@czap/astro 0.1.0

package/dist/runtime/stream.js

@@ -0,0 +1,308 @@
+import { Effect } from 'effect';
+import { Millis, SSE_RECONNECT_INITIAL_MS, SSE_RECONNECT_MAX_MS } from '@czap/core';
+import { Morph, Resumption, SSE, SlotAddressing, SlotRegistry, resolveHtmlString } from '@czap/web';
+import { bootstrapSlots, rescanSlots } from './slots.js';
+import { readRuntimeHtmlPolicy, readRuntimeEndpointPolicy } from './policy.js';
+import { createStreamScheduler } from './stream-session.js';
+import { allowRuntimeEndpointUrl } from './url-policy.js';
+function targetLocator(element) {
+    const slot = element.getAttribute('data-czap-slot');
+    if (slot) {
+        return { type: 'slot', value: slot };
+    }
+    if (element.id) {
+        return { type: 'id', value: element.id };
+    }
+    const semanticId = element.getAttribute('data-czap-id');
+    if (semanticId) {
+        return { type: 'semantic-id', value: semanticId };
+    }
+    return null;
+}
+function findTarget(locator) {
+    if (!locator) {
+        return null;
+    }
+    switch (locator.type) {
+        case 'slot': {
+            const el = SlotRegistry.findElement(SlotAddressing.brand(locator.value));
+            /* v8 ignore next — slot elements are always HTML host elements (divs/sections/etc.);
+               this narrows SlotRegistry.findElement's generic `Element | null` return so SVG-like
+               non-HTML descendants are rejected if they ever leak into the slot registry. */
+            return el instanceof HTMLElement ? el : null;
+        }
+        case 'id':
+            return document.getElementById(locator.value);
+        case 'semantic-id': {
+            const root = document.documentElement;
+            if (root.getAttribute('data-czap-id') === locator.value) {
+                return root;
+            }
+            for (const candidate of Array.from(root.querySelectorAll('[data-czap-id]'))) {
+                if (candidate.getAttribute('data-czap-id') === locator.value && candidate instanceof HTMLElement) {
+                    return candidate;
+                }
+            }
+            return null;
+        }
+    }
+}
+function messageHtml(message) {
+    if ((message.type === 'patch' || message.type === 'batch') && typeof message.data === 'string') {
+        return message.data;
+    }
+    if (message.type === 'snapshot' && message.data !== null && typeof message.data === 'object') {
+        if ('html' in message.data && typeof message.data.html === 'string') {
+            return message.data.html;
+        }
+        return null;
+    }
+    return null;
+}
+function replayHtml(patch) {
+    if (typeof patch === 'string') {
+        return patch;
+    }
+    if (patch !== null && typeof patch === 'object') {
+        if ('html' in patch && typeof patch.html === 'string') {
+            return patch.html;
+        }
+        if ('data' in patch && typeof patch.data === 'string') {
+            return patch.data;
+        }
+    }
+    return null;
+}
+function patchCouldInvalidateSlots(locator, morphStyle, html) {
+    if (morphStyle === 'outerHTML') {
+        return true;
+    }
+    if (locator?.type === 'slot') {
+        return true;
+    }
+    return (html.includes('data-czap-slot') ||
+        html.includes('data-czap-id') ||
+        html.includes(' id=') ||
+        html.includes(' id="') ||
+        html.includes(" id='"));
+}
+function saveResumptionState(artifactId, lastEventId) {
+    if (!artifactId || !lastEventId) {
+        return;
+    }
+    const parsed = Resumption.parseEventId(lastEventId);
+    Effect.runSync(Resumption.saveState({
+        artifactId,
+        lastEventId,
+        lastSequence: parsed.sequence,
+        timestamp: Date.now(),
+    }));
+}
+function hasCustomEndpointPolicy(policy) {
+    return (policy.mode !== 'same-origin' ||
+        policy.allowOrigins.length > 0 ||
+        Object.values(policy.byKind).some((allowlist) => allowlist.length > 0));
+}
+/**
+ * Entry point for the `client:stream` directive. Opens an SSE client
+ * to the `data-czap-stream-url` endpoint, funnels incoming HTML
+ * patches through a {@link createStreamScheduler}, and triggers slot
+ * rescans when necessary. Honors `czap:reinit` / `czap:dispose` to
+ * survive Astro view transitions.
