@braidlabs/core 0.6.0 → 0.7.1

package/src/compat/script-execution.js

@@ -3,6 +3,7 @@
  * arbitrary pre-bound native method wrappers. */
 import { assert } from '../utils/assert.js';
 import { getInternalReference } from './metadata.js';
+import { isRunnable, markRunnable } from './born-inert-scripts.js';
 /**
  * Script execution machinery for compat fragments: any script that enters a fragment's DOM is
  * neutralized in the main document (an inert placeholder keeps the DOM shape the app expects)
@@ -21,10 +22,16 @@ export function compatDomInsertion(nodeToInsert, doInsertTheNode, realmDocument)
     // if the child is a script, then append and execute it in the fragment's realm
     if (nodeToInsert instanceof HTMLScriptElement) {
         // if the child is an unattached inline script that doesn't yet have any text content, then we need to treat it in a special way
-        if (!nodeToInsert.src && !nodeToInsert.firstChild && !nodeToInsert.parentNode) {
+        if (!nodeToInsert.src && !nodeToInsert.firstChild && !nodeToInsert.parentNode && isRunnable(nodeToInsert)) {
             prepareUnattachedInlineScript(nodeToInsert, realmDocument);
             return doInsertTheNode();
         }
+        markStartedBeforeInsertion(nodeToInsert);
+        // a script nothing of Braid's or the fragment's own document made, or one that has run: it
+        // never runs (again) anywhere — and, marked started, cannot in the host either
+        if (!isRunnable(nodeToInsert) || alreadyExecutedScriptsAndLinks.has(nodeToInsert)) {
+            return doInsertTheNode();
+        }
         setInertScriptType(nodeToInsert);
         const returnVal = doInsertTheNode();
         restoreScriptType(nodeToInsert);
@@ -45,6 +52,7 @@ export function compatDomInsertion(nodeToInsert, doInsertTheNode, realmDocument)
         return doInsertTheNode();
     }
     // otherwise, append the child and execute all nested scripts in the fragment's realm
+    markStartedBeforeInsertion(nodeToInsert);
     nestedScriptsAndLinks.forEach((element) => makeElementInert(element));
     const returnVal = doInsertTheNode();
     nestedScriptsAndLinks.forEach((element) => restoreElement(element));
@@ -67,6 +75,9 @@ export function compatMultiNodeDomInsertion(nodes, doInsertTheNodes, realmDocume
     }
     const scriptsAndLinks = [];
     for (const node of nodes) {
+        if (typeof node !== 'string' && !(node instanceof HTMLScriptElement && !node.src && !node.firstChild && !node.parentNode && isRunnable(node))) {
+            markStartedBeforeInsertion(node);
+        }
         if (typeof node === 'string') {
             console.warn('Braid compat: string arguments to append/prepend/replaceChildren/replaceWith are not supported and could result in incorrect script execution. Inserted string: ', node);
             continue;
@@ -75,7 +86,7 @@ export function compatMultiNodeDomInsertion(nodes, doInsertTheNodes, realmDocume
             patchSpecialHtmlElement(node, realmDocument);
         }
         if (node instanceof HTMLScriptElement) {
-            if (!node.src && !node.firstChild && !node.parentNode) {
+            if (!node.src && !node.firstChild && !node.parentNode && isRunnable(node)) {
                 prepareUnattachedInlineScript(node, realmDocument);
             }
             else {
@@ -106,6 +117,7 @@ function makeElementInert(element) {
 }
 function restoreElement(element) {
     if (element instanceof HTMLScriptElement) {
+        // safe to give back its real type: the element was marked started before it was inserted
         restoreScriptType(element);
     }
     else {
@@ -161,10 +173,13 @@ export function executeInertScript(inertScript, realmDocument) {
     if (alreadyExecutedScriptsAndLinks.has(inertScript)) {
         return false;
     }
+    // nor one that was never Braid's or the fragment's own to run (see `isRunnable`)
+    if (!isRunnable(inertScript)) {
+        return false;
+    }
     // If the script does not have a valid type attribute, treat the script node as a data block.
     // Data blocks live in the main document as-is.
-    const validScriptTypes = ['module', 'text/javascript', 'importmap', 'speculationrules', '', null];
-    if (!validScriptTypes.includes(inertScript.getAttribute('type'))) {
+    if (!isExecutableType(inertScript.getAttribute('type'))) {
         return false;
     }
     assert(!!(inertScript.src || inertScript.textContent), `Can't execute script without src or textContent!`);
@@ -232,6 +247,34 @@ export function attachScriptToRealm({ inertScript, execScript, realmDocument, })
     getInternalReference(realmDocument, 'body').appendChild(execScript);
     alreadyExecutedScriptsAndLinks.add(inertScript);
 }
+/**
+ * The preload links Braid itself made inert (`rel="inert-*"`), and so may bring back to life. A link
+ * the fragment's markup wrote with that rel is a forgery of the marker: natively it does nothing,
+ * and here it stays that way. Scripts are decided by provenance instead — see `isRunnable`.
+ */
+const braidInertLinks = new WeakSet();
+export function isBraidInertLink(link) {
+    return braidInertLinks.has(link);
+}
+export function markBraidInertLink(link) {
+    braidInertLinks.add(link);
+}
+export { isRunnable, markRunnable };
+/** The marker selector: what Braid neutralizes, and the gateway too. */
+export const INERT_SELECTOR = 'script[type="inert"],link[rel="inert-preload"],link[rel="inert-prefetch"],link[rel="inert-modulepreload"]';
+/**
+ * Marks the gateway's prepared content under `root` as Braid's: its scripts may run, its inert links
+ * may be revived. Template contents included, which a selector does not enter.
+ */
+export function markGatewayContent(root) {
+    const roots = [root];
+    while (roots.length) {
+        const current = roots.pop();
+        current.querySelectorAll('script').forEach((script) => markRunnable(script));
+        current.querySelectorAll('link[rel^="inert-"]').forEach((link) => markBraidInertLink(link));
+        current.querySelectorAll('template').forEach((template) => roots.push(template.content));
+    }
+}
 /**
  * Set the type attribute of a script element to "inert".
