{"version":3,"sources":["../src/community-posts/types.ts","../src/shared/auth-bridge.ts","../src/community-posts/web-component.ts"],"names":[],"mappings":";AAkGO,IAAM,2BAAA,GAGT;AAAA,EACF,iBAAA,EAAmB,qBAAA;AAAA,EACnB,oBAAA,EAAsB,wBAAA;AAAA,EACtB,cAAA,EAAgB,kBAAA;AAAA,EAChB,uBAAA,EAAyB,4BAAA;AAAA,EACzB,gBAAA,EAAkB,oBAAA;AAAA,EAClB,WAAA,EAAa,eAAA;AAAA,EACb,eAAA,EAAiB,mBAAA;AAAA,EACjB,eAAA,EAAiB,mBAAA;AAAA,EACjB,gBAAA,EAAkB,oBAAA;AAAA,EAClB,eAAA,EAAiB,mBAAA;AAAA,EACjB,iBAAA,EAAmB,qBAAA;AAAA,EACnB,cAAA,EAAgB,kBAAA;AAAA,EAChB,gBAAA,EAAkB,oBAAA;AAAA,EAClB,aAAA,EAAe,iBAAA;AAAA,EACf,aAAA,EAAe,iBAAA;AAAA,EACf,eAAA,EAAiB,mBAAA;AAAA,EACjB,QAAA,EAAU,WAAA;AAAA,EACV,UAAA,EAAY,cAAA;AAAA,EACZ,aAAA,EAAe,iBAAA;AAAA,EACf,cAAA,EAAgB,kBAAA;AAAA,EAChB,aAAA,EAAe,iBAAA;AAAA,EACf,gBAAA,EAAkB,oBAAA;AAAA,EAClB,kBAAA,EAAoB,uBAAA;AAAA,EACpB,cAAA,EAAgB,kBAAA;AAAA,EAChB,uBAAA,EAAyB;AAC3B,CAAA;;;AC1FA,IAAM,kBAAA,GAAqB,YAAA;AAC3B,IAAM,mBAAA,GAAsB,aAAA;AAC5B,IAAM,sBAAA,GAAyB,qBAAA;AAE/B,SAAS,oBAAoB,IAAA,EAA6B;AACxD,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,YAAA,CAAa,wBAAwB,CAAA,IAAK,EAAA;AAC3D,EAAA,OAAO,GAAA,CACJ,KAAA,CAAM,GAAG,CAAA,CACT,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA,CACnB,MAAA,CAAO,OAAO,CAAA;AACnB;AAEA,SAAS,qBAAA,CAAsB,MAAmB,MAAA,EAAyB;AAEzE,EAAA,IAAI,MAAA,KAAW,MAAA,CAAO,QAAA,CAAS,MAAA,EAAQ,OAAO,IAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,oBAAoB,IAAI,CAAA;AACxC,EAAA,OAAO,OAAA,CAAQ,SAAS,MAAM,CAAA;AAChC;AAEO,SAAS,gBAAA,CACd,MACA,IAAA,EACkB;AAElB,EAAA,IAAI,WAAA,GAA6B,IAAA;AAEjC,EAAA,MAAM,eAAe,MAAqB;AACxC,IAAA,IAAI,aAAa,OAAO,WAAA;AACxB,IAAA,OAAO,KAAK,YAAA,CAAa,YAAY,CAAA,IAAK,IAAA,CAAK,aAAa,SAAS,CAAA;AAAA,EACvE,CAAA;AAEA,EAAA,MAAM,mBAAmB,MAAY;AACnC,IAAA,MAAM,MAAA,GAAS,KAAK,cAAA,EAAe;AACnC,IAAA,MAAM,QAAQ,YAAA,EAAa;AAC3B,IAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,aAAA,IAAiB,CAAC,KAAA,EAAO;AAChD,IAAA,MAAA,CAAO,aAAA,CAAc,WAAA;AAAA,MACnB,EAAE,IAAA,EAAM,kBAAA,EAAoB,KAAA,EAAM;AAAA,MAClC,IAAA,CAAK;AAAA,KACP;AAAA,EACF,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA8B;AAC/C,IAAA,IAAI,CAAC,SAAS,OAAO,KAAA,CAAM,SAAS,QAAA,IAAY,KAAA,CAAM,SAAS,IAAA,EAAM;AACnE,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AAGnB,IAAA,IAAI,IAAA,CAAK,SAAS,mBAAA,EAAqB;AACrC,MAAA,IAAI,CAAC,qBAAA,CAAsB,IAAA,EAAM,KAAA,CAAM,MAAM,CAAA,EAAG;AAChD,MAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,IAAY,CAAC,KAAK,KAAA,EAAO;AACnD,MAAA,WAAA,GAAc,IAAA,CAAK,KAAA;AACnB,MAAA,gBAAA,EAAiB;AACjB,MAAA;AAAA,IACF;AAIA,IAAA,IAAI,IAAA,CAAK,SAAS,sBAAA,EAAwB;AACxC,MAAA,MAAM,MAAA,GAAS,KAAK,cAAA,EAAe;AACnC,MAAA,IAAI,CAAC,MAAA,IAAU,KAAA,CAAM,MAAA,KAAW,OAAO,aAAA,EAAe;AACtD,MAAA,IAAA,CAAK,aAAA;AAAA,QACH,IAAI,YAAY,sBAAA,EAAwB;AAAA,UACtC,OAAA,EAAS,IAAA;AAAA,UACT,QAAA,EAAU;AAAA,SACX;AAAA,OACH;AAAA,IACF;AAAA,EACF,CAAA;AAEA,EAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,SAAS,CAAA;AAE5C,EAAA,OAAO;AAAA,IACL,MAAA,GAAS;AACP,MAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAAA,IACjD,CAAA;AAAA,IACA,gBAAA;AAAA,IACA;AAAA,GACF;AACF;AAGO,IAAM,0BAAA,GAA6B;AAAA,EACxC,YAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA;;;ACxGA,IAAM,oBAAA,GAAuB,MAAA,CAAO,MAAA,CAAO,2BAA2B,CAAA;AAEtE,IAAM,2BAAA,GAAN,cAA0C,WAAA,CAAY;AAAA,EAIpD,WAAA,GAAc;AACZ,IAAA,KAAA,EAAM;AAJR,IAAA,IAAA,CAAO,MAAA,GAAmC,IAAA;AAC1C,IAAA,IAAA,CAAQ,UAAA,GAAsC,IAAA;AAI5C,IAAA,IAAA,CAAK,YAAA,CAAa,EAAE,IAAA,EAAM,MAAA,EAAQ,CAAA;AAAA,EACpC;AAAA,EAEA,WAAW,kBAAA,GAA+B;AACxC,IAAA,OAAO;AAAA,MACL,SAAA;AAAA,MAAW,WAAA;AAAA,MAAa,QAAA;AAAA,MAAU,YAAA;AAAA,MAClC,cAAA;AAAA,MAAgB,cAAA;AAAA,MAAgB,SAAA;AAAA,MAAW,UAAA;AAAA,MAAY,OAAA;AAAA,MACvD,OAAA;AAAA,MAAS,QAAA;AAAA,MACT,GAAG,0BAAA;AAAA,MACH,GAAG;AAAA,KACL;AAAA,EACF;AAAA,EAEA,iBAAA,GAA0B;AACxB,IAAA,IAAA,CAAK,UAAA,GAAa,iBAAiB,IAAA,EAAM;AAAA,MACvC,cAAA,EAAgB,MAAM,IAAA,CAAK,MAAA;AAAA,MAC3B,SAAS,IAAA,CAAK;AAAA,KACf,CAAA;AACD,IAAA,IAAA,CAAK,MAAA,EAAO;AAAA,EACd;AAAA,EAEA,oBAAA,GAA6B;AAhD/B,IAAA,IAAA,EAAA;AAiDI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,eAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,MAAA,EAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,EACpB;AAAA,EAEA,wBAAA,CAAyB,IAAA,EAAc,QAAA,EAAyB,QAAA,EAA+B;AArDjG,IAAA,IAAA,EAAA;AAsDI,IAAA,IAAI,aAAa,QAAA,EAAU;AAC3B,IAAA,IAAK,0BAAA,CAAiD,QAAA,CAAS,IAAI,CAAA,IAAK,KAAK,MAAA,EAAQ;AACnF,MAAA,CAAA,EAAA,GAAA,IAAA,CAAK,eAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,gBAAA,EAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,MAAA,EAAO;AAAA,EACd;AAAA,EAEA,IAAY,MAAA,GAAiB;AAAE,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,SAAS,CAAA,IAAK,OAAO,QAAA,CAAS,MAAA;AAAA,EAAQ;AAAA,EAC9F,IAAY,QAAA,GAAmB;AAAE,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,SAAS,IAAA,CAAK,YAAA,CAAa,WAAW,CAAA,IAAK,IAAA,EAAM,EAAE,CAAA,EAAG,CAAC,GAAG,EAAE,CAAA;AAAA,EAAG;AAAA,EACzH,IAAY,MAAA,GAAiB;AAAE,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,QAAQ,CAAA,IAAK,QAAA;AAAA,EAAU;AAAA,EAC/E,IAAY,SAAA,GAA2B;AAAE,IAAA,OAAO,IAAA,CAAK,aAAa,YAAY,CAAA;AAAA,EAAG;AAAA,EACjF,IAAY,WAAA,GAAuB;AAAE,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,cAAc,CAAA,KAAM,OAAA;AAAA,EAAS;AAAA,EAC3F,IAAY,WAAA,GAAuB;AAAE,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,cAAc,CAAA,KAAM,OAAA;AAAA,EAAS;AAAA,EAC3F,IAAY,MAAA,GAAwB;AAAE,IAAA,OAAO,IAAA,CAAK,aAAa,SAAS,CAAA;AAAA,EAAG;AAAA,EAC3E,IAAY,QAAA,GAA0B;AAAE,IAAA,OAAO,IAAA,CAAK,aAAa,UAAU,CAAA;AAAA,EAAG;AAAA,EAC9E,IAAY,KAAA,GAAgB;AAAE,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,OAAO,CAAA,IAAK,OAAA;AAAA,EAAS;AAAA,EAC5E,IAAY,WAAA,GAAsB;AAAE,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,OAAO,CAAA,IAAK,MAAA;AAAA,EAAQ;AAAA,EACjF,IAAY,YAAA,GAAuB;AAAE,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,QAAQ,CAAA,IAAK,KAAA;AAAA,EAAO;AAAA,EAElF,MAAA,GAAe;AACb,IAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AAEtB,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,yBAAA,EAA2B,KAAK,MAAM,CAAA;AAE1D,IAAA,GAAA,CAAI,aAAa,GAAA,CAAI,UAAA,EAAY,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAC,CAAA;AACtD,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,GAAA,CAAI,aAAa,GAAA,CAAI,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,WAAW,CAAC,CAAA;AAC5D,IAAA,GAAA,CAAI,aAAa,GAAA,CAAI,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,WAAW,CAAC,CAAA;AAC5D,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAA,EAAS,IAAA,CAAK,KAAK,CAAA;AAExC,IAAA,IAAI,KAAK,SAAA,EAAW,GAAA,CAAI,aAAa,GAAA,CAAI,WAAA,EAAa,KAAK,SAAS,CAAA;AACpE,IAAA,IAAI,KAAK,MAAA,EAAQ,GAAA,CAAI,aAAa,GAAA,CAAI,QAAA,EAAU,KAAK,MAAM,CAAA;AAC3D,IAAA,IAAI,KAAK,QAAA,EAAU,GAAA,CAAI,aAAa,GAAA,CAAI,UAAA,EAAY,KAAK,QAAQ,CAAA;AAEjE,IAAA,oBAAA,CAAqB,OAAA,CAAQ,CAAC,IAAA,KAAS;AACrC,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,YAAA,CAAa,IAAI,CAAA;AAClC,MAAA,IAAI,GAAA,KAAQ,QAAQ,GAAA,KAAQ,MAAA,IAAa,OAAO,GAAG,CAAA,CAAE,SAAS,CAAA,EAAG;AAC/D,QAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,IAAA,EAAM,GAAG,CAAA;AAAA,MAChC;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,GAAA,GAAM,IAAI,QAAA,EAAS;AAC1B,IAAA,MAAA,CAAO,QAAQ,IAAA,CAAK,WAAA;AACpB,IAAA,MAAA,CAAO,SAAS,IAAA,CAAK,YAAA;AACrB,IAAA,MAAA,CAAO,WAAA,GAAc,GAAA;AACrB,IAAA,MAAA,CAAO,SAAA,GAAY,IAAA;AACnB,IAAA,MAAA,CAAO,KAAA,GAAQ,wBAAA;AAEf,IAAA,MAAA,CAAO,SAAS,MAAM;AAxG1B,MAAA,IAAA,EAAA;AAyGM,MAAA,CAAA,EAAA,GAAA,IAAA,CAAK,eAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,gBAAA,EAAA;AACjB,MAAA,IAAA,CAAK,aAAA,CAAc,IAAI,WAAA,CAAY,MAAA,EAAQ;AAAA,QACzC,QAAQ,EAAE,MAAA,EAAQ,iBAAA,EAAmB,KAAA,EAAO,KAAK,KAAA;AAAM,OACxD,CAAC,CAAA;AAAA,IACJ,CAAA;AAEA,IAAA,MAAA,CAAO,UAAU,MAAM;AACrB,MAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AACtB,MAAA,IAAA,CAAK,WAAW,SAAA,GAAY,CAAA,oKAAA,CAAA;AAAA,IAC9B,CAAA;AAEA,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,aAAA,CAAc,OAAO,CAAA;AAC5C,IAAA,KAAA,CAAM,WAAA,GAAc;AAAA,qCAAA,EACe,IAAA,CAAK,WAAA,CAAY,QAAA,CAAS,GAAG,CAAA,GAAI,IAAA,CAAK,WAAA,GAAc,IAAA,CAAK,WAAA,GAAc,IAAI,CAAA,UAAA,EAAa,IAAA,CAAK,YAAY,CAAA;AAAA,mIAAA,EACX,IAAA,CAAK,KAAA,KAAU,MAAA,GAAS,SAAA,GAAY,OAAO,CAAA;AAAA,IAAA,CAAA;AAG5K,IAAA,IAAA,CAAK,WAAW,SAAA,GAAY,EAAA;AAC5B,IAAA,IAAA,CAAK,UAAA,CAAW,YAAY,KAAK,CAAA;AACjC,IAAA,IAAA,CAAK,UAAA,CAAW,YAAY,MAAM,CAAA;AAClC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AACF;AAEA,IAAI,OAAO,cAAA,KAAmB,WAAA,IAAe,CAAC,cAAA,CAAe,GAAA,CAAI,wBAAwB,CAAA,EAAG;AAC1F,EAAA,cAAA,CAAe,MAAA,CAAO,0BAA0B,2BAA2B,CAAA;AAC7E","file":"community-posts-web-component.mjs","sourcesContent":["/**\n * Theming props for the Community Posts Widget.\n * These map to CSS custom properties used internally.\n */\nexport interface CommunityPostsThemingProps {\n /** Primary color */\n postsPrimaryColor?: string;\n /** Container background color */\n postsBackgroundColor?: string;\n /** Primary text color */\n postsTextColor?: string;\n /** Secondary text color */\n postsSecondaryTextColor?: string;\n /** Border color */\n postsBorderColor?: string;\n /** Card background */\n postsCardBg?: string;\n /** Card border radius */\n postsCardRadius?: string;\n /** Card box shadow */\n postsCardShadow?: string;\n /** Card padding */\n postsCardPadding?: string;\n /** Avatar size */\n postsAvatarSize?: string;\n /** Avatar border radius */\n postsAvatarRadius?: string;\n /** Post title font size */\n postsTitleSize?: string;\n /** Post title font