{"version":3,"sources":["../src/campaign-detail/types.ts","../src/shared/auth-bridge.ts","../src/campaign-detail/web-component.ts"],"names":[],"mappings":";AA6FO,IAAM,qCAAA,GAGT;AAAA,EACF,qBAAA,EAAuB,yBAAA;AAAA,EACvB,eAAA,EAAiB,mBAAA;AAAA,EACjB,wBAAA,EAA0B,6BAAA;AAAA,EAC1B,iBAAA,EAAmB,qBAAA;AAAA,EACnB,kBAAA,EAAoB,sBAAA;AAAA,EACpB,aAAA,EAAe,gBAAA;AAAA,EACf,YAAA,EAAc,eAAA;AAAA,EACd,kBAAA,EAAoB,sBAAA;AAAA,EACpB,kBAAA,EAAoB,sBAAA;AAAA,EACpB,iBAAA,EAAmB,qBAAA;AAAA,EACnB,cAAA,EAAgB,kBAAA;AAAA,EAChB,iBAAA,EAAmB,qBAAA;AAAA,EACnB,uBAAA,EAAyB,4BAAA;AAAA,EACzB,eAAA,EAAiB,mBAAA;AAAA,EACjB,iBAAA,EAAmB,qBAAA;AAAA,EACnB,cAAA,EAAgB,kBAAA;AAAA,EAChB,gBAAA,EAAkB,oBAAA;AAAA,EAClB,kBAAA,EAAoB,sBAAA;AAAA,EACpB,wBAAA,EAA0B;AAC5B,CAAA;;;AC/EA,IAAM,kBAAA,GAAqB,YAAA;AAC3B,IAAM,mBAAA,GAAsB,aAAA;AAC5B,IAAM,sBAAA,GAAyB,qBAAA;AAE/B,SAAS,oBAAoB,IAAA,EAA6B;AACxD,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,YAAA,CAAa,wBAAwB,CAAA,IAAK,EAAA;AAC3D,EAAA,OAAO,GAAA,CACJ,KAAA,CAAM,GAAG,CAAA,CACT,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA,CACnB,MAAA,CAAO,OAAO,CAAA;AACnB;AAEA,SAAS,qBAAA,CAAsB,MAAmB,MAAA,EAAyB;AAEzE,EAAA,IAAI,MAAA,KAAW,MAAA,CAAO,QAAA,CAAS,MAAA,EAAQ,OAAO,IAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,oBAAoB,IAAI,CAAA;AACxC,EAAA,OAAO,OAAA,CAAQ,SAAS,MAAM,CAAA;AAChC;AAEO,SAAS,gBAAA,CACd,MACA,IAAA,EACkB;AAElB,EAAA,IAAI,WAAA,GAA6B,IAAA;AAEjC,EAAA,MAAM,eAAe,MAAqB;AACxC,IAAA,IAAI,aAAa,OAAO,WAAA;AACxB,IAAA,OAAO,KAAK,YAAA,CAAa,YAAY,CAAA,IAAK,IAAA,CAAK,aAAa,SAAS,CAAA;AAAA,EACvE,CAAA;AAEA,EAAA,MAAM,mBAAmB,MAAY;AACnC,IAAA,MAAM,MAAA,GAAS,KAAK,cAAA,EAAe;AACnC,IAAA,MAAM,QAAQ,YAAA,EAAa;AAC3B,IAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,aAAA,IAAiB,CAAC,KAAA,EAAO;AAChD,IAAA,MAAA,CAAO,aAAA,CAAc,WAAA;AAAA,MACnB,EAAE,IAAA,EAAM,kBAAA,EAAoB,KAAA,EAAM;AAAA,MAClC,IAAA,CAAK;AAAA,KACP;AAAA,EACF,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA8B;AAC/C,IAAA,IAAI,CAAC,SAAS,OAAO,KAAA,CAAM,SAAS,QAAA,IAAY,KAAA,CAAM,SAAS,IAAA,EAAM;AACnE,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AAGnB,IAAA,IAAI,IAAA,CAAK,SAAS,mBAAA,EAAqB;AACrC,MAAA,IAAI,CAAC,qBAAA,CAAsB,IAAA,EAAM,KAAA,CAAM,MAAM,CAAA,EAAG;AAChD,MAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,IAAY,CAAC,KAAK,KAAA,EAAO;AACnD,MAAA,WAAA,GAAc,IAAA,CAAK,KAAA;AACnB,MAAA,gBAAA,EAAiB;AACjB,MAAA;AAAA,IACF;AAIA,IAAA,IAAI,IAAA,CAAK,SAAS,sBAAA,EAAwB;AACxC,MAAA,MAAM,MAAA,GAAS,KAAK,cAAA,EAAe;AACnC,MAAA,IAAI,CAAC,MAAA,IAAU,KAAA,CAAM,MAAA,KAAW,OAAO,aAAA,EAAe;AACtD,MAAA,IAAA,CAAK,aAAA;AAAA,QACH,IAAI,YAAY,sBAAA,EAAwB;AAAA,UACtC,OAAA,EAAS,IAAA;AAAA,UACT,QAAA,EAAU;AAAA,SACX;AAAA,OACH;AAAA,IACF;AAAA,EACF,CAAA;AAEA,EAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,SAAS,CAAA;AAE5C,EAAA,OAAO;AAAA,IACL,MAAA,GAAS;AACP,MAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAAA,IACjD,CAAA;AAAA,IACA,gBAAA;AAAA,IACA;AAAA,GACF;AACF;AAGO,IAAM,0BAAA,GAA6B;AAAA,EACxC,YAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA;;;ACrGA,IAAM,wBAAwB,MAAA,CAAO,MAAA;AAAA,EACnC;AACF,CAAA;AACA,IAAM,WAAA,GAAc,IAAI,GAAA,CAAY,0BAA0B,CAAA;AAE9D,IAAM,2BAAA,GAAN,cAA0C,WAAA,CAAY;AAAA,EAKpD,WAAA,GAAc;AACZ,IAAA,KAAA,EAAM;AALR,IAAA,IAAA