@dimina-kit/electron-deck 0.1.0-dev.20260701083540 → 0.1.0-dev.20260701155140

package/dist/internal/deck-app.d.ts

@@ -143,12 +143,31 @@ export declare class DeckApp {
     /**
      * slot-token registry (view-handle.md「slot-token 握手」/ capability-and-lifecycle.md「anchor slotToken 原子下发」):
      * each anchored `placeIn` mints an unguessable token bound to (viewId, slotId,
-     * authorizedWcId). The `__electron-deck:place` apply path looks the token up,
-     * checks the sender is the authorized wc (anti-spoof), validates the placement,
-     * then `apply`s it. `resend` re-pushes the slot-grant (layout-subscribe replay).
+     * authorizedWcId, zone). The `__electron-deck:snapshot` apply path authorizes
+     * each of the renderer's per-view tokens (token known AND authorized to the
+     * sender wc), DERIVES the view's identity (viewId) + z-order (zone→layer) from
+     * this registry (never trusting the renderer-reported fields), reconciles the
+     * cleaned window-level table, and drives each view's `apply`. `resend` re-pushes
+     * the slot-grant (layout-subscribe replay).
      */
     private readonly slotTokens;
     private slotSeq;
+    /**
+     * Per-control-wc level-triggered reconciler state (keyed by authorizedWcId).
+     * The renderer publishes a whole window-level desired-placement table each
+     * frame; `reconcile` diffs it against the last-applied actual and emits ops, so
+     * a lost or spurious per-view edge self-corrects instead of sticking a view
+     * detached (the white-screen failure mode). Reset on layout-subscribe (reload)
+     * and dropped on wc revoke.
+     */
+    private readonly reconcileStates;
+    /**
+     * Per-control-wc strictly-monotonic generation counter. Bumped on every
+     * layout-subscribe and stamped into each slot-grant, so a reload's higher
+     * generation resets the reconciler regardless of IPC ordering (a late in-flight
+     * pre-reload snapshot carries a lower generation → rejected).
+     */
+    private readonly perWcGeneration;
     private _runtime;
     private startCalled;
     private shutdownPromise;
@@ -374,19 +393,32 @@ export declare class DeckApp {
      */
     private ensureSlotChannelsArmed;
     /**
-     * slot-token apply path (`__electron-deck:place`). The token is the credential:
-     * look it up, verify the sender IS the wc the token was granted to (anti-spoof),
-     * validate the placement, then apply. Any failure → DROP (silent).
+     * slot-token apply path (`__electron-deck:snapshot`). The renderer publishes a
+     * whole window-level desired-placement table; each entry's slotToken is the
+     * credential. Steps:
+     *   1. AUTHORIZE + clean: `cleanSnapshot` keeps only views whose token is known
+     *      AND authorized to `senderId` (anti-spoof), deriving each view's identity
+     *      (viewId) + z-order (zone→layer) from the registry — never from the
+     *      renderer-reported fields. A non-empty snapshot that fully fails
+     *      authorization is rejected wholesale (returns null) so a transient token
+     *      failure is NOT read as "detach everything".
+     *   2. RECONCILE the cleaned table against this wc's last-applied actual state
+     *      → an ordered op list (level-triggered; a lost/spurious frame self-heals).
+     *   3. DISPATCH the ops onto each view's `applyPlacement` sink.
      */
-    private handleSlotPlace;
+    private handleSnapshot;
     /**
      * Per-wc layout-subscribe replay (`__electron-deck:layout-subscribe`). When the
-     * authorized control wc (re)subscribes (e.g. after reload), re-push every grant
-     * it owns so it can re-bind its DOM slots. A DIFFERENT wc's subscribe never
-     * receives another wc's grants.
+     * authorized control wc (re)subscribes (e.g. after reload), BUMP its generation
+     * and RESET its reconciler (a reload restarts the renderer's epoch at 0; without
+     * the reset the fresh low-epoch snapshots would be rejected as stale), then
+     * re-push every grant it owns — now carrying the bumped generation — so it can
+     * re-bind its DOM slots. A DIFFERENT wc's subscribe never touches another wc's
+     * state or grants.
      */
     private handleLayoutSubscribe;
-    /** Drop every slot token authorized to `wcId` (window-close / shutdown hygiene). */
+    /** Drop every slot token + reconciler/generation state authorized to `wcId`
+     *  (window-close / shutdown hygiene). */
     private revokeSlotTokensForWc;
     private handleSubWindowClosed;
     /**