+ */
+export function initStreamDirective(load, element) {
+    bootstrapSlots();
+    const endpointPolicy = readRuntimeEndpointPolicy();
+    const htmlPolicy = readRuntimeHtmlPolicy();
+    const prepareHtml = (html) => resolveHtmlString(html, {
+        policy: htmlPolicy.streamDefault,
+        allowTrustedHtml: htmlPolicy.allowTrustedHtml,
+    });
+    let target = element;
+    let reinitTarget = null;
+    const streamUrl = allowRuntimeEndpointUrl(target.getAttribute('data-czap-stream-url'), 'stream', 'czap/astro.stream', {
+        crossOriginRejected: 'stream-cross-origin-url-rejected',
+        malformedUrl: 'stream-malformed-url-rejected',
+        originNotAllowed: 'stream-origin-not-allowed',
+        endpointKindNotPermitted: 'stream-endpoint-kind-not-permitted',
+    }, endpointPolicy);
+    if (!streamUrl) {
+        return;
+    }
+    const artifactId = target.getAttribute('data-czap-stream-artifact') ?? undefined;
+    const morphStyle = (target.getAttribute('data-czap-stream-morph') ?? 'innerHTML');
+    const snapshotUrl = allowRuntimeEndpointUrl(target.getAttribute('data-czap-snapshot-url'), 'snapshot', 'czap/astro.stream', {
+        crossOriginRejected: 'snapshot-cross-origin-url-rejected',
+        malformedUrl: 'snapshot-malformed-url-rejected',
+        originNotAllowed: 'snapshot-origin-not-allowed',
+        endpointKindNotPermitted: 'snapshot-endpoint-kind-not-permitted',
+    }, endpointPolicy) ?? undefined;
+    const replayUrl = allowRuntimeEndpointUrl(target.getAttribute('data-czap-replay-url'), 'replay', 'czap/astro.stream', {
+        crossOriginRejected: 'replay-cross-origin-url-rejected',
+        malformedUrl: 'replay-malformed-url-rejected',
+        originNotAllowed: 'replay-origin-not-allowed',
+        endpointKindNotPermitted: 'replay-endpoint-kind-not-permitted',
+    }, endpointPolicy) ?? undefined;
+    let source = null;
+    let reconnectAttempt = 0;
+    let reconnectTimer = null;
+    let lastEventId = null;
+    let recoveryPending = false;
+    let pendingLocator = null;
+    const reconnectConfig = {
+        maxAttempts: 10,
+        initialDelay: Millis(SSE_RECONNECT_INITIAL_MS),
+        maxDelay: Millis(SSE_RECONNECT_MAX_MS),
+        factor: 2,
+    };
+    const bindReinit = (nextTarget) => {
+        if (reinitTarget === nextTarget) {
+            return;
+        }
+        reinitTarget?.removeEventListener('czap:reinit', handleReinit);
+        reinitTarget = nextTarget;
+        reinitTarget.addEventListener('czap:reinit', handleReinit);
+    };
+    const patchScheduler = createStreamScheduler({
+        applyHtml: (html) => {
+            const locator = targetLocator(target);
+            pendingLocator = locator;
+            Effect.runSync(Morph.morphWithState(target, html, {
+                morphStyle,
+                preserveFocus: true,
+                preserveScroll: true,
+                preserveSelection: true,
+            }));
+            if (locator && locator.type !== 'slot') {
+                target = findTarget(locator) ?? target;
+            }
+        },
+        onFlush: ({ patchCount, requiresRescan }) => {
+            if (requiresRescan) {
+                rescanSlots(document.documentElement);
+            }
+            target = findTarget(pendingLocator) ?? target;
+            bindReinit(target);
+            for (let index = 0; index < patchCount; index++) {
+                target.dispatchEvent(new CustomEvent('czap:stream-morph', {
+                    bubbles: true,
+                }));
+            }
+            pendingLocator = null;
+        },
+    });
+    const enqueueHtml = (html) => {
+        const normalizedHtml = prepareHtml(html);
+        return patchScheduler.enqueue({
+            html: normalizedHtml,
+            requiresRescan: patchCouldInvalidateSlots(targetLocator(target), morphStyle, normalizedHtml),
+        });
+    };
+    const applyResumeResponse = async (response) => {
+        if (response.type === 'snapshot') {
+            await enqueueHtml(response.html);
+            return;
+        }
+        const patches = response.patches
+            .map((patch) => replayHtml(patch))
+            .filter((html) => html !== null)
