request-iframe 0.2.0 → 0.2.2

package/esm/utils/logger.js

@@ -1,4 +1,5 @@
 import { LogLevel } from '../constants';
+import { warnOnce } from './warn-once';
 
 /**
  * Built-in leveled logger for request-iframe.
@@ -52,4 +53,35 @@ export function requestIframeLog(level, message, data) {
   } else {
     console[method](`%c${prefix}%c ${message}`, prefixStyle, messageStyle);
   }
-}
+}
+
+/**
+ * Unified logger facade.
+ *
+ * Notes:
+ * - This is a thin wrapper around existing functions (kept for backward compatibility).
+ * - `once()` is useful for configuration/security hints to avoid noisy logs.
+ */
+export var logger = {
+  getLevel: getRequestIframeLogLevel,
+  setLevel: setRequestIframeLogLevel,
+  ensureLevel: ensureRequestIframeLogLevel,
+  trace(message, data) {
+    requestIframeLog(LogLevel.TRACE, message, data);
+  },
+  info(message, data) {
+    requestIframeLog(LogLevel.INFO, message, data);
+  },
+  warn(message, data) {
+    requestIframeLog(LogLevel.WARN, message, data);
+  },
+  error(message, data) {
+    requestIframeLog(LogLevel.ERROR, message, data);
+  },
+  /**
+   * Log once by key (deduped across bundles/versions).
+   */
+  once(level, key, message, data) {
+    warnOnce(key, () => requestIframeLog(level, message, data));
+  }
+};

package/esm/utils/strict-mode.js

@@ -0,0 +1,85 @@
+import "core-js/modules/es.array.filter.js";
+import "core-js/modules/es.object.get-own-property-descriptors.js";
+import "core-js/modules/web.dom-collections.for-each.js";
+import _defineProperty from "@babel/runtime/helpers/esm/defineProperty";
+function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
+/**
+ * Security defaults helper for "strict mode".
+ *
+ * Goal:
+ * - Reduce boilerplate in common same-origin usage.
+ * - Provide safer defaults when user does NOT configure origin constraints explicitly.
+ *
+ * Behavior (when strict === true):
+ * - Client-like options:
+ *   - If targetOrigin is not provided, default to window.location.origin (same-origin only).
+ *   - If neither allowedOrigins nor validateOrigin is provided, default allowedOrigins to [window.location.origin].
+ * - Server-like options:
+ *   - If neither allowedOrigins nor validateOrigin is provided, default allowedOrigins to [window.location.origin].
+ *
+ * Notes:
+ * - This intentionally makes cross-origin setups fail fast unless user explicitly configures
+ *   targetOrigin and allowedOrigins/validateOrigin.
+ */
+
+export function getCurrentWindowOrigin() {
+  try {
+    var _window$location;
+    if (typeof window === 'undefined') return undefined;
+    var origin = (_window$location = window.location) === null || _window$location === void 0 ? void 0 : _window$location.origin;
+    if (typeof origin === 'string' && origin) return origin;
+  } catch (_unused) {
+    /** ignore */
+  }
+  return undefined;
+}
+export function applyStrictClientSecurityDefaults(defaultTargetOrigin, options) {
+  var _options$targetOrigin;
+  var strict = (options === null || options === void 0 ? void 0 : options.strict) === true;
+  var targetOrigin = (_options$targetOrigin = options === null || options === void 0 ? void 0 : options.targetOrigin) !== null && _options$targetOrigin !== void 0 ? _options$targetOrigin : defaultTargetOrigin;
+  var allowedOrigins = options === null || options === void 0 ? void 0 : options.allowedOrigins;
+  if (strict) {
+    var currentOrigin = getCurrentWindowOrigin();
+    if (currentOrigin) {
+      if (!(options !== null && options !== void 0 && options.targetOrigin)) {
+        targetOrigin = currentOrigin;
+      }
+      if (!(options !== null && options !== void 0 && options.allowedOrigins) && !(options !== null && options !== void 0 && options.validateOrigin)) {
+        allowedOrigins = [currentOrigin];
+      }
+    }
+  }
+  if (!options) {
+    return {
+      targetOrigin,
+      options: options
+    };
+  }
+  if (targetOrigin === options.targetOrigin && allowedOrigins === options.allowedOrigins) {
+    return {
+      targetOrigin,
+      options
+    };
+  }
+  return {
+    targetOrigin,
+    options: _objectSpread(_objectSpread(_objectSpread({}, options), targetOrigin !== options.targetOrigin ? {
+      targetOrigin
+    } : null), allowedOrigins !== options.allowedOrigins ? {
+      allowedOrigins
+    } : null)
+  };
+}
+export function applyStrictServerSecurityDefaults(options) {
+  var strict = (options === null || options === void 0 ? void 0 : options.strict) === true;
+  if (!strict) return options;
+  if (options !== null && options !== void 0 && options.allowedOrigins || options !== null && options !== void 0 && options.validateOrigin) {
+    return options;
+  }
+  var currentOrigin = getCurrentWindowOrigin();
+  if (!currentOrigin) return options;
+  return _objectSpread(_objectSpread({}, options), {}, {
+    allowedOrigins: [currentOrigin]
+  });
+}