package/dist/internal/deck-app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deck-app.d.ts","sourceRoot":"","sources":["../../src/internal/deck-app.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACX,UAAU,EAIV,cAAc,EACd,OAAO,EACP,YAAY,EAIZ,UAAU,EASV,MAAM,aAAa,CAAA;AAIpB,OAAO,KAAK,EAEX,oBAAoB,EAEpB,eAAe,EAGf,MAAM,qBAAqB,CAAA;AAM5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE5D,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAQ1D,OAAO,EAEN,KAAK,gBAAgB,EACrB,MAAM,uBAAuB,CAAA;AAK9B,OAAO,EAEN,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,MAAM,qBAAqB,CAAA;AAQ5B;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE;QACxB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;QAChC,2DAA2D;QAC3D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,SAAS,kBAAkB,EAAE,CAAA;QACjE,4CAA4C;QAC5C,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;KACpC,CAAA;IACD;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;IACnC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CACjC;AAiDD;;;;;;;GAOG;AACH,qBAAa,OAAO;IACnB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAE3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiB;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoE;IAChG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD;6EACyE;IACzE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD;;;;uEAImE;IACnE,OAAO,CAAC,UAAU,CAA0B;IAC5C;iFAC6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAA4C;IACpF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,aAAa,CAA6B;IAClD;sFACkF;IAClF,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,UAAU,CAAoC;IACtD,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0C;IAC1E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAkC;IACjE;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IACH;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAGvB;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA6B;IAClE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA0B;IAC5D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA+C;IAChF;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4C;IAC3E;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAWjC;IACH;wFACoF;IACpF,OAAO,CAAC,aAAa,CAAkC;IACvD,2DAA2D;IAC3D,OAAO,CAAC,OAAO,CAAI;IACnB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAG7B;IACH;;;oFAGgF;IAChF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoC;IACjE;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAGxB;IACH,OAAO,CAAC,OAAO,CAAI;IACnB,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,eAAe,CAA6B;IACpD;kFAC8E;IAC9E,OAAO,CAAC,aAAa,CAAQ;IAC7B,oFAAoF;IACpF,OAAO,CAAC,sBAAsB,CAAyC;IACvE;iFAC6E;IAC7E,OAAO,CAAC,YAAY,CAAQ;IAC5B;;;;;;;;;;;0EAWsE;IACtE,OAAO,CAAC,cAAc,CAA6B;gBAEvC,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,cAAmB;IAuB5D,IAAI,KAAK,IAAI,cAAc,CAE1B;IAED,IAAI,OAAO,IAAI,OAAO,CAKrB;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAiF5B;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAwBxB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAMzB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,GAAG,UAAU;IAIrD;;;;;;;;;OASG;IACH,OAAO,CAAC,UAAU;IAkClB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,wBAAwB;IA+BhC;;;;;;;OAOG;IACH,OAAO,CAAC,eAAe;IAmDvB;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;;;;;OAMG;YACW,sBAAsB;IAoBpC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IA8BhC;;;OAGG;IACH,gBAAgB,IAAI,GAAG,CAAC,kBAAkB,EAAE;QAAE,MAAM,EAAE,oBAAoB,CAAC;QAAC,WAAW,EAAE,KAAK,CAAA;KAAE,CAAC;IAIjG,yCAAyC;IACzC,WAAW,IAAI,KAAK;IAIpB,kDAAkD;IAClD,WAAW,IAAI,GAAG,CAAC,kBAAkB,EAAE;QAAE,OAAO,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAAC,WAAW,EAAE,KAAK,CAAA;KAAE,CAAC;IAIvG,kEAAkE;IAClE,kBAAkB,IAAI,gBAAgB;IAItC;;;;OAIG;IACH,0BAA0B,IAAI,IAAI;IAiBlC,OAAO,CAAC,qBAAqB;IAoC7B;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAmD7B,OAAO,CAAC,gBAAgB;IAoOxB,4FAA4F;IAC5F,OAAO,CAAC,oBAAoB;IAmB5B;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;IAehB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,iBAAiB;IAiGzB;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAI/B;;;;OAIG;IACH,OAAO,CAAC,yBAAyB,CAAQ;IACzC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,eAAe;IAqFvB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,WAAW;IAwGnB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,iBAAiB;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAO/B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAQvB;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAM7B,oFAAoF;IACpF,OAAO,CAAC,qBAAqB;IAM7B,OAAO,CAAC,qBAAqB;IAuC7B;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,kBAAkB;YAiBZ,cAAc;YAOd,UAAU;IA8BxB,OAAO,CAAC,kBAAkB;YAYZ,iBAAiB;IA+E/B,OAAO,CAAC,YAAY;CAspBpB"}