,CAAO,MAAA,GAAmC,IAAA;AAC1C,IAAA,IAAA,CAAQ,UAAA,GAAsC,IAAA;AAC9C,IAAA,IAAA,CAAQ,mBAAA,GAA0D,IAAA;AAIhE,IAAA,IAAA,CAAK,YAAA,CAAa,EAAE,IAAA,EAAM,MAAA,EAAQ,CAAA;AAAA,EACpC;AAAA,EAEA,WAAW,kBAAA,GAA+B;AACxC,IAAA,OAAO;AAAA,MACL,IAAA;AAAA,MACA,OAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,OAAA;AAAA,MACA,GAAG,0BAAA;AAAA,MACH,GAAG;AAAA,KACL;AAAA,EACF;AAAA,EAEA,iBAAA,GAA0B;AACxB,IAAA,IAAA,CAAK,UAAA,GAAa,iBAAiB,IAAA,EAAM;AAAA,MACvC,cAAA,EAAgB,MAAM,IAAA,CAAK,MAAA;AAAA,MAC3B,SAAS,IAAA,CAAK;AAAA,KACf,CAAA;AACD,IAAA,IAAA,CAAK,mBAAA,GAAsB,IAAA,CAAK,mBAAA,CAAoB,IAAA,CAAK,IAAI,CAAA;AAC7D,IAAA,MAAA,CAAO,gBAAA,CAAiB,SAAA,EAAW,IAAA,CAAK,mBAAmB,CAAA;AAC3D,IAAA,IAAA,CAAK,MAAA,EAAO;AAAA,EACd;AAAA,EAEA,oBAAA,GAA6B;AA3D/B,IAAA,IAAA,EAAA;AA4DI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,eAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,MAAA,EAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,IAAA,IAAI,KAAK,mBAAA,EAAqB;AAC5B,MAAA,MAAA,CAAO,mBAAA,CAAoB,SAAA,EAAW,IAAA,CAAK,mBAAmB,CAAA;AAC9D,MAAA,IAAA,CAAK,mBAAA,GAAsB,IAAA;AAAA,IAC7B;AAAA,EACF;AAAA,EAEA,wBAAA,CACE,IAAA,EACA,QAAA,EACA,QAAA,EACM;AAxEV,IAAA,IAAA,EAAA;AAyEI,IAAA,IAAI,aAAa,QAAA,EAAU;AAE3B,IAAA,IAAI,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA,IAAK,KAAK,MAAA,EAAQ;AACxC,MAAA,CAAA,EAAA,GAAA,IAAA,CAAK,eAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,gBAAA,EAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,MAAA,EAAO;AAAA,EACd;AAAA,EAEA,IAAY,UAAA,GAA4B;AACtC,IAAA,OAAO,IAAA,CAAK,aAAa,IAAI,CAAA;AAAA,EAC/B;AAAA,EAEA,IAAY,MAAA,GAAwB;AAtFtC,IAAA,IAAA,EAAA,EAAA,EAAA;AAuFI,IAAA,OAAA,CAAO,EAAA,GAAA,CAAA,EAAA,GAAA,IAAA,CAAK,UAAA,KAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,YAAA,EAAA,KAAjB,IAAA,GAAA,EAAA,GAAmC,IAAA;AAAA,EAC5C;AAAA,EAEA,IAAY,KAAA,GAAgB;AAC1B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,OAAO,CAAA,IAAK,OAAA;AAAA,EACvC;AAAA,EAEA,IAAY,OAAA,GAAkB;AAC5B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,UAAU,CAAA,IAAK,OAAO,QAAA,CAAS,MAAA;AAAA,EAC1D;AAAA,EAEA,IAAY,YAAA,GAAuB;AACjC,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,QAAQ,CAAA,IAAK,MAAA;AAAA,EACxC;AAAA,EAEA,IAAY,WAAA,GAAsB;AAChC,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,OAAO,CAAA,IAAK,MAAA;AAAA,EACvC;AAAA,EAEQ,oBAAoB,KAAA,EAA2B;AACrD,IAAA,IAAI,cAAA,GAAgC,IAAA;AACpC,IAAA,IAAI;AACF,MAAA,cAAA,GAAiB,IAAI,GAAA,CAAI,IAAA,CAAK,OAAO,CAAA,CAAE,MAAA;AAAA,IACzC,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,MAAA,cAAA,GAAiB,IAAA;AAAA,IACnB;AAIA,IAAA,IAAI,CAAC,cAAA,IAAkB,KAAA,CAAM,MAAA,KAAW,cAAA,EAAgB;AACxD,IAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,IAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACvC,IAAA,IAAI,IAAA,CAAK,SAAS,uBAAA,EAAyB;AACzC,MAAA,IAAA,CAAK,aAAA,CAAc,IAAI,WAAA,CAAY,OAAO,CAAC,CAAA;AAAA,IAC7C,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,yBAAA,IAA6B,KAAK,EAAA,EAAI;AAC7D,MAAA,IAAA,CAAK,aAAA;AAAA,QACH,IAAI,WAAA,CAAY,OAAA,EAAS,EAAE,MAAA,EAAQ,EAAE,EAAA,EAAI,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA,EAAE,EAAG;AAAA,OAC9D;AAAA,IACF,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,+BAAA,EAAiC;AACxD,MAAA,IAAA,CAAK,aAAA;AAAA,QACH,IAAI,YAAY,cAAA,EAAgB;AAAA,UAC9B,MAAA,EAAQ,EAAE,EAAA,EAAI,IAAA,CAAK,KAAK,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA,GAAI,IAAA;AAAK,SAChD;AAAA,OACH;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAA,GAAe;AACb,IAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AAEtB,IAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AACpB,MAAA,IAAA,CAAK,WAAW,SAAA,GAAY,CAAA,sJAAA,CAAA;AAC5B,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAM,MAAM,IAAI,GAAA;AAAA,MACd,CAAA,wBAAA,EAA2B,kBAAA,CAAmB,IAAA,CAAK,UAAU,CAAC,CAAA,CAAA;AAAA,MAC9D,IAAA,CAAK;AAAA,KACP;AACA,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAA,EAAS,IAAA,CAAK,KAAK,CAAA;AAExC,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,IAAA,CAAK,MAAM,CAAA;AAAA,IAC5C;AAEA,IAAA,qBAAA,CAAsB,OAAA,CAAQ,CAAC,IAAA,KAAS;AACtC,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,YAAA,CAAa,IAAI,CAAA;AAClC,MAAA,IAAI,GAAA,KAAQ,QAAQ,GAAA,KAAQ,MAAA,IAAa,OAAO,GAAG,CAAA,CAAE,SAAS,CAAA,EAAG;AAC/D,QAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,IAAA,EAAM,GAAG,CAAA;AAAA,MAChC;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,GAAA,GAAM,IAAI,QAAA,EAAS;AAC1B,IAAA,MAAA,CAAO,KAAA,GAAQ,MAAA;AACf,IAAA,MAAA,CAAO,WAAA,GAAc,GAAA;AACrB,IAAA,MAAA,CAAO,SAAA,GAAY,MAAA;AACnB,IAAA,MAAA,CAAO,KAAA,GAAQ,wBAAA;AAEf,IAAA,MAAM,YAAA,GACJ,IAAA,CAAK,YAAA,KAAiB,MAAA,IAAU,KAAK,YAAA,KAAiB,MAAA;AACxD,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAA,CAAO,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,OAAA,CAAQ,MAAM,EAAE,CAAA;AAAA,IACpD;AAEA,IAAA,MAAA,CAAO,SAAS,MAAM;AA5K1B,MAAA,IAAA,EAAA;AA6KM,MAAA,CAAA,EAAA,GAAA,IAAA,CAAK,eAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,gBAAA,EAAA;AACjB,MAAA,IAAA,CAAK,aAAA;AAAA,QACH,IAAI,YAAY,MAAA,EAAQ;AAAA,UACtB,MAAA,EAAQ;AAAA,YACN,MAAA,EAAQ,iBAAA;AAAA,YACR,IAAI,IAAA,CAAK,UAAA;AAAA,YACT,OAAO,IAAA,CAAK;AAAA;AACd,SACD;AAAA,OACH;AAAA,IACF,CAAA;AAEA,IAAA,MAAA,CAAO,UAAU,MAAM;AACrB,MAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AACtB,MAAA,IAAA,CAAK,WAAW,SAAA,GAAY,CAAA,oKAAA,CAAA;AAAA,IAC9B,CAAA;AAEA,IAAA,MAAM,QAAA,GACJ,KAAK,WAAA,CAAY,QAAA,CAAS,GAAG,CAAA,GAC3B,IAAA,CAAK,WAAA,GACL,IAAA,CAAK,WAAA,GAAc,IAAA;AAEvB,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,aAAA,CAAc,OAAO,CAAA;AAC5C,IAAA,KAAA,CAAM,WAAA,GAAc;AAAA;AAAA;AAAA,eAAA,EAGP,QAAQ,CAAA;AAAA,QAAA,EACf,YAAA,GAAe,kCAAA,GAAqC,CAAA,QAAA,EAAW,IAAA,CAAK,YAAY,CAAA,CAAA,CAAG;AAAA;AAAA;AAAA;AAAA;AAAA,QAAA,EAKnF,YAAA,GAAe,uBAAuB,EAAE;AAAA;AAAA;AAAA,oBAAA,EAG5B,IAAA,CAAK,KAAA,KAAU,MAAA,GAAS,SAAA,GAAY,OAAO,CAAA;AAAA;AAAA,IAAA,CAAA;AAI7D,IAAA,IAAA,CAAK,WAAW,SAAA,GAAY,EAAA;AAC5B,IAAA,IAAA,CAAK,UAAA,CAAW,YAAY,KAAK,CAAA;AACjC,IAAA,IAAA,CAAK,UAAA,CAAW,YAAY,MAAM,CAAA;AAClC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AACF;AAEA,IACE,OAAO,cAAA,KAAmB,WAAA,IAC1B,CAAC,cAAA,CAAe,GAAA,CAAI,wBAAwB,CAAA,EAC5C;AACA,EAAA,cAAA,CAAe,MAAA,CAAO,0BAA0B,2BAA2B,CAAA;AAC7E","file":"campaign-detail-web-component.mjs","sourcesContent":["/**\n * Theming props for the Campaign Detail Widget.\n * These map to camelCase query params consumed by the iframe page.