package/esm/utils/warn-once.js

@@ -0,0 +1,30 @@
+import "core-js/modules/es.array.iterator.js";
+import "core-js/modules/es.set.js";
+import "core-js/modules/esnext.global-this.js";
+import "core-js/modules/web.dom-collections.iterator.js";
+/**
+ * A simple global warn-once helper.
+ *
+ * Why:
+ * - Some warnings need to fire before a hub/client/server instance exists (e.g. api factory functions).
+ * - We use Symbol.for() so multiple bundles/versions can share the same dedupe storage.
+ */
+
+var WARN_ONCE_SYMBOL = Symbol.for('__requestIframeWarnOnce__');
+function getHost() {
+  if (typeof window !== 'undefined') return window;
+  return globalThis;
+}
+function getWarnOnceSet() {
+  var host = getHost();
+  if (!(WARN_ONCE_SYMBOL in host)) {
+    host[WARN_ONCE_SYMBOL] = new Set();
+  }
+  return host[WARN_ONCE_SYMBOL];
+}
+export function warnOnce(key, fn) {
+  var set = getWarnOnceSet();
+  if (set.has(key)) return;
+  set.add(key);
+  fn();
+}

package/esm/utils/warnings.js

@@ -0,0 +1,47 @@
+import { LogLevel, OriginConstant, WarnOnceKey, buildWarnOnceKey, Messages, formatMessage } from '../constants';
+import { logger } from './logger';
+
+/**
+ * Minimal "warnOnce host" interface.
+ *
+ * Why:
+ * - We want to reuse the hub-level warnOnce mechanism without importing endpoint internals here.
+ */
+
+/**
+ * Warn when using `targetOrigin="*"` for Window targets without any incoming origin validation.
+ *
+ * Why:
+ * - For `Window` targets, default `targetOrigin` is '*'.
+ * - If user does not configure `allowedOrigins` / `validateOrigin`, origin validation is effectively disabled.
+ * - This is a best-practice/security warning and is logged once (INFO level) to avoid noise.
+ */
+export function warnUnsafeTargetOriginForWindow(params) {
+  if (params.isIframeTarget) return;
+  if (params.targetOrigin !== OriginConstant.ANY) return;
+  if (params.allowedOrigins || params.validateOrigin) return;
+  logger.once(LogLevel.INFO, buildWarnOnceKey(WarnOnceKey.TARGET_ORIGIN_ANY_WITHOUT_ORIGIN_VALIDATION), '[Security] targetOrigin is "*" for Window targets and no allowedOrigins/validateOrigin is configured. ' + 'Consider setting a strict targetOrigin and allowedOrigins/validateOrigin.');
+}
+
+/**
+ * Warn once when a client-side endpoint is already closed/destroyed and an inbound message arrives
+ * without a matching pending request.
+ *
+ * This is a debugging hint (warn level) because it often indicates lifecycle issues:
+ * - the client/server instance was recreated/unmounted before the response arrived
+ */
+export function warnClientServerIgnoredMessageWhenClosedOnce(host, params) {
+  host.warnOnce(buildWarnOnceKey(WarnOnceKey.INBOX_MISSING_PENDING_WHEN_CLOSED, params.requestId), () => {
+    logger.warn(formatMessage(Messages.CLIENT_SERVER_IGNORED_MESSAGE_WHEN_CLOSED, params.type, params.requestId));
+  });
+}
+
+/**
+ * Warn once when a server-side endpoint is already closed/destroyed and it receives a message
+ * that cannot be matched to a pending waiter (e.g. ack/pong/stream control frames).
+ */
+export function warnServerIgnoredMessageWhenClosedOnce(host, params) {
+  host.warnOnce(buildWarnOnceKey(WarnOnceKey.SERVER_MISSING_PENDING_WHEN_CLOSED, params.type, params.requestId), () => {
+    logger.warn(formatMessage(Messages.SERVER_IGNORED_MESSAGE_WHEN_CLOSED, params.type, params.requestId));
+  });
+}

package/library/api/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAS1F;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,iBAAiB,GAAG,MAAM,EAClC,OAAO,CAAC,EAAE,0BAA0B,GACnC,mBAAmB,CA2DrB;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAQtE"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAW1F;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,iBAAiB,GAAG,MAAM,EAClC,OAAO,CAAC,EAAE,0BAA0B,GACnC,mBAAmB,CAgFrB;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAQtE"}