+{"version":3,"file":"deck-app.d.ts","sourceRoot":"","sources":["../../src/internal/deck-app.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACX,UAAU,EAIV,cAAc,EACd,OAAO,EACP,YAAY,EAIZ,UAAU,EASV,MAAM,aAAa,CAAA;AAIpB,OAAO,KAAK,EAEX,oBAAoB,EAEpB,eAAe,EAGf,MAAM,qBAAqB,CAAA;AAM5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE5D,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAe1D,OAAO,EAEN,KAAK,gBAAgB,EACrB,MAAM,uBAAuB,CAAA;AAK9B,OAAO,EAEN,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,MAAM,qBAAqB,CAAA;AAQ5B;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE;QACxB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;QAChC,2DAA2D;QAC3D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,SAAS,kBAAkB,EAAE,CAAA;QACjE,4CAA4C;QAC5C,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;KACpC,CAAA;IACD;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;IACnC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CACjC;AAiDD;;;;;;;GAOG;AACH,qBAAa,OAAO;IACnB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAE3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiB;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoE;IAChG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD;6EACyE;IACzE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD;;;;uEAImE;IACnE,OAAO,CAAC,UAAU,CAA0B;IAC5C;iFAC6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAA4C;IACpF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,aAAa,CAA6B;IAClD;sFACkF;IAClF,OAAO,CAAC,gBAAgB,CAA4B;IACpD,OAAO,CAAC,UAAU,CAAoC;IACtD,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0C;IAC1E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAkC;IACjE;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG5B;IACH;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAGvB;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA6B;IAClE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA0B;IAC5D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA+C;IAChF;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4C;IAC3E;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAWjC;IACH;wFACoF;IACpF,OAAO,CAAC,aAAa,CAAkC;IACvD,2DAA2D;IAC3D,OAAO,CAAC,OAAO,CAAI;IACnB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAG7B;IACH;;;oFAGgF;IAChF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoC;IACjE;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAGxB;IACH,OAAO,CAAC,OAAO,CAAI;IACnB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqC;IACrE;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAC5D,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,eAAe,CAA6B;IACpD;kFAC8E;IAC9E,OAAO,CAAC,aAAa,CAAQ;IAC7B,oFAAoF;IACpF,OAAO,CAAC,sBAAsB,CAAyC;IACvE;iFAC6E;IAC7E,OAAO,CAAC,YAAY,CAAQ;IAC5B;;;;;;;;;;;0EAWsE;IACtE,OAAO,CAAC,cAAc,CAA6B;gBAEvC,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,cAAmB;IAuB5D,IAAI,KAAK,IAAI,cAAc,CAE1B;IAED,IAAI,OAAO,IAAI,OAAO,CAKrB;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAiF5B;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAwBxB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAMzB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,GAAG,UAAU;IAIrD;;;;;;;;;OASG;IACH,OAAO,CAAC,UAAU;IAkClB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,wBAAwB;IA+BhC;;;;;;;OAOG;IACH,OAAO,CAAC,eAAe;IAmDvB;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;;;;;OAMG;YACW,sBAAsB;IAoBpC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IA8BhC;;;OAGG;IACH,gBAAgB,IAAI,GAAG,CAAC,kBAAkB,EAAE;QAAE,MAAM,EAAE,oBAAoB,CAAC;QAAC,WAAW,EAAE,KAAK,CAAA;KAAE,CAAC;IAIjG,yCAAyC;IACzC,WAAW,IAAI,KAAK;IAIpB,kDAAkD;IAClD,WAAW,IAAI,GAAG,CAAC,kBAAkB,EAAE;QAAE,OAAO,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAAC,WAAW,EAAE,KAAK,CAAA;KAAE,CAAC;IAIvG,kEAAkE;IAClE,kBAAkB,IAAI,gBAAgB;IAItC;;;;OAIG;IACH,0BAA0B,IAAI,IAAI;IAiBlC,OAAO,CAAC,qBAAqB;IAoC7B;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAmD7B,OAAO,CAAC,gBAAgB;IAoOxB,4FAA4F;IAC5F,OAAO,CAAC,oBAAoB;IAmB5B;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;IAehB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,iBAAiB;IAiGzB;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAI/B;;;;OAIG;IACH,OAAO,CAAC,yBAAyB,CAAQ;IACzC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,eAAe;IAqFvB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,WAAW;IAwGnB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,iBAAiB;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAO/B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,cAAc;IAsBtB;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;6CACyC;IACzC,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,qBAAqB;IAuC7B;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,kBAAkB;YAiBZ,cAAc;YAOd,UAAU;IA8BxB,OAAO,CAAC,kBAAkB;YAYZ,iBAAiB;IA+E/B,OAAO,CAAC,YAAY;CAiqBpB"}