+            .map((html) => ({
+            html,
+            requiresRescan: patchCouldInvalidateSlots(targetLocator(target), morphStyle, html),
+        }));
+        await patchScheduler.enqueueBatch(patches);
+    };
+    const reconcileResumption = async (currentEventId) => {
+        const resolvedArtifactId = artifactId;
+        try {
+            const response = await Effect.runPromise(Resumption.resume(resolvedArtifactId, currentEventId, {
+                ...(snapshotUrl ? { snapshotUrl } : {}),
+                ...(replayUrl ? { replayUrl } : {}),
+                ...(hasCustomEndpointPolicy(endpointPolicy) ? { endpointPolicy } : {}),
+            }));
+            await applyResumeResponse(response);
+        }
+        catch (error) {
+            target.dispatchEvent(new CustomEvent('czap:stream-error', {
+                detail: {
+                    reason: 'resume-failed',
+                    message: error instanceof Error ? error.message : String(error),
+                },
+                bubbles: true,
+            }));
+        }
+    };
+    const buildUrl = () => SSE.buildUrl(streamUrl, artifactId, lastEventId ?? undefined);
+    const connect = () => {
+        source = new EventSource(buildUrl());
+        source.onopen = () => {
+            reconnectAttempt = 0;
+            patchScheduler.activate();
+            target.dispatchEvent(new CustomEvent('czap:stream-connected', { bubbles: true }));
+        };
+        source.onmessage = (event) => {
+            if (event.lastEventId) {
+                lastEventId = event.lastEventId;
+                saveResumptionState(artifactId, event.lastEventId);
+            }
+            if (recoveryPending && artifactId && event.lastEventId) {
+                recoveryPending = false;
+                void reconcileResumption(event.lastEventId);
+            }
+            const message = SSE.parseMessage(event);
+            if (!message) {
+                return;
+            }
+            if (message.type === 'signal') {
+                target.dispatchEvent(new CustomEvent('czap:signal', {
+                    detail: message.data,
+                    bubbles: true,
+                }));
+                return;
+            }
+            if (message.type === 'heartbeat' || message.type === 'receipt') {
+                return;
+            }
+            const html = messageHtml(message);
+            if (html) {
+                void enqueueHtml(html);
+            }
+        };
+        source.onerror = () => {
+            source?.close();
+            source = null;
+            recoveryPending = artifactId !== undefined && lastEventId !== null;
+            patchScheduler.beginReconnect();
+            target.dispatchEvent(new CustomEvent('czap:stream-disconnected', { bubbles: true }));
+            if (reconnectAttempt < reconnectConfig.maxAttempts) {
+                const delay = SSE.calculateDelay(reconnectAttempt, reconnectConfig);
+                reconnectAttempt += 1;
+                reconnectTimer = patchScheduler.setReconnectTimer(connect, delay);
+                return;
+            }
+            target.dispatchEvent(new CustomEvent('czap:stream-error', {
+                detail: { reason: 'max-reconnect-attempts' },
+                bubbles: true,
+            }));
+        };
+    };
+    const cleanup = () => {
+        reconnectTimer = patchScheduler.clearReconnectTimer(reconnectTimer);
+        source?.close();
+        source = null;
+    };
+    const handleReinit = () => {
+        cleanup();
+        reconnectAttempt = 0;
+        recoveryPending = false;
+        connect();
+    };
+    bindReinit(target);
+    connect();
+    element.addEventListener('czap:dispose', () => {
+        cleanup();
+        patchScheduler.dispose();
+    });
+    load();
+}
+//# sourceMappingURL=stream.js.map

