Fix: Add wildcard support for all Hygraph Studio domains (#8)

* Fix: Add wildcard support for all Hygraph Studio domains

- Update default allowedOrigins to use wildcards (*.hygraph.com, *.hygraph.dev)
- Fixes iframe communication issues with regional Studio domains
- Supports custom Hygraph Studio deployments out of the box
- Adds localhost:* wildcard for flexible local development

This resolves the issue where the SDK would reject postMessage events
from Studio instances running on regional or custom domains, causing
the preview integration to fail silently.

* Bump version to 1.0.4

Author: d-winter

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@hygraph/preview-sdk",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Content preview SDK for seamless real-time content editing in Hygraph CMS",
   "publishConfig": {
     "access": "public"

package.json

@@ -37,7 +37,11 @@ export class Preview {
       updateDelay: 50,
       retryAttempts: 3,
       autoConnect: true,
-      allowedOrigins: ['https://app.hygraph.com', 'http://localhost:3000'],
+      allowedOrigins: [
+        'https://*.hygraph.com',
+        'https://*.hygraph.dev',
+        'http://localhost:*',
+      ],
       ...config,
     };