package/dist/internal/wire-transport.d.ts

@@ -83,11 +83,13 @@ export interface WireTransportDeps {
      */
     readonly declaredEvents: () => readonly string[];
     /**
-     * OPTIONAL slot-token inbound: `__electron-deck:place` apply path. When
-     * provided, `start()` registers the `Place` handler (same trust + main-frame
-     * gate as invoke). On gate pass → `onPlace(senderId, slotToken, placement)`.
+     * OPTIONAL slot-token inbound: `__electron-deck:snapshot` apply path. When
+     * provided, `start()` registers the `Snapshot` handler (same trust + main-frame
+     * gate as invoke). On gate pass → `onSnapshot(senderId, rawSnapshot)`. The
+     * payload (the renderer's window-level placement table) is opaque here and
+     * authorized/validated downstream — the wire only enforces the trust boundary.
      */
-    readonly onPlace?: (senderId: number, slotToken: string, placement: unknown) => void;
+    readonly onSnapshot?: (senderId: number, rawSnapshot: unknown) => void;
     /**
      * OPTIONAL slot-token inbound: `__electron-deck:layout-subscribe` per-wc
      * replay request. When provided, `start()` registers the `LayoutSubscribe`
@@ -99,21 +101,21 @@ export declare class WireTransport {
     private readonly deps;
     private state;
     private busSubscription;
-    /** Whether the optional Place / LayoutSubscribe handlers were registered
+    /** Whether the optional Snapshot / LayoutSubscribe handlers were registered
      *  (either eagerly at start() via deps, or lazily via armSlotChannels) — so
      *  dispose() only removes channels it actually registered. */
-    private placeRegistered;
+    private snapshotRegistered;
     private layoutSubscribeRegistered;
     /** Effective slot callbacks. Populated from deps at start() (eager path, used
      *  by the wire unit tests) OR by {@link armSlotChannels} (lazy path, used by
      *  deck-app so an app with no anchored views registers only Invoke + Probe). */
-    private onPlaceCb;
+    private onSnapshotCb;
     private onLayoutSubscribeCb;
     constructor(deps: WireTransportDeps);
     start(): void;
     private tryRemoveHandler;
-    private registerPlaceHandler;
-    private unregisterPlaceHandler;
+    private registerSnapshotHandler;
+    private unregisterSnapshotHandler;
     private registerLayoutSubscribeHandler;
     private unregisterLayoutSubscribeHandler;
     /**
@@ -124,7 +126,7 @@ export declare class WireTransport {
      * no anchored views never registers these channels (keeping the wire's
      * handler footprint at Invoke + Probe until a slot is actually minted).
      */
-    armSlotChannels(onPlace: (senderId: number, slotToken: string, placement: unknown) => void, onLayoutSubscribe: (senderId: number) => void): void;
+    armSlotChannels(onSnapshot: (senderId: number, rawSnapshot: unknown) => void, onLayoutSubscribe: (senderId: number) => void): void;
     dispose(): void;
     private handleProbe;
     /**
@@ -144,11 +146,12 @@ export declare class WireTransport {
     private isMainFrameSender;
     private handleInvoke;
     /**
-     * `__electron-deck:place` inbound. Same gate as {@link handleInvoke}
-     * (trust + main-frame). On any failure (malformed payload, untrusted sender,
-     * sub-frame) → DROP silently (return undefined; never call `onPlace`).
+     * `__electron-deck:snapshot` inbound. Same gate as {@link handleInvoke} (trust +
+     * main-frame). On any gate failure (non-object payload, untrusted sender,
+     * sub-frame) → DROP silently. The payload's inner shape is opaque to the wire —
+     * authorized + validated downstream.
      */
-    private handlePlace;
+    private handleSnapshot;
     /**
      * `__electron-deck:layout-subscribe` inbound. Same gate as {@link handleInvoke}.
      * On gate pass → `onLayoutSubscribe(senderId)`; else DROP silently.

package/dist/internal/wire-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wire-transport.d.ts","sourceRoot":"","sources":["../../src/internal/wire-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAcH,OAAO,KAAK,EAAc,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAE9C;;;GAGG;AACH,eAAO,MAAM,SAAS;;;;;IAKrB,kEAAkE;;CAEzD,CAAA;AAEV,2EAA2E;AAC3E,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,SAAS;IACzB,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,kGAAkG;IAClG,QAAQ,CAAC,WAAW,EAAE,QAAQ,GAAG,IAAI,CAAA;CACrC;AAED,MAAM,WAAW,cAAc;IAC9B,MAAM,CACL,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAKR,KAAK,EAAE;QAAE,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;SAAE,CAAC;QAAC,WAAW,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;KAAE,EAC7F,GAAG,IAAI,EAAE,OAAO,EAAE,KACd,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC7B,IAAI,CAAA;IACP,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,WAAW,IAAI,OAAO,CAAA;IACtB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;CAC7C;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;IACnC,sEAAsE;IACtE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,SAAS,kBAAkB,EAAE,CAAA;IAChE;mEAC+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;IACrG,yCAAyC;IACzC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,SAAS,MAAM,EAAE,CAAA;IAChD;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,KAAK,IAAI,CAAA;IACpF;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;CACvD;AAID,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,eAAe,CAA0B;IACjD;;kEAE8D;IAC9D,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,yBAAyB,CAAQ;IACzC;;oFAEgF;IAChF,OAAO,CAAC,SAAS,CAAmF;IACpG,OAAO,CAAC,mBAAmB,CAA4C;gBAE3D,IAAI,EAAE,iBAAiB;IAInC,KAAK,IAAI,IAAI;IA8Db,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,8BAA8B;IAOtC,OAAO,CAAC,gCAAgC;IAMxC;;;;;;;OAOG;IACH,eAAe,CACd,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,KAAK,IAAI,EAC1E,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAC3C,IAAI;IAQP,OAAO,IAAI,IAAI;IA+Cf,OAAO,CAAC,WAAW;IAInB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,iBAAiB;YAMX,YAAY;IAyC1B;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAgBnB;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAW7B,OAAO,CAAC,WAAW;CA6BnB"}
+{"version":3,"file":"wire-transport.d.ts","sourceRoot":"","sources":["../../src/internal/wire-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAcH,OAAO,KAAK,EAAc,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAE9C;;;GAGG;AACH,eAAO,MAAM,SAAS;;;;;IAKrB,kEAAkE;;CAEzD,CAAA;AAEV,2EAA2E;AAC3E,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,SAAS;IACzB,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,kGAAkG;IAClG,QAAQ,CAAC,WAAW,EAAE,QAAQ,GAAG,IAAI,CAAA;CACrC;AAED,MAAM,WAAW,cAAc;IAC9B,MAAM,CACL,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAKR,KAAK,EAAE;QAAE,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;SAAE,CAAC;QAAC,WAAW,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;KAAE,EAC7F,GAAG,IAAI,EAAE,OAAO,EAAE,KACd,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC7B,IAAI,CAAA;IACP,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,WAAW,IAAI,OAAO,CAAA;IACtB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;CAC7C;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;IACnC,sEAAsE;IACtE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,SAAS,kBAAkB,EAAE,CAAA;IAChE;mEAC+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;IACrG,yCAAyC;IACzC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,SAAS,MAAM,EAAE,CAAA;IAChD;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,KAAK,IAAI,CAAA;IACtE;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;CACvD;AAID,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,eAAe,CAA0B;IACjD;;kEAE8D;IAC9D,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,yBAAyB,CAAQ;IACzC;;oFAEgF;IAChF,OAAO,CAAC,YAAY,CAAkE;IACtF,OAAO,CAAC,mBAAmB,CAA4C;gBAE3D,IAAI,EAAE,iBAAiB;IAInC,KAAK,IAAI,IAAI;IA8Db,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,uBAAuB;IAO/B,OAAO,CAAC,yBAAyB;IAMjC,OAAO,CAAC,8BAA8B;IAOtC,OAAO,CAAC,gCAAgC;IAMxC;;;;;;;OAOG;IACH,eAAe,CACd,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,KAAK,IAAI,EAC5D,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAC3C,IAAI;IAQP,OAAO,IAAI,IAAI;IA+Cf,OAAO,CAAC,WAAW;IAInB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,iBAAiB;YAMX,YAAY;IAyC1B;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IActB;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAW7B,OAAO,CAAC,WAAW;CA6BnB"}