weight */\n postsTitleWeight?: string;\n /** Post body font size */\n postsBodySize?: string;\n /** Meta text font size */\n postsMetaSize?: string;\n /** Font family */\n postsFontFamily?: string;\n /** Gap between posts */\n postsGap?: string;\n /** Tag background */\n postsTagBg?: string;\n /** Tag text color */\n postsTagColor?: string;\n /** Tag border radius */\n postsTagRadius?: string;\n /** Action button background */\n postsActionBg?: string;\n /** Action button text color */\n postsActionColor?: string;\n /** Action button hover background */\n postsActionHoverBg?: string;\n /** Like button color */\n postsLikeColor?: string;\n /** Transition duration */\n postsTransitionDuration?: string;\n}\n\n/**\n * Core configuration props for the Community Posts Widget.\n */\nexport interface CommunityPostsWidgetProps extends CommunityPostsThemingProps {\n /** Base URL of the Legion application (required) */\n baseUrl: string;\n /** JWT auth token for authenticated features */\n authToken?: string;\n /** Number of posts per page (5-50). Default: 10 */\n pageSize?: number;\n /** Filter mode. Default: \"recent\" */\n filter?: \"recent\" | \"popular\" | \"unanswered\";\n /** Channel/group ID to filter posts */\n channelId?: string;\n /** Show filter bar. Default: true */\n showFilters?: boolean;\n /** Show action buttons (like, comment). Default: true */\n showActions?: boolean;\n /** Current user ID */\n userId?: string;\n /** Current username */\n username?: string;\n /** Theme preset. Default: \"light\" */\n theme?: \"light\" | \"dark\";\n /** Widget height CSS value. Default: \"800px\" */\n height?: string;\n /** Widget width CSS value. Default: \"100%\" */\n width?: string;\n /** Additional CSS class name for the container */\n className?: string;\n /** Additional inline styles for the container */\n style?: React.CSSProperties;\n /** Callback when the widget iframe has loaded */\n onLoad?: (detail: { widget: string; theme: string }) => void;\n /** Callback when the widget iframe fails to load */\n onError?: (message: string) => void;\n}\n\n/**\n * Mapping from camelCase theming prop names to kebab-case query params.\n */\nexport const POSTS_THEMING_PROP_TO_PARAM: Record<\n keyof CommunityPostsThemingProps,\n string\n> = {\n postsPrimaryColor: \"posts-primary-color\",\n postsBackgroundColor: \"posts-background-color\",\n postsTextColor: \"posts-text-color\",\n postsSecondaryTextColor: \"posts-secondary-text-color\",\n postsBorderColor: \"posts-border-color\",\n postsCardBg: \"posts-card-bg\",\n postsCardRadius: \"posts-card-radius\",\n postsCardShadow: \"posts-card-shadow\",\n postsCardPadding: \"posts-card-padding\",\n postsAvatarSize: \"posts-avatar-size\",\n postsAvatarRadius: \"posts-avatar-radius\",\n postsTitleSize: \"posts-title-size\",\n postsTitleWeight: \"posts-title-weight\",\n postsBodySize: \"posts-body-size\",\n postsMetaSize: \"posts-meta-size\",\n postsFontFamily: \"posts-font-family\",\n postsGap: \"posts-gap\",\n postsTagBg: \"posts-tag-bg\",\n postsTagColor: \"posts-tag-color\",\n postsTagRadius: \"posts-tag-radius\",\n postsActionBg: \"posts-action-bg\",\n postsActionColor: \"posts-action-color\",\n postsActionHoverBg: \"posts-action-hover-bg\",\n postsLikeColor: \"posts-like-color\",\n postsTransitionDuration: \"posts-transition-duration\",\n};\n\n","/**\n * Auth bridge for `` web components (plan §4.2, LEG-444).