package/dist/runtime/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/runtime/stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACpF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEpG,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAO1D,SAAS,aAAa,CAAC,OAAoB;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACpD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;IACxD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACpD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,OAAuB;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,GAAG,YAAY,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACzE;;6FAEiF;YACjF,OAAO,EAAE,YAAY,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,CAAC;QACD,KAAK,IAAI;YACP,OAAO,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,eAAe,CAAC;YACtC,IAAI,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;gBAC5E,IAAI,SAAS,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,KAAK,IAAI,SAAS,YAAY,WAAW,EAAE,CAAC;oBACjG,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAmB;IACtC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/F,OAAO,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7F,IAAI,MAAM,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAChC,OAAuB,EACvB,UAAqC,EACrC,IAAY;IAEZ,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,UAA8B,EAAE,WAAmB;IAC9E,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,CAAC,OAAO,CACZ,UAAU,CAAC,SAAS,CAAC;QACnB,UAAU;QACV,WAAW;QACX,YAAY,EAAE,MAAM,CAAC,QAAQ;QAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAoD;IACnF,OAAO,CACL,MAAM,CAAC,IAAI,KAAK,aAAa;QAC7B,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CACvE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAA4B,EAAE,OAAoB;IACpF,cAAc,EAAE,CAAC;IACjB,MAAM,cAAc,GAAG,yBAAyB,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAC3C,iBAAiB,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,UAAU,CAAC,aAAa;QAChC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;KAC9C,CAAC,CAAC;IAEL,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,IAAI,YAAY,GAAuB,IAAI,CAAC;IAC5C,MAAM,SAAS,GAAG,uBAAuB,CACvC,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC,EAC3C,QAAQ,EACR,mBAAmB,EACnB;QACE,mBAAmB,EAAE,kCAAkC;QACvD,YAAY,EAAE,+BAA+B;QAC7C,gBAAgB,EAAE,2BAA2B;QAC7C,wBAAwB,EAAE,oCAAoC;KAC/D,EACD,cAAc,CACf,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,2BAA2B,CAAC,IAAI,SAAS,CAAC;IACjF,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,wBAAwB,CAAC,IAAI,WAAW,CAA8B,CAAC;IAC/G,MAAM,WAAW,GACf,uBAAuB,CACrB,MAAM,CAAC,YAAY,CAAC,wBAAwB,CAAC,EAC7C,UAAU,EACV,mBAAmB,EACnB;QACE,mBAAmB,EAAE,oCAAoC;QACzD,YAAY,EAAE,iCAAiC;QAC/C,gBAAgB,EAAE,6BAA6B;QAC/C,wBAAwB,EAAE,sCAAsC;KACjE,EACD,cAAc,CACf,IAAI,SAAS,CAAC;IACjB,MAAM,SAAS,GACb,uBAAuB,CACrB,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC,EAC3C,QAAQ,EACR,mBAAmB,EACnB;QACE,mBAAmB,EAAE,kCAAkC;QACvD,YAAY,EAAE,+BAA+B;QAC7C,gBAAgB,EAAE,2BAA2B;QAC7C,wBAAwB,EAAE,oCAAoC;KAC/D,EACD,cAAc,CACf,IAAI,SAAS,CAAC;IAEjB,IAAI,MAAM,GAAuB,IAAI,CAAC;IACtC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,cAAc,GAAyC,IAAI,CAAC;IAChE,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,cAAc,GAAmB,IAAI,CAAC;IAE1C,MAAM,eAAe,GAAG;QACtB,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,MAAM,CAAC,wBAAwB,CAAC;QAC9C,QAAQ,EAAE,MAAM,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC;KACD,CAAC;IAEX,MAAM,UAAU,GAAG,CAAC,UAAuB,EAAQ,EAAE;QACnD,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,YAAY,EAAE,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC/D,YAAY,GAAG,UAAU,CAAC;QAC1B,YAAY,CAAC,gBAAgB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,qBAAqB,CAAC;QAC3C,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;YAClB,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACtC,cAAc,GAAG,OAAO,CAAC;YACzB,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE;gBACjC,UAAU;gBACV,aAAa,EAAE,IAAI;gBACnB,cAAc,EAAE,IAAI;gBACpB,iBAAiB,EAAE,IAAI;aACxB,CAAC,CACH,CAAC;YAEF,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACvC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC;YACzC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,EAAE;YAC1C,IAAI,cAAc,EAAE,CAAC;gBACnB,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC;YAC9C,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC;gBAChD,MAAM,CAAC,aAAa,CAClB,IAAI,WAAW,CAAC,mBAAmB,EAAE;oBACnC,OAAO,EAAE,IAAI;iBACd,CAAC,CACH,CAAC;YACJ,CAAC;YACD,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,CAAC,IAAY,EAAiB,EAAE;QAClD,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,cAAc,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,cAAc;YACpB,cAAc,EAAE,yBAAyB,