request-iframe 0.1.0 → 0.1.1

package/esm/api/server.js

@@ -32,7 +32,9 @@ export function requestIframeServer(options) {
     autoOpen: options === null || options === void 0 ? void 0 : options.autoOpen,
     allowedOrigins: options === null || options === void 0 ? void 0 : options.allowedOrigins,
     validateOrigin: options === null || options === void 0 ? void 0 : options.validateOrigin,
-    maxConcurrentRequestsPerClient: options === null || options === void 0 ? void 0 : options.maxConcurrentRequestsPerClient
+    maxConcurrentRequestsPerClient: options === null || options === void 0 ? void 0 : options.maxConcurrentRequestsPerClient,
+    autoAckMaxMetaLength: options === null || options === void 0 ? void 0 : options.autoAckMaxMetaLength,
+    autoAckMaxIdLength: options === null || options === void 0 ? void 0 : options.autoAckMaxIdLength
   });
 
   // If trace mode is enabled, register debug listeners

package/esm/constants/index.js

@@ -14,6 +14,24 @@ export var ProtocolVersion = {
   MIN_SUPPORTED: 1
 };
 
+/**
+ * Special origin values
+ */
+export var OriginConstant = {
+  /** Wildcard origin (postMessage targetOrigin = '*') */
+  ANY: '*'
+};
+
+/**
+ * Auto-ack (ACK-only) limits.
+ */
+export var AutoAckConstant = {
+  /** Max length of ack.id to be echoed back in auto-ack */
+  MAX_ID_LENGTH: 1024,
+  /** Max length of ack.meta to be echoed back in auto-ack */
+  MAX_META_LENGTH: 5120
+};
+
 /**
  * Protocol version type
  */
@@ -113,8 +131,6 @@ export var MessageType = {
   RESPONSE: 'response',
   /** Error message */
   ERROR: 'error',
-  /** Client confirms response received */
-  RECEIVED: 'received',
   /** Ping message (for connection detection) */
   PING: 'ping',
   /** Pong message (for connection detection) */
@@ -146,7 +162,7 @@ export var MessageRole = {
 export var DefaultTimeout = {
   /** 
    * ACK confirmation timeout: 1000ms (1s)
-   * Used for both client waiting for server ACK and server waiting for client RECEIVED.
+   * Used for requireAck confirmation (ACK-only).
    * Increased from 500ms to accommodate slower environments or busy browsers where postMessage
    * serialization/deserialization may take longer.
    */
@@ -218,9 +234,7 @@ export var StreamInternalMessageType = {
   /** Cancel message */
   CANCEL: 'cancel',
   /** Pull message */
-  PULL: 'pull',
-  /** Ack message */
-  ACK: 'ack'
+  PULL: 'pull'
 };
 
 /**
@@ -251,6 +265,24 @@ export var StreamState = {
  * Stream state value type
  */
 
+/**
+ * Stream event name constants (for stream.on / observability)
+ */
+export var StreamEvent = {
+  START: 'start',
+  DATA: 'data',
+  READ: 'read',
+  WRITE: 'write',
+  SEND: 'send',
+  PULL: 'pull',
+  ACK: 'ack',
+  END: 'end',
+  CANCEL: 'cancel',
+  ERROR: 'error',
+  TIMEOUT: 'timeout',
+  EXPIRED: 'expired',
+  STATE: 'state'
+};
 /**
  * Message constants (for multi-language support)
  */

