// 1. 's server: mint a 60-second, single-use embed token for the signed-in merchant.
//    The store domain and the user come from YOUR session, never from the browser.
const res = await fetch("https://api.branduo.io/v1/platform/connect/embed-tokens", {
  method: "POST",
  headers: { "X-Api-Key": process.env.BRANDUO_PLATFORM_TOKEN, "Content-Type": "application/json" },
  body: JSON.stringify({
    domain: session.merchant.storeDomain,
    user: { email: session.user.email, firstName: session.user.firstName, lastName: session.user.lastName },
  }),
});
const { embedToken } = await res.json();   // return only this to the page

// 2. 's page: load /loader/v1.0.1/brand-connect.js with SRI, then embed. No user fields.
const handle = BrandConnect.init({
  container: "#brand-connect",
  mode: "page",                            // sizes to its content; or "drawer"
  connectOrigin: "https://connect.branduo.io",
  platformId: "YOUR-PLATFORM-ID",
  initialView: "matches",                   // optional
  fetchEmbedToken: () => fetch("/api/brand-connect/embed-token", { method: "POST" })
    .then((r) => r.json()).then((b) => b.embedToken),
  onEvent(event) { /* every brand.connect.* event: { type, data } */ },
});
handle.on("brand.connect.campaign.activated", (event) => { /* event.data.campaignId */ });
handle.navigate("campaigns");