@openmerge/react

Thin React bindings over @openmerge/js. The isolated embed origin is explicit and required.

const options = {
  token,
  embedUrl: "https://connect.openmerge.example",
  onError: ({ message }: { message: string }) => console.error(message),
}

// Declarative: opens on mount and renders no visible wrapper.
<OpenMergeLink {...options} onSuccess={handleConnected} />
<OpenMergeManager {...options} />
<OpenMergeFieldMapping {...options} model="Contact" onProposed={handleProposal} />
<OpenMergeSyncStatus {...options} />

// Imperative: open from your own user gesture.
const { open, close } = useOpenMergeLink({ ...options, onSuccess: handleConnected })

Mint token on the customer backend with the exact browser host_origin. Never send a workspace API key to the browser. All window identity, origin, protocol, and iframe sandbox enforcement remains in @openmerge/js.