package/esm/constants/messages.js

@@ -57,6 +57,8 @@ var defaultMessages = {
   STREAM_ENDED: 'Stream has ended',
   STREAM_READ_ERROR: 'Failed to read stream data',
   STREAM_WRITE_ONLY_IN_PUSH_MODE: 'Stream write() is only available when mode is "push"',
+  STREAM_PENDING_QUEUE_OVERFLOW: 'Stream pending queue overflow (limit: {0})',
+  STREAM_PENDING_BYTES_OVERFLOW: 'Stream pending bytes overflow (limit: {0})',
   /** Debug messages - Client */
   DEBUG_CLIENT_REQUEST_START: '📤 [Client] Request Start',
   DEBUG_CLIENT_REQUEST_SUCCESS: '✅ [Client] Request Success',
@@ -73,7 +75,7 @@ var defaultMessages = {
   DEBUG_CLIENT_REQUEST_TIMEOUT: '⏱️ [Client] Request Timeout',
   DEBUG_CLIENT_SENDING_REQUEST: '📤 [Client] Sending Request',
   DEBUG_CLIENT_SENDING_PING: '📤 [Client] Sending Ping',
-  DEBUG_CLIENT_SENDING_RECEIVED_ACK: '📤 [Client] Sending Received ACK',
+  DEBUG_CLIENT_SENDING_RECEIVED_ACK: '📤 [Client] Sending ACK',
   /** Debug messages - Server */
   DEBUG_SERVER_RECEIVED_REQUEST: '📥 [Server] Received Request',
   DEBUG_SERVER_SETTING_STATUS_CODE: '📝 [Server] Setting Status Code',

package/esm/core/client-server.js

@@ -8,16 +8,12 @@ import "core-js/modules/web.dom-collections.iterator.js";
 import { MessageDispatcher } from '../message';
 import { getOrCreateMessageChannel, releaseMessageChannel } from '../utils/cache';
 import { isCompatibleVersion } from '../utils';
-import { MessageType, DefaultTimeout, ProtocolVersion, Messages, formatMessage, MessageRole } from '../constants';
+import { MessageType, ProtocolVersion, Messages, formatMessage, MessageRole, OriginConstant } from '../constants';
 
 /**
  * Stream message handler callback
  */
 
-/**
- * Pending acknowledgment response
- */
-
 /**
  * Pending request awaiting response
  */
@@ -33,9 +29,7 @@ import { MessageType, DefaultTimeout, ProtocolVersion, Messages, formatMessage,
  */
 export class RequestIframeClientServer {
   constructor(options, instanceId) {
-    var _options$ackTimeout, _options$versionValid;
-    /** Pending responses awaiting client acknowledgment */
-    _defineProperty(this, "pendingAcks", new Map());
+    var _options$versionValid;
     /** Pending requests awaiting response */
     _defineProperty(this, "pendingRequests", new Map());
     /**
@@ -46,12 +40,15 @@ export class RequestIframeClientServer {
     _defineProperty(this, "unregisterFns", []);
     /** Whether opened */
     _defineProperty(this, "_isOpen", false);
-    this.ackTimeout = (_options$ackTimeout = options === null || options === void 0 ? void 0 : options.ackTimeout) !== null && _options$ackTimeout !== void 0 ? _options$ackTimeout : DefaultTimeout.ACK;
     this.versionValidator = (_options$versionValid = options === null || options === void 0 ? void 0 : options.versionValidator) !== null && _options$versionValid !== void 0 ? _options$versionValid : isCompatibleVersion;
 
     // Get or create shared channel and create dispatcher
     var channel = getOrCreateMessageChannel(options === null || options === void 0 ? void 0 : options.secretKey);
     this.dispatcher = new MessageDispatcher(channel, MessageRole.CLIENT, instanceId);
+    this.dispatcher.setAutoAckLimits({
+      maxMetaLength: options === null || options === void 0 ? void 0 : options.autoAckMaxMetaLength,
+      maxIdLength: options === null || options === void 0 ? void 0 : options.autoAckMaxIdLength
+    });
 
     // Auto-open by default (unless explicitly set to false)
     if ((options === null || options === void 0 ? void 0 : options.autoOpen) !== false) {
@@ -111,9 +108,6 @@ export class RequestIframeClientServer {
     // Handle ERROR messages
     this.unregisterFns.push(this.dispatcher.registerHandler(MessageType.ERROR, boundHandleClientResponse, handlerOptions));
 