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC;SAC7F,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,KAAK,EAAE,QAAwB,EAAiB,EAAE;QAC5E,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO;aAC7B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;aACjC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;aAC/C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACd,IAAI;YACJ,cAAc,EAAE,yBAAyB,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC;SACnF,CAAC,CAAC,CAAC;QAEN,MAAM,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,KAAK,EAAE,cAAsB,EAAiB,EAAE;QAC1E,MAAM,kBAAkB,GAAG,UAAW,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CACtC,UAAU,CAAC,MAAM,CAAC,kBAAkB,EAAE,cAAc,EAAE;gBACpD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvE,CAAC,CACH,CAAC;YACF,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,aAAa,CAClB,IAAI,WAAW,CAAC,mBAAmB,EAAE;gBACnC,MAAM,EAAE;oBACN,MAAM,EAAE,eAAe;oBACvB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAChE;gBACD,OAAO,EAAE,IAAI;aACd,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,IAAI,SAAS,CAAC,CAAC;IAE7F,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAErC,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE;YACnB,gBAAgB,GAAG,CAAC,CAAC;YACrB,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC;QAEF,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;YACzC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;gBAChC,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,eAAe,IAAI,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvD,eAAe,GAAG,KAAK,CAAC;gBACxB,KAAK,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9C,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,CAAC,aAAa,CAClB,IAAI,WAAW,CAAC,aAAa,EAAE;oBAC7B,MAAM,EAAE,OAAO,CAAC,IAAI;oBACpB,OAAO,EAAE,IAAI;iBACd,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/D,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;YACpB,MAAM,EAAE,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,IAAI,CAAC;YACd,eAAe,GAAG,UAAU,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,CAAC;YACnE,cAAc,CAAC,cAAc,EAAE,CAAC;YAEhC,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAErF,IAAI,gBAAgB,GAAG,eAAe,CAAC,WAAW,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;gBACpE,gBAAgB,IAAI,CAAC,CAAC;gBACtB,cAAc,GAAG,cAAc,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAClE,OAAO;YACT,CAAC;YAED,MAAM,CAAC,aAAa,CAClB,IAAI,WAAW,CAAC,mBAAmB,EAAE;gBACnC,MAAM,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE;gBAC5C,OAAO,EAAE,IAAI;aACd,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,cAAc,GAAG,cAAc,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;QAEpE,MAAM,EAAE,KAAK,EAAE,CAAC;QAChB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAS,EAAE;QAC9B,OAAO,EAAE,CAAC;QACV,gBAAgB,GAAG,CAAC,CAAC;QACrB,eAAe,GAAG,KAAK,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,UAAU,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,EAAE,CAAC;IACV,OAAO,CAAC,gBAAgB,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5C,OAAO,EAAE,CAAC;QACV,cAAc,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/runtime/url-policy.d.ts

@@ -0,0 +1,28 @@
+import type { RuntimeEndpointKind, RuntimeEndpointPolicy } from '@czap/web';
+interface RuntimeEndpointDiagnosticCodes {
+    readonly malformedUrl: string;
+    readonly crossOriginRejected: string;
+    readonly originNotAllowed: string;
+    readonly endpointKindNotPermitted: string;
+}
+/**
+ * Fast boolean check -- does `rawUrl` resolve under a `same-origin`
+ * stream policy? Handy for runtime code that only needs a guard and
+ * does not want to emit diagnostics.
+ */
+export declare function isSameOriginRuntimeUrl(rawUrl: string): boolean;
+/**
+ * Convenience wrapper around {@link allowRuntimeEndpointUrl} that
+ * collapses every diagnostic code into a single `code`. Used by
+ * directives that only care whether a URL is same-origin-safe.
+ */
+export declare function allowSameOriginRuntimeUrl(rawUrl: string | null, source: string, code: string): string | null;
+/**
+ * Resolve `rawUrl` under the runtime endpoint policy and either
+ * return the safe URL string or emit a structured `Diagnostics.warn`
+ * describing the rejection reason. Returns `null` for both missing
+ * and rejected URLs so callers can bail out uniformly.
