@flaxia/node 0.3.6 → 0.5.0

package/dist/index.js

@@ -1,121 +1,331 @@
-import { r as e, t } from "./assets/memoryProbe.js";
-//#region src/consent/ConsentUI.ts
-var n = class {
-	constructor(e, t, n, r) {
-		this.shadow = e.attachShadow({ mode: "open" }), this.render(t, n, r);
-	}
-	render(e, t, n) {
-		let { brandName: r, position: i, accentColor: a = "#6366f1" } = e, [o, s] = i.split("-"), c = document.createElement("style");
-		c.textContent = `
-      .overlay {
-        position: fixed;
-        ${o}: 20px;
-        ${s}: 20px;
-        padding: 20px;
-        background: #fff;
-        color: #1f2937;
-        border: 1px solid #ccc;
-        box-shadow: 0 4px 6px rgba(0,0,0,0.1);
-        z-index: 9999;
-        border-radius: 8px;
-        max-width: 300px;
-        font-family: sans-serif;
-      }
-      .overlay h3 {
-        margin: 0 0 8px;
-        color: #111827;
-        font-size: 16px;
-      }
-      .overlay p {
-        margin: 0 0 12px;
-        color: #4b5563;
-        font-size: 14px;
-        line-height: 1.4;
-      }
-      button {
-        background: ${a};
-        color: white;
-        border: none;
-        padding: 10px 15px;
-        border-radius: 4px;
-        cursor: pointer;
-        margin-top: 10px;
-        width: 100%;
-        font-size: 14px;
-      }
-      button.reject {
-        background: transparent;
-        color: #4b5563;
-        border: 1px solid #ccc;
-      }
-      @media (prefers-color-scheme: dark) {
-        .overlay {
-          background: #1f2937;
-          color: #f9fafb;
-          border-color: #374151;
-          box-shadow: 0 4px 6px rgba(0,0,0,0.4);
-        }
-        .overlay h3 {
-          color: #f9fafb;
-        }
-        .overlay p {
-          color: #d1d5db;
-        }
-        button.reject {
-          color: #d1d5db;
-          border-color: #4b5563;
-        }
-      }
-    `;
-		let l = document.createElement("div");
-		l.className = "overlay", l.innerHTML = `
-      <h3>${r}</h3>
-      <p>サイトのパフォーマンス向上にご協力ください。</p>
-      <button id="consent-btn">同意して開始</button>
-      <button id="reject-btn" class="reject">拒否</button>
-    `, l.querySelector("#consent-btn")?.addEventListener("click", () => {
-			l.remove(), t();
-		}), l.querySelector("#reject-btn")?.addEventListener("click", () => {
-			l.remove(), n?.();
-		}), this.shadow.appendChild(c), this.shadow.appendChild(l);
-	}
-}, r = "flaxia_consent_granted", i = "flaxia_consent_expiry", a = "flaxia_consent_denied", o = 720 * 60 * 60 * 1e3, s = /* @__PURE__ */ new Map();
-function c(e) {
+import { d as e, f as t, m as n, p as r, r as i, u as a, v as o, x as s, y as c } from "./assets/dist.js";
+import { t as l } from "./assets/egress-guard.js";
+//#region src/consent/notice.ts
+var u = {
+	summary: "同意すると、このブラウザは第三者から依頼された処理をバックグラウンドで実行します。",
+	items: [
+		"実行する処理: 顧客（第三者）が依頼したワークロード。任意の WebAssembly コンテナの実行や、画像の NSFW（成人向け）判定などを含みます。",
+		"接続と登録: オーケストレーターへ WebSocket で常時接続し、端末の性能や対応ワークロードを登録します。",
+		"資源の使用: 待機中も接続を維持し、処理の実行中は CPU・GPU・通信・バッテリーを消費します。",
+		"タスクの出所: 処理はこのサイトの運営者ではなく、第三者（顧客）から割り当てられます。"
+	],
+	acceptGateHint: "開示内容を確認できるよう、「同意して開始」はしばらくの間押せません。",
+	acceptLabel: "同意して開始",
+	rejectLabel: "拒否"
+}, d = 4320 * 60 * 60 * 1e3, f = "flaxia_consent_record", p = "flaxia_consent_granted", m = "flaxia_consent_expiry", h = "flaxia_consent_denied", g = 1, _ = 1e4, v = 2e3, ee = "flaxia-consent-integrity", te = 1, y = "keys", b = "consent-hmac-sha256-v1", x = (...e) => console.warn("[flaxia-node]", ...e), S = /* @__PURE__ */ new Map();
