@dimina-kit/electron-deck 0.1.0-dev.20260610082053

package/dist/electron-deck.d.ts

@@ -0,0 +1,57 @@
+import type { DeckConfig, DeckOptions, Runtime } from './types.js';
+/**
+ * `electronDeck(config, options?)` 是 framework 唯一入口（见 README §3）。
+ *
+ * - Invalid config → reject `TypeError`，phase 不前进
+ * - Valid config → 装配 runtime + 调 `config.setup(runtime)` await 完成 →
+ *   resolve。Phase 2 不接 Electron，resolve 后 framework 仍持有运行时；
+ *   Phase 4 接 Electron app lifecycle 后，由 Electron event loop 撑住进程，
+ *   `electronDeck()` 同样 resolve（host 的 main 文件不需 await 阻塞）。
+ *
+ * backend host（如 devtools）走 `electronDeck({ backend })`——backend 是
+ * {@link DeckConfig} 的字段，不再需要空 `{}` + options。
+ *
+ * `options` 是测试 / 非 Electron 环境用的注入点（见 {@link DeckOptions}）。
+ * 生产路径不传 options：framework `await import('electron')` 取真 `ipcMain` /
+ * `BrowserWindow` / `WebContentsView`。
+ */
+export declare function electronDeck(config: DeckConfig, options?: DeckOptions): Promise<void>;
+/**
+ * Synchronous launch handle for `electronDeck`.
+ *
+ * `electronDeck(config)` is `async` and internally `await app.start()` →
+ * `await app.whenReady()`. A host ESM main entry doing `await electronDeck(config)`
+ * SUSPENDS module evaluation on the whenReady gate — but Electron's `ready` only
+ * fires once module evaluation finishes, so the gate never resolves: HARD DEADLOCK.
+ *
+ * `startElectronDeck` returns a plain handle SYNCHRONOUSLY (NOT a thenable), so a
+ * host's top-level `await handle.ready` never sits on the whenReady gate. Assembly
+ * still runs STRICTLY AFTER `app.whenReady()` resolves (gating intact inside
+ * `app.start()`); `handle.ready` resolves with the {@link Runtime}; `handle.dispose()`
+ * tears the app down even if called before the in-flight start finished.
+ *
+ * Invalid config throws a `TypeError` synchronously (matching `electronDeck`'s
+ * validate-first contract) — the error surfaces, never silently deadlocks.
+ */
+export declare function startElectronDeck(config: DeckConfig, options?: DeckOptions): {
+    ready: Promise<Runtime>;
+    dispose(): Promise<void>;
+};
+/**
+ * Pure validation：不依赖 Electron / IPC / 任何 framework state，可单独 unit
+ * test。每一条检查对应 doc §3.3 字段约束。
+ *
+ * 验证语义保证：通过 validateConfig 的 config 不会在 framework Bind 阶段被拒。
+ * 含 HostEvent 来源、source 互斥、map vs array 等所有"shape 就绪"检查。
+ *
+ * @internal exported for tests
+ */
+export declare function validateConfig(config: DeckConfig): void;
+/**
+ * publish-time guard：HostEvent 未在 `config.events` 中显式列出时阻止 publish。
+ * 避免 module-load-order 隐式注册。
+ *
+ * @internal exported for tests
+ */
+export declare function assertEventDeclared(declared: ReadonlySet<string>, eventName: string): void;
+//# sourceMappingURL=electron-deck.d.ts.map

package/dist/electron-deck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"electron-deck.d.ts","sourceRoot":"","sources":["../src/electron-deck.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAElE;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3F;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAChC,MAAM,EAAE,UAAU,EAClB,OAAO,CAAC,EAAE,WAAW,GACnB;IAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CA4CvD;AAyED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CA6DvD;AAaD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,EAC7B,SAAS,EAAE,MAAM,GACf,IAAI,CAIN"}