package/library/api/client.js

@@ -8,10 +8,12 @@ exports.requestIframeClient = requestIframeClient;
 var _iframe = require("../utils/iframe");
 var _id = require("../utils/id");
 var _client = require("../impl/client");
-var _debug = require("../utils/debug");
 var _logger = require("../utils/logger");
 var _constants = require("../constants");
 var _channelCache = require("../message/channel-cache");
+var _warnings = require("../utils/warnings");
+var _debugLazy = require("../utils/debug-lazy");
+var _strictMode = require("../utils/strict-mode");
 /**
  * Create a client (for sending requests)
  * 
@@ -21,12 +23,13 @@ var _channelCache = require("../message/channel-cache");
  * - This allows different versions of the library to coexist
  */
 function requestIframeClient(target, options) {
+  var _resolved$options;
   var targetWindow = null;
-  var targetOrigin = _constants.OriginConstant.ANY;
+  var defaultTargetOrigin = _constants.OriginConstant.ANY;
   if (target.tagName === 'IFRAME') {
     var iframe = target;
     targetWindow = iframe.contentWindow;
-    targetOrigin = (0, _iframe.getIframeTargetOrigin)(iframe);
+    defaultTargetOrigin = (0, _iframe.getIframeTargetOrigin)(iframe);
     if (!targetWindow) {
       throw {
         message: _constants.Messages.IFRAME_NOT_READY,
@@ -35,16 +38,26 @@ function requestIframeClient(target, options) {
     }
   } else {
     targetWindow = target;
-    targetOrigin = _constants.OriginConstant.ANY;
+    defaultTargetOrigin = _constants.OriginConstant.ANY;
   }
+  var resolved = (0, _strictMode.applyStrictClientSecurityDefaults)(defaultTargetOrigin, options);
+  var targetOrigin = resolved.targetOrigin;
+  var resolvedOptions = (_resolved$options = resolved.options) !== null && _resolved$options !== void 0 ? _resolved$options : options;
 
-  // Allow user to override targetOrigin explicitly
-  if (options !== null && options !== void 0 && options.targetOrigin) {
-    targetOrigin = options.targetOrigin;
-  }
+  /**
+   * P1: warn on unsafe default targetOrigin for Window targets.
+   * - If targetOrigin is '*' and user did not configure allowedOrigins/validateOrigin,
+   *   incoming message origin validation is effectively disabled.
+   */
+  (0, _warnings.warnUnsafeTargetOriginForWindow)({
+    isIframeTarget: target.tagName === 'IFRAME',
+    targetOrigin,
+    allowedOrigins: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.allowedOrigins,
+    validateOrigin: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.validateOrigin
+  });
 
   // Determine secretKey
-  var secretKey = options === null || options === void 0 ? void 0 : options.secretKey;
+  var secretKey = resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.secretKey;
 
   // Generate instance ID first (will be used by both client and server)
   var instanceId = (0, _id.generateInstanceId)();
@@ -52,16 +65,16 @@ function requestIframeClient(target, options) {
   // Create client instance (internally creates its core message server)
   var client = new _client.RequestIframeClientImpl(targetWindow, targetOrigin, {
     secretKey,
-    ackTimeout: options === null || options === void 0 ? void 0 : options.ackTimeout,
-    timeout: options === null || options === void 0 ? void 0 : options.timeout,
-    asyncTimeout: options === null || options === void 0 ? void 0 : options.asyncTimeout,
-    returnData: options === null || options === void 0 ? void 0 : options.returnData,
-    headers: options === null || options === void 0 ? void 0 : options.headers,
-    allowedOrigins: options === null || options === void 0 ? void 0 : options.allowedOrigins,
-    validateOrigin: options === null || options === void 0 ? void 0 : options.validateOrigin,
-    autoOpen: options === null || options === void 0 ? void 0 : options.autoOpen,
-    autoAckMaxMetaLength: options === null || options === void 0 ? void 0 : options.autoAckMaxMetaLength,
-    autoAckMaxIdLength: options === null || options === void 0 ? void 0 : options.autoAckMaxIdLength
+    ackTimeout: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.ackTimeout,
+    timeout: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.timeout,
+    asyncTimeout: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.asyncTimeout,
+    returnData: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.returnData,
+    headers: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.headers,
+    allowedOrigins: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.allowedOrigins,
+    validateOrigin: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.validateOrigin,
+    autoOpen: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.autoOpen,
+    autoAckMaxMetaLength: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.autoAckMaxMetaLength,
+    autoAckMaxIdLength: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.autoAckMaxIdLength
   }, instanceId);
 