\n */\nexport interface CampaignDetailThemingProps {\n  /** Container background color */\n  detailBackgroundColor?: string;\n  /** Primary text color */\n  detailTextColor?: string;\n  /** Secondary text color */\n  detailSecondaryTextColor?: string;\n  /** Border color */\n  detailBorderColor?: string;\n  /** Container border radius, e.g. \"12px\" */\n  detailBorderRadius?: string;\n  /** Container padding */\n  detailPadding?: string;\n  /** Container box shadow */\n  detailShadow?: string;\n  /** Primary accent color (CTAs, progress, links) */\n  detailPrimaryColor?: string;\n  /** Primary hover color */\n  detailPrimaryHover?: string;\n  /** Hero overlay color */\n  detailHeroOverlay?: string;\n  /** Reward badge background */\n  detailRewardBg?: string;\n  /** Reward badge text color */\n  detailRewardColor?: string;\n  /** Task complete state color */\n  detailTaskCompleteColor?: string;\n  /** Title font size, e.g. \"1.5rem\" */\n  detailTitleSize?: string;\n  /** Title font weight */\n  detailTitleWeight?: string;\n  /** Body text font size */\n  detailBodySize?: string;\n  /** Font family */\n  detailFontFamily?: string;\n  /** Button border radius */\n  detailButtonRadius?: string;\n  /** Transition duration */\n  detailTransitionDuration?: string;\n}\n\n/**\n * Core configuration props for the Campaign Detail Widget.\n */\nexport interface CampaignDetailWidgetProps extends CampaignDetailThemingProps {\n  /** Campaign UUID (required) */\n  id: string;\n  /** Base URL of the Legion application (required) */\n  baseUrl: string;\n  /** API key / bearer token for authenticated mode */\n  apiKey?: string;\n  /** Theme preset. Default: \"light\" */\n  theme?: \"light\" | \"dark\";\n  /** Widget height CSS value. Default: \"auto\" */\n  height?: string | number;\n  /** Widget width CSS value. Default: \"100%\" */\n  width?: string;\n  /** Additional CSS class name for the container */\n  className?: string;\n  /** Additional inline styles for the container */\n  style?: React.CSSProperties;\n  /** Callback when the widget iframe has loaded */\n  onLoad?: (detail: { widget: string; id: string; theme: string }) => void;\n  /** Callback when the widget iframe fails to load */\n  onError?: (message: string) => void;\n  /**\n   * Callback fired when the embedded view requests to close\n   * (user clicks the in-widget close affordance, or completes the flow).\n   * Hosts typically use this to close the modal that wraps the widget.\n   */\n  onClose?: () => void;\n  /**\n   * Callback fired when the user successfully claims / begins the campaign.\n   * Hosts can use this to refetch their campaign listing.\n   */\n  onClaim?: (detail: { id: string }) => void;\n  /**\n   * Callback fired when the embedded view requires the user to sign in\n   * (e.g. they click \"Claim Gift\" / \"Start Earning\" without a valid token).\n   * Hosts typically use this to open their own login UI, then push a fresh\n   * `auth-token` back to the widget.\n   */\n  onRequestLogin?: (detail: { id: string | null }) => void;\n}\n\n/**\n * Mapping from camelCase theming prop names to the kebab-case query\n * parameter names used by the campaign detail widget iframe URL.