@cueframe/kernel 0.2.10 → 0.2.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1 +1 @@
1
- {"version":3,"file":"browserFirewall.d.ts","sourceRoot":"","sources":["../src/browserFirewall.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAMD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,GACvC,yBAAyB,CAoB3B;AAcD,eAAO,MAAM,uBAAuB,iUAAgB,CAAC;AAErD,KAAK,eAAe,GAAG;IACrB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D,CAAC;AACF,KAAK,eAAe,GAAG;IACrB,UAAU,EAAE,eAAe,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD,CAAC;AAEF,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,eAAe,EACxB,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,EACxC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,GACvG,OAAO,CAAC;IACT,cAAc,IAAI,SAAS,MAAM,EAAE,CAAC;IACpC,UAAU,IAAI,OAAO,GAAG,IAAI,CAAC;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CA+DD"}
1
+ {"version":3,"file":"browserFirewall.d.ts","sourceRoot":"","sources":["../src/browserFirewall.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAMD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,GACvC,yBAAyB,CAoB3B;AAcD,eAAO,MAAM,uBAAuB,iUAAgB,CAAC;AAErD,KAAK,eAAe,GAAG;IACrB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D,CAAC;AACF,KAAK,eAAe,GAAG;IACrB,UAAU,EAAE,eAAe,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD,CAAC;AAEF,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,eAAe,EACxB,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,EACxC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,GACvG,OAAO,CAAC;IACT,cAAc,IAAI,SAAS,MAAM,EAAE,CAAC;IACpC,UAAU,IAAI,OAAO,GAAG,IAAI,CAAC;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CA0ED"}
@@ -175,6 +175,7 @@ async function installComponentRequestFirewall(browser, allowedAssetOrigins, onD
175
175
  let fatal = null;
176
176
  let closePromise = null;
177
177
  const denied = [];
178
+ let documentOrigin = null;
178
179
  const closeBrowser = browser.close.bind(browser);
179
180
  const close = () => {
180
181
  closing = true;
@@ -187,7 +188,6 @@ async function installComponentRequestFirewall(browser, allowedAssetOrigins, onD
187
188
  return await closePromise;
188
189
  };
189
190
  const configureSession = async (client) => {
190
- let documentOrigin = null;
191
191
  client.on("Fetch.requestPaused", (event) => {
192
192
  const decision = decideComponentRequest(
193
193
  event.request.url,
@@ -196,7 +196,16 @@ async function installComponentRequestFirewall(browser, allowedAssetOrigins, onD
196
196
  allowedAssetOrigins
197
197
  );
198
198
  documentOrigin = decision.documentOrigin;
199
- if (!decision.allow) denied.push(event.request.url);
199
+ if (!decision.allow) {
200
+ denied.push(event.request.url);
201
+ let location = "invalid URL";
202
+ try {
203
+ const url = new URL(event.request.url);
204
+ location = url.origin + url.pathname;
205
+ } catch {
206
+ }
207
+ onDiagnostic?.({ type: "request-failed", message: `Denied ${event.resourceType} ${location}; component origin ${documentOrigin ?? "not established"}` });
208
+ }
200
209
  const action = decision.allow ? client.send("Fetch.continueRequest", { requestId: event.requestId }) : client.send("Fetch.failRequest", { requestId: event.requestId, errorReason: "BlockedByClient" });
201
210
  void action.catch(() => {
202
211
  });
@@ -3,7 +3,7 @@ import {
3
3
  assertSceneShotParamsAdmitted,
4
4