   /**
@@ -69,11 +82,21 @@ function requestIframeClient(target, options) {
    * - default: only warn/error will be printed (logger default)
    * - if trace enabled: raise log level and (optionally) enable detailed debug interceptors
    */
-  if (options !== null && options !== void 0 && options.trace) {
-    var level = options.trace === true ? _constants.LogLevel.TRACE : options.trace;
+  if (resolvedOptions !== null && resolvedOptions !== void 0 && resolvedOptions.trace) {
+    var level = resolvedOptions.trace === true ? _constants.LogLevel.TRACE : resolvedOptions.trace;
     (0, _logger.setRequestIframeLogLevel)(level);
     if (level === _constants.LogLevel.TRACE || level === _constants.LogLevel.INFO) {
-      (0, _debug.setupClientDebugInterceptors)(client);
+      /**
+       * Lazy-load debug hooks to keep main bundle smaller, but still ensure
+       * the first request in trace mode won't miss debug interceptors.
+       */
+      (0, _debugLazy.wrapClientMethodsForDebug)(client);
+      // Preheat import early (best-effort)
+      void (0, _debugLazy.loadDebugModule)().catch(() => {
+        /** ignore */
+      });
+      // Attach ASAP (best-effort)
+      void (0, _debugLazy.ensureClientDebugInterceptors)(client);
     }
   }
   return client;

package/library/api/endpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../../src/api/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,UAAU,CAAC;AAUlB;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAE9E;;;;;;;GAOG;AACH,MAAM,MAAM,4BAA4B,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;AA8LnG;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,GAAG,MAAM,EAClC,OAAO,CAAC,EAAE,4BAA4B,GACrC,qBAAqB,CAoCvB"}
+{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../../src/api/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,UAAU,CAAC;AAYlB;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAE9E;;;;;;;GAOG;AACH,MAAM,MAAM,4BAA4B,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;AAsMnG;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,GAAG,MAAM,EAClC,OAAO,CAAC,EAAE,4BAA4B,GACrC,qBAAqB,CA8CvB"}

package/library/api/endpoint.js

@@ -12,9 +12,11 @@ var _id = require("../utils/id");
 var _window = require("../utils/window");
 var _client = require("../impl/client");
 var _server = require("../impl/server");
-var _debug = require("../utils/debug");
 var _logger = require("../utils/logger");
 var _constants = require("../constants");
+var _warnings = require("../utils/warnings");
+var _debugLazy = require("../utils/debug-lazy");
+var _strictMode = require("../utils/strict-mode");
 /**
  * Endpoint facade type (client + server).
  */
@@ -77,7 +79,11 @@ class RequestIframeEndpointApiFacade {
         var level = options.trace === true ? _constants.LogLevel.TRACE : options.trace;
         (0, _logger.setRequestIframeLogLevel)(level);
         if (level === _constants.LogLevel.TRACE || level === _constants.LogLevel.INFO) {
-          (0, _debug.setupClientDebugInterceptors)(client);
+          (0, _debugLazy.wrapClientMethodsForDebug)(client);
+          void (0, _debugLazy.loadDebugModule)().catch(() => {
+            /** ignore */
+          });
+          void (0, _debugLazy.ensureClientDebugInterceptors)(client);
         }
       }
       this.client_ = client;
@@ -112,7 +118,9 @@ class RequestIframeEndpointApiFacade {
         var level = options.trace === true ? _constants.LogLevel.TRACE : options.trace;
         (0, _logger.setRequestIframeLogLevel)(level);
         if (level === _constants.LogLevel.TRACE || level === _constants.LogLevel.INFO) {
-          (0, _debug.setupServerDebugListeners)(server);
+          void (0, _debugLazy.loadDebugModule)().then(m => m.setupServerDebugListeners(server)).catch(() => {
+            /** ignore */
+          });
         }
       }
       this.server_ = server;
@@ -198,13 +206,13 @@ class RequestIframeEndpointApiFacade {
  * - handle requests from the peer (server)
  */
 function requestIframeEndpoint(target, options) {
-  var _options$id;
+  var _applyStrictServerSec, _resolvedClient$optio, _resolvedClient$optio2, _resolvedOptions$id;
   var targetWindow = null;
-  var targetOrigin = _constants.OriginConstant.ANY;
+  var defaultTargetOrigin = _constants.OriginConstant.ANY;
   if (target.tagName === 'IFRAME') {
     var iframe = target;
     targetWindow = iframe.contentWindow;
-    targetOrigin = (0, _iframe.getIframeTargetOrigin)(iframe);
+    defaultTargetOrigin = (0, _iframe.getIframeTargetOrigin)(iframe);
     if (!targetWindow) {
       throw {
         message: _constants.Messages.IFRAME_NOT_READY,
@@ -213,23 +221,32 @@ function requestIframeEndpoint(target, options) {
     }
   } else {
     targetWindow = target;
-    targetOrigin = _constants.OriginConstant.ANY;
+    defaultTargetOrigin = _constants.OriginConstant.ANY;
   }
+  var resolvedClient = (0, _strictMode.applyStrictClientSecurityDefaults)(defaultTargetOrigin, options);
+  var targetOrigin = resolvedClient.targetOrigin;
+  var resolvedOptions = (_applyStrictServerSec = (0, _strictMode.applyStrictServerSecurityDefaults)((_resolvedClient$optio = resolvedClient.options) !== null && _resolvedClient$optio !== void 0 ? _resolvedClient$optio : options)) !== null && _applyStrictServerSec !== void 0 ? _applyStrictServerSec : (_resolvedClient$optio2 = resolvedClient.options) !== null && _resolvedClient$optio2 !== void 0 ? _resolvedClient$optio2 : options;
 