\n */\nexport const CAMPAIGN_DETAIL_THEMING_PROP_TO_PARAM: Record<\n  keyof CampaignDetailThemingProps,\n  string\n> = {\n  detailBackgroundColor: \"detail-background-color\",\n  detailTextColor: \"detail-text-color\",\n  detailSecondaryTextColor: \"detail-secondary-text-color\",\n  detailBorderColor: \"detail-border-color\",\n  detailBorderRadius: \"detail-border-radius\",\n  detailPadding: \"detail-padding\",\n  detailShadow: \"detail-shadow\",\n  detailPrimaryColor: \"detail-primary-color\",\n  detailPrimaryHover: \"detail-primary-hover\",\n  detailHeroOverlay: \"detail-hero-overlay\",\n  detailRewardBg: \"detail-reward-bg\",\n  detailRewardColor: \"detail-reward-color\",\n  detailTaskCompleteColor: \"detail-task-complete-color\",\n  detailTitleSize: \"detail-title-size\",\n  detailTitleWeight: \"detail-title-weight\",\n  detailBodySize: \"detail-body-size\",\n  detailFontFamily: \"detail-font-family\",\n  detailButtonRadius: \"detail-button-radius\",\n  detailTransitionDuration: \"detail-transition-duration\",\n};\n","/**\n * Auth bridge for `<legion-*>` web components (plan §4.2, LEG-444).\n *\n * Wires three message paths around an iframe-backed widget:\n *\n *   parent page  --(window.postMessage 'legion:auth')-->  host component\n *   host         --(iframe.postMessage 'AUTH_TOKEN')---->  iframe\n *   iframe       --(window.postMessage 'legion:auth-expired')->  host component\n *                                                                      └─ re-emitted as\n *                                                                         CustomEvent('legion:auth-expired')\n *\n * Token sources, highest to lowest precedence:\n *   1. parent postMessage `{ type: \"legion:auth\", token }`\n *   2. `auth-token` attribute (canonical, plan §4.2)\n *   3. `api-key` attribute  (legacy alias, kept for backwards-compat)\n *\n * Parent → host messages are filtered against the comma-separated\n * `allowed-parent-origins` attribute. If unset, only `window.parent === self`\n * (top-level page) and same-origin parents are accepted.\n */\n\nexport interface AuthBridgeOptions {\n  /** Returns the live iframe element if mounted. */\n  iframeAccessor: () => HTMLIFrameElement | null;\n  /** Used as the targetOrigin when posting to the iframe. */\n  baseUrl: string;\n}\n\nexport interface AuthBridgeHandle {\n  /** Tear down listeners. Call from `disconnectedCallback`. */\n  detach(): void;\n  /** Push the current token to the iframe. Call after `iframe.onload`. */\n  postCurrentToken(): void;\n  /** Resolve the active token (parent override → auth-token → api-key). */\n  currentToken(): string | null;\n}\n\nconst AUTH_TOKEN_MESSAGE = \"AUTH_TOKEN\";\nconst PARENT_AUTH_MESSAGE = \"legion:auth\";\nconst IFRAME_EXPIRED_MESSAGE = \"legion:auth-expired\";\n\nfunction parseAllowedOrigins(host: HTMLElement): string[] {\n  const raw = host.getAttribute(\"allowed-parent-origins\") || \"\";\n  return raw\n    .split(\",\")\n    .map((s) => s.trim())\n    .filter(Boolean);\n}\n\nfunction isAllowedParentOrigin(host: HTMLElement, origin: string): boolean {\n  // Same-origin is always trusted.