  *
@@ -239,23 +282,146 @@ export function attachScriptToRealm({ inertScript, execScript, realmDocument, })
  * the main document.
  */
 export function setInertScriptType(script) {
+    // `.type`, so a shadowed script (born inert, or kept inert) reports its real type
     const scriptType = script.type;
+    // always written, never kept: markup must not supply the "real" type Braid restores. Native
+    // methods, because a shadowed script's own redirect `type` writes to `data-script-type`.
     if (scriptType) {
-        script.setAttribute('data-script-type', scriptType);
+        nativeSetAttribute.call(script, 'data-script-type', scriptType);
+    }
+    else {
+        nativeRemoveAttribute.call(script, 'data-script-type');
+    }
+    nativeSetAttribute.call(script, 'type', 'inert');
+}
+/** The JavaScript MIME type essences a browser runs as a classic script (HTML, "JavaScript MIME type"). */
+const JAVASCRIPT_MIME_TYPES = new Set([
+    'application/ecmascript', 'application/javascript', 'application/x-ecmascript', 'application/x-javascript',
+    'text/ecmascript', 'text/javascript', 'text/javascript1.0', 'text/javascript1.1', 'text/javascript1.2',
+    'text/javascript1.3', 'text/javascript1.4', 'text/javascript1.5', 'text/jscript', 'text/livescript',
+    'text/x-ecmascript', 'text/x-javascript',
+]);
+/**
+ * Whether a browser would run a script of this type, as the HTML spec decides it: absent or empty is
+ * classic, and otherwise the type is trimmed and compared case-insensitively. Anything else is a
+ * data block.
+ */
+export function isExecutableType(type) {
+    if (type === null)
+        return true;
+    const essence = type.trim().toLowerCase();
+    return essence === '' || essence === 'module' || essence === 'importmap' || essence === 'speculationrules' || JAVASCRIPT_MIME_TYPES.has(essence);
+}
+/**
+ * The host document never runs a fragment's script: Braid runs a fresh copy in the realm instead.
+ * But a host element the browser has not marked "already started" is one it will run — when it is
+ * next connected (the host moving the slot, a keyed list reordering, a portal), or when its type,
+ * text or `src` changes. So before a script is inserted into the fragment's DOM, it is marked
+ * started the browser's own way: connected once to a document with no browsing context, under an
+ * executable type and with some text. Preparing it there sets the flag, then stops because scripting
+ * is disabled, and the flag survives the move into the host. Its real attributes are put back, and
+ * it can never run in the host, whatever happens to it after.
+ */
+let parkingDocument;
+const startedInHost = new WeakSet();
+function scriptsIn(root) {
+    if (root instanceof HTMLScriptElement)
+        return [root];
+    if (root instanceof Element || root instanceof DocumentFragment)
+        return [...root.querySelectorAll('script')];
+    return [];
+}
+/** Arms each script for marking: an executable type and some text, returning how to undo it. */
+function primeForMarking(scripts) {
+    const saved = scripts.map((script) => {
+        const type = nativeGetAttribute.call(script, 'type');
+        const emptied = !script.hasAttribute('src') && script.textContent === '';
+        nativeSetAttribute.call(script, 'type', 'text/javascript');
+        if (emptied)
+            script.textContent = '//';
+        return { script, type, emptied };
+    });
+    return () => {
+        for (const { script, type, emptied } of saved) {
+            if (type === null)
+                nativeRemoveAttribute.call(script, 'type');
+            else
+                nativeSetAttribute.call(script, 'type', type);
+            if (emptied)
+                script.textContent = '';
+            startedInHost.add(script);
+        }
+    };
+}
+function parkingBody() {
+    parkingDocument ??= document.implementation.createHTMLDocument('');
+    return parkingDocument.body;
+}
+/** Marks the scripts in a node about to be inserted, before it reaches the fragment's DOM. */
+export function markStartedBeforeInsertion(root) {
+    const scripts = scriptsIn(root).filter((script) => !startedInHost.has(script));
+    if (!scripts.length)
+        return;
+    const restore = primeForMarking(scripts);
+    const body = parkingBody();
+    if (root instanceof DocumentFragment) {
+        const children = [...root.childNodes];
+        nativeAppend.call(body, ...children);
+        nativeFragmentAppend.call(root, ...children);
+    }
+    else {
+        const parent = root.parentNode;
+        const next = root.nextSibling;
+        nativeAppendChild.call(body, root);
+        if (parent)
+            nativeInsertBefore.call(parent, root, next);
+        else
+            nativeRemove.call(root);
+    }
+    restore();
+}
+/**
+ * Marks scripts already in the fragment's DOM — the gateway's markup, or a script that arrived by a
+ * path the boundary does not intercept — by moving each out and back.
+ */
+export function markStartedInPlace(root) {
+    const scripts = [...root.querySelectorAll('script')].filter((script) => !startedInHost.has(script));
+    if (root instanceof HTMLScriptElement && !startedInHost.has(root))
+        scripts.unshift(root);
+    if (!scripts.length)
+        return;
+    const restore = primeForMarking(scripts);
+    const body = parkingBody();
+    for (const script of scripts) {
+        const parent = script.parentNode;
+        const next = script.nextSibling;
+        nativeAppendChild.call(body, script);
+        if (parent)
+            nativeInsertBefore.call(parent, script, next);
+        else
+            nativeRemove.call(script);
     }
-    script.setAttribute('type', 'inert');
+    restore();
 }
+const nativeAppendChild = Node.prototype.appendChild;
+const nativeInsertBefore = Node.prototype.insertBefore;
+const nativeRemove = Element.prototype.remove;
+const nativeAppend = Element.prototype.append;
+const nativeFragmentAppend = DocumentFragment.prototype.append;
 /**
  * Restore the original script type and erase any signs of us making the script inert.