package/dist/errors-NE2ig7L5.js

@@ -0,0 +1,53 @@
+//#region src/errors.ts
+/**
+* `defineEvent()` 创建的事件未在 `DeckConfig.events` 中显式列出时，
+* `publish()` 会抛此错。避免 module-load-order 隐式注册。
+*/
+var UndeclaredHostEventError = class extends Error {
+	eventName;
+	constructor(eventName) {
+		super(`HostEvent "${eventName}" was not declared in DeckConfig.events. Add it to the events array so the framework knows to bind a transport for it.`);
+		this.name = "UndeclaredHostEventError";
+		this.eventName = eventName;
+	}
+};
+/**
+* 在 Init / Bind 阶段调用 `HostEvent.publish()` 时抛 —— transport 尚未就绪。
+* Setup / Ready 之后调用是安全的（fire-and-forget，无 replay）。
+*/
+var EventNotBoundError = class extends Error {
+	eventName;
+	constructor(eventName) {
+		super(`HostEvent "${eventName}" publish() called before transport is bound. publish() is safe only from Setup phase onward.`);
+		this.name = "EventNotBoundError";
+		this.eventName = eventName;
+	}
+};
+/**
+* webview 调 `client.ready()` 时 framework bridge 不在 `window` 上（host preload
+* 漏装 `exposeDeckBridge()`）。
+*/
+var DeckClientNotReadyError = class extends Error {
+	constructor(message = "Deck framework bridge is missing on window — did the host preload call exposeDeckBridge()?") {
+		super(message);
+		this.name = "DeckClientNotReadyError";
+	}
+};
+/**
+* `client.invoke(name, ...)` 时远端 hostServices handler 抛错的封装。
+* 保留原 error message，附带 remoteName / 可选 code 让 webview 侧便于分类。
+*/
+var DeckRemoteError = class extends Error {
+	remoteName;
+	code;
+	constructor(remoteName, message, code) {
+		super(message);
+		this.name = "DeckRemoteError";
+		this.remoteName = remoteName;
+		if (code !== void 0) this.code = code;
+	}
+};
+//#endregion
+export { UndeclaredHostEventError as i, DeckRemoteError as n, EventNotBoundError as r, DeckClientNotReadyError as t };
+
+//# sourceMappingURL=errors-NE2ig7L5.js.map

package/dist/errors-NE2ig7L5.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-NE2ig7L5.js","names":[],"sources":["../src/errors.ts"],"sourcesContent":["/**\n * `defineEvent()` 创建的事件未在 `DeckConfig.events` 中显式列出时，\n * `publish()` 会抛此错。避免 module-load-order 隐式注册。\n */\nexport class UndeclaredHostEventError extends Error {\n\treadonly eventName: string\n\tconstructor(eventName: string) {\n\t\tsuper(\n\t\t\t`HostEvent \"${eventName}\" was not declared in DeckConfig.events. ` +\n\t\t\t\t`Add it to the events array so the framework knows to bind a transport for it.`,\n\t\t)\n\t\tthis.name = 'UndeclaredHostEventError'\n\t\tthis.eventName = eventName\n\t}\n}\n\n/**\n * 在 Init / Bind 阶段调用 `HostEvent.publish()` 时抛 —— transport 尚未就绪。\n * Setup / Ready 之后调用是安全的（fire-and-forget，无 replay）。\n */\nexport class EventNotBoundError extends Error {\n\treadonly eventName: string\n\tconstructor(eventName: string) {\n\t\tsuper(\n\t\t\t`HostEvent \"${eventName}\" publish() called before transport is bound. ` +\n\t\t\t\t`publish() is safe only from Setup phase onward.`,\n\t\t)\n\t\tthis.name = 'EventNotBoundError'\n\t\tthis.eventName = eventName\n\t}\n}\n\n/**\n * webview 调 `client.ready()` 时 framework bridge 不在 `window` 上（host preload\n * 漏装 `exposeDeckBridge()`）。\n */\nexport class DeckClientNotReadyError extends Error {\n\tconstructor(message = 'Deck framework bridge is missing on window — did the host preload call exposeDeckBridge()?') {\n\t\tsuper(message)\n\t\tthis.name = 'DeckClientNotReadyError'\n\t}\n}\n\n/**\n * `client.invoke(name, ...)` 时远端 hostServices handler 抛错的封装。\n * 保留原 error message，附带 remoteName / 可选 code 让 webview 侧便于分类。\n */\nexport class DeckRemoteError extends Error {\n\treadonly remoteName: string\n\treadonly code?: string\n\tconstructor(remoteName: string, message: string, code?: string) {\n\t\tsuper(message)\n\t\tthis.name = 'DeckRemoteError'\n\t\tthis.remoteName = remoteName\n\t\tif (code !== undefined) this.code = code\n\t}\n}\n"],"mappings":";;;;;AAIA,IAAa,2BAAb,cAA8C,MAAM;CACnD;CACA,YAAY,WAAmB;EAC9B,MACC,cAAc,UAAU,uHAEzB;EACA,KAAK,OAAO;EACZ,KAAK,YAAY;CAClB;AACD;;;;;AAMA,IAAa,qBAAb,cAAwC,MAAM;CAC7C;CACA,YAAY,WAAmB;EAC9B,MACC,cAAc,UAAU,8FAEzB;EACA,KAAK,OAAO;EACZ,KAAK,YAAY;CAClB;AACD;;;;;AAMA,IAAa,0BAAb,cAA6C,MAAM;CAClD,YAAY,UAAU,8FAA8F;EACnH,MAAM,OAAO;EACb,KAAK,OAAO;CACb;AACD;;;;;AAMA,IAAa,kBAAb,cAAqC,MAAM;CAC1C;CACA;CACA,YAAY,YAAoB,SAAiB,MAAe;EAC/D,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,aAAa;EAClB,IAAI,SAAS,KAAA,GAAW,KAAK,OAAO;CACrC;AACD"}