-    // Handle RECEIVED messages
-    this.unregisterFns.push(this.dispatcher.registerHandler(MessageType.RECEIVED, this.handleReceived.bind(this), handlerOptions));
-
     // Handle PONG messages
     this.unregisterFns.push(this.dispatcher.registerHandler(MessageType.PONG, this.handlePong.bind(this), handlerOptions));
 
@@ -188,7 +182,7 @@ export class RequestIframeClientServer {
         // If validator throws, treat as disallowed
         return;
       }
-    } else if (pending.origin && pending.origin !== '*' && context.origin !== pending.origin) {
+    } else if (pending.origin && pending.origin !== OriginConstant.ANY && context.origin !== pending.origin) {
       return;
     }
 
@@ -213,18 +207,6 @@ export class RequestIframeClientServer {
     pending.resolve(data);
   }
 
-  /**
-   * Handle received acknowledgment
-   */
-  handleReceived(data) {
-    var pending = this.pendingAcks.get(data.requestId);
-    if (pending) {
-      clearTimeout(pending.timeoutId);
-      this.pendingAcks.delete(data.requestId);
-      pending.resolve(true);
-    }
-  }
-
   /**
    * Handle pong
    */
@@ -239,7 +221,7 @@ export class RequestIframeClientServer {
         } catch (_unused2) {
           return;
         }
-      } else if (pending.origin && pending.origin !== '*' && context.origin !== pending.origin) {
+      } else if (pending.origin && pending.origin !== OriginConstant.ANY && context.origin !== pending.origin) {
         return;
       }
       if (!context.handledBy) {
@@ -268,21 +250,6 @@ export class RequestIframeClientServer {
     return this.dispatcher;
   }
 
-  /**
-   * Register pending acknowledgment response
-   */
-  _registerPendingAck(requestId, resolve, reject) {
-    var timeoutId = setTimeout(() => {
-      this.pendingAcks.delete(requestId);
-      resolve(false);
-    }, this.ackTimeout);
-    this.pendingAcks.set(requestId, {
-      resolve,
-      reject,
-      timeoutId
-    });
-  }
-
   /**
    * Register pending request awaiting response
    */
@@ -318,8 +285,6 @@ export class RequestIframeClientServer {
 
     // Clear pending
     this.pendingRequests.clear();
-    this.pendingAcks.forEach(pending => clearTimeout(pending.timeoutId));
-    this.pendingAcks.clear();
     this.warnedMissingPendingWhenClosed.clear();
 
     // Destroy dispatcher and release channel reference

package/esm/core/client.js

@@ -24,11 +24,11 @@ import "core-js/modules/es.string.starts-with.js";
 import "core-js/modules/web.dom-collections.for-each.js";
 import "core-js/modules/web.dom-collections.iterator.js";
 import { RequestIframeError } from '../utils';
-import { isAckMetaEqual } from '../utils/ack-meta';
+import { isAckMatch } from '../utils/ack';
 import { detectContentType, blobToBase64, isWindowAvailable, matchOrigin } from '../utils';
 import { generateRequestId, generateInstanceId, CookieStore } from '../utils';
 import { RequestInterceptorManager, ResponseInterceptorManager, runRequestInterceptors, runResponseInterceptors } from '../interceptors';
-import { DefaultTimeout, ErrorCode, MessageType, HttpStatus, HttpStatusText, HttpHeader, Messages, formatMessage, StreamType as StreamTypeConstant } from '../constants';
+import { DefaultTimeout, ErrorCode, MessageType, OriginConstant, HttpStatus, HttpStatusText, HttpHeader, Messages, formatMessage, StreamType as StreamTypeConstant } from '../constants';
 import { IframeReadableStream, IframeFileReadableStream, isIframeWritableStream } from '../stream';
 