  */
 export function restoreScriptType(script) {
-    const scriptType = script.getAttribute('data-script-type');
-    script.removeAttribute('data-script-type');
-    script.removeAttribute('type');
+    const scriptType = nativeGetAttribute.call(script, 'data-script-type');
+    nativeRemoveAttribute.call(script, 'data-script-type');
+    nativeRemoveAttribute.call(script, 'type');
     if (scriptType) {
-        script.setAttribute('type', scriptType);
+        nativeSetAttribute.call(script, 'type', scriptType);
     }
 }
+const nativeSetAttribute = Element.prototype.setAttribute;
+const nativeGetAttribute = Element.prototype.getAttribute;
+const nativeRemoveAttribute = Element.prototype.removeAttribute;
 /**
  * Neutralizes the original link, so that it doesn't result in a duplicate network call.
  */
@@ -263,6 +429,7 @@ export function setInertLinkRel(link) {
     const linkRel = link.rel;
     if (linkRel) {
         link.rel = 'inert-' + linkRel;
+        markBraidInertLink(link);
     }
 }
 /**

package/src/compat/script-execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"script-execution.js","sourceRoot":"","sources":["../../../../../libs/core/src/compat/script-execution.ts"],"names":[],"mappings":"AAAA;;iDAEiD;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD;;;;GAIG;AAEH,MAAM,UAAU,kBAAkB,CAChC,YAAe,EACf,eAAyB,EACzB,aAAwB;IAExB,gGAAgG;IAChG,iGAAiG;IACjG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,YAAY,YAAY,WAAW,IAAI,YAAY,YAAY,gBAAgB,CAAC,EAAE,CAAC;QACzG,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;IAED,kHAAkH;IAClH,IAAI,YAAY,YAAY,WAAW,IAAI,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,KAAK,WAAW,CAAC,SAAS,EAAE,CAAC;QACzG,uBAAuB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IACvD,CAAC;IAED,+EAA+E;IAC/E,IAAI,YAAY,YAAY,iBAAiB,EAAE,CAAC;QAC9C,gIAAgI;QAChI,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;YAC9E,6BAA6B,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAC3D,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;QAED,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;QACpC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAChC,kBAAkB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0HAA0H;IAC1H,IACE,YAAY,YAAY,eAAe;QACvC,CAAC,YAAY,CAAC,GAAG,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,KAAK,UAAU,IAAI,YAAY,CAAC,GAAG,KAAK,eAAe,CAAC,EAC3G,CAAC;QACD,eAAe,CAAC,YAAY,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;QACpC,uBAAuB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,qBAAqB,GAAoD,YAAY,CAAC,gBAAgB,EAAE,CAC5G,qEAAqE,CACtE,CAAC;IAEF,4EAA4E;IAC5E,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;IAED,qFAAqF;IACrF,qBAAqB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,qBAAqB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,qBAAqB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAwB,EACxB,gBAA4B,EAC5B,aAAwB;IAExB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,eAAe,GAA4C,EAAE,CAAC;IAEpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CACV,kKAAkK,EAClK,IAAI,CACL,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,IAAI,YAAY,WAAW,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,SAAS,EAAE,CAAC;YACzF,uBAAuB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,YAAY,iBAAiB,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACtD,6BAA6B,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;aAAM,IACL,IAAI,YAAY,eAAe;YAC/B,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,KAAK,eAAe,CAAC,EACnF,CAAC;YACD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChG,MAAM,MAAM,GACV,IACD,CAAC,gBAAgB,EAAE,CAAC,qEAAqE,CAAC,CAAC;YAC5F,MAAM,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,gBAAgB,EAAE,CAAC;IACnB,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA4C;IACpE,IAAI,OAAO,YAAY,iBAAiB,EAAE,CAAC;QACzC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAA4C;IAClE,IAAI,OAAO,YAAY,iBAAiB,EAAE,CAAC;QACzC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,mFAAmF;IACrF,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAA4C,EAAE,aAAuB;IAC3F,IAAI,OAAO,YAAY,iBAAiB,EAAE,CAAC;QACzC,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,uBAAuB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,WAAuB,EAAE,aAAuB;IAC9F,6FAA6F;IAC7F,gDAAgD;IAChD,CAAC,GAAG,WAAW,CAAC,gBAAgB,CAAC,oCAAoC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC1F,uBAAuB,CAAC,OAAO,EAAE,aAAa,CAAC,CAChD,CAAC;IAEF,MAAM,eAAe,GAAG;QACtB,GAAG,WAAW,CAAC,gBAAgB,CAC7B,uFAAuF,CACxF;KACyC,CAAC;IAE7C,eAAe,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;QACvC,IAAI,YAAY,YAAY,eAAe,EAAE,CAAC;YAC5C,uBAAuB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,YAAY,CAAC,CAAC;YAChC,kBAAkB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAwC,CAAC;AACxF,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,OAAO,EAAuC,CAAC;AAEjG;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAA8B,EAAE,aAAuB;IACxF,2FAA2F;IAC3F,6FAA6F;IAC7F,IAAI,8BAA8B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6FAA6F;IAC7F,+CAA+C;IAC/C,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAClG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,kDAAkD,CAAC,CAAC;IAE3G,mBAAmB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IAEpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAA0B,EAAE,aAAuB;IACzF,yFAAyF;IACzF,mDAAmD;IACnD,IAAI,8BAA8B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6DAA6D;IAC7D,IAAI,CAAC,SAAS,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAElC,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3D,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEzB,4CAA4C;IAC5C,MAAM,KAAK,GAAG,aAAa,CAAC,WAAY,CAAC,KAAK,CAAC;IAE/C,oEAAoE;IACpE,QAAQ,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;QACrC,SAAS,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;QACtC,SAAS,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,oBAAoB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAClE,8BAA8B,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,WAAW,EACX,UAAU,EACV,aAAa,GAKd;IACC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,yFAAyF;QACzF,wFAAwF;QACxF,qEAAqE;QACrE,EAAE;QACF,gFAAgF;QAChF,oFAAoF;QACpF,oEAAoE;QACpE,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAsB,CAAC;QACjG,KAAK,MAAM,SAAS,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;YAC/C,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