+ */
+export declare function allowRuntimeEndpointUrl(rawUrl: string | null, kind: RuntimeEndpointKind, source: string, codes?: Partial<RuntimeEndpointDiagnosticCodes>, policy?: RuntimeEndpointPolicy): string | null;
+export {};
+//# sourceMappingURL=url-policy.d.ts.map

package/dist/runtime/url-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-policy.d.ts","sourceRoot":"","sources":["../../src/runtime/url-policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAI5E,UAAU,8BAA8B;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;CAC3C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAO9D;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAO5G;AAWD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,OAAO,CAAC,8BAA8B,CAAC,EAC/C,MAAM,GAAE,qBAAmD,GAC1D,MAAM,GAAG,IAAI,CA6Cf"}

package/dist/runtime/url-policy.js

@@ -0,0 +1,87 @@
+import { Diagnostics } from '@czap/core';
+import { resolveRuntimeUrl } from '@czap/web';
+import { readRuntimeEndpointPolicy } from './policy.js';
+/**
+ * Fast boolean check -- does `rawUrl` resolve under a `same-origin`
+ * stream policy? Handy for runtime code that only needs a guard and
+ * does not want to emit diagnostics.
+ */
+export function isSameOriginRuntimeUrl(rawUrl) {
+    return (resolveRuntimeUrl(rawUrl, {
+        kind: 'stream',
+        policy: { mode: 'same-origin' },
+    }).type === 'allowed');
+}
+/**
+ * Convenience wrapper around {@link allowRuntimeEndpointUrl} that
+ * collapses every diagnostic code into a single `code`. Used by
+ * directives that only care whether a URL is same-origin-safe.
+ */
+export function allowSameOriginRuntimeUrl(rawUrl, source, code) {
+    return allowRuntimeEndpointUrl(rawUrl, 'stream', source, {
+        malformedUrl: code,
+        crossOriginRejected: code,
+        originNotAllowed: code,
+        endpointKindNotPermitted: code,
+    });
+}
+function defaultDiagnosticCodes(kind) {
+    return {
+        malformedUrl: `${kind}-malformed-url-rejected`,
+        crossOriginRejected: `${kind}-cross-origin-url-rejected`,
+        originNotAllowed: `${kind}-origin-not-allowed`,
+        endpointKindNotPermitted: `${kind}-endpoint-kind-not-permitted`,
+    };
+}
+/**
+ * Resolve `rawUrl` under the runtime endpoint policy and either
+ * return the safe URL string or emit a structured `Diagnostics.warn`
+ * describing the rejection reason. Returns `null` for both missing
+ * and rejected URLs so callers can bail out uniformly.
+ */
+export function allowRuntimeEndpointUrl(rawUrl, kind, source, codes, policy = readRuntimeEndpointPolicy()) {
+    const resolved = resolveRuntimeUrl(rawUrl, { kind, policy });
+    const finalCodes = { ...defaultDiagnosticCodes(kind), ...codes };
+    switch (resolved.type) {
+        case 'missing':
+            return null;
+        case 'allowed':
+            return resolved.url;
+        case 'malformed':
+            Diagnostics.warn({
+                source,
+                code: finalCodes.malformedUrl,
+                message: `Runtime URL "${rawUrl}" was rejected because it is not a valid URL.`,
+            });
+            return null;
+        case 'cross-origin-rejected':
+            Diagnostics.warn({
+                source,
+                code: finalCodes.crossOriginRejected,
+                message: `Cross-origin runtime URL "${rawUrl}" was rejected. Runtime endpoints must be same-origin by default.`,
+            });
+            return null;
+        case 'origin-not-allowed':
+            Diagnostics.warn({
+                source,
+                code: finalCodes.originNotAllowed,
+                message: `Runtime URL "${rawUrl}" was rejected because origin "${resolved.resolved.origin}" is not allowlisted.`,
+            });
+            return null;
+        case 'kind-not-allowed':
+            Diagnostics.warn({
+                source,
+                code: finalCodes.endpointKindNotPermitted,
+                message: `Runtime URL "${rawUrl}" was rejected because endpoint kind "${kind}" is not permitted for cross-origin access.`,
+            });
+            return null;
+        case 'private-ip-rejected':
+            Diagnostics.warn({
+                source,
+                code: `${kind}-private-ip-rejected`,
+                message: `Runtime URL "${rawUrl}" was rejected because it resolves to a private or reserved IP address.`,
+            });
+            return null;
+    }
+}
+//# sourceMappingURL=url-policy.js.map