 /**
@@ -133,7 +133,7 @@ export class RequestIframeClientImpl {
         } catch (_unused) {
           return;
         }
-      } else if (this.targetOrigin !== '*' && context.origin !== this.targetOrigin) {
+      } else if (this.targetOrigin !== OriginConstant.ANY && context.origin !== this.targetOrigin) {
         return;
       }
     }
@@ -450,7 +450,7 @@ export class RequestIframeClientImpl {
       _processedConfig$requ3 = processedConfig.requireAck,
       requireAck = _processedConfig$requ3 === void 0 ? true : _processedConfig$requ3,
       streamTimeout = processedConfig.streamTimeout,
-      ackMeta = processedConfig.ackMeta,
+      ack = processedConfig.ack,
       _processedConfig$retu = processedConfig.returnData,
       returnData = _processedConfig$retu === void 0 ? this.defaultReturnData : _processedConfig$retu;
     return new Promise((resolve, reject) => {
@@ -524,8 +524,8 @@ export class RequestIframeClientImpl {
 
         // Received ACK: server has received request
         if (data.type === MessageType.ACK) {
-          // Optional ackMeta match (ignore mismatched ACK)
-          if (ackMeta !== undefined && !isAckMetaEqual(ackMeta, data.ackMeta)) {
+          // Optional ack match (ignore mismatched ACK)
+          if (ack !== undefined && !isAckMatch(ack, data.ack)) {
             return;
           }
           // Remember server's creatorId as target server ID for future requests
@@ -740,7 +740,7 @@ export class RequestIframeClientImpl {
         cookies: mergedCookies,
         targetId,
         requireAck,
-        ackMeta
+        ack
       };
       if (extraPayload !== null && extraPayload !== void 0 && extraPayload.streamId) {
         payload.streamId = extraPayload.streamId;

package/esm/core/response.js

@@ -9,10 +9,10 @@ import "core-js/modules/es.object.get-own-property-descriptors.js";
 import "core-js/modules/es.promise.js";
 import "core-js/modules/web.dom-collections.for-each.js";
 import "core-js/modules/web.dom-collections.iterator.js";
-import { createPostMessage, createSetCookie, createClearCookie, detectContentType, blobToBase64 } from '../utils';
+import { createPostMessage, createSetCookie, createClearCookie, detectContentType, blobToBase64, generateRequestId } from '../utils';
 import { MessageType, HttpStatus, HttpHeader, getStatusText, MessageRole, ErrorCode } from '../constants';
 import { IframeFileWritableStream, isIframeWritableStream } from '../stream';
-import { isAckMetaEqual } from '../utils/ack-meta';
+import { isAckMatch } from '../utils/ack';
 
 /**
  * Callback waiting for client acknowledgment
@@ -88,9 +88,9 @@ export class ServerResponseImpl {
   /**
    * Trigger client acknowledgment callback
    */
-  _triggerAck(received, ackMeta) {
+  _triggerAck(received, ack) {
     if (this.onAckCallback) {
-      this.onAckCallback(received, ackMeta);
+      this.onAckCallback(received, ack);
       this.onAckCallback = undefined;
     }
   }
@@ -119,11 +119,19 @@ export class ServerResponseImpl {
    * Internal method: send raw data (used by send after type detection)
    */
   _sendRaw(data, options) {
-    var _options$requireAck;
+    var _options$requireAck, _ack;
     if (this._sent) return Promise.resolve(false);
     this.markSent();
     var requireAck = (_options$requireAck = options === null || options === void 0 ? void 0 : options.requireAck) !== null && _options$requireAck !== void 0 ? _options$requireAck : false;
-    var expectedAckMeta = options === null || options === void 0 ? void 0 : options.ackMeta;
+    /**
+     * When requireAck is enabled, attach a unique ack payload by default so ACK can be
+     * unambiguously associated with this send.
+     *
+     * NOTE: ack is an internal reserved field (not part of public API).
+     */
+    var expectedAck = (_ack = options === null || options === void 0 ? void 0 : options.ack) !== null && _ack !== void 0 ? _ack : requireAck ? {
+      id: generateRequestId()
+    } : undefined;
     try {
       // If acknowledgment not required, send directly and return true
       if (!requireAck) {
@@ -150,7 +158,7 @@ export class ServerResponseImpl {
               resolve(false);
               return;
             }
-            if (expectedAckMeta !== undefined && !isAckMetaEqual(expectedAckMeta, receivedAckMeta)) {
+            if (expectedAck !== undefined && !isAckMatch(expectedAck, receivedAckMeta)) {
               resolve(false);
               return;
             }
@@ -164,7 +172,7 @@ export class ServerResponseImpl {
             statusText: getStatusText(this.statusCode),
             headers: this.headers,
             requireAck: true,
-            ackMeta: expectedAckMeta,
+            ack: expectedAck,
             role: MessageRole.SERVER,
             creatorId: this.serverId,
             targetId: this.targetId

