// bcnr-preload.js — session-wide preload that installs `window.bcnr` on every
// page (regular tabs, popups, chrome/settings/etc). Reads only — no signing,
// no wallet unlock, no permission prompts. These four methods query the same
// resolver Theseus already runs for its address bar; nothing about the local
// user leaks, so no origin gate is needed for this surface.
//
// Sequencing: registered via `session.defaultSession.setPreloads([...])` in
// main.js at whenReady, which runs BEFORE per-WebContentsView preloads (home,
// settings, popover, etc.), so those preloads still install their own bridges
// on top of `window.bcnr`. See DESIGN-integrated-wallet.md §3 for the full
// API surface.
const { contextBridge, ipcRenderer } = require("electron");

// Every method returns a Promise; a name that fails to resolve or isn't
// registered comes back as `null` (not an error) so page code can treat
// "no such name" as data, not an exception. `getBcnrTlds` always returns
// an array — even the seed ["bch"] before the on-chain list has landed.
contextBridge.exposeInMainWorld("bcnr", {
  resolveName:      (name) => ipcRenderer.invoke("bcnr:resolveName", name),
  isRegistered:     (name) => ipcRenderer.invoke("bcnr:isRegistered", name),
  getBcnrTlds:      ()     => ipcRenderer.invoke("bcnr:getBcnrTlds"),
  getRecordVersion: (name) => ipcRenderer.invoke("bcnr:getRecordVersion", name),
  // Diagnostic — the eTLD+1 permission origin Theseus computes for THIS page.
  // dApp devs use this to see how their subdomains bucket under one grant.
  // Returns null for opaque origins (data:, blob:) which never hold grants.
  getOrigin:        ()     => ipcRenderer.invoke("bcnr:getOrigin"),
});