package/dist/runtime/url-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-policy.js","sourceRoot":"","sources":["../../src/runtime/url-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AASxD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,CACL,iBAAiB,CAAC,MAAM,EAAE;QACxB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;KAChC,CAAC,CAAC,IAAI,KAAK,SAAS,CACtB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAqB,EAAE,MAAc,EAAE,IAAY;IAC3F,OAAO,uBAAuB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;QACvD,YAAY,EAAE,IAAI;QAClB,mBAAmB,EAAE,IAAI;QACzB,gBAAgB,EAAE,IAAI;QACtB,wBAAwB,EAAE,IAAI;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAyB;IACvD,OAAO;QACL,YAAY,EAAE,GAAG,IAAI,yBAAyB;QAC9C,mBAAmB,EAAE,GAAG,IAAI,4BAA4B;QACxD,gBAAgB,EAAE,GAAG,IAAI,qBAAqB;QAC9C,wBAAwB,EAAE,GAAG,IAAI,8BAA8B;KAChE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAqB,EACrB,IAAyB,EACzB,MAAc,EACd,KAA+C,EAC/C,SAAgC,yBAAyB,EAAE;IAE3D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,EAAE,GAAG,sBAAsB,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;IAEjE,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,GAAG,CAAC;QACtB,KAAK,WAAW;YACd,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM;gBACN,IAAI,EAAE,UAAU,CAAC,YAAY;gBAC7B,OAAO,EAAE,gBAAgB,MAAM,+CAA+C;aAC/E,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,KAAK,uBAAuB;YAC1B,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM;gBACN,IAAI,EAAE,UAAU,CAAC,mBAAmB;gBACpC,OAAO,EAAE,6BAA6B,MAAM,mEAAmE;aAChH,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,KAAK,oBAAoB;YACvB,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM;gBACN,IAAI,EAAE,UAAU,CAAC,gBAAgB;gBACjC,OAAO,EAAE,gBAAgB,MAAM,kCAAkC,QAAQ,CAAC,QAAQ,CAAC,MAAM,uBAAuB;aACjH,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,KAAK,kBAAkB;YACrB,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM;gBACN,IAAI,EAAE,UAAU,CAAC,wBAAwB;gBACzC,OAAO,EAAE,gBAAgB,MAAM,yCAAyC,IAAI,6CAA6C;aAC1H,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,KAAK,qBAAqB;YACxB,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM;gBACN,IAAI,EAAE,GAAG,IAAI,sBAAsB;gBACnC,OAAO,EAAE,gBAAgB,MAAM,yEAAyE;aACzG,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/runtime/wasm.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Configure (or clear) the root `data-czap-wasm-url` attribute used by
+ * the `client:wasm` directive to discover its module URL. Also
+ * back-fills any existing `[data-czap-wasm]` elements that lack a
+ * per-element override.
+ */
+export declare function configureWasmRuntime(wasmUrl: string | null | undefined): void;
+/**
+ * Resolve the WASM module URL for `element`, falling back to the
+ * root-configured URL when no per-element override exists.
+ */
+export declare function resolveWasmUrl(element: HTMLElement): string | null;
+/**
+ * Load the WASM kernels for `element`, publish them to
+ * `window.__CZAP_WASM__`, and dispatch a `czap:wasm-ready` event on
+ * `document`. On failure, emits a diagnostic and fires
+ * `czap:wasm-error` instead so downstream consumers can degrade.
+ */
+export declare function loadWasmRuntime(element: HTMLElement): Promise<void>;
+//# sourceMappingURL=wasm.d.ts.map

package/dist/runtime/wasm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm.d.ts","sourceRoot":"","sources":["../../src/runtime/wasm.ts"],"names":[],"mappings":"AAOA;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAY7E;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAElE;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA2CzE"}

package/dist/runtime/wasm.js

@@ -0,0 +1,70 @@
+import { WASMDispatch, Diagnostics } from '@czap/core';
+import { writeRuntimeGlobal } from './globals.js';
+import { readRuntimeEndpointPolicy } from './policy.js';
+import { allowRuntimeEndpointUrl } from './url-policy.js';
+const ROOT_WASM_ATTR = 'data-czap-wasm-url';
+/**
+ * Configure (or clear) the root `data-czap-wasm-url` attribute used by
+ * the `client:wasm` directive to discover its module URL. Also
+ * back-fills any existing `[data-czap-wasm]` elements that lack a
+ * per-element override.
+ */
+export function configureWasmRuntime(wasmUrl) {
+    if (!wasmUrl) {
+        document.documentElement.removeAttribute(ROOT_WASM_ATTR);
+        return;
+    }
+    document.documentElement.setAttribute(ROOT_WASM_ATTR, wasmUrl);
+    document.querySelectorAll('[data-czap-wasm]').forEach((element) => {
+        if (!element.getAttribute(ROOT_WASM_ATTR)) {
+            element.setAttribute(ROOT_WASM_ATTR, wasmUrl);
+        }
+    });
+}
+/**
+ * Resolve the WASM module URL for `element`, falling back to the
+ * root-configured URL when no per-element override exists.