\n  if (origin === window.location.origin) return true;\n  const allowed = parseAllowedOrigins(host);\n  return allowed.includes(origin);\n}\n\nexport function attachAuthBridge(\n  host: HTMLElement,\n  opts: AuthBridgeOptions\n): AuthBridgeHandle {\n  // Token override pushed by the parent via postMessage. Wins over attrs.\n  let parentToken: string | null = null;\n\n  const currentToken = (): string | null => {\n    if (parentToken) return parentToken;\n    return host.getAttribute(\"auth-token\") || host.getAttribute(\"api-key\");\n  };\n\n  const postCurrentToken = (): void => {\n    const iframe = opts.iframeAccessor();\n    const token = currentToken();\n    if (!iframe || !iframe.contentWindow || !token) return;\n    iframe.contentWindow.postMessage(\n      { type: AUTH_TOKEN_MESSAGE, token },\n      opts.baseUrl\n    );\n  };\n\n  const onMessage = (event: MessageEvent): void => {\n    if (!event || typeof event.data !== \"object\" || event.data === null) {\n      return;\n    }\n    const data = event.data as { type?: unknown; token?: unknown };\n\n    // 1. Parent → host: token refresh.\n    if (data.type === PARENT_AUTH_MESSAGE) {\n      if (!isAllowedParentOrigin(host, event.origin)) return;\n      if (typeof data.token !== \"string\" || !data.token) return;\n      parentToken = data.token;\n      postCurrentToken();\n      return;\n    }\n\n    // 2. Iframe → host: token expired. The iframe is mounted in the\n    // shadow DOM; messages from it carry `event.source === iframe.contentWindow`.\n    if (data.type === IFRAME_EXPIRED_MESSAGE) {\n      const iframe = opts.iframeAccessor();\n      if (!iframe || event.source !== iframe.contentWindow) return;\n      host.dispatchEvent(\n        new CustomEvent(IFRAME_EXPIRED_MESSAGE, {\n          bubbles: true,\n          composed: true,\n        })\n      );\n    }\n  };\n\n  window.addEventListener(\"message\", onMessage);\n\n  return {\n    detach() {\n      window.removeEventListener(\"message\", onMessage);\n    },\n    postCurrentToken,\n    currentToken,\n  };\n}\n\n/** Attribute names the bridge cares about; widgets must add these to `observedAttributes`. */\nexport const AUTH_BRIDGE_OBSERVED_ATTRS = [\n  \"auth-token\",\n  \"api-key\",\n  \"allowed-parent-origins\",\n] as const;\n","/**\n * Web Component entry point for the Campaign Detail widget.\n *\n * Importing this module registers the <legion-campaign-detail> custom element\n * so it can be used in any HTML page or framework that supports web components.\n *\n * @example\n * ```ts\n * import '@legionhandtech/lht-react-widgets/campaign-detail-web-component';\n *\n * // Then use in HTML:\n * // <legion-campaign-detail id=\"uuid\" api-key=\"token\" base-url=\"https://...