window.addEventListener("message", async function(e) {
// Replace with the actual domain your widget is served from
var allowed = "https://Bloc24-billing-widget.replit.app";
if (e.origin !== allowed) return;
if (!e.data) return;
if (e.data.type === "bloc24-ready" || e.data.type === "bloc24-request-token") {
try {
var member = await window.$memberstackDom.getCurrentMember();
if (member && member.data) {
e.source.postMessage({ type: "bloc24-member", memberId: member.data.id }, e.origin);
var token = member.data.auth && member.data.auth.token;
if (token) e.source.postMessage({ type: "bloc24-token", token: token }, e.origin);
}
} catch(err) { console.error("bloc24 token relay failed", err); }
}
});