-  /** Allow user to override targetOrigin explicitly */
-  if (options !== null && options !== void 0 && options.targetOrigin) {
-    targetOrigin = options.targetOrigin;
-  }
+  /**
+   * P1: warn on unsafe default targetOrigin for Window targets.
+   * Endpoint facade is lazy (client/server created later), so warn here.
+   */
+  (0, _warnings.warnUnsafeTargetOriginForWindow)({
+    isIframeTarget: target.tagName === 'IFRAME',
+    targetOrigin,
+    allowedOrigins: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.allowedOrigins,
+    validateOrigin: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.validateOrigin
+  });
 
   /**
    * Endpoint uses ONE shared id by default, so it behaves like a single endpoint.
    * If options.id is provided, it becomes the shared id for both client+server.
    */
-  var endpointId = (_options$id = options === null || options === void 0 ? void 0 : options.id) !== null && _options$id !== void 0 ? _options$id : (0, _id.generateInstanceId)();
+  var endpointId = (_resolvedOptions$id = resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.id) !== null && _resolvedOptions$id !== void 0 ? _resolvedOptions$id : (0, _id.generateInstanceId)();
   return new RequestIframeEndpointApiFacade({
     targetWindow,
     targetOrigin,
-    options,
+    options: resolvedOptions,
     endpointId
   });
 }

package/library/api/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/api/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAO3E;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,CAAC,EAAE,0BAA0B,GACnC,mBAAmB,CA6CrB;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,CAAC,EAAE,MAAM,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD,IAAI,CAGN"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/api/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAQ3E;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,CAAC,EAAE,0BAA0B,GACnC,mBAAmB,CAsDrB;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,CAAC,EAAE,MAAM,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD,IAAI,CAGN"}

package/library/api/server.js

@@ -6,10 +6,11 @@ Object.defineProperty(exports, "__esModule", {
 exports.clearRequestIframeServerCache = clearRequestIframeServerCache;
 exports.requestIframeServer = requestIframeServer;
 var _server = require("../impl/server");
-var _debug = require("../utils/debug");
 var _logger = require("../utils/logger");
 var _cache = require("../utils/cache");
 var _constants = require("../constants");
+var _debugLazy = require("../utils/debug-lazy");
+var _strictMode = require("../utils/strict-mode");
 /**
  * Create a server (for receiving and handling requests)
  * 
@@ -20,9 +21,11 @@ var _constants = require("../constants");
  * - This allows different versions of the library to coexist
  */
 function requestIframeServer(options) {
+  var _applyStrictServerSec;
+  var resolvedOptions = (_applyStrictServerSec = (0, _strictMode.applyStrictServerSecurityDefaults)(options)) !== null && _applyStrictServerSec !== void 0 ? _applyStrictServerSec : options;
   // Determine secretKey and id
-  var secretKey = options === null || options === void 0 ? void 0 : options.secretKey;
-  var id = options === null || options === void 0 ? void 0 : options.id;
+  var secretKey = resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.secretKey;
+  var id = resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.id;
 
   // If id is specified, check cache first
   if (id) {
@@ -36,13 +39,13 @@ function requestIframeServer(options) {
   var server = new _server.RequestIframeServerImpl({
     secretKey,
     id,
-    ackTimeout: options === null || options === void 0 ? void 0 : options.ackTimeout,
-    autoOpen: options === null || options === void 0 ? void 0 : options.autoOpen,
-    allowedOrigins: options === null || options === void 0 ? void 0 : options.allowedOrigins,
-    validateOrigin: options === null || options === void 0 ? void 0 : options.validateOrigin,
-    maxConcurrentRequestsPerClient: options === null || options === void 0 ? void 0 : options.maxConcurrentRequestsPerClient,
-    autoAckMaxMetaLength: options === null || options === void 0 ? void 0 : options.autoAckMaxMetaLength,
-    autoAckMaxIdLength: options === null || options === void 0 ? void 0 : options.autoAckMaxIdLength
+    ackTimeout: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.ackTimeout,
+    autoOpen: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.autoOpen,
+    allowedOrigins: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.allowedOrigins,
+    validateOrigin: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.validateOrigin,
+    maxConcurrentRequestsPerClient: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.maxConcurrentRequestsPerClient,
+    autoAckMaxMetaLength: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.autoAckMaxMetaLength,
+    autoAckMaxIdLength: resolvedOptions === null || resolvedOptions === void 0 ? void 0 : resolvedOptions.autoAckMaxIdLength
   });
 