\n *\n * Wires three message paths around an iframe-backed widget:\n *\n * parent page --(window.postMessage 'legion:auth')--> host component\n * host --(iframe.postMessage 'AUTH_TOKEN')----> iframe\n * iframe --(window.postMessage 'legion:auth-expired')-> host component\n * └─ re-emitted as\n * CustomEvent('legion:auth-expired')\n *\n * Token sources, highest to lowest precedence:\n * 1. parent postMessage `{ type: \"legion:auth\", token }`\n * 2. `auth-token` attribute (canonical, plan §4.2)\n * 3. `api-key` attribute (legacy alias, kept for backwards-compat)\n *\n * Parent → host messages are filtered against the comma-separated\n * `allowed-parent-origins` attribute. If unset, only `window.parent === self`\n * (top-level page) and same-origin parents are accepted.\n */\n\nexport interface AuthBridgeOptions {\n /** Returns the live iframe element if mounted. */\n iframeAccessor: () => HTMLIFrameElement | null;\n /** Used as the targetOrigin when posting to the iframe. */\n baseUrl: string;\n}\n\nexport interface AuthBridgeHandle {\n /** Tear down listeners. Call from `disconnectedCallback`. */\n detach(): void;\n /** Push the current token to the iframe. Call after `iframe.onload`. */\n postCurrentToken(): void;\n /** Resolve the active token (parent override → auth-token → api-key). */\n currentToken(): string | null;\n}\n\nconst AUTH_TOKEN_MESSAGE = \"AUTH_TOKEN\";\nconst PARENT_AUTH_MESSAGE = \"legion:auth\";\nconst IFRAME_EXPIRED_MESSAGE = \"legion:auth-expired\";\n\nfunction parseAllowedOrigins(host: HTMLElement): string[] {\n const raw = host.getAttribute(\"allowed-parent-origins\") || \"\";\n return raw\n .split(\",\")\n .map((s) => s.trim())\n .filter(Boolean);\n}\n\nfunction isAllowedParentOrigin(host: HTMLElement, origin: string): boolean {\n // Same-origin is always trusted.\n if (origin === window.location.origin) return true;\n const allowed = parseAllowedOrigins(host);\n return allowed.includes(origin);\n}\n\nexport function attachAuthBridge(\n host: HTMLElement,\n opts: AuthBridgeOptions\n): AuthBridgeHandle {\n // Token override pushed by the parent via postMessage. Wins over attrs.\n let parentToken: string | null = null;\n\n const currentToken = (): string | null => {\n if (parentToken) return parentToken;\n return host.getAttribute(\"auth-token\") || host.getAttribute(\"api-key\");\n };\n\n const postCurrentToken = (): void => {\n const iframe = opts.iframeAccessor();\n const token = currentToken();\n if (!iframe || !iframe.contentWindow || !token) return;\n iframe.contentWindow.postMessage(\n { type: AUTH_TOKEN_MESSAGE, token },\n opts.baseUrl\n );\n };\n\n const onMessage = (event: MessageEvent): void => {\n if (!event || typeof event.data !