+function C(e) {
 	try {
 		return localStorage.getItem(e);
 	} catch {
-		return s.get(e) ?? null;
+		return S.get(e) ?? null;
 	}
 }
-function l(e, t) {
+function ne(e, t) {
 	try {
 		localStorage.setItem(e, t);
 	} catch {
-		s.set(e, t);
+		S.set(e, t);
 	}
 }
-function u(e) {
+function w(e) {
 	try {
 		localStorage.removeItem(e);
 	} catch {
-		s.delete(e);
-	}
-}
-var d = () => {
-	if (c(r) !== "true") return !1;
-	let e = c(i);
-	if (e) {
-		let t = parseInt(e, 10);
-		if (!Number.isFinite(t) || Date.now() > t) return u(r), u(i), !1;
-	}
-	return !0;
-}, f = () => {
-	u(a), l(r, "true"), l(i, String(Date.now() + o));
-}, p = () => c(a) === "true", m = () => {
-	u(r), u(i), l(a, "true");
-}, h = () => {
-	u(r), u(i), u(a);
-}, g = () => d() ? "granted" : p() ? "denied" : "unset", _ = c, v = l, y = u, b = () => {
+		S.delete(e);
+	}
+}
+function re(e) {
+	return new Promise((t, n) => {
+		e.onsuccess = () => t(e.result), e.onerror = () => n(e.error ?? /* @__PURE__ */ Error("IndexedDB request failed"));
+	});
+}
+function T() {
+	return new Promise((e, t) => {
+		let n;
+		try {
+			n = globalThis.indexedDB;
+		} catch {
+			n = void 0;
+		}
+		if (!n) {
+			t(/* @__PURE__ */ Error("IndexedDB is unavailable"));
+			return;
+		}
+		let r;
+		try {
+			r = n.open(ee, te);
+		} catch (e) {
+			t(e);
+			return;
+		}
+		r.onupgradeneeded = () => {
+			let e = r.result;
+			e.objectStoreNames.contains(y) || e.createObjectStore(y);
+		}, r.onsuccess = () => e(r.result), r.onerror = () => t(r.error ?? /* @__PURE__ */ Error("IndexedDB open failed")), r.onblocked = () => t(/* @__PURE__ */ Error("IndexedDB open blocked"));
+	});
+}
+function ie(e) {
+	if (!e || typeof e != "object") return !1;
+	let t = e;
+	return t.type === "secret" && t.algorithm?.name === "HMAC";
+}
+var ae = {
+	async load() {
+		let e = await T();
+		try {
+			let t = await re(e.transaction(y, "readonly").objectStore(y).get(b));
+			return ie(t) ? t : null;
+		} finally {
+			e.close();
+		}
+	},
+	async save(e) {
+		let t = await T();
+		try {
+			let n = t.transaction(y, "readwrite");
+			n.objectStore(y).put(e, b), await new Promise((e, t) => {
+				n.oncomplete = () => e(), n.onerror = () => t(n.error ?? /* @__PURE__ */ Error("IndexedDB write failed")), n.onabort = () => t(n.error ?? /* @__PURE__ */ Error("IndexedDB write aborted"));
+			});
+		} finally {
+			t.close();
+		}
+	},
+	async clear() {
+		let e = await T();
+		try {
+			let t = e.transaction(y, "readwrite");
+			t.objectStore(y).delete(b), await new Promise((e, n) => {
+				t.oncomplete = () => e(), t.onerror = () => n(t.error ?? /* @__PURE__ */ Error("IndexedDB delete failed")), t.onabort = () => n(t.error ?? /* @__PURE__ */ Error("IndexedDB delete aborted"));
+			});
+		} finally {
+			e.close();
+		}
+	}
+};
+function E(e, t, n) {
+	return new Promise((r) => {
+		let i = !1, a, o = (e) => {
+			i || (i = !0, a !== void 0 && clearTimeout(a), r(e));
+		};
+		a = setTimeout(() => o(t), n), e.then((e) => o(e), () => o(t));
+	});
+}
+var D = ae, O = null, k = null, A = !1, j = !1, M = null, N = 0, P = 0, F = null, oe = !1;
+function se() {
+	try {
+		let e = globalThis.location?.origin;
+		if (typeof e == "string" && e.length > 0) return e;