   /**
@@ -50,11 +53,17 @@ function requestIframeServer(options) {
    * - default: only warn/error will be printed (logger default)
    * - if trace enabled: raise log level and (optionally) enable detailed debug listeners
    */
-  if (options !== null && options !== void 0 && options.trace) {
-    var level = options.trace === true ? _constants.LogLevel.TRACE : options.trace;
+  if (resolvedOptions !== null && resolvedOptions !== void 0 && resolvedOptions.trace) {
+    var level = resolvedOptions.trace === true ? _constants.LogLevel.TRACE : resolvedOptions.trace;
     (0, _logger.setRequestIframeLogLevel)(level);
     if (level === _constants.LogLevel.TRACE || level === _constants.LogLevel.INFO) {
-      (0, _debug.setupServerDebugListeners)(server);
+      /**
+       * Lazy-load debug hooks to keep main bundle smaller.
+       * Best-effort: ignore dynamic import errors.
+       */
+      void (0, _debugLazy.loadDebugModule)().then(m => m.setupServerDebugListeners(server)).catch(() => {
+        /** ignore */
+      });
     }
   }
 

package/library/constants/warn-once.d.ts

@@ -6,6 +6,12 @@
 export declare const WarnOnceKey: {
     readonly INBOX_MISSING_PENDING_WHEN_CLOSED: "inbox:missingPendingWhenClosed";
     readonly SERVER_MISSING_PENDING_WHEN_CLOSED: "server:missingPendingWhenClosed";
+    /**
+     * Security warning:
+     * - targetOrigin is '*'
+     * - and no allowedOrigins/validateOrigin is configured
+     */
+    readonly TARGET_ORIGIN_ANY_WITHOUT_ORIGIN_VALIDATION: "targetOrigin:anyWithoutOriginValidation";
 };
 export type WarnOnceKeyValue = typeof WarnOnceKey[keyof typeof WarnOnceKey];
 export declare function buildWarnOnceKey(prefix: WarnOnceKeyValue, ...parts: Array<string | number>): string;

package/library/constants/warn-once.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"warn-once.d.ts","sourceRoot":"","sources":["../../src/constants/warn-once.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,eAAO,MAAM,WAAW;;;CAGd,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAE5E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,CAGnG"}
+{"version":3,"file":"warn-once.d.ts","sourceRoot":"","sources":["../../src/constants/warn-once.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,eAAO,MAAM,WAAW;;;IAGtB;;;;OAIG;;CAEK,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAE5E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,CAGnG"}

package/library/constants/warn-once.js

@@ -14,7 +14,13 @@ require("core-js/modules/es.array.map.js");
 
 var WarnOnceKey = exports.WarnOnceKey = {
   INBOX_MISSING_PENDING_WHEN_CLOSED: 'inbox:missingPendingWhenClosed',
-  SERVER_MISSING_PENDING_WHEN_CLOSED: 'server:missingPendingWhenClosed'
+  SERVER_MISSING_PENDING_WHEN_CLOSED: 'server:missingPendingWhenClosed',
+  /**
+   * Security warning:
+   * - targetOrigin is '*'
+   * - and no allowedOrigins/validateOrigin is configured
+   */
+  TARGET_ORIGIN_ANY_WITHOUT_ORIGIN_VALIDATION: 'targetOrigin:anyWithoutOriginValidation'
 };
 function buildWarnOnceKey(prefix, ...parts) {
   if (!parts.length) return prefix;

package/library/endpoint/index.d.ts

@@ -12,5 +12,4 @@ export { RequestIframeEndpointFacade } from './facade';
 export { createStreamMessageHandler } from './stream/handler';
 export { buildStreamStartTimeoutErrorPayload } from './stream/errors';
 export { autoResolveIframeFileReadableStream, parseFilenameFromContentDisposition } from './stream/file-auto-resolve';
-export { createIframeFileWritableStreamFromContent } from './stream/file-writable';
 //# sourceMappingURL=index.d.ts.map

package/library/endpoint/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/endpoint/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,YAAY,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACnF,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,mCAAmC,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,MAAM,4BAA4B,CAAC;AACtH,OAAO,EAAE,yCAAyC,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/endpoint/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,YAAY,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACnF,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,mCAAmC,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,MAAM,4BAA4B,CAAC"}