  materializeComponentSource,
5
5
  renderComponentAlpha
6
- } from "./chunk-SH2QPDMU.js";
6
+ } from "./chunk-MTYEB6C4.js";
7
7
  import {
8
8
  componentArtifactId,
9
9
  componentBundleId,
@@ -26,7 +26,7 @@ import {
26
26
  stagedBrowserLocator,
27
27
  verifyLocalStagedBrowser,
28
28
  vp9AlphaFfmpegOverride
29
- } from "../chunk-SH2QPDMU.js";
29
+ } from "../chunk-MTYEB6C4.js";
30
30
  import "../chunk-WB2VFDQZ.js";
31
31
  import "../chunk-EXY4JJPH.js";
32
32
  import "../chunk-DAARYRNT.js";
@@ -7,7 +7,7 @@ import {
7
7
  sourceIdentityForBake,
8
8
  startComponentAssetServer,
9
9
  verifyComponentOutput
10
- } from "./chunk-ARZSMQJX.js";
10
+ } from "./chunk-MXMLOPOK.js";
11
11
  import {
12
12
  COMPONENT_MEDIA_HEADROOM,
13
13
  COMPONENT_MEDIA_TIERS,
@@ -52,7 +52,7 @@ import {
52
52
  stagedBrowserLocator,
53
53
  verifyLocalStagedBrowser,
54
54
  vp9AlphaFfmpegOverride
55
- } from "./chunk-SH2QPDMU.js";
55
+ } from "./chunk-MTYEB6C4.js";
56
56
  import "./chunk-WB2VFDQZ.js";
57
57
  import {
58
58
  bundleIdentityFields,
@@ -8,7 +8,7 @@ import {
8
8
  import {
9
9
  assertCardHtmlAssetFree
10
10
  } from "./chunk-ODUWCQI3.js";
11
- import "./chunk-ARZSMQJX.js";
11
+ import "./chunk-MXMLOPOK.js";
12
12
  import "./chunk-BVA3537Z.js";
13
13
  import {
14
14
  COMPONENT_STILL_RUNTIME_IDENTITY,
@@ -19,7 +19,7 @@ import {
19
19
  readMaterializedComponentSource,
20
20
  resolveRenderEntryRoot,
21
21
  verifyLocalStagedBrowser
22
- } from "./chunk-SH2QPDMU.js";
22
+ } from "./chunk-MTYEB6C4.js";
23
23
  import "./chunk-WB2VFDQZ.js";
24
24
  import {
25
25
  sourceVersionId
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cueframe/kernel",
3
- "version": "0.2.10",
3
+ "version": "0.2.11",
4
4
  "type": "module",
5
5
  "description": "Publish-only aggregate of CueFrame's isomorphic kernel packages — composition, primitives, authoring, MCP, and friends shipped as one npm artifact. Members remain separate workspace packages; this only changes what ships.",
6
6
  "files": [
@@ -18,25 +18,25 @@
18
18
  "tsup": "^8.3.5",
19
19
  "typescript": "^5.9.3",
20
20
  "@cueframe/account-model": "0.1.0",
21
- "@cueframe/animate": "0.1.0",
22
- "@cueframe/authoring": "0.1.0",
23
21
  "@cueframe/brand-derivation": "0.1.0",
22
+ "@cueframe/animate": "0.1.0",
24
23
  "@cueframe/compose": "0.1.0",
25
- "@cueframe/composition-ops": "0.1.0",
26
- "@cueframe/component-runtime": "0.1.0",
27
- "@cueframe/foundation": "0.1.0",
28
24
  "@cueframe/composition": "0.1.0",
29
- "@cueframe/director": "0.1.0",
25
+ "@cueframe/component-runtime": "0.1.0",
30
26
  "@cueframe/core": "0.1.0",
31
- "@cueframe/errors": "0.1.0",
32
27
  "@cueframe/cloud-import": "0.1.0",
33
- "@cueframe/mcp": "0.1.0",
28
+ "@cueframe/authoring": "0.1.0",
29
+ "@cueframe/composition-ops": "0.1.0",
34
30
  "@cueframe/media-model": "0.1.0",
35
- "@cueframe/primitives": "0.1.0",
36
31
  "@cueframe/plane": "0.1.0",
37
- "@cueframe/nle-export": "0.1.0",
32
+ "@cueframe/director": "0.1.0",
33
+ "@cueframe/foundation": "0.1.0",
38
34
  "@cueframe/render-harness": "0.1.0",
39
- "@cueframe/perception": "0.1.0"
35
+ "@cueframe/mcp": "0.1.0",
36
+ "@cueframe/errors": "0.1.0",
37
+ "@cueframe/perception": "0.1.0",
38
+ "@cueframe/primitives": "0.1.0",
39
+ "@cueframe/nle-export": "0.1.0"
40
40
  },
41
41
  "peerDependencies": {
42
42
  "gsap": "3.13.0",