fetchWithHooks(url, fetchInit, {
+          res = await fetchWithHooks(resolvedUrl, fetchInit, {
             onRequest: this.onRequest,
             onResponse: this.onResponse,
             abortController: this.abortController
@@ -2141,34 +2236,7 @@ if (typeof HTMLElement !== "undefined") {
           throw e;
         }
         if (!res || !res.ok) {
-          let error = failedToFetchRemoteComponentError(
-            url.href,
-            res ?? new Response(null, { status: 0 })
-          );
-          try {
-            const body = res ? await res.text() : "";
-            const parser2 = new DOMParser();
-            const doc2 = parser2.parseFromString(body, "text/html");
-            const errorTemplate = doc2.querySelector(
-              "template[data-next-error-message]"
-            );
-            const errorMessage = errorTemplate?.getAttribute(
-              "data-next-error-message"
-            );
-            const errorStack = errorTemplate?.getAttribute(
-              "data-next-error-stack"
-            );
-            if (errorMessage) {
-              error = new RemoteComponentsError(errorMessage);
-              if (errorStack) {
-                error.stack = errorStack;
-              }
-            }
-          } catch (parseError) {
-            if (isAbortError(parseError))
-              throw parseError;
-          }
-          throw error;
+          throw await errorFromFailedFetch(url.href, resolvedUrl, res);
         }
         try {
           html = await res.text();
@@ -2283,7 +2351,7 @@ if (typeof HTMLElement !== "undefined") {
         });
         this.dispatchEvent(changeEvent);
       }
-      this.prevUrl = url ?? new URL(location.href);
+      this.prevUrl = url ?? new URL(window.location.href);
       this.prevIsRemoteComponent = isRemoteComponent;
       this.prevSrc = src;
       this.prevName = this.name;
@@ -2298,7 +2366,8 @@ if (typeof HTMLElement !== "undefined") {
         // Effects run after load, no abort needed
         baseUrl: url?.href,
         remoteComponentSrc,
-        root: this.root ?? null
+        root: this.root ?? null,
+        resolveClientUrl
       });
       if (!this.reactRoot) {
         await attachStyles({
@@ -2308,22 +2377,31 @@ if (typeof HTMLElement !== "undefined") {
           signal,
           baseUrl: url?.href,
           remoteComponentSrc,
-          root: this.root
+          root: this.root,
+          resolveClientUrl
         });
         if (!isCurrentLoad()) {
           return abandonLoad();
         }
       }
-      applyOriginToNodes(doc, url ?? new URL(location.href));
+      applyOriginToNodes(
+        doc,
+        url ?? new URL(window.location.href),
+        resolveClientUrl
+      );
       if (!this.reactRoot) {
         Array.from(component.children).forEach((el) => {
           if (!isRemoteComponent && el.tagName.toLowerCase() === "script") {
             const newScript = document.createElement("script");
             for (const attr of el.attributes) {
               if (attr.name === "src") {
+                const absoluteSrc = new URL(
+                  attr.value,
+                  url ?? window.location.origin
+                ).href;
                 newScript.setAttribute(
                   attr.name,
-                  new URL(attr.value, url ?? location.origin).href
+                  resolveClientUrl?.(absoluteSrc) ?? absoluteSrc
                 );
               } else {
                 newScript.setAttribute(attr.name, attr.value);
@@ -2385,7 +2463,7 @@ if (typeof HTMLElement !== "undefined") {
         preloadScripts
       } = await getRuntime(
         metadataObj.runtime,
-        url ?? new URL(location.href),
+        url ?? new URL(window.location.href),
         this.bundle,
         {
           react: async () => (await import("react")).default,
@@ -2394,7 +2472,8 @@ if (typeof HTMLElement !== "undefined") {
           "react-dom": async () => (await import("react-dom")).default,
           "react-dom/client": async () => (await import("react-dom/client")).default
         },
-        remoteShared
+        remoteShared,
+        resolveClientUrl
       );
       if (!isCurrentLoad()) {
         return abandonLoad();
@@ -2617,6 +2696,7 @@ function registerSharedModules(modules = {}) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  proxyClientRequestsThroughHost,
   registerSharedModules
 });
 //# sourceMappingURL=host.cjs.map