package/dist/layout/index.d.ts

@@ -12,4 +12,8 @@ export { sanitizeFlexibleWeights } from './sanitize.js';
 export { setSizes, setConstraint, setActive, movePanel, splitPanel, closePanel, extractPanel, insertPanel, } from './mutations.js';
 export { createLayoutModel } from './model.js';
 export { closePanelForUser } from './user-actions.js';
+export type { Bounds, Placement, DesiredView, PlacementSnapshot, ViewOp, ActualView, ReconcilerState, } from './placement-reconcile.js';
+export { createInitialState, reconcile } from './placement-reconcile.js';
+export type { CleanView, CleanSnapshot, Authorizer } from './snapshot-reconcile.js';
+export { cleanSnapshot, dispatchOps } from './snapshot-reconcile.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/layout/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/layout/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EACX,WAAW,EACX,cAAc,EACd,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,WAAW,GACX,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACvD,OAAO,EACN,QAAQ,EACR,aAAa,EACb,SAAS,EACT,SAAS,EACT,UAAU,EACV,UAAU,EACV,YAAY,EACZ,WAAW,GACX,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/layout/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EACX,WAAW,EACX,cAAc,EACd,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,WAAW,GACX,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACvD,OAAO,EACN,QAAQ,EACR,aAAa,EACb,SAAS,EACT,SAAS,EACT,UAAU,EACV,UAAU,EACV,YAAY,EACZ,WAAW,GACX,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAErD,YAAY,EACX,MAAM,EACN,SAAS,EACT,WAAW,EACX,iBAAiB,EACjB,MAAM,EACN,UAAU,EACV,eAAe,GACf,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAExE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACnF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA"}

package/dist/layout/index.js

@@ -1,2 +1,2 @@
-import { a as insertPanel, c as setConstraint, d as sanitizeFlexibleWeights, f as parseLayout, h as createPanelRegistry, i as extractPanel, l as setSizes, m as validateTree, n as createLayoutModel, o as movePanel, p as serializeLayout, r as closePanel, s as setActive, t as closePanelForUser, u as splitPanel } from "../layout-B1t15b_q.js";
-export { closePanel, closePanelForUser, createLayoutModel, createPanelRegistry, extractPanel, insertPanel, movePanel, parseLayout, sanitizeFlexibleWeights, serializeLayout, setActive, setConstraint, setSizes, splitPanel, validateTree };
+import { _ as serializeLayout, a as closePanelForUser, c as extractPanel, d as setActive, f as setConstraint, g as parseLayout, h as sanitizeFlexibleWeights, i as reconcile, l as insertPanel, m as splitPanel, n as dispatchOps, o as createLayoutModel, p as setSizes, r as createInitialState, s as closePanel, t as cleanSnapshot, u as movePanel, v as validateTree, y as createPanelRegistry } from "../layout-ByOiOdnc.js";
+export { cleanSnapshot, closePanel, closePanelForUser, createInitialState, createLayoutModel, createPanelRegistry, dispatchOps, extractPanel, insertPanel, movePanel, parseLayout, reconcile, sanitizeFlexibleWeights, serializeLayout, setActive, setConstraint, setSizes, splitPanel, validateTree };