package/esm/core/server.js

@@ -89,6 +89,10 @@ export class RequestIframeServerImpl {
     // Get or create shared channel and create dispatcher
     var channel = getOrCreateMessageChannel(options === null || options === void 0 ? void 0 : options.secretKey);
     this.dispatcher = new MessageDispatcher(channel, MessageRole.SERVER, this.id);
+    this.dispatcher.setAutoAckLimits({
+      maxMetaLength: options === null || options === void 0 ? void 0 : options.autoAckMaxMetaLength,
+      maxIdLength: options === null || options === void 0 ? void 0 : options.autoAckMaxIdLength
+    });
 
     // Auto-open by default (unless explicitly set to false)
     if ((options === null || options === void 0 ? void 0 : options.autoOpen) !== false) {
@@ -175,8 +179,8 @@ export class RequestIframeServerImpl {
     // Handle PONG messages (server -> client heartbeat)
     this.unregisterFns.push(this.dispatcher.registerHandler(MessageType.PONG, (data, context) => this.handlePong(data, context), handlerOptions));
 
-    // Handle RECEIVED messages (for confirming response delivery)
-    this.unregisterFns.push(this.dispatcher.registerHandler(MessageType.RECEIVED, (data, context) => this.handleReceived(data, context), handlerOptions));
+    // Handle ACK messages (for confirming response delivery when requireAck === true)
+    this.unregisterFns.push(this.dispatcher.registerHandler(MessageType.ACK, (data, context) => this.handleAck(data, context), handlerOptions));
 
     // Handle stream_* messages (client→server stream)
     this.unregisterFns.push(this.dispatcher.registerHandler(MessageType.STREAM_START, (data, ctx) => this.handleStreamStart(data, ctx), handlerOptions));
@@ -298,6 +302,11 @@ export class RequestIframeServerImpl {
     if (!(body !== null && body !== void 0 && body.streamId)) return;
     var handler = this.streamHandlers.get(body.streamId);
     if (handler) {
+      // Mark as accepted/handled so MessageDispatcher can auto-ack when requireAck === true
+      if (!context.handledBy) {
+        context.accepted = true;
+        context.handledBy = this.id;
+      }
       var messageType = data.type.replace('stream_', '');
       handler(_objectSpread(_objectSpread({}, body), {}, {
         type: messageType
@@ -377,9 +386,9 @@ export class RequestIframeServerImpl {
   }
 
   /**
-   * Handle received acknowledgment
+   * Handle ACK (receipt confirmation for responses when requireAck === true).
    */
-  handleReceived(data, context) {
+  handleAck(data, context) {
     if (!this.isOriginAllowed(data, context)) return;
     var pending = this.pendingAcks.get(data.requestId);
     if (pending) {
@@ -389,7 +398,7 @@ export class RequestIframeServerImpl {
       }
       clearTimeout(pending.timeoutId);
       this.pendingAcks.delete(data.requestId);
-      pending.resolve(true, data.ackMeta);
+      pending.resolve(true, data.ack);
     }
   }
 