package/dist/errors.d.ts

@@ -0,0 +1,33 @@
+/**
+ * `defineEvent()` 创建的事件未在 `DeckConfig.events` 中显式列出时，
+ * `publish()` 会抛此错。避免 module-load-order 隐式注册。
+ */
+export declare class UndeclaredHostEventError extends Error {
+    readonly eventName: string;
+    constructor(eventName: string);
+}
+/**
+ * 在 Init / Bind 阶段调用 `HostEvent.publish()` 时抛 —— transport 尚未就绪。
+ * Setup / Ready 之后调用是安全的（fire-and-forget，无 replay）。
+ */
+export declare class EventNotBoundError extends Error {
+    readonly eventName: string;
+    constructor(eventName: string);
+}
+/**
+ * webview 调 `client.ready()` 时 framework bridge 不在 `window` 上（host preload
+ * 漏装 `exposeDeckBridge()`）。
+ */
+export declare class DeckClientNotReadyError extends Error {
+    constructor(message?: string);
+}
+/**
+ * `client.invoke(name, ...)` 时远端 hostServices handler 抛错的封装。
+ * 保留原 error message，附带 remoteName / 可选 code 让 webview 侧便于分类。
+ */
+export declare class DeckRemoteError extends Error {
+    readonly remoteName: string;
+    readonly code?: string;
+    constructor(remoteName: string, message: string, code?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;gBACd,SAAS,EAAE,MAAM;CAQ7B;AAED;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;gBACd,SAAS,EAAE,MAAM;CAQ7B;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACrC,OAAO,SAA+F;CAIlH;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;gBACV,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAM9D"}

package/dist/events.d.ts

@@ -0,0 +1,14 @@
+import type { HostEvent, JsonValue } from './types.js';
+export declare function defineEvent<P extends JsonValue>(name: string): HostEvent<P>;
+/**
+ * 校验 `ev` 是否真的来自 `defineEvent()`。判定方式是 WeakMap 身份，而非
+ * `instanceof` —— 这样跨 vm.Context（同 module instance）也能工作。
+ *
+ * @internal
+ */
+export declare function isHostEvent(ev: unknown): ev is HostEvent<JsonValue>;
+/** @internal framework 在 Bind 阶段调；同实例重复 bind 覆盖前任 */
+export declare function bindHostEvent<P extends JsonValue>(event: HostEvent<P>, publisher: (payload: P) => void): void;
+/** @internal framework 在 Cleanup 阶段调 */
+export declare function unbindHostEvent<P extends JsonValue>(event: HostEvent<P>): void;
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAc,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AA0DlE,wBAAgB,WAAW,CAAC,CAAC,SAAS,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAK3E;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,OAAO,GAAG,EAAE,IAAI,SAAS,CAAC,SAAS,CAAC,CAGnE;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,CAAC,SAAS,SAAS,EAChD,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EACnB,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,GAC7B,IAAI,CAQN;AAED,wCAAwC;AACxC,wBAAgB,eAAe,CAAC,CAAC,SAAS,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAM9E"}