package/library/endpoint/index.js

@@ -57,12 +57,6 @@ Object.defineProperty(exports, "buildStreamStartTimeoutErrorPayload", {
     return _errors.buildStreamStartTimeoutErrorPayload;
   }
 });
-Object.defineProperty(exports, "createIframeFileWritableStreamFromContent", {
-  enumerable: true,
-  get: function get() {
-    return _fileWritable.createIframeFileWritableStreamFromContent;
-  }
-});
 Object.defineProperty(exports, "createPingResponder", {
   enumerable: true,
   get: function get() {
@@ -110,5 +104,4 @@ var _factory = require("./stream/factory");
 var _facade = require("./facade");
 var _handler = require("./stream/handler");
 var _errors = require("./stream/errors");
-var _fileAutoResolve = require("./stream/file-auto-resolve");
-var _fileWritable = require("./stream/file-writable");
+var _fileAutoResolve = require("./stream/file-auto-resolve");

package/library/endpoint/infra/inbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../../src/endpoint/infra/inbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,OAAO,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAoB5D;;;;;;;;GAQG;AACH,qBAAa,0BAA0B;IACrC,gBAAuB,gBAAgB,2BAA2B;IAClE,gBAAuB,kBAAkB,4BAA4B;IAErE,SAAgB,KAAK;;;qBAEkD,MAAM;;;;;MAI3E;IAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA2B;IAC/C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;gBAEjC,GAAG,EAAE,wBAAwB,EAAE,gBAAgB,CAAC,EAAE,gBAAgB;IAKrF;;OAEG;IACI,gBAAgB,IAAI,IAAI;IAe/B;;;;;OAKG;IACI,aAAa,CAAC,MAAM,EAAE;QAC3B,IAAI,EAAE,2BAA2B,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QACrC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC;KAC/F,GAAG,OAAO,CAAC,OAAO,CAAC;IAoBpB;;OAEG;IACI,sBAAsB,CAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,EACxC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,EAC9B,MAAM,CAAC,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,GAC5F,IAAI;IAKP;;OAEG;IACI,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKxD,OAAO,CAAC,UAAU;IAUlB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAuE5B;;;;OAIG;IACH,OAAO,CAAC,UAAU;CAiCnB"}
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../../src/endpoint/infra/inbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,OAAO,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAqB5D;;;;;;;;GAQG;AACH,qBAAa,0BAA0B;IACrC,gBAAuB,gBAAgB,2BAA2B;IAClE,gBAAuB,kBAAkB,4BAA4B;IAErE,SAAgB,KAAK;;;qBAEkD,MAAM;;;;;MAI3E;IAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA2B;IAC/C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;gBAEjC,GAAG,EAAE,wBAAwB,EAAE,gBAAgB,CAAC,EAAE,gBAAgB;IAKrF;;OAEG;IACI,gBAAgB,IAAI,IAAI;IAe/B;;;;;OAKG;IACI,aAAa,CAAC,MAAM,EAAE;QAC3B,IAAI,EAAE,2BAA2B,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QACrC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC;KAC/F,GAAG,OAAO,CAAC,OAAO,CAAC;IAoBpB;;OAEG;IACI,sBAAsB,CAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,EACxC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,EAC9B,MAAM,CAAC,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,GAC5F,IAAI;IAKP;;OAEG;IACI,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKxD,OAAO,CAAC,UAAU;IAUlB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAqE5B;;;;OAIG;IACH,OAAO,CAAC,UAAU;CAiCnB"}

package/library/endpoint/infra/inbox.js

@@ -12,7 +12,7 @@ var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/de
 var _constants = require("../../constants");
 var _ping = require("../heartbeat/ping");
 var _hooks = require("../../utils/hooks");
-var _logger = require("../../utils/logger");
+var _warnings = require("../../utils/warnings");
 /**
  * Pending request awaiting response
  */
@@ -168,8 +168,9 @@ class RequestIframeEndpointInbox {
        */
       if (!this.hub.isOpen) {
         this.hooks.missingPending.call(data, context);
-        this.hub.warnOnce((0, _constants.buildWarnOnceKey)(_constants.WarnOnceKey.INBOX_MISSING_PENDING_WHEN_CLOSED, data.requestId), () => {
-          (0, _logger.requestIframeLog)('warn', (0, _constants.formatMessage)(_constants.Messages.CLIENT_SERVER_IGNORED_MESSAGE_WHEN_CLOSED, data.type, data.requestId));
+        (0, _warnings.warnClientServerIgnoredMessageWhenClosedOnce)(this.hub, {
+          type: data.type,
+          requestId: data.requestId
         });
       }
       return;

package/library/endpoint/infra/outbox.d.ts

@@ -53,6 +53,8 @@ export interface RequestIframeOutboxSendFileParams<TResult> extends RequestIfram
     fileName?: string;
     mimeType?: string;
     chunked?: boolean;
+    /** Chunk size in bytes (only used when chunked is true). */
+    chunkSize?: number;
     autoResolve?: boolean;
     defaultFileName?: string;
     defaultMimeType?: string;