+	} catch {}
+	return "unknown";
+}
+var ce = se, le = () => ce(), ue = {
+	name: "HMAC",
+	hash: "SHA-256"
+};
+function I() {
+	try {
+		let e = globalThis.crypto?.subtle;
+		if (e && typeof e.generateKey == "function" && typeof e.sign == "function" && typeof e.verify == "function") return e;
+	} catch {}
+	return null;
+}
+function de(e) {
+	let t = new TextEncoder().encode(JSON.stringify([
+		e.v,
+		e.noticeVersion,
+		e.origin,
+		e.grantedAt,
+		e.expiry
+	])), n = new Uint8Array(t.byteLength);
+	return n.set(t), n;
+}
+function fe(e) {
+	let t = "";
+	for (let n of e) t += String.fromCharCode(n);
+	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function pe(e) {
+	try {
+		let t = e.replace(/-/g, "+").replace(/_/g, "/"), n = t + "=".repeat((4 - t.length % 4) % 4), r = atob(n), i = new Uint8Array(r.length);
+		for (let e = 0; e < r.length; e += 1) i[e] = r.charCodeAt(e);
+		return i;
+	} catch {
+		return null;
+	}
+}
+async function me() {
+	let e = await E(D.load(), null, v);
+	if (e) return e;
+	let t = I();
+	if (!t) return null;
+	try {
+		let e = await t.generateKey(ue, !1, ["sign", "verify"]);
+		return await E(D.save(e), void 0, v), e;
+	} catch {
+		return null;
+	}
+}
+async function he(e) {
+	let t = I();
+	if (!t || !O) return null;
+	try {
+		let n = await t.sign("HMAC", O, de(e));
+		return fe(new Uint8Array(n));
+	} catch {
+		return null;
+	}
+}
+async function ge(e) {
+	let t = I();
+	if (!t || !O || !e.mac) return !1;
+	let n = pe(e.mac);
+	if (!n) return !1;
+	try {
+		return await t.verify("HMAC", O, n, de(e));
+	} catch {
+		return !1;
+	}
+}
+function _e(e) {
+	if (!e) return null;
+	try {
+		let t = JSON.parse(e);
+		if (!t || typeof t != "object") return null;
+		let n = t;
+		return typeof n.origin != "string" || typeof n.expiry != "number" || typeof n.grantedAt != "number" ? null : {
+			v: typeof n.v == "number" ? n.v : 0,
+			noticeVersion: typeof n.noticeVersion == "number" ? n.noticeVersion : 0,
+			origin: n.origin,
+			grantedAt: n.grantedAt,
+			expiry: n.expiry,
+			mac: typeof n.mac == "string" ? n.mac : ""
+		};
+	} catch {
+		return null;
+	}
+}
+function L(e, t) {
+	return !(!Number.isFinite(e.grantedAt) || !Number.isFinite(e.expiry) || e.expiry <= t || e.grantedAt > e.expiry || e.expiry - e.grantedAt > 15552e6);
+}
+function R(e) {
+	return e.v === g && e.noticeVersion === 2 && e.origin === le();
+}
+function z() {
+	return _e(C(f));
+}
+function ve(e) {
+	ne(f, JSON.stringify(e));
+}
+function B() {
+	w(f);
+}
+function V() {
+	w(p), w(m);
+}
+var ye = () => {
+	let e = k;
+	return !e || !A ? !1 : L(e, Date.now()) && R(e);
+}, be = () => C(h) === "true", H = () => ye() ? "granted" : be() ? "denied" : "unset", U = () => (M ||= xe(), M);
+async function xe() {
+	let e = ++N, t = P, n = null;
+	try {
+		n = await me();
+	} catch {
+		n = null;
+	}
+	if (e !== N) return H();
+	O = n, V();
+	let r = z();
+	return r !== null && await ge(r) && L(r, Date.now()) && R(r) && r ? t === P && e === N && (k = r, A = !0) : r && !j && (B(), t === P && e === N && (k = null, A = !1)), H();
+}
+function Se() {
+	let e = F;
+	return F = null, e && Date.now() - e.at <= _ ? {
+		noticeVersion: e.noticeVersion,
+		source: "user-gesture"
+	} : oe ? {
+		noticeVersion: 2,
+		source: "host-managed"
+	} : null;
+}
+function Ce(e) {
+	return typeof e != "number" || !Number.isFinite(e) || e <= 0 ? d : Math.min(Math.floor(e), d);