package/dist/host/capability.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Capability grant registry — P4 Phase B.
+ *
+ * Default-DENY authorization for privileged control commands. A command is
+ * allowed for a sender ONLY while a LIVE grant naming that command (exact,
+ * whitelisted) is bound to that exact senderId. A grant dies the instant its
+ * `senderScope` generation ends: navigation soft-reuse (`reset`), window
+ * destroy (`closed`), or early `dispose()`.
+ *
+ * Each grant is a DISTINCT object stored in a Set, so two grants for the same
+ * senderId union their commands, and revoking one (its `senderScope` died)
+ * never touches another grant for that same senderId. The per-grant `revoked`
+ * guard makes a closed scope's revoke a no-op against a newly-issued grant —
+ * the wc.id-reuse safety property.
+ *
+ * @internal exported via `/host`.
+ */
+import type { Disposable } from '../types.js';
+import type { Scope } from '../main/scope.js';
+export interface Grant {
+    readonly senderId: number;
+    /** grant lifetime — revoked on this scope's reset/closed. */
+    readonly senderScope: Scope;
+    /**
+     * OPTIONAL — stored as the authorization boundary for FUTURE per-target
+     * view-command checks; the current grant gate authorizes by (senderId,
+     * command-name) only — no command resolves a target view yet, so targetScope is
+     * not consulted at dispatch. Reserved.
+     */
+    readonly targetScope?: Scope;
+    readonly commands: ReadonlySet<string>;
+}
+export interface CapabilityPolicy {
+    /** true iff a LIVE grant exists with grant.senderId === senderId AND name ∈ grant.commands. default-DENY. */
+    allows(senderId: number, name: string): boolean;
+}
+export declare function createCapabilityRegistry(): {
+    policy: CapabilityPolicy;
+    issue(grant: Grant): Disposable;
+    /**
+     * Synchronously revoke EVERY live grant whose `grant.senderId === senderId`.
+     * Mirrors the trust path's synchronous window-'closed' revocation so a grant
+     * is gone the instant a wc is destroyed — before the async wcScope cascade
+     * fires `'closed'`. This closes the wc.id-reuse privilege-escalation window
+     * (a reused wc.id can never inherit the old, not-yet-revoked grant). Each
+     * per-grant `revoke` is idempotent, so the later async `'closed'` is a no-op.
+     */
+    revokeBySenderId(senderId: number): void;
+};
+//# sourceMappingURL=capability.d.ts.map

package/dist/host/capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/host/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAE7C,MAAM,WAAW,KAAK;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAA;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,gBAAgB;IAChC,6GAA6G;IAC7G,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;CAC/C;AAED,wBAAgB,wBAAwB,IAAI;IAC3C,MAAM,EAAE,gBAAgB,CAAA;IACxB,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,UAAU,CAAA;IAC/B;;;;;;;OAOG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxC,CAsCA"}