package/dist/layout/placement-reconcile.d.ts

@@ -0,0 +1,50 @@
+import type { Bounds, Placement } from '@dimina-kit/view-anchor';
+export type { Bounds, Placement };
+export interface DesiredView<Extra = unknown> {
+    viewId: string;
+    placement: Placement;
+    layer: number;
+    extra?: Extra;
+}
+export interface PlacementSnapshot<Extra = unknown> {
+    generation: number;
+    epoch: number;
+    views: DesiredView<Extra>[];
+}
+export type ViewOp<Extra = unknown> = {
+    kind: 'setBounds';
+    viewId: string;
+    bounds: Bounds;
+    extra?: Extra;
+} | {
+    kind: 'attach';
+    viewId: string;
+} | {
+    kind: 'setVisible';
+    viewId: string;
+    visible: boolean;
+} | {
+    kind: 'detach';
+    viewId: string;
+} | {
+    kind: 'reorder';
+    order: string[];
+};
+export interface ActualView<Extra = unknown> {
+    attached: boolean;
+    visible: boolean;
+    bounds?: Bounds;
+    extra?: Extra;
+}
+export interface ReconcilerState<Extra = unknown> {
+    generation: number;
+    lastEpoch: number;
+    desired: Map<string, DesiredView<Extra>>;
+    actual: Map<string, ActualView<Extra>>;
+}
+export declare function createInitialState<Extra = unknown>(): ReconcilerState<Extra>;
+export declare function reconcile<Extra = unknown>(prev: ReconcilerState<Extra>, snapshot: PlacementSnapshot<Extra>): {
+    state: ReconcilerState<Extra>;
+    ops: ViewOp<Extra>[];
+};
+//# sourceMappingURL=placement-reconcile.d.ts.map

package/dist/layout/placement-reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"placement-reconcile.d.ts","sourceRoot":"","sources":["../../src/layout/placement-reconcile.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAEhE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AAEjC,MAAM,WAAW,WAAW,CAAC,KAAK,GAAG,OAAO;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;IAEpB,KAAK,EAAE,MAAM,CAAA;IAEb,KAAK,CAAC,EAAE,KAAK,CAAA;CACd;AAED,MAAM,WAAW,iBAAiB,CAAC,KAAK,GAAG,OAAO;IAEhD,UAAU,EAAE,MAAM,CAAA;IAElB,KAAK,EAAE,MAAM,CAAA;IAEb,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAA;CAC5B;AAED,MAAM,MAAM,MAAM,CAAC,KAAK,GAAG,OAAO,IAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAExC,MAAM,WAAW,UAAU,CAAC,KAAK,GAAG,OAAO;IACzC,QAAQ,EAAE,OAAO,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,KAAK,CAAA;CACd;AAED,MAAM,WAAW,eAAe,CAAC,KAAK,GAAG,OAAO;IAC9C,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;IACxC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;CACvC;AAED,wBAAgB,kBAAkB,CAAC,KAAK,GAAG,OAAO,KAAK,eAAe,CAAC,KAAK,CAAC,CAO5E;AAiID,wBAAgB,SAAS,CAAC,KAAK,GAAG,OAAO,EACvC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,EAC5B,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,GACjC;IAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;CAAE,CA8CzD"}

package/dist/layout/snapshot-reconcile.d.ts

@@ -0,0 +1,28 @@
+import type { Placement, ReconcilerState, ViewOp } from './placement-reconcile.js';
+export interface CleanView {
+    viewId: string;
+    placement: Placement;
+    layer: number;
+}
+export interface CleanSnapshot {
+    generation: number;
+    epoch: number;
+    views: CleanView[];
+}
+export type Authorizer = (slotToken: string) => {
+    viewId: string;
+    layer: number;
+} | null;
+export declare function cleanSnapshot(raw: unknown, authorize: Authorizer): CleanSnapshot | null;
+/**
+ * Collapse reconcile ops onto a two-state per-view sink. Gathers the viewIds any
+ * op touched (reorder excluded — deck z-order is compositor zone-fixed), then for
+ * each reads the reconciled end-state from `state.actual`: attached+visible+bounds
+ * → apply({visible:true,bounds}); otherwise apply({visible:false}). Reading from
+ * `actual` (not the op itself) means a bare restore still carries its bounds.
+ *
+ * Each apply runs in its own try/catch: one throwing sink (e.g. a destroyed native
+ * view) must not abort the rest of the dispatch.
+ */
+export declare function dispatchOps(ops: ViewOp[], state: ReconcilerState, resolveApply: (viewId: string) => ((p: Placement) => void) | null): void;
+//# sourceMappingURL=snapshot-reconcile.d.ts.map

package/dist/layout/snapshot-reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-reconcile.d.ts","sourceRoot":"","sources":["../../src/layout/snapshot-reconcile.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAU,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AAE1F,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,SAAS,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,SAAS,EAAE,CAAA;CACnB;AAMD,MAAM,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAA;AA2ExF,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,GAAG,aAAa,GAAG,IAAI,CAkBvF;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,GAAG,EAAE,MAAM,EAAE,EACb,KAAK,EAAE,eAAe,EACtB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC,GAAG,IAAI,GAChE,IAAI,CAoBN"}