QACD,UAAU,CAAC,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;IACnD,CAAC;IAED,oEAAoE;IACpE,0FAA0F;IAC1F,uGAAuG;IACvG,oBAAoB,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAElD,sEAAsE;IACtE,UAAU,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;QACvC,WAAW,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;QACxC,WAAW,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,oBAAoB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACpE,8BAA8B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,YAAY,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;IAC3D,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAC3C,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAqB;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;IACzB,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,GAAG,GAAG,QAAQ,GAAG,OAAO,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAqB;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;IACzB,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,4BAA4B;QAC5B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,6BAA6B,CAAC,MAAyB,EAAE,aAAuB;IACvF,gGAAgG;IAChG,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,CAAC;IAE3B,0EAA0E;IAC1E,WAAW,CAAC,WAAW,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,WAAW,CAAC,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,UAAW,CAAC,MAAM,EAAE,CAAC;IAEjC,6EAA6E;IAC7E,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;IAEhE,MAAM,qBAAqB,GAAG,WAAW,CAAC,WAAW,CAAC;IACtD,WAAW,CAAC,WAAW,GAAG,UAAU,IAAI;QACtC,qBAAqB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9C,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9E,8EAA8E;QAC9E,WAAW,CAAC,WAAW,GAAG,qBAAqB,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,IAAI,uBAAyD,CAAC;AAE9D,SAAS,sBAAsB;IAC7B,uBAAuB,KAAK,IAAI,GAAG,CAAC;QAClC,CAAC,YAAY,EAAE,QAAQ,CAAC,eAAe,CAAC;QACxC,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC;QAC7B,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAa,EAAE,aAAuB;IAC5E,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;IACrC,MAAM,aAAa,GAAG,sBAAsB,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpE,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE;YAC5B,WAAW,EAAE;gBACX,GAAG;oBACD,OAAO,aAAa,CAAC,WAAW,CAAC;gBACnC,CAAC;aACF;YACD,YAAY,EAAE;gBACZ,GAAG;oBACD,OAAO,aAAa,CAAC,YAAY,CAAC;gBACpC,CAAC;aACF;YACD,QAAQ,EAAE;gBACR,GAAG;oBACD,OAAO,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACjD,CAAC;aACF;YACD,OAAO,EAAE;gBACP,GAAG;oBACD,OAAO,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACjD,CAAC;aACF;SACF,CAAC,CAAC;QAEH,yCAAyC;QACzC,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,6FAA6F;QAC7F,yCAAyC;QACzC,IAAI,CAAC,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;QACvD,IAAI,CAAC,mBAAmB,GAAG,aAAa,CAAC,mBAAmB,CAAC;IAC/D,CAAC;AACH,CAAC"}
+{"version":3,"file":"script-execution.js","sourceRoot":"","sources":["../../../../../libs/core/src/compat/script-execution.ts"],"names":[],"mappings":"AAAA;;iDAEiD;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEnE;;;;GAIG;AAEH,MAAM,UAAU,kBAAkB,CAChC,YAAe,EACf,eAAyB,EACzB,aAAwB;IAExB,gGAAgG;IAChG,iGAAiG;IACjG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,YAAY,YAAY,WAAW,IAAI,YAAY,YAAY,gBAAgB,CAAC,EAAE,CAAC;QACzG,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;IAED,kHAAkH;IAClH,IAAI,YAAY,YAAY,WAAW,IAAI,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,KAAK,WAAW,CAAC,SAAS,EAAE,CAAC;QACzG,uBAAuB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IACvD,CAAC;IAED,+EAA+E;IAC/E,IAAI,YAAY,YAAY,iBAAiB,EAAE,CAAC;QAC9C,gIAAgI;QAChI,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1G,6BAA6B,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAC3D,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;QAED,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAEzC,2FAA2F;QAC3F,+EAA+E;QAC/E,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAClF,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;QAED,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;QACpC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAChC,kBAAkB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0HAA0H;IAC1H,IACE,YAAY,YAAY,eAAe;QACvC,CAAC,YAAY,CAAC,GAAG,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,KAAK,UAAU,IAAI,YAAY,CAAC,GAAG,KAAK,eAAe,CAAC,EAC3G,CAAC;QACD,eAAe,CAAC,YAAY,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;QACpC,uBAAuB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,qBAAqB,GAAoD,YAAY,CAAC,gBAAgB,EAAE,CAC5G,qEAAqE,CACtE,CAAC;IAEF,4EAA4E;IAC5E,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;IAED,qFAAqF;IACrF,0BAA0B,CAAC,YAAY,CAAC,CAAC;IACzC,qBAAqB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,qBAAqB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,qBAAqB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAwB,EACxB,gBAA4B,EAC5B,aAAwB;IAExB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,eAAe,GAA4C,EAAE,CAAC;IAEpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,YAAY,iBAAiB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC9I,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CACV,kKAAkK,EAClK,IAAI,CACL,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,IAAI,YAAY,WAAW,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,SAAS,EAAE,CAAC;YACzF,uBAAuB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,YAAY,iBAAiB,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1E,6BAA6B,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;aAAM,IACL,IAAI,YAAY,eAAe;YAC/B,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,KAAK,eAAe,CAAC,EACnF,CAAC;YACD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChG,MAAM,MAAM,GACV,IACD,CAAC,gBAAgB,EAAE,CAAC,qEAAqE,CAAC,CAAC;YAC5F,MAAM,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,gBAAgB,EAAE,CAAC;IACnB,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA4C;IACpE,IAAI,OAAO,YAAY,iBAAiB,EAAE,CAAC;QACzC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAA4C;IAClE,IAAI,OAAO,YAAY,iBAAiB,EAAE,CAAC;QACzC,yFAAyF;QACzF,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,mFAAmF;IACrF,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAA4C,EAAE,aAAuB;IAC3F,IAAI,OAAO,YAAY,iBAAiB,EAAE,CAAC;QACzC,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,uBAAuB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,WAAuB,EAAE,aAAuB;IAC9F,6FAA6F;IAC7F,gDAAgD;IAChD,CAAC,GAAG,WAAW,CAAC,gBAAgB,CAAC,oCAAoC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC1F,uBAAuB,CAAC,OAAO,EAAE,aAAa,CAAC,CAChD,CAAC;IAEF,MAAM,eAAe,GAAG;QACtB,GAAG,WAAW,CAAC,gBAAgB,CAC7B,uFAAuF,CACxF;KACyC,CAAC;IAE7C,eAAe,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;QACvC,IAAI,YAAY,YAAY,eAAe,EAAE,CAAC;YAC5C,uBAAuB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,YAAY,CAAC,CAAC;YAChC,kBAAkB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAwC,CAAC;AACxF,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,OAAO,EAAuC,CAAC;AAEjG;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAA8B,EAAE,aAAuB;IACxF,2FAA2F;IAC3F,6FAA6F;IAC7F,IAAI,8BAA8B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6FAA6F;IAC7F,+CAA+C;IAC/C,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,kDAAkD,CAAC,CAAC;IAE3G,mBAAmB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IAEpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAA0B,EAAE,aAAuB;IACzF,yFAAyF;IACzF,mDAAmD;IACnD,IAAI,8BAA8B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6DAA6D;IAC7D,IAAI,CAAC,SAAS,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAElC,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3D,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEzB,4CAA4C;IAC5C,MAAM,KAAK,GAAG,aAAa,CAAC,WAAY,CAAC,KAAK,CAAC;IAE/C,oEAAoE;IACpE,QAAQ,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;QACrC,SAAS,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;QACtC,SAAS,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,oBAAoB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAClE,8BAA8B,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,WAAW,EACX,UAAU,EACV,aAAa,GAKd;IACC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,yFAAyF;QACzF,wFAAwF;QACxF,qEAAqE;QACrE,EAAE;QACF,gFAAgF;QAChF,oFAAoF;QACpF,oEAAoE;QACpE,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAsB,CAAC;QACjG,KAAK,MAAM,SAAS,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;YAC/C,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QACD,UAAU,CAAC,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;IACnD,CAAC;IAED,oEAAoE;IACpE,0FAA0F;IAC1F,uGAAuG;IACvG,oBAAoB,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAElD,sEAAsE;IACtE,UAAU,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;QACvC,WAAW,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;QACxC,WAAW,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,oBAAoB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACpE,8BAA8B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,eAAe,GAAG,IAAI,OAAO,EAAmB,CAAC;AAEvD,MAAM,UAAU,gBAAgB,CAAC,IAAqB;IACpD,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AAEpC,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GACzB,2GAA2G,CAAC;AAE9G;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAgB;IACjD,MAAM,KAAK,GAAiB,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAC7B,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAA2B,CAAC,CAAC,CAAC;QAClG,OAAO,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAuB,CAAC,CAAC,CAAC;QAC/G,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAE,QAAgC,CAAC,OAAO,CAAC,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB;IAC1D,kFAAkF;IAClF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,4FAA4F;IAC5F,yFAAyF;IACzF,IAAI,UAAU,EAAE,CAAC;QACf,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACzD,CAAC;IACD,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,2GAA2G;AAC3G,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,wBAAwB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,0BAA0B;IAC1G,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB;IACtG,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,cAAc,EAAE,iBAAiB;IACnG,mBAAmB,EAAE,mBAAmB;CACzC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAmB;IAClD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,kBAAkB,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACnJ,CAAC;AAED;;;;;;;;;GASG;AACH,IAAI,eAAqC,CAAC;AAC1C,MAAM,aAAa,GAAG,IAAI,OAAO,EAAqB,CAAC;AAEvD,SAAS,SAAS,CAAC,IAAU;IAC3B,IAAI,IAAI,YAAY,iBAAiB;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,IAAI,YAAY,OAAO,IAAI,IAAI,YAAY,gBAAgB;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7G,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,gGAAgG;AAChG,SAAS,eAAe,CAAC,OAA4B;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,EAAE,CAAC;QACzE,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;QACvC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC;YAC9C,IAAI,IAAI,KAAK,IAAI;gBAAE,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;;gBACzD,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACnD,IAAI,OAAO;gBAAE,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;YACrC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,eAAe,KAAK,QAAQ,CAAC,cAAc,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACnE,OAAO,eAAe,CAAC,IAAI,CAAC;AAC9B,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,0BAA0B,CAAC,IAAU;IACnD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IAC5B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,IAAI,IAAI,YAAY,gBAAgB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;QACrC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;;YACnD,YAAY,CAAC,IAAI,CAAC,IAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAgB;IACjD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAA2B,CAAC,CAAwB,CAAC;IAChJ,IAAI,IAAI,YAAY,iBAAiB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IAC5B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC;QAChC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM;YAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;;YACrD,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;AACrD,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;AACvD,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;AAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;AAC9C,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC;AAE/D;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACvE,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACvD,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QACf,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;AAC1D,MAAM,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;AAC1D,MAAM,qBAAqB,GAAG,