package/dist/host/control-bus.d.ts

@@ -0,0 +1,92 @@
+/**
+ * ControlBus — a thin, domain-neutral facade over the existing
+ * {@link WireTransport} + {@link EventBus} + an injectable refcount
+ * {@link TrustSet}.
+ *
+ * Three verbs, no new gating logic of its own:
+ *
+ *  - `command(name, handler)` : webview → main RPC. The facade owns the single
+ *    command table and exposes {@link ControlBus.dispatch}; the wire's
+ *    `invokeHost` (and `invokeSimulator`) seam calls `dispatch(name, args)` so a
+ *    real webview→main invoke (after the wire's sender + main-frame gate) lands on
+ *    the registered handler. Callers never see the wire `kind`. Trust + main-frame
+ *    gating are entirely the wire's (`handleInvoke`): a trusted main-frame sender
+ *    reaches the handler, an untrusted sender → `DECK_UNTRUSTED_SENDER`, a
+ *    sub-frame → `DECK_UNTRUSTED_FRAME`.
+ *  - `event(name)` : main → webview push, default-deny. `name` is added to the
+ *    declared-event allowlist the wire reads; `publish` goes through `bus.publish`
+ *    → wire fanout (undeclared names are dropped by the wire). `dispose` revokes
+ *    the declaration.
+ *  - `trust(wc, owner)` : delegates to `trustSet.admit` (refcount membership owned
+ *    by `owner` Scope, so the lease is released when the owner tears down).
+ *
+ * Real wiring (Bug C): the command table is the SOLE command authority. The
+ * production caller builds the {@link WireTransport} with
+ * `invokeHost = (name, args) => controlBus.dispatch(name, args)` (and the same
+ * for `invokeSimulator`, since the facade hides the kind), and `declaredEvents`
+ * reading {@link ControlBus.declaredEvents}. So a real IPC invoke reaches the
+ * command handler through the wire — not a private test-only seam. Any
+ * config-declared host services register into this SAME table via `command()`,
+ * so there is one namespace (the host keeps names unique), never two registries
+ * that can collide.
+ *
+ * @internal exported via `/host`.
+ */
+import type { Disposable, JsonValue } from '../types.js';
+import type { EventBus } from '../internal/event-bus.js';
+import type { InvokeCtx, MinimalWebContents, WireTransport } from '../internal/wire-transport.js';
+import type { TrustSet } from '../internal/trust-set.js';
+import type { Scope } from '../main/scope.js';
+import type { CapabilityPolicy } from './capability.js';
+export type { TrustSet };
+export { createTrustSet } from '../internal/trust-set.js';
+type CommandHandler = (...args: JsonValue[]) => JsonValue | Promise<JsonValue>;
+export interface ControlBusEventHandle<P extends JsonValue> {
+    publish(payload: P): void;
+    dispose(): void;
+}
+export interface ControlBus {
+    /** Register a webview → main RPC handler under a domain-neutral `name`. */
+    command(name: string, handler: CommandHandler): Disposable;
+    /** Declare a main → webview push event (default-deny allowlist). */
+    event<P extends JsonValue>(name: string): ControlBusEventHandle<P>;
+    /** Admit a webContents into the refcount trust set, owned by `owner` Scope
+     *  (the lease is released when `owner` resets/closes). */
+    trust(wc: MinimalWebContents, owner: Scope): Disposable;
+    /**
+     * Real wire entry point — the {@link WireTransport}'s `invokeHost` /
+     * `invokeSimulator` seam calls this with a domain-neutral `name` AFTER its
+     * trust + main-frame gate. Resolves the command table; throws if `name` is
+     * unregistered (the wire serialises that into an `InvokeFailure`). `ctx`
+     * carries the gated senderId (Phase B's grant gate reads it; Phase A passes
+     * it through unused).
+     */
+    dispatch(name: string, args: readonly JsonValue[], ctx: InvokeCtx): Promise<JsonValue>;
+    /**
+     * Current declared-event allowlist snapshot — the wire's `declaredEvents`
+     * seam reads this (lazy, per publish) so default-deny tracks `event()` /
+     * `dispose()` in real time.
+     */
+    declaredEvents(): readonly string[];
+}
+export interface CreateControlBusDeps {
+    /**
+     * Vestigial — the facade never calls into the wire from inside `dispatch` /
+     * `command` / `event` / `trust` (the wire is the one that calls `dispatch`,
+     * not the reverse). Made OPTIONAL so deck-app can construct the ControlBus
+     * BEFORE the WireTransport (which references the ControlBus from its
+     * `invokeHost` seam) — no circular dependency at construction time.
+     */
+    readonly transport?: WireTransport;
+    readonly bus: EventBus;
+    readonly trustSet: TrustSet;
+    /**
+     * P4 Phase B — privileged-command grant gate. When provided, `dispatch`
+     * default-DENIES any command not authorized by a live grant for the gated
+     * `ctx.senderId`. Omitted → no gate (backward-compatible "trusted may
+     * dispatch" behaviour).
+     */
+    readonly policy?: CapabilityPolicy;
+}
+export declare function createControlBus(deps: CreateControlBusDeps): ControlBus;
+//# sourceMappingURL=control-bus.d.ts.map

package/dist/host/control-bus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-bus.d.ts","sourceRoot":"","sources":["../../src/host/control-bus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAExD,OAAO,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AACjG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAEvD,YAAY,EAAE,QAAQ,EAAE,CAAA;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAEzD,KAAK,cAAc,GAAG,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;AAE9E,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,SAAS;IACzD,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAA;IACzB,OAAO,IAAI,IAAI,CAAA;CACf;AAED,MAAM,WAAW,UAAU;IAC1B,2EAA2E;IAC3E,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAAA;IAC1D,oEAAoE;IACpE,KAAK,CAAC,CAAC,SAAS,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAClE;8DAC0D;IAC1D,KAAK,CAAC,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,GAAG,UAAU,CAAA;IACvD;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtF;;;;OAIG;IACH,cAAc,IAAI,SAAS,MAAM,EAAE,CAAA;CACnC;AAED,MAAM,WAAW,oBAAoB;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAA;IAClC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;CAClC;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,UAAU,CAgEvE"}