package/dist/{layout-B1t15b_q.js → layout-ByOiOdnc.js}

@@ -614,6 +614,271 @@ function closePanelForUser(tree, panelId, registry) {
 	return registry.get(panelId)?.closable === false ? tree : closePanel(tree, panelId);
 }
 //#endregion
-export { insertPanel as a, setConstraint as c, sanitizeFlexibleWeights as d, parseLayout as f, createPanelRegistry as h, extractPanel as i, setSizes as l, validateTree as m, createLayoutModel as n, movePanel as o, serializeLayout as p, closePanel as r, setActive as s, closePanelForUser as t, splitPanel as u };
+//#region src/layout/placement-reconcile.ts
+function createInitialState() {
+	return {
+		generation: 0,
+		lastEpoch: -1,
+		desired: /* @__PURE__ */ new Map(),
+		actual: /* @__PURE__ */ new Map()
+	};
+}
+function roundBounds(b) {
+	return {
+		x: Math.round(b.x),
+		y: Math.round(b.y),
+		width: Math.round(b.width),
+		height: Math.round(b.height)
+	};
+}
+function sameBounds(a, b) {
+	if (a === void 0 || b === void 0) return a === b;
+	return a.x === b.x && a.y === b.y && a.width === b.width && a.height === b.height;
+}
+function sameExtra(a, b) {
+	if (a === b) return true;
+	if (a === void 0 || b === void 0) return false;
+	return JSON.stringify(a) === JSON.stringify(b);
+}
+function visibleBounds(dv) {
+	return roundBounds(dv.placement.bounds);
+}
+function setBoundsOp(id, dv) {
+	return {
+		kind: "setBounds",
+		viewId: id,
+		bounds: visibleBounds(dv),
+		...dv.extra !== void 0 ? { extra: dv.extra } : {}
+	};
+}
+function computeOrder(actual, desired) {
+	const attached = [...actual.entries()].filter(([, a]) => a.attached).map(([id]) => id);
+	attached.sort((id1, id2) => {
+		const l1 = desired.get(id1)?.layer ?? 0;
+		const l2 = desired.get(id2)?.layer ?? 0;
+		if (l1 !== l2) return l1 - l2;
+		return id1 < id2 ? -1 : id1 > id2 ? 1 : 0;
+	});
+	return attached;
+}
+function scanDetached(actual, desired, ops) {
+	let attachSetChanged = false;
+	for (const id of [...actual.keys()]) {
+		if (desired.has(id)) continue;
+		if (actual.get(id)?.attached) {
+			ops.push({
+				kind: "detach",
+				viewId: id
+			});
+			attachSetChanged = true;
+		}
+		actual.delete(id);
+	}
+	return attachSetChanged;
+}
+function classifyView(id, dv, actual, buckets) {
+	const a = actual.get(id);
+	if (!dv.placement.visible) {
+		if (a?.attached && a.visible) buckets.hides.push(id);
+		actual.set(id, {
+			attached: a?.attached ?? false,
+			visible: false,
+			bounds: a?.bounds,
+			extra: a?.extra
+		});
+		return false;
+	}
+	const bounds = visibleBounds(dv);
+	if (!a || !a.attached) {
+		buckets.shows.push(id);
+		actual.set(id, {
+			attached: true,
+			visible: true,
+			bounds,
+			extra: dv.extra
+		});
+		return true;
+	}
+	if (!a.visible) buckets.restores.push(id);
+	if (!sameBounds(a.bounds, bounds) || !sameExtra(a.extra, dv.extra)) buckets.updates.push(id);
+	actual.set(id, {
+		attached: true,
+		visible: true,
+		bounds,
+		extra: dv.extra
+	});
+	return false;
+}
+function emitOps(desired, actual, buckets, ops, attachSetChanged) {
+	for (const id of buckets.hides) ops.push({
+		kind: "setVisible",
+		viewId: id,
+		visible: false
+	});
+	buckets.shows.sort((a, b) => (desired.get(a)?.layer ?? 0) - (desired.get(b)?.layer ?? 0));
+	for (const id of buckets.shows) {
+		ops.push(setBoundsOp(id, desired.get(id)));
+		ops.push({
+			kind: "attach",
+			viewId: id
+		});
+	}
+	for (const id of buckets.restores) ops.push({
+		kind: "setVisible",
+		viewId: id,
+		visible: true
+	});
+	for (const id of buckets.updates) ops.push(setBoundsOp(id, desired.get(id)));
+	if (attachSetChanged) ops.push({
+		kind: "reorder",
+		order: computeOrder(actual, desired)
+	});
+}
+function reconcile(prev, snapshot) {
+	if (snapshot.generation < prev.generation) return {
+		state: { ...prev },
+		ops: []
+	};
+	if (snapshot.generation === prev.generation && snapshot.epoch <= prev.lastEpoch) return {
+		state: { ...prev },
+		ops: []
+	};
+	const resetGeneration = snapshot.generation > prev.generation;
+	const actual = /* @__PURE__ */ new Map();
+	if (!resetGeneration) for (const [id, a] of prev.actual) actual.set(id, { ...a });
+	const desired = /* @__PURE__ */ new Map();
+	for (const v of snapshot.views) desired.set(v.viewId, v);
+	const ops = [];
+	let attachSetChanged = scanDetached(actual, desired, ops);
+	const buckets = {
+		hides: [],
+		shows: [],
+		restores: [],
+		updates: []
+	};
+	for (const [id, dv] of desired) if (classifyView(id, dv, actual, buckets)) attachSetChanged = true;
+	emitOps(desired, actual, buckets, ops, attachSetChanged);
+	return {
+		state: {
+			generation: snapshot.generation,
+			lastEpoch: snapshot.epoch,
+			desired,
+			actual
+		},
+		ops
+	};
+}