+}
+function we(e, t) {
+	let n = Date.now();
+	return {
+		v: g,
+		noticeVersion: e,
+		origin: le(),
+		grantedAt: n,
+		expiry: n + Ce(t),
+		mac: ""
+	};
+}
+function Te(e, t) {
+	w(h), V();
+	let n = we(e.noticeVersion, t);
+	return k = n, A = !0, j = !0, P += 1, ve(n), n;
+}
+async function Ee(e) {
+	try {
+		if (await U(), k !== e) return;
+		let t = await he(e);
+		if (k !== e) return;
+		if (!t) {
+			B(), j = !1;
+			return;
+		}
+		let n = {
+			...e,
+			mac: t
+		};
+		k = n, A = !0, ve(n), j = !1;
+	} catch {
+		k === e && (B(), j = !1);
+	}
+}
+var W = () => {
+	let e = Se();
+	if (!e) {
+		x("refusing programmatic consent grant: consent requires the built-in banner to be rendered and accepted by the visitor (see setHostManagedConsentAllowed for host-managed UIs)");
+		return;
+	}
+	Ee(Te(e));
+}, De = (e = 2) => {
+	F = {
+		noticeVersion: e,
+		at: Date.now()
+	};
+}, Oe = (e) => {
+	oe = e === !0;
+}, G = () => {
+	B(), V(), k = null, A = !1, j = !1, P += 1, ne(h, "true");
+}, ke = () => {
+	B(), V(), w(h), k = null, A = !1, j = !1, F = null, O = null, N += 1, P += 1, M = null, E(D.clear(), void 0, v);
+}, Ae = C, je = ne, K = w;
+async function Me() {
+	let e = P, t = z();
+	if (!t) {
+		k = null, A = !1;
+		return;
+	}
+	if (!I()) return;
+	if (!O) {
+		M = null, await U();
+		return;
+	}
+	let n = await ge(t), r = z();
+	if (e !== P || !r || JSON.stringify(r) !== JSON.stringify(t)) return;
+	let i = n && L(t, Date.now()) && R(t);
+	k = i ? t : null, A = i;
+}
+try {
+	typeof globalThis.addEventListener == "function" && globalThis.addEventListener("storage", (e) => {
+		e.key !== null && e.key !== f && e.key !== h || (P += 1, Me());
+	});
+} catch {}
+var Ne = () => {
 	try {
 		if (typeof crypto < "u" && typeof crypto.randomUUID == "function") return crypto.randomUUID();
 	} catch {}
@@ -123,9 +333,116 @@ var d = () => {
 		let t = Math.random() * 16 | 0;
 		return (e === "x" ? t : t & 3 | 8).toString(16);
 	});
-}, x = (...e) => console.log("[flaxia-node]", ...e), S = class {
+};
+U();
+//#endregion
+//#region src/consent/ConsentUI.ts
+var q = "#6366f1", Pe = 1500, Fe = 1500, Ie = 6e4, Le = 80, Re = 40, ze = [
+	"bottom-right",
+	"bottom-left",
+	"top-right",
+	"top-left"
+], Be = /^#[0-9a-f]{3}$/i, Ve = /^#[0-9a-f]{6}$/i, He = /^rgb\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})\s*\)$/i, Ue = /^rgba\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(0|1|0?\.\d+)\s*\)$/i, We = new Map((/* @__PURE__ */ "black.white.red.green.blue.indigo.violet.purple.teal.cyan.orange.pink.brown.gray.grey.slate.navy.maroon.olive.gold.crimson.tomato.salmon.coral.seagreen.steelblue.royalblue.dodgerblue.mediumseagreen.mediumpurple.rebeccapurple".split(".")).map((e) => [e, e]));
+function Ge(e) {
+	if (typeof e != "string") return q;
+	let t = e.trim();
+	if (t.length === 0 || t.length > 64) return q;
+	if (Be.test(t) || Ve.test(t)) return t.toLowerCase();
+	let n = He.exec(t);
+	if (n) {
+		let [e, t, r] = n.slice(1).map(Number);
+		return e <= 255 && t <= 255 && r <= 255 ? `rgb(${e}, ${t}, ${r})` : q;
+	}
+	let r = Ue.exec(t);
+	if (r) {
+		let [e, t, n] = r.slice(1, 4).map(Number), i = Number(r[4]);
+		return e <= 255 && t <= 255 && n <= 255 && i >= 0 && i <= 1 ? `rgba(${e}, ${t}, ${n}, ${i})` : q;
+	}
+	return We.get(t.toLowerCase()) ?? q;
+}
+function Ke(e, t, n) {
+	if (typeof e != "string") return t;