package/dist/host/index.d.ts

@@ -0,0 +1,42 @@
+/**
+ * `@dimina-kit/electron-deck/host` — the cross-process host-shell transport.
+ *
+ * These are the transport pieces the `electronDeck()` entry (exported from this
+ * package's root, `@dimina-kit/electron-deck`) and domain backends construct to
+ * carry `hostServices` (trusted-webview RPC) and `events` (main→webview push)
+ * over a real Electron `ipcMain`:
+ *
+ *  - `WireTransport`            — the wire protocol (probe / invoke / event fanout)
+ *  - `EventBus`                 — declared-event publisher fan-out
+ *  - `InMemoryTypedIpcRegistry` — main-process handler/invoke registry the
+ *                                 transport routes host/simulator kinds through
+ *
+ * The `electronDeck(config)` orchestration lives in this package's root entry
+ * (`@dimina-kit/electron-deck`, see `src/index.ts`); it stays domain-neutral and
+ * receives the domain assembly via an injected `RuntimeBackend`. Exposing the
+ * transport here lets a backend implementer assemble it. See
+ * packages/devtools/docs/workbench-model.md.
+ */
+export { WireTransport, type InvokeCtx, type MinimalIpcMain, type MinimalWebContents, type WireTransportDeps, } from '../internal/wire-transport.js';
+export { EventBus } from '../internal/event-bus.js';
+export { InMemoryTypedIpcRegistry } from '../internal/ipc-registry-memory.js';
+/**
+ * Domain-neutral facade (`command` / `event` / `trust`) over the wire + bus +
+ * trust set, plus the refcount trust-set primitive it depends on.
+ */
+export { createControlBus, type ControlBus, type ControlBusEventHandle, type CreateControlBusDeps, } from './control-bus.js';
+export { createTrustSet, type TrustSet, type TrustIndex } from '../internal/trust-set.js';
+/**
+ * P4 Phase B — capability grant registry + policy (the privileged-command gate).
+ */
+export { createCapabilityRegistry, type CapabilityPolicy, type Grant, } from './capability.js';
+/** Pure config validation (rejects malformed config before assembly). */
+export { validateConfig } from '../electron-deck.js';
+/**
+ * Backend-facing types. `RuntimeBackend` / `TrustedSenderRef` also flow through
+ * the root entry (`@dimina-kit/electron-deck`); re-exported here so a backend
+ * implementer has one import site alongside the transport pieces.
+ */
+export type { MinimalApp } from '../internal/electron-types.js';
+export type { RuntimeBackend, TrustedSenderRef } from '../types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/host/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EACL,aAAa,EACb,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAA;AAC7E;;;GAGG;AACH,OAAO,EACL,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAA;AACzF;;GAEG;AACH,OAAO,EACL,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,KAAK,GACX,MAAM,iBAAiB,CAAA;AACxB,yEAAyE;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD;;;;GAIG;AACH,YAAY,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAC/D,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA"}

package/dist/host/index.js

@@ -0,0 +1,2 @@
+import { a as WireTransport, c as InMemoryTypedIpcRegistry, i as createControlBus, l as EventBus, o as createCapabilityRegistry, r as validateConfig, s as createTrustSet } from "../electron-deck-DfFKeFEC.js";
+export { EventBus, InMemoryTypedIpcRegistry, WireTransport, createCapabilityRegistry, createControlBus, createTrustSet, validateConfig };

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from './errors.js';
+export * from './types.js';
+export { defineEvent } from './events.js';
+export { electronDeck, startElectronDeck } from './electron-deck.js';
+export type { DeckOptions } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACpE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,3 @@
+import { i as UndeclaredHostEventError, n as DeckRemoteError, r as EventNotBoundError, t as DeckClientNotReadyError } from "./errors-NE2ig7L5.js";
+import { n as startElectronDeck, t as electronDeck, u as defineEvent } from "./electron-deck-DfFKeFEC.js";
+export { DeckClientNotReadyError, DeckRemoteError, EventNotBoundError, UndeclaredHostEventError, defineEvent, electronDeck, startElectronDeck };