+//#endregion
+//#region src/layout/snapshot-reconcile.ts
+function isFiniteNumber(v) {
+	return typeof v === "number" && Number.isFinite(v);
+}
+function isValidBounds(v) {
+	if (v === null || typeof v !== "object") return false;
+	const b = v;
+	return isFiniteNumber(b.x) && isFiniteNumber(b.y) && isFiniteNumber(b.width) && b.width >= 0 && isFiniteNumber(b.height) && b.height >= 0;
+}
+function isValidPlacement(v) {
+	if (v === null || typeof v !== "object") return false;
+	const p = v;
+	if (p.visible === true) return isValidBounds(p.bounds);
+	if (p.visible === false) return true;
+	return false;
+}
+function isNonNegInt(v) {
+	return typeof v === "number" && Number.isInteger(v) && v >= 0;
+}
+function readSlotToken(rawView) {
+	const extra = rawView.extra;
+	if (extra === null || typeof extra !== "object") return null;
+	const token = extra.slotToken;
+	return typeof token === "string" && token.length > 0 ? token : null;
+}
+/**
+* Validate + authorize a raw renderer snapshot into a trusted CleanSnapshot.
+*
+* Returns null (REJECT — caller must NOT reconcile) when:
+*   - the payload is malformed (missing/!int generation/epoch, views not an array);
+*   - `views` is NON-EMPTY but every entry is dropped by authorization/validation
+*     — a fully-rejected snapshot must never be read as "the renderer wants
+*     everything detached" (that would tear down live views on a transient where
+*     tokens momentarily fail to resolve).
+*
+* Returns an EMPTY CleanSnapshot (not null) when `views` is genuinely empty — the
+* renderer removed all its views, a legitimate signal the caller reconciles into
+* detach ops.
+*
+* Each surviving view takes its `viewId`/`layer` from the AUTHORIZER, never from
+* the renderer-reported fields (a valid token must not be splice-able onto a
+* forged viewId to poison the reconciler key). Duplicate viewIds keep the first.
+*/
+function cleanOneView(rawView, authorize, seen) {
+	if (rawView === null || typeof rawView !== "object" || Array.isArray(rawView)) return null;
+	const rv = rawView;
+	const token = readSlotToken(rv);
+	if (token === null) return null;
+	const grant = authorize(token);
+	if (grant === null) return null;
+	if (!isValidPlacement(rv.placement)) return null;
+	if (seen.has(grant.viewId)) return null;
+	seen.add(grant.viewId);
+	return {
+		viewId: grant.viewId,
+		placement: rv.placement,
+		layer: grant.layer
+	};
+}
+function cleanSnapshot(raw, authorize) {
+	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return null;
+	const snap = raw;
+	if (!isNonNegInt(snap.generation) || !isNonNegInt(snap.epoch)) return null;
+	if (!Array.isArray(snap.views)) return null;
+	const rawViews = snap.views;
+	const views = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const rawView of rawViews) {
+		const cleaned = cleanOneView(rawView, authorize, seen);
+		if (cleaned) views.push(cleaned);
+	}
+	if (rawViews.length > 0 && views.length === 0) return null;
+	return {
+		generation: snap.generation,
+		epoch: snap.epoch,
+		views
+	};
+}
+/**
+* Collapse reconcile ops onto a two-state per-view sink. Gathers the viewIds any
+* op touched (reorder excluded — deck z-order is compositor zone-fixed), then for
+* each reads the reconciled end-state from `state.actual`: attached+visible+bounds
+* → apply({visible:true,bounds}); otherwise apply({visible:false}). Reading from
+* `actual` (not the op itself) means a bare restore still carries its bounds.
+*
+* Each apply runs in its own try/catch: one throwing sink (e.g. a destroyed native
+* view) must not abort the rest of the dispatch.
+*/
+function dispatchOps(ops, state, resolveApply) {
+	const touched = /* @__PURE__ */ new Set();
+	for (const op of ops) {
+		if (op.kind === "reorder") continue;
+		touched.add(op.viewId);
+	}
+	for (const viewId of touched) {
+		const apply = resolveApply(viewId);
+		if (!apply) continue;
+		const a = state.actual.get(viewId);
+		const placement = a && a.attached && a.visible && a.bounds ? {
+			visible: true,
+			bounds: a.bounds
+		} : { visible: false };
+		try {
+			apply(placement);
+		} catch (err) {
+			console.error(`[electron-deck] applyPlacement for view "${viewId}" threw:`, err);
+		}
+	}
+}
+//#endregion
+export { serializeLayout as _, closePanelForUser as a, extractPanel as c, setActive as d, setConstraint as f, parseLayout as g, sanitizeFlexibleWeights as h, reconcile as i, insertPanel as l, splitPanel as m, dispatchOps as n, createLayoutModel as o, setSizes as p, createInitialState as r, closePanel as s, cleanSnapshot as t, movePanel as u, validateTree as v, createPanelRegistry as y };
 
-//# sourceMappingURL=layout-B1t15b_q.js.map
+//# sourceMappingURL=layout-ByOiOdnc.js.map