+ */
+export function resolveWasmUrl(element) {
+    return element.getAttribute(ROOT_WASM_ATTR) ?? document.documentElement.getAttribute(ROOT_WASM_ATTR);
+}
+/**
+ * Load the WASM kernels for `element`, publish them to
+ * `window.__CZAP_WASM__`, and dispatch a `czap:wasm-ready` event on
+ * `document`. On failure, emits a diagnostic and fires
+ * `czap:wasm-error` instead so downstream consumers can degrade.
+ */
+export async function loadWasmRuntime(element) {
+    const wasmUrl = allowRuntimeEndpointUrl(resolveWasmUrl(element), 'wasm', 'czap/astro.wasm', {
+        crossOriginRejected: 'wasm-cross-origin-url-rejected',
+        malformedUrl: 'wasm-malformed-url-rejected',
+        originNotAllowed: 'wasm-origin-not-allowed',
+        endpointKindNotPermitted: 'wasm-endpoint-kind-not-permitted',
+    }, readRuntimeEndpointPolicy());
+    if (!wasmUrl) {
+        return;
+    }
+    try {
+        const kernels = await WASMDispatch.load(wasmUrl);
+        writeRuntimeGlobal('__CZAP_WASM__', kernels);
+        document.dispatchEvent(new CustomEvent('czap:wasm-ready', {
+            detail: { url: wasmUrl },
+        }));
+    }
+    catch (error) {
+        Diagnostics.warn({
+            source: 'czap/astro.wasm',
+            code: 'wasm-load-failed',
+            message: 'WASM runtime failed to load.',
+            detail: error instanceof Error ? error.message : 'load-failed',
+            cause: error,
+        });
+        document.dispatchEvent(new CustomEvent('czap:wasm-error', {
+            detail: {
+                url: wasmUrl,
+                reason: error instanceof Error ? error.message : 'load-failed',
+            },
+        }));
+    }
+}
+//# sourceMappingURL=wasm.js.map

package/dist/runtime/wasm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm.js","sourceRoot":"","sources":["../../src/runtime/wasm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAkC;IACrE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,QAAQ,CAAC,eAAe,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,eAAe,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC/D,QAAQ,CAAC,gBAAgB,CAAc,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7E,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAoB;IACjD,OAAO,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;AACvG,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAoB;IACxD,MAAM,OAAO,GAAG,uBAAuB,CACrC,cAAc,CAAC,OAAO,CAAC,EACvB,MAAM,EACN,iBAAiB,EACjB;QACE,mBAAmB,EAAE,gCAAgC;QACrD,YAAY,EAAE,6BAA6B;QAC3C,gBAAgB,EAAE,yBAAyB;QAC3C,wBAAwB,EAAE,kCAAkC;KAC7D,EACD,yBAAyB,EAAE,CAC5B,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,kBAAkB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAE7C,QAAQ,CAAC,aAAa,CACpB,IAAI,WAAW,CAAC,iBAAiB,EAAE;YACjC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE;SACzB,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,IAAI,CAAC;YACf,MAAM,EAAE,iBAAiB;YACzB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,8BAA8B;YACvC,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;YAC9D,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QACH,QAAQ,CAAC,aAAa,CACpB,IAAI,WAAW,CAAC,iBAAiB,EAAE;YACjC,MAAM,EAAE;gBACN,GAAG,EAAE,OAAO;gBACZ,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;aAC/D;SACF,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/runtime/worker.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Entry point used by the `client:worker` directive.
+ *
+ * Parses the serialised boundary off `element`, spins up (or reuses)
+ * a {@link WorkerHost.Shape} from `@czap/worker`, bootstraps the
+ * boundary in the worker, and streams resolved state back into DOM
+ * via {@link applyBoundaryState}. Falls back to an inline evaluation
+ * when `SharedArrayBuffer` / cross-origin isolation is unavailable.
+ */
+export declare function initWorkerDirective(load: () => Promise<unknown>, element: HTMLElement): void;
+//# sourceMappingURL=worker.d.ts.map

package/dist/runtime/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/runtime/worker.ts"],"names":[],"mappings":"AAgEA;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAyO5F"}