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC;AAEhE;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAqB;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;IACzB,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,GAAG,GAAG,QAAQ,GAAG,OAAO,CAAC;QAC9B,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAqB;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;IACzB,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,4BAA4B;QAC5B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,6BAA6B,CAAC,MAAyB,EAAE,aAAuB;IACvF,gGAAgG;IAChG,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,CAAC;IAE3B,0EAA0E;IAC1E,WAAW,CAAC,WAAW,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,WAAW,CAAC,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,UAAW,CAAC,MAAM,EAAE,CAAC;IAEjC,6EAA6E;IAC7E,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;IAEhE,MAAM,qBAAqB,GAAG,WAAW,CAAC,WAAW,CAAC;IACtD,WAAW,CAAC,WAAW,GAAG,UAAU,IAAI;QACtC,qBAAqB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9C,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9E,8EAA8E;QAC9E,WAAW,CAAC,WAAW,GAAG,qBAAqB,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,IAAI,uBAAyD,CAAC;AAE9D,SAAS,sBAAsB;IAC7B,uBAAuB,KAAK,IAAI,GAAG,CAAC;QAClC,CAAC,YAAY,EAAE,QAAQ,CAAC,eAAe,CAAC;QACxC,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC;QAC7B,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAa,EAAE,aAAuB;IAC5E,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;IACrC,MAAM,aAAa,GAAG,sBAAsB,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpE,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE;YAC5B,WAAW,EAAE;gBACX,GAAG;oBACD,OAAO,aAAa,CAAC,WAAW,CAAC;gBACnC,CAAC;aACF;YACD,YAAY,EAAE;gBACZ,GAAG;oBACD,OAAO,aAAa,CAAC,YAAY,CAAC;gBACpC,CAAC;aACF;YACD,QAAQ,EAAE;gBACR,GAAG;oBACD,OAAO,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACjD,CAAC;aACF;YACD,OAAO,EAAE;gBACP,GAAG;oBACD,OAAO,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACjD,CAAC;aACF;SACF,CAAC,CAAC;QAEH,yCAAyC;QACzC,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,6FAA6F;QAC7F,yCAAyC;QACzC,IAAI,CAAC,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;QACvD,IAAI,CAAC,mBAAmB,GAAG,aAAa,CAAC,mBAAmB,CAAC;IAC/D,CAAC;AACH,CAAC"}

package/src/compat/storage-partition.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Per-fragment Web Storage for trusted fragments.
+ *
+ * A compat realm is a same-origin iframe, so its `localStorage` and `sessionStorage` *are* the
+ * host's. Two fragments whose libraries keep state under the same fixed key — an OIDC client's
+ * `okta-token-storage`, a PKCE transaction — overwrite each other, and the `storage` events those
+ * writes raise reach every other realm on the page, where a sync listener dutifully copies the
+ * wrong value back. A partition gives the fragment a view over the native store in which every key
+ * it sees is its own, and events for anyone else's keys never arrive.
+ *
+ * It is an accident barrier, not a security boundary: same-origin code can still reach
+ * `top.localStorage`. See docs/braid-boundary.md.
+ *
+ * Storage keys are prefixed `braid:storage:<partition>:`. A partition is the fragment's id by
+ * default (`storage: 'partitioned'`), or a name several fragments share
+ * (`storage: { partition: 'kcd' }`), which is how two fragments using one issuer keep one login.
+ */
+/** The native-store key prefix for a partition. Encoded so a name can never reach into another's. */
+export declare function storagePartitionPrefix(partition: string): string;
+/**
+ * A `Storage` that reads and writes only the keys under `prefix`, with the prefix out of sight.
+ *
+ * A Proxy rather than a subclass, because `Storage` exposes its entries as named properties —
+ * `localStorage.token = 'x'`, `Object.keys(localStorage)` — and only a Proxy can answer those.
+ * Members (`getItem`, `length`…) come from the realm's own `Storage.prototype`, patched to route a
+ * view to its own entries.
+ */
+export declare function createStorageView(native: Storage, prefix: string, storagePrototype: object, 
+/** Told of every write that changes the store, which is every write that raises a `storage` event. */
+onChange?: (nativeKey: string, newValue: string | null) => void): Storage;
+/** What a `storage` event looks like from inside the partition, or `null` if it is not its event. */
+export interface PartitionedStorageEvent {
+    key: string | null;
+    storageArea: Storage;
+}
+export interface StoragePartition {
+    /** Translates a `storage` event raised on the host window into the partition's terms. */
+    adaptEvent(event: StorageEvent): PartitionedStorageEvent | null;
+}
+/**
+ * Replaces the realm window's `localStorage` and `sessionStorage` with views on `partition`.
+ *
+ * Must run before any fragment script, which the compat boot guarantees: the realm stub has no
+ * scripts of its own, and the fragment's are activated only after the patches are in place.
+ * Reaching for a store that the browser refuses (some privacy modes throw) throws, as natively.
+ */
+export declare function installStoragePartition(realmWindow: Window, mainWindow: Window, partition: string, signal?: AbortSignal): StoragePartition;

package/src/compat/storage-partition.js

@@ -0,0 +1,291 @@
+/**
+ * Per-fragment Web Storage for trusted fragments.
+ *
+ * A compat realm is a same-origin iframe, so its `localStorage` and `sessionStorage` *are* the
+ * host's. Two fragments whose libraries keep state under the same fixed key — an OIDC client's
+ * `okta-token-storage`, a PKCE transaction — overwrite each other, and the `storage` events those
+ * writes raise reach every other realm on the page, where a sync listener dutifully copies the
+ * wrong value back. A partition gives the fragment a view over the native store in which every key
+ * it sees is its own, and events for anyone else's keys never arrive.
+ *
+ * It is an accident barrier, not a security boundary: same-origin code can still reach
+ * `top.localStorage`. See docs/braid-boundary.md.
+ *
+ * Storage keys are prefixed `braid:storage:<partition>:`. A partition is the fragment's id by
+ * default (`storage: 'partitioned'`), or a name several fragments share
+ * (`storage: { partition: 'kcd' }`), which is how two fragments using one issuer keep one login.