@@ -543,7 +552,7 @@ export class RequestIframeServerImpl {
           status: HttpStatus.TOO_MANY_REQUESTS,
           statusText: HttpStatusText[HttpStatus.TOO_MANY_REQUESTS],
           requireAck: data.requireAck,
-          ackMeta: data.ackMeta,
+          ack: data.ack,
           targetId: data.creatorId
         });
         return;
@@ -571,8 +580,8 @@ export class RequestIframeServerImpl {
     });
 
     // Register callback waiting for client acknowledgment
-    this.registerPendingAck(data.requestId, (received, ackMeta) => {
-      res._triggerAck(received, ackMeta);
+    this.registerPendingAck(data.requestId, (received, ack) => {
+      res._triggerAck(received, ack);
     }, () => {
       res._triggerAck(false);
     });
@@ -597,7 +606,7 @@ export class RequestIframeServerImpl {
             status: HttpStatus.REQUEST_TIMEOUT,
             statusText: HttpStatusText[HttpStatus.REQUEST_TIMEOUT],
             requireAck: pending.data.requireAck,
-            ackMeta: pending.data.ackMeta,
+            ack: pending.data.ack,
             targetId: pending.data.creatorId
           });
         }

package/esm/message/channel.js

@@ -8,6 +8,7 @@ import "core-js/modules/es.set.js";
 import "core-js/modules/web.dom-collections.for-each.js";
 import "core-js/modules/web.dom-collections.iterator.js";
 import { isValidPostMessage, createPostMessage, isWindowAvailable } from '../utils';
+import { OriginConstant } from '../constants';
 
 /**
  * Message context (extracted from MessageEvent, transport-agnostic)
@@ -141,7 +142,7 @@ export class MessageChannel {
    * @param message message data (already formatted as PostMessageData)
    * @param targetOrigin target origin (defaults to '*')
    */
-  send(target, message, targetOrigin = '*') {
+  send(target, message, targetOrigin = OriginConstant.ANY) {
     if (!isWindowAvailable(target)) {
       return false;
     }

package/esm/message/dispatcher.js

@@ -18,8 +18,9 @@ import "core-js/modules/es.object.get-own-property-descriptors.js";
 import "core-js/modules/es.regexp.constructor.js";
 import "core-js/modules/es.regexp.exec.js";
 import "core-js/modules/es.regexp.to-string.js";
-import { MessageRole, MessageType } from '../constants';
+import { AutoAckConstant, MessageRole, MessageType, OriginConstant } from '../constants';
 import { getProtocolVersion, createPostMessage } from '../utils';
+import { getAckId, getAckMeta } from '../utils/ack';
 
 /**
  * Message handler function type
@@ -65,12 +66,9 @@ export class MessageDispatcher {
     /** Role of this dispatcher ('client' or 'server') */
     /** Instance ID of the client/server that owns this dispatcher */
     /** Underlying message channel */
-    /**
-     * Fallback target for sending auto-ack messages when MessageEvent.source is unavailable.
-     * - In real browser postMessage events, `source` should normally exist.
-     * - This is primarily used for unit tests or edge environments that synthesize MessageEvent without `source`.
-     */
-    _defineProperty(this, "fallbackTargetOrigin", '*');
+    _defineProperty(this, "autoAckMaxMetaLength", AutoAckConstant.MAX_META_LENGTH);
+    _defineProperty(this, "autoAckMaxIdLength", AutoAckConstant.MAX_ID_LENGTH);
+    _defineProperty(this, "fallbackTargetOrigin", OriginConstant.ANY);
     /** Message handler list */
     _defineProperty(this, "handlers", []);
     /** Reference count (for determining if can be destroyed when cached) */
@@ -93,11 +91,26 @@ export class MessageDispatcher {
   /**
    * Set fallback target for outgoing auto-ack messages.
    */
-  setFallbackTarget(targetWindow, targetOrigin = '*') {
+  setFallbackTarget(targetWindow, targetOrigin = OriginConstant.ANY) {
     this.fallbackTargetWindow = targetWindow;
     this.fallbackTargetOrigin = targetOrigin;
   }
 