\" />\n * ```\n */\n\nimport { CAMPAIGN_DETAIL_THEMING_PROP_TO_PARAM } from \"./types\";\nimport {\n  attachAuthBridge,\n  type AuthBridgeHandle,\n  AUTH_BRIDGE_OBSERVED_ATTRS,\n} from \"../shared/auth-bridge\";\n\nconst DETAIL_CSS_ATTRIBUTES = Object.values(\n  CAMPAIGN_DETAIL_THEMING_PROP_TO_PARAM\n);\nconst TOKEN_ATTRS = new Set<string>(AUTH_BRIDGE_OBSERVED_ATTRS);\n\nclass LegionCampaignDetailElement extends HTMLElement {\n  public iframe: HTMLIFrameElement | null = null;\n  private authBridge: AuthBridgeHandle | null = null;\n  private boundMessageHandler: ((e: MessageEvent) => void) | null = null;\n\n  constructor() {\n    super();\n    this.attachShadow({ mode: \"open\" });\n  }\n\n  static get observedAttributes(): string[] {\n    return [\n      \"id\",\n      \"theme\",\n      \"base-url\",\n      \"height\",\n      \"width\",\n      ...AUTH_BRIDGE_OBSERVED_ATTRS,\n      ...DETAIL_CSS_ATTRIBUTES,\n    ];\n  }\n\n  connectedCallback(): void {\n    this.authBridge = attachAuthBridge(this, {\n      iframeAccessor: () => this.iframe,\n      baseUrl: this.baseUrl,\n    });\n    this.boundMessageHandler = this.handleIframeMessage.bind(this);\n    window.addEventListener(\"message\", this.boundMessageHandler);\n    this.render();\n  }\n\n  disconnectedCallback(): void {\n    this.authBridge?.detach();\n    this.authBridge = null;\n    if (this.boundMessageHandler) {\n      window.removeEventListener(\"message\", this.boundMessageHandler);\n      this.boundMessageHandler = null;\n    }\n  }\n\n  attributeChangedCallback(\n    name: string,\n    oldValue: string | null,\n    newValue: string | null\n  ): void {\n    if (oldValue === newValue) return;\n    // Token changes don't require a full rebuild — push via postMessage.\n    if (TOKEN_ATTRS.has(name) && this.iframe) {\n      this.authBridge?.postCurrentToken();\n      return;\n    }\n    this.render();\n  }\n\n  private get campaignId(): string | null {\n    return this.getAttribute(\"id\");\n  }\n\n  private get apiKey(): string | null {\n    return this.authBridge?.currentToken() ?? null;\n  }\n\n  private get theme(): string {\n    return this.getAttribute(\"theme\") || \"light\";\n  }\n\n  private get baseUrl(): string {\n    return this.getAttribute(\"base-url\") || window.location.origin;\n  }\n\n  private get widgetHeight(): string {\n    return this.getAttribute(\"height\") || \"auto\";\n  }\n\n  private get widgetWidth(): string {\n    return this.getAttribute(\"width\") || \"100%\";\n  }\n\n  private handleIframeMessage(event: MessageEvent): void {\n    let expectedOrigin: string | null = null;\n    try {\n      expectedOrigin = new URL(this.baseUrl).origin;\n    } catch {\n      expectedOrigin = null;\n    }\n    // Reject all messages if expectedOrigin could not be derived from\n    // base-url, otherwise a forged event from any page could trigger\n    // close / claim / requestlogin CustomEvents on the host.\n    if (!expectedOrigin || event.origin !== expectedOrigin) return;\n    const data = event.data;\n    if (!data || typeof data !