+ */
+const PREFIX = 'braid:storage:';
+/** The native-store key prefix for a partition. Encoded so a name can never reach into another's. */
+export function storagePartitionPrefix(partition) {
+    return `${PREFIX}${encodeURIComponent(partition)}:`;
+}
+const METHODS = ['getItem', 'setItem', 'removeItem', 'clear', 'key'];
+/** The argument counts `Storage`'s methods require, for the TypeError a native call throws. */
+const ARITY = { getItem: 1, setItem: 2, removeItem: 1, clear: 0, key: 1 };
+const patched = new WeakMap();
+function requireArguments(method, args) {
+    if (args.length < ARITY[method]) {
+        throw new TypeError(`Failed to execute '${method}' on 'Storage': ${ARITY[method]} argument${ARITY[method] > 1 ? 's' : ''} required, but only ${args.length} present.`);
+    }
+}
+/**
+ * Makes the realm's own `Storage.prototype` answer for views, once per realm.
+ *
+ * A view is a Proxy, not a platform object, so the native methods would refuse it
+ * (`Storage.prototype.getItem.call(localStorage, k)` is an "Illegal invocation"). Wrapping them —
+ * the realm's copy only; the host's `Storage` is never touched — lets every route to a method work:
+ * `localStorage.getItem(k)`, `.call(localStorage, …)`, and a library that monkey-patches
+ * `Storage.prototype.setItem` sees the fragment's own key names. The views themselves call the
+ * captured originals, so such a patch runs once per call, as it would natively.
+ */
+function patchStoragePrototype(storagePrototype) {
+    const existing = patched.get(storagePrototype);
+    if (existing)
+        return existing;
+    const descriptor = (name) => Object.getOwnPropertyDescriptor(storagePrototype, name);
+    const original = Object.fromEntries(METHODS.map((name) => [name, descriptor(name).value]));
+    const originalLength = descriptor('length').get;
+    const ops = {
+        getItem: (store, key) => original.getItem.call(store, key),
+        setItem: (store, key, value) => void original.setItem.call(store, key, value),
+        removeItem: (store, key) => void original.removeItem.call(store, key),
+        key: (store, index) => original.key.call(store, index),
+        length: (store) => originalLength.call(store),
+    };
+    const views = new WeakMap();
+    for (const name of METHODS) {
+        // a method definition, so the wrapper keeps the native's name and is not a constructor
+        const wrapper = {
+            [name](...args) {
+                const view = typeof this === 'object' && this !== null ? views.get(this) : undefined;
+                return view ? view[name](...args) : original[name].apply(this, args);
+            },
+        }[name];
+        Object.defineProperty(storagePrototype, name, { ...descriptor(name), value: wrapper });
+    }
+    Object.defineProperty(storagePrototype, 'length', {
+        ...descriptor('length'),
+        get() {
+            const view = typeof this === 'object' && this !== null ? views.get(this) : undefined;
+            return view ? view.length() : originalLength.call(this);
+        },
+    });
+    const record = { ops, views };
+    patched.set(storagePrototype, record);
+    return record;
+}
+/**
+ * A `Storage` that reads and writes only the keys under `prefix`, with the prefix out of sight.
+ *
+ * A Proxy rather than a subclass, because `Storage` exposes its entries as named properties —
+ * `localStorage.token = 'x'`, `Object.keys(localStorage)` — and only a Proxy can answer those.
+ * Members (`getItem`, `length`…) come from the realm's own `Storage.prototype`, patched to route a
+ * view to its own entries.
+ */
+export function createStorageView(native, prefix, storagePrototype, 
+/** Told of every write that changes the store, which is every write that raises a `storage` event. */
+onChange = () => undefined) {
+    const { ops, views } = patchStoragePrototype(storagePrototype);
+    /**
+     * The partition's keys, scanned once and kept until the next microtask: a loop over `key(i)` up
+     * to `length` would otherwise rescan the whole origin store at every step. Nothing can change the
+     * store inside one synchronous run except this view, whose writes drop the cache.
+     */
+    let cachedKeys = null;
+    const ownKeys = () => {
+        if (!cachedKeys) {
+            const keys = [];
+            const total = ops.length(native);
+            for (let i = 0; i < total; i++) {
+                const key = ops.key(native, i);
+                if (key !== null && key.startsWith(prefix))
+                    keys.push(key.slice(prefix.length));
+            }
+            cachedKeys = keys;
+            queueMicrotask(() => {
+                cachedKeys = null;
+            });
+        }
+        return cachedKeys;
+    };
+    const set = (nativeKey, value) => {
+        const changed = ops.getItem(native, nativeKey) !== value;
+        ops.setItem(native, nativeKey, value);
+        cachedKeys = null;
+        if (changed)
+            onChange(nativeKey, value);
+    };
+    const remove = (nativeKey) => {
+        const existed = ops.getItem(native, nativeKey) !== null;
+        ops.removeItem(native, nativeKey);
+        cachedKeys = null;
+        if (existed)
+            onChange(nativeKey, null);
+    };
+    const members = {
+        getItem: (...args) => (requireArguments('getItem', args), ops.getItem(native, prefix + String(args[0]))),
+        setItem: (...args) => (requireArguments('setItem', args), set(prefix + String(args[0]), String(args[1]))),
+        removeItem: (...args) => (requireArguments('removeItem', args), remove(prefix + String(args[0]))),
+        // removes this partition's entries one by one, so other partitions and the host keep theirs
+        clear: () => [...ownKeys()].forEach((key) => remove(prefix + key)),
+        // WebIDL `unsigned long`: NaN and undefined are 0, negatives wrap past the end
+        key: (...args) => (requireArguments('key', args), ownKeys()[Number(args[0]) >>> 0] ?? null),
+        length: () => ownKeys().length,
+    };
+    const isMember = (property) => property in storagePrototype;
+    const entry = (property) => ops.getItem(native, prefix + property);
+    const view = new Proxy(Object.create(storagePrototype), {
+        get(target, property, receiver) {
+            if (typeof property === 'symbol')
+                return Reflect.get(target, property, receiver);
+            if (isMember(property))
+                return Reflect.get(storagePrototype, property, receiver);
+            // a named property: the entry, or undefined (not null) like a native Storage