package/library/endpoint/infra/outbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../../src/endpoint/infra/outbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGtG,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC;;GAEG;AACH,MAAM,WAAW,4BAA4B,CAAC,OAAO;IACnD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC;;OAEG;IACH,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9C;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IAC5C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC,CAAC,OAAO,CAAE,SAAQ,4BAA4B,CAAC,OAAO,CAAC;IACzG,MAAM,EAAE,qBAAqB,CAAC;IAC9B,IAAI,EAAE,UAAU,CAAC,2BAA2B,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,MAAM,EAAE,qBAAqB,CAAA;KAAE,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;CACjF;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC,CAAC,OAAO,CAAE,SAAQ,4BAA4B,CAAC,OAAO,CAAC;IACvG,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,EAAE,IAAI,CAAC,mCAAmC,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;CACtE;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B,CAAC,OAAO,CAAE,SAAQ,4BAA4B,CAAC,OAAO,CAAC;IACnG,IAAI,EAAE,GAAG,CAAC;IACV,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IACpE,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,IAAI,GAAG,IAAI,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;CACnE;AAkBD;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC,SAAgB,KAAK;;;;;;;MAOnB;IAEF,SAAgB,UAAU,EAAE,iBAAiB,CAAC;IAC9C,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,YAAY,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;gBAG9B,UAAU,EAAE,iBAAiB,EAC7B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,MAAM;IAQnB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAIlD,IAAW,SAAS,IAAI,MAAM,GAAG,SAAS,CAEzC;IAED,IAAW,OAAO,2CAEjB;YAEa,YAAY;IAyB1B;;;;;OAKG;IACI,uBAAuB,CAAC,MAAM,EAAE;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,qBAAqB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,IAAI,KAAK,IAAI,CAAC;QAC/F,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACrD,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,iBAAiB;IAgBrB;;;;;;OAMG;IACU,kBAAkB,CAC7B,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,UAAU,CAAC,2BAA2B,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,GAC5E,OAAO,CAAC,IAAI,CAAC;IAKhB;;OAEG;IACU,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,6BAA6B,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;YAkB9E,aAAa;IAoB3B;;OAEG;IACU,UAAU,CAAC,OAAO,GAAG,IAAI,EAAE,MAAM,EAAE,mCAAmC,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAM/G;;OAEG;IACU,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,iCAAiC,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAqBpG;;OAEG;IACI,WAAW,CAChB,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,GAAG,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC,GACrH,OAAO;IAkBV;;OAEG;IACI,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO;CAWlD"}
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../../src/endpoint/infra/outbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEtG,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC;;GAEG;AACH,MAAM,WAAW,4BAA4B,CAAC,OAAO;IACnD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC;;OAEG;IACH,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9C;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IAC5C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC,CAAC,OAAO,CAAE,SAAQ,4BAA4B,CAAC,OAAO,CAAC;IACzG,MAAM,EAAE,qBAAqB,CAAC;IAC9B,IAAI,EAAE,UAAU,CAAC,2BAA2B,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,MAAM,EAAE,qBAAqB,CAAA;KAAE,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;CACjF;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC,CAAC,OAAO,CAAE,SAAQ,4BAA4B,CAAC,OAAO,CAAC;IACvG,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,EAAE,IAAI,CAAC,mCAAmC,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;CACtE;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B,CAAC,OAAO,CAAE,SAAQ,4BAA4B,CAAC,OAAO,CAAC;IACnG,IAAI,EAAE,GAAG,CAAC;IACV,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IACpE,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,IAAI,GAAG,IAAI,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;CACnE;AAkBD;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC,SAAgB,KAAK;;;;;;;MAOnB;IAEF,SAAgB,UAAU,EAAE,iBAAiB,CAAC;IAC9C,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,YAAY,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;gBAG9B,UAAU,EAAE,iBAAiB,EAC7B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,MAAM;IAQnB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAIlD,IAAW,SAAS,IAAI,MAAM,GAAG,SAAS,CAEzC;IAED,IAAW,OAAO,2CAEjB;YAEa,YAAY;IAyB1B;;;;;OAKG;IACI,uBAAuB,CAAC,MAAM,EAAE;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,qBAAqB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,IAAI,KAAK,IAAI,CAAC;QAC/F,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACrD,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,iBAAiB;IAgBrB;;;;;;OAMG;IACU,kBAAkB,CAC7B,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,UAAU,CAAC,2BAA2B,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,GAC5E,OAAO,CAAC,IAAI,CAAC;IAKhB;;OAEG;IACU,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,6BAA6B,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;YAkB9E,aAAa;IAoB3B;;OAEG;IACU,UAAU,CAAC,OAAO,GAAG,IAAI,EAAE,MAAM,EAAE,mCAAmC,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAM/G;;OAEG;IACU,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,iCAAiC,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAsBpG;;OAEG;IACI,WAAW,CAChB,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,GAAG,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC,GACrH,OAAO;IAkBV;;OAEG;IACI,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO;CAWlD"}