== \"object\") return;\n    if (data.type === \"CAMPAIGN_DETAIL_CLOSE\") {\n      this.dispatchEvent(new CustomEvent(\"close\"));\n    } else if (data.type === \"CAMPAIGN_DETAIL_CLAIMED\" && data.id) {\n      this.dispatchEvent(\n        new CustomEvent(\"claim\", { detail: { id: String(data.id) } })\n      );\n    } else if (data.type === \"CAMPAIGN_DETAIL_REQUEST_LOGIN\") {\n      this.dispatchEvent(\n        new CustomEvent(\"requestlogin\", {\n          detail: { id: data.id ? String(data.id) : null },\n        })\n      );\n    }\n  }\n\n  render(): void {\n    if (!this.shadowRoot) return;\n\n    if (!this.campaignId) {\n      this.shadowRoot.innerHTML = `<div style=\"padding:32px;text-align:center;color:#dc3545;background:#f8f9fa;border:1px solid #dee2e6;border-radius:8px;\">Campaign ID is required</div>`;\n      return;\n    }\n\n    const iframe = document.createElement(\"iframe\");\n    const url = new URL(\n      `/widget/campaign-detail/${encodeURIComponent(this.campaignId)}`,\n      this.baseUrl\n    );\n    url.searchParams.set(\"theme\", this.theme);\n\n    if (this.apiKey) {\n      url.searchParams.set(\"apiKey\", this.apiKey);\n    }\n\n    DETAIL_CSS_ATTRIBUTES.forEach((attr) => {\n      const val = this.getAttribute(attr);\n      if (val !== null && val !== undefined && String(val).length > 0) {\n        url.searchParams.set(attr, val);\n      }\n    });\n\n    iframe.src = url.toString();\n    iframe.width = \"100%\";\n    iframe.frameBorder = \"0\";\n    iframe.scrolling = \"auto\";\n    iframe.title = \"Campaign Detail Widget\";\n\n    const isFullHeight =\n      this.widgetHeight === \"auto\" || this.widgetHeight === \"100%\";\n    if (!isFullHeight) {\n      iframe.height = this.widgetHeight.replace(\"px\", \"\");\n    }\n\n    iframe.onload = () => {\n      this.authBridge?.postCurrentToken();\n      this.dispatchEvent(\n        new CustomEvent(\"load\", {\n          detail: {\n            widget: \"campaign-detail\",\n            id: this.campaignId,\n            theme: this.theme,\n          },\n        })\n      );\n    };\n\n    iframe.onerror = () => {\n      if (!this.shadowRoot) return;\n      this.shadowRoot.innerHTML = `<div style=\"padding:32px;text-align:center;color:#856404;background:#fff3cd;border:1px solid #ffeaa7;border-radius:8px;\">Failed to load campaign detail widget</div>`;\n    };\n\n    const widthCss =\n      this.widgetWidth.includes(\"%\") ?\n        this.widgetWidth\n      : this.widgetWidth + \"px\";\n\n    const style = document.createElement(\"style\");\n    style.textContent = `\n      :host {\n        display: block;\n        width: ${widthCss};\n        ${isFullHeight ? \"height: 100%; min-height: 480px;\" : `height: ${this.widgetHeight};`}\n      }\n      iframe {\n        width: 100%;\n        height: 100%;\n        ${isFullHeight ? \"min-height: 480px;\" : \"\"}\n        border: none;\n        border-radius: 8px;\n        background: ${this.theme === \"dark\" ? \"#1a1a1a\" : \"white\"};\n      }\n    `;\n\n    this.shadowRoot.innerHTML = \"\";\n    this.shadowRoot.appendChild(style);\n    this.shadowRoot.appendChild(iframe);\n    this.iframe = iframe;\n  }\n}\n\nif (\n  typeof customElements !== \"undefined\" &&\n  !customElements.get(\"legion-campaign-detail\")\n) {\n  customElements.define(\"legion-campaign-detail\", LegionCampaignDetailElement);\n}\n\nexport { LegionCampaignDetailElement };\n"]}