+            return entry(property) ?? undefined;
+        },
+        // as natively: assigning any string property stores an entry (WebIDL's named setter wins on
+        // [[Set]]), while reading a member name still finds the member
+        set(target, property, value) {
+            if (typeof property === 'symbol')
+                return Reflect.set(target, property, value);
+            set(prefix + property, String(value));
+            return true;
+        },
+        has(target, property) {
+            if (typeof property === 'symbol')
+                return Reflect.has(target, property);
+            return isMember(property) || entry(property) !== null;
+        },
+        deleteProperty(target, property) {
+            if (typeof property === 'symbol')
+                return Reflect.deleteProperty(target, property);
+            remove(prefix + property);
+            return true;
+        },
+        ownKeys(target) {
+            return [...ownKeys(), ...Object.getOwnPropertySymbols(target)];
+        },
+        getOwnPropertyDescriptor(target, property) {
+            if (typeof property === 'symbol')
+                return Reflect.getOwnPropertyDescriptor(target, property);
+            if (isMember(property))
+                return undefined;
+            const value = entry(property);
+            return value === null ? undefined : { value, writable: true, enumerable: true, configurable: true };
+        },
+        defineProperty(target, property, descriptor) {
+            if (typeof property === 'symbol')
+                return Reflect.defineProperty(target, property, descriptor);
+            // natively a data descriptor stores its value as an entry
+            if (!('value' in descriptor))
+                return false;
+            set(prefix + property, String(descriptor.value));
+            return true;
+        },
+    });
+    views.set(view, members);
+    return view;
+}
+/** Finds the getter for a storage attribute wherever the engine defines it (instance or prototype). */
+function nativeStorageGetter(target, name) {
+    for (let object = target; object; object = Object.getPrototypeOf(object)) {
+        const descriptor = Object.getOwnPropertyDescriptor(object, name);
+        if (descriptor?.get)
+            return descriptor.get.bind(target);
+        if (descriptor)
+            return () => descriptor.value;
+    }
+    throw new Error(`braid: this browser has no ${name}`);
+}
+/**
+ * Replaces the realm window's `localStorage` and `sessionStorage` with views on `partition`.
+ *
+ * Must run before any fragment script, which the compat boot guarantees: the realm stub has no
+ * scripts of its own, and the fragment's are activated only after the patches are in place.
+ * Reaching for a store that the browser refuses (some privacy modes throw) throws, as natively.
+ */
+export function installStoragePartition(realmWindow, mainWindow, partition, signal) {
+    const prefix = storagePartitionPrefix(partition);
+    const storagePrototype = realmWindow.Storage.prototype;
+    const views = new Map();
+    // captured before the accessors below replace them, or the view would find itself
+    const native = {
+        localStorage: nativeStorageGetter(realmWindow, 'localStorage'),
+        sessionStorage: nativeStorageGetter(realmWindow, 'sessionStorage'),
+    };
+    /**
+     * A window never hears its own writes, but a realm listens on the host window, where its writes
+     * do raise events. Each write this realm makes is recorded, and the host event it raises is
+     * marked an echo — by a listener registered here, before any fragment code can add its own, so
+     * it always sees the event first.
+     */
+    const pending = new Map();
+    const echoes = new WeakSet();
+    const writeId = (area, nativeKey, newValue) => JSON.stringify([area, nativeKey, newValue]);
+    /** An echo arrives within a task or two; one that never comes must not swallow a later event. */
+    const ECHO_WINDOW_MS = 2_000;
+    const view = (name) => {
+        let existing = views.get(name);
+        if (!existing) {
+            existing = createStorageView(native[name](), prefix, storagePrototype, (nativeKey, newValue) => {
+                const id = writeId(name, nativeKey, newValue);
+                pending.set(id, [...(pending.get(id) ?? []), Date.now() + ECHO_WINDOW_MS]);
+            });
+            views.set(name, existing);
+        }
+        return existing;
+    };
+    for (const name of ['localStorage', 'sessionStorage']) {
+        // the native attributes are enumerable, configurable getters with no setter; so are these
+        Object.defineProperty(realmWindow, name, { get: () => view(name), set: undefined, configurable: true, enumerable: true });
+    }
+    const hostArea = (name) => {
+        try {
+            return nativeStorageGetter(mainWindow, name)();
+        }
+        catch {
+            return null;
+        }
+    };
+    const areaOf = (event) => {
+        const area = event.storageArea;
+        if (!area)
+            return null;
+        return area === hostArea('sessionStorage') ? 'sessionStorage' : area === hostArea('localStorage') ? 'localStorage' : null;
+    };
+    mainWindow.addEventListener('storage', (event) => {
+        const name = areaOf(event);
+        if (!name || event.key === null)
+            return;
+        const id = writeId(name, event.key, event.newValue);
+        const now = Date.now();
+        const live = (pending.get(id) ?? []).filter((expires) => expires > now);
+        if (live.length === 0) {
+            pending.delete(id);
+            return;
+        }
+        live.shift();
+        if (live.length > 0)
+            pending.set(id, live);
+        else
+            pending.delete(id);
+        echoes.add(event);
+    }, 
+    // capture, so it runs before any listener a fragment adds, in either phase
+    signal ? { capture: true, signal } : { capture: true });
+    return {
+        adaptEvent(event) {
+            const name = areaOf(event);
+            if (!name || echoes.has(event))
+                return null;
+            // a `clear()` outside the partition wiped this partition's entries too, so it is news here
+            if (event.key === null)
+                return { key: null, storageArea: view(name) };
+            if (!event.key.startsWith(prefix))
+                return null;
+            return { key: event.key.slice(prefix.length), storageArea: view(name) };
+        },
+    };
+}
+//# sourceMappingURL=storage-partition.js.map