+  /**
+   * Configure auto-ack echo limits (advanced/internal).
+   *
+   * @internal
+   */
+  setAutoAckLimits(limits) {
+    if (!limits || typeof limits !== 'object') return;
+    if (typeof limits.maxMetaLength === 'number' && Number.isFinite(limits.maxMetaLength) && limits.maxMetaLength >= 0) {
+      this.autoAckMaxMetaLength = limits.maxMetaLength;
+    }
+    if (typeof limits.maxIdLength === 'number' && Number.isFinite(limits.maxIdLength) && limits.maxIdLength >= 0) {
+      this.autoAckMaxIdLength = limits.maxIdLength;
+    }
+  }
+
   // ==================== Reference Counting ====================
 
   /**
@@ -277,29 +290,54 @@ export class MessageDispatcher {
     var type = data.type;
 
     // Don't auto-ack ack messages (avoid loops)
-    if (type === MessageType.ACK || type === MessageType.RECEIVED) return;
-    var shouldAckRequest = type === MessageType.REQUEST && data.requireAck !== false;
-    var shouldAckPing = type === MessageType.PING && data.requireAck === true;
-    var shouldAckResponse = (type === MessageType.RESPONSE || type === MessageType.ERROR) && data.requireAck === true;
-    if ((shouldAckRequest || shouldAckPing) && context.accepted === true) {
-      // Delivery acknowledgment for request/ping
+    if (type === MessageType.ACK) return;
+
+    /**
+     * ACK-only requireAck workflow (no compatibility guarantees):
+     * - For any message with `requireAck === true`, once the message is accepted/handled
+     *   (via `context.accepted === true` + `context.handledBy` setter hook),
+     *   we reply with `ack`.
+     *
+     * This unifies:
+     * - request delivery confirmation
+     * - response receipt confirmation
+     * - stream frame delivery confirmation (e.g. stream_data per-frame ack)
+     */
+    if (data.requireAck === true && context.accepted === true) {
+      var ack = this.getAutoAckEchoPayload(data.ack);
       this.sendMessage(targetWindow, targetOrigin, MessageType.ACK, data.requestId, {
         path: data.path,
         targetId: data.creatorId,
-        ackMeta: data.ackMeta
-      });
-      return;
-    }
-    if (shouldAckResponse && context.accepted === true) {
-      // Receipt acknowledgment for response/error
-      this.sendMessage(targetWindow, targetOrigin, MessageType.RECEIVED, data.requestId, {
-        path: data.path,
-        targetId: data.creatorId,
-        ackMeta: data.ackMeta
+        ack
       });
     }
   }
 
+  /**
+   * Limit echoed ack payload size for auto-ack replies.
+   *
+   * We only echo a fixed shape `{ id, meta?: string }`:
+   * - If meta is too long, we drop meta and only echo `{ id }`.
+   * - If id is missing or too long, omit `ack` field.
+   */
+  getAutoAckEchoPayload(rawAck) {
+    if (rawAck === undefined) return undefined;
+    var id = getAckId(rawAck);
+    if (id === undefined) return undefined;
+    if (typeof id === 'string' && id.length > this.autoAckMaxIdLength) return undefined;
+    var meta = getAckMeta(rawAck);
+    if (meta === undefined) return {
+      id
+    };
+    if (meta.length > this.autoAckMaxMetaLength) return {
+      id
+    };
+    return {
+      id,
+      meta
+    };
+  }
+
   /**
    * Check if message type matches
    */
@@ -324,7 +362,7 @@ export class MessageDispatcher {
    * @param message message data (already formatted as PostMessageData)
    * @param targetOrigin target origin (defaults to '*')
    */
-  send(target, message, targetOrigin = '*') {
+  send(target, message, targetOrigin = OriginConstant.ANY) {
     // Automatically set role and creatorId if not already set (for backward compatibility)
     if (message.role === undefined) {
       message.role = this.role;