== \"object\" || event.data === null) {\n return;\n }\n const data = event.data as { type?: unknown; token?: unknown };\n\n // 1. Parent → host: token refresh.\n if (data.type === PARENT_AUTH_MESSAGE) {\n if (!isAllowedParentOrigin(host, event.origin)) return;\n if (typeof data.token !== \"string\" || !data.token) return;\n parentToken = data.token;\n postCurrentToken();\n return;\n }\n\n // 2. Iframe → host: token expired. The iframe is mounted in the\n // shadow DOM; messages from it carry `event.source === iframe.contentWindow`.\n if (data.type === IFRAME_EXPIRED_MESSAGE) {\n const iframe = opts.iframeAccessor();\n if (!iframe || event.source !== iframe.contentWindow) return;\n host.dispatchEvent(\n new CustomEvent(IFRAME_EXPIRED_MESSAGE, {\n bubbles: true,\n composed: true,\n })\n );\n }\n };\n\n window.addEventListener(\"message\", onMessage);\n\n return {\n detach() {\n window.removeEventListener(\"message\", onMessage);\n },\n postCurrentToken,\n currentToken,\n };\n}\n\n/** Attribute names the bridge cares about; widgets must add these to `observedAttributes`. */\nexport const AUTH_BRIDGE_OBSERVED_ATTRS = [\n \"auth-token\",\n \"api-key\",\n \"allowed-parent-origins\",\n] as const;\n","/**\n * Web Component entry point for the Community Posts widget.\n *\n * @example\n * ```ts\n * import '@legionhandtech/lht-react-widgets/community-posts-web-component';\n *\n * // Then use in HTML:\n * // \n * ```\n */\n\nimport { POSTS_THEMING_PROP_TO_PARAM } from \"./types\";\nimport {\n attachAuthBridge,\n type AuthBridgeHandle,\n AUTH_BRIDGE_OBSERVED_ATTRS,\n} from \"../shared/auth-bridge\";\n\nconst POSTS_CSS_ATTRIBUTES = Object.values(POSTS_THEMING_PROP_TO_PARAM);\n\nclass LegionCommunityPostsElement extends HTMLElement {\n public iframe: HTMLIFrameElement | null = null;\n private authBridge: AuthBridgeHandle | null = null;\n\n constructor() {\n super();\n this.attachShadow({ mode: \"open\" });\n }\n\n static get observedAttributes(): string[] {\n return [\n \"api-url\", \"page-size\", \"filter\", \"channel-id\",\n \"show-filters\", \"show-actions\", \"user-id\", \"username\", \"theme\",\n \"width\", \"height\",\n ...AUTH_BRIDGE_OBSERVED_ATTRS,\n ...POSTS_CSS_ATTRIBUTES,\n ];\n }\n\n connectedCallback(): void {\n this.authBridge = attachAuthBridge(this, {\n iframeAccessor: () => this.iframe,\n baseUrl: this.apiUrl,\n });\n this.render();\n }\n\n disconnectedCallback(): void {\n this.authBridge?.detach();\n this.authBridge = null;\n }\n\n attributeChangedCallback(name: string, oldValue: string | null, newValue: string | null): void {\n if (oldValue === newValue) return;\n if ((AUTH_BRIDGE_OBSERVED_ATTRS as readonly string[]).includes(name) && this.iframe) {\n this.authBridge?.postCurrentToken();\n return;\n }\n this.render();\n }\n\n private get apiUrl(): string { return this.getAttribute(\"api-url\") || window.location.origin; }\n private get pageSize(): number { return Math.min(Math.max(parseInt(this.getAttribute(\"page-size\") || \"10\", 10), 5), 50); }\n private get filter(): string { return this.getAttribute(\"filter\") || \"recent\"; }\n private get channelId(): string | null { return this.getAttribute(\"channel-id\"); }\n private get showFilters(): boolean { return this.getAttribute(\"show-filters\") !