+	let r = e.replace(/[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u202a-\u202e\u2066-\u2069]/g, "").replace(/\s+/g, " ").trim();
+	return r.length === 0 ? t : r.length > n ? `${r.slice(0, n)}…` : r;
+}
+function qe(e) {
+	if (typeof e != "string" || e.trim().length === 0) return null;
+	try {
+		let t = new URL(e.trim());
+		return t.protocol !== "https:" && t.protocol !== "http:" ? null : t.toString();
+	} catch {
+		return null;
+	}
+}
+function Je(e) {
+	return {
+		brandName: Ke(e?.brandName, "Flaxia Crowd", Le),
+		position: ze.includes(e?.position) ? e.position : "bottom-right",
+		accentColor: Ge(e?.accentColor),
+		acceptLabel: Ke(e?.acceptLabel, u.acceptLabel, Re),
+		rejectLabel: Ke(e?.rejectLabel, u.rejectLabel, Re),
+		privacyPolicyUrl: qe(e?.privacyPolicyUrl),
+		minVisibleMs: Ye(e?.minVisibleMs)
+	};
+}
+function Ye(e) {
+	return typeof e != "number" || !Number.isFinite(e) ? Pe : Math.min(Math.max(Math.floor(e), Fe), Ie);
+}
+function Xe(e, t) {
+	return typeof t.minVisibleMs == "number" && Number.isFinite(t.minVisibleMs) ? Math.min(Math.max(Math.floor(t.minVisibleMs), 0), Ie) : e;
+}
+var Ze = "\n  .overlay {\n    position: fixed;\n    __flaxia_position__;\n    padding: 20px;\n    background: #fff;\n    color: #1f2937;\n    border: 1px solid #ccc;\n    box-shadow: 0 4px 6px rgba(0,0,0,0.1);\n    z-index: 9999;\n    border-radius: 8px;\n    max-width: 300px;\n    font-family: sans-serif;\n  }\n  .overlay h3 {\n    margin: 0 0 8px;\n    color: #111827;\n    font-size: 16px;\n  }\n  .overlay p {\n    margin: 0 0 12px;\n    color: #4b5563;\n    font-size: 14px;\n    line-height: 1.4;\n  }\n  .overlay ul {\n    margin: 0 0 12px;\n    padding-left: 18px;\n    color: #4b5563;\n    font-size: 13px;\n    line-height: 1.45;\n  }\n  .overlay li {\n    margin-bottom: 6px;\n  }\n  .overlay .hint {\n    margin: 0 0 8px;\n    color: #6b7280;\n    font-size: 12px;\n  }\n  .overlay .privacy {\n    margin: 0 0 8px;\n    font-size: 12px;\n  }\n  .overlay .privacy a {\n    color: __flaxia_accent__;\n  }\n  button {\n    background: __flaxia_accent__;\n    color: white;\n    border: none;\n    padding: 10px 15px;\n    border-radius: 4px;\n    cursor: pointer;\n    margin-top: 10px;\n    width: 100%;\n    font-size: 14px;\n  }\n  button:disabled {\n    opacity: 0.6;\n    cursor: default;\n  }\n  button.reject {\n    background: transparent;\n    color: #4b5563;\n    border: 1px solid #ccc;\n  }\n  @media (prefers-color-scheme: dark) {\n    .overlay {\n      background: #1f2937;\n      color: #f9fafb;\n      border-color: #374151;\n      box-shadow: 0 4px 6px rgba(0,0,0,0.4);\n    }\n    .overlay h3 {\n      color: #f9fafb;\n    }\n    .overlay p,\n    .overlay ul {\n      color: #d1d5db;\n    }\n    .overlay .hint {\n      color: #9ca3af;\n    }\n    button.reject {\n      color: #d1d5db;\n      border-color: #4b5563;\n    }\n  }\n", Qe = class {
+	constructor(e, t, n, r, i) {
+		this.config = Je(t), this.options = i ?? {}, this.root = e.attachShadow({ mode: "closed" }), this.render(n, r);
+	}
+	shadowRootForTesting() {
+		return this.root;
+	}
+	render(e, t) {
+		let { brandName: n, position: r, accentColor: i, acceptLabel: a, rejectLabel: o, privacyPolicyUrl: s } = this.config, [c, l] = r.split("-"), d = document.createElement("style");
+		d.textContent = Ze.replace(/__flaxia_accent__/g, i).replace("__flaxia_position__", `${c}: 20px; ${l}: 20px`);
+		let f = document.createElement("div");
+		f.className = "overlay", f.setAttribute("role", "dialog"), f.setAttribute("aria-labelledby", "flaxia-consent-title");
+		let p = document.createElement("h3");
+		p.id = "flaxia-consent-title", p.textContent = n;
+		let m = document.createElement("p");
+		m.textContent = u.summary;
+		let h = document.createElement("ul");
+		for (let e of u.items) {
+			let t = document.createElement("li");
+			t.textContent = e, h.appendChild(t);
+		}
+		if (f.append(p, m, h), s) {
+			let e = document.createElement("p");
+			e.className = "privacy";
+			let t = document.createElement("a");
+			t.href = s, t.target = "_blank", t.rel = "noopener noreferrer", t.textContent = "プライバシーポリシー", e.appendChild(t), f.appendChild(e);
+		}
+		let g = document.createElement("p");
+		g.className = "hint", g.textContent = u.acceptGateHint;
+		let _ = document.createElement("button");
+		_.id = "consent-btn", _.type = "button", _.textContent = a;
+		let v = document.createElement("button");
+		v.id = "reject-btn", v.type = "button", v.className = "reject", v.textContent = o;
+		let ee = this.options.now ?? (() => Date.now()), te = this.options.schedule ?? ((e, t) => void setTimeout(e, t)), y = Xe(this.config.minVisibleMs, this.options), b = ee() + y, x = y <= 0, S = !1;
+		x || (_.disabled = !0, _.setAttribute("aria-disabled", "true"), te(() => {
+			x = !0, _.disabled = !1, _.removeAttribute("aria-disabled"), g.remove();
+		}, y));
+		let C = (e) => {
+			S || (S = !0, f.remove(), e?.());
+		};
+		_.addEventListener("click", () => {
+			!x || ee() < b || (De(2), C(e));
+		}), v.addEventListener("click", () => {
+			C(t);
+		}), x || f.appendChild(g), f.append(_, v), this.root.append(d, f);
+	}
+}, J = (...e) => console.log("[flaxia-node]", ...e), $e = class e {
+	static {
+		this.MAX_PENDING_CONTROLS = 64;
+	}
 	constructor(e, t = 3e5) {
-		this.worker = null, this.queue = [], this.active = null, this._lastCpuLoad = 0, this.workerUrl = e || "/worker.js", this.defaultTimeoutMs = t, this.initWorker();
+		this.worker = null, this.queue = [], this.active = null, this.pendingControls = [], this._lastCpuLoad = 0, this.workerUrl = e || "/worker.js", this.defaultTimeoutMs = t, this.initWorker();
 	}
 	initWorker() {
 		if (typeof Worker > "u") return;
@@ -136,79 +453,147 @@ var d = () => {
 			this.handleWorkerError(/* @__PURE__ */ Error("Worker message error"));
 		}, this.worker = e;
 	}
-	run(e, t, n, r, i, a) {
-		return new Promise((o, s) => {
+	run(e, t, n, r, i, a, o) {
+		return new Promise((s, c) => {
 			if (!this.worker) {
-				s(/* @__PURE__ */ Error("Worker not available"));
+				c(/* @__PURE__ */ Error("Worker not available"));
 				return;
 			}
-			let c = () => this.execute(e, t, n, r, i, a, o, s);
-			this.active ? (x(`task queued id=${e} workload=${t} (active task running)`), this.queue.push(c)) : c();
+			let l = () => this.execute(e, t, n, r, i, a, s, c, o);
+			this.active ? (J(`task queued id=${e} workload=${t} (active task running)`), this.queue.push({
+				id: e,
+				job: l,
+				reject: c
+			})) : l();
 		});
 	}
-	execute(e, t, n, r, i, a, o, s) {
-		let c = this.worker;
-		if (!c) {
+	execute(e, t, n, r, i, a, o, s, c) {
+		let l = this.worker;
+		if (!l) {
 			s(/* @__PURE__ */ Error("Worker not available")), this.dequeue();
 			return;
 		}