== \"false\"; }\n private get showActions(): boolean { return this.getAttribute(\"show-actions\") !== \"false\"; }\n private get userId(): string | null { return this.getAttribute(\"user-id\"); }\n private get username(): string | null { return this.getAttribute(\"username\"); }\n private get theme(): string { return this.getAttribute(\"theme\") || \"light\"; }\n private get widgetWidth(): string { return this.getAttribute(\"width\") || \"100%\"; }\n private get widgetHeight(): string { return this.getAttribute(\"height\") || \"800\"; }\n\n render(): void {\n if (!this.shadowRoot) return;\n\n const iframe = document.createElement(\"iframe\");\n const url = new URL(\"/widget/community-posts\", this.apiUrl);\n\n url.searchParams.set(\"pageSize\", String(this.pageSize));\n url.searchParams.set(\"filter\", this.filter);\n url.searchParams.set(\"showFilters\", String(this.showFilters));\n url.searchParams.set(\"showActions\", String(this.showActions));\n url.searchParams.set(\"theme\", this.theme);\n\n if (this.channelId) url.searchParams.set(\"channelId\", this.channelId);\n if (this.userId) url.searchParams.set(\"userId\", this.userId);\n if (this.username) url.searchParams.set(\"username\", this.username);\n\n POSTS_CSS_ATTRIBUTES.forEach((attr) => {\n const val = this.getAttribute(attr);\n if (val !== null && val !== undefined && String(val).length > 0) {\n url.searchParams.set(attr, val);\n }\n });\n\n iframe.src = url.toString();\n iframe.width = this.widgetWidth;\n iframe.height = this.widgetHeight;\n iframe.frameBorder = \"0\";\n iframe.scrolling = \"no\";\n iframe.title = \"Community Posts Widget\";\n\n iframe.onload = () => {\n this.authBridge?.postCurrentToken();\n this.dispatchEvent(new CustomEvent(\"load\", {\n detail: { widget: \"community-posts\", theme: this.theme },\n }));\n };\n\n iframe.onerror = () => {\n if (!this.shadowRoot) return;\n this.shadowRoot.innerHTML = `
Failed to load community posts widget
`;\n };\n\n const style = document.createElement(\"style\");\n style.textContent = `\n :host { display: block; width: ${this.widgetWidth.includes(\"%\") ? this.widgetWidth : this.widgetWidth + \"px\"}; height: ${this.widgetHeight}px; }\n iframe { width: 100%; height: 100%; border: none; border-radius: 8px; box-shadow: 0 2px 10px rgba(0, 0, 0, 0.1); background: ${this.theme === \"dark\" ? \"#1a1a1a\" : \"white\"}; }\n `;\n\n this.shadowRoot.innerHTML = \"\";\n this.shadowRoot.appendChild(style);\n this.shadowRoot.appendChild(iframe);\n this.iframe = iframe;\n }\n}\n\nif (typeof customElements !== \"undefined\" && !customElements.get(\"legion-community-posts\")) {\n customElements.define(\"legion-community-posts\", LegionCommunityPostsElement);\n}\n\nexport { LegionCommunityPostsElement };\n\n"]}