-		let l = r ?? this.defaultTimeoutMs, u = !1, d = performance.now();
-		x(`task start id=${e} workload=${t} timeoutMs=${l}`);
-		let f = (e) => {
-			if (u) return;
-			u = !0;
-			let t = this.active;
-			t && (clearTimeout(t.timer), t.removeListener()), this.active = null, e(), this.dequeue();
-		}, p = (n) => {
-			let { id: r, type: a, result: c, error: l, token: u, cpuLoad: p } = n.data;
+		let u = r ?? this.defaultTimeoutMs, d = !1, f = performance.now();
+		J(`task start id=${e} workload=${t} timeoutMs=${u}`);
+		let p = (t) => {
+			if (d) return;
+			d = !0;
+			let n = this.active;
+			n && (clearTimeout(n.timer), n.removeListener()), this.active = null, this.pendingControls = this.pendingControls.filter((t) => t.taskId !== e), t(), this.dequeue();
+		}, m = (n) => {
+			let { id: r, type: a, result: l, error: u, token: d, cpuLoad: m } = n.data;
 			if (r === e) {
 				if (a === "token") {
-					i?.(u);
+					i?.(d);
 					return;
 				}
 				if (a === "heartbeat") {
-					typeof p == "number" && Number.isFinite(p) && (this._lastCpuLoad = Math.min(1, Math.max(0, p)));
+					typeof m == "number" && Number.isFinite(m) && (this._lastCpuLoad = Math.min(1, Math.max(0, m)));
+					return;
+				}
+				if (a === "swarm-frame") {
+					c?.onFrame?.(n.data.frame);
 					return;
 				}
-				a === "done" ? (x(`task done id=${e} workload=${t} durationMs=${Math.round(performance.now() - d)}`), f(() => o(c))) : a === "error" ? (x(`task failed id=${e} workload=${t} error=${l}`), f(() => s(Error(l)))) : (x(`task unknown-message id=${e} type=${String(a)}`), f(() => s(/* @__PURE__ */ Error(`Unknown message type: ${String(a)}`))));
+				if (a === "swarm-message") {
+					c?.onMessage?.(n.data.message);
+					return;
+				}
+				a === "done" ? (J(`task done id=${e} workload=${t} durationMs=${Math.round(performance.now() - f)}`), p(() => o(l))) : a === "error" ? (J(`task failed id=${e} workload=${t} error=${u}`), p(() => s(Error(u)))) : (J(`task unknown-message id=${e} type=${String(a)}`), p(() => s(/* @__PURE__ */ Error(`Unknown message type: ${String(a)}`))));
 			}
-		}, m = () => c.removeEventListener("message", p), h = setTimeout(() => {
-			x(`task timeout id=${e} workload=${t} (worker terminated after ${l}ms)`), this.cleanupWorker(), f(() => s(/* @__PURE__ */ Error("TIMEOUT")));
-		}, l);
+		}, h = () => l.removeEventListener("message", m), g = setTimeout(() => {
+			J(`task timeout id=${e} workload=${t} (worker terminated after ${u}ms)`), this.cleanupWorker(), p(() => s(/* @__PURE__ */ Error("TIMEOUT")));
+		}, u);
 		this.active = {
 			id: e,
 			resolve: o,
 			reject: s,
-			timer: h,
-			worker: c,
-			removeListener: m
-		}, c.addEventListener("message", p);
+			timer: g,
+			worker: l,
+			removeListener: h
+		}, l.addEventListener("message", m);
 		try {
-			c.postMessage({
+			l.postMessage({
 				id: e,
 				workload: t,
 				payload: n,
-				timeoutMs: l,
+				timeoutMs: u,
 				config: a
-			});
+			}), this.flushControls();
 		} catch (e) {
-			f(() => s(e instanceof Error ? e : Error(String(e))));
+			p(() => s(e instanceof Error ? e : Error(String(e))));
+		}
+	}
+	flushControls() {
+		if (this.pendingControls.length === 0) return;
+		let e = this.pendingControls.filter((e) => e.taskId === this.active?.id);
+		this.pendingControls = this.pendingControls.filter((e) => e.taskId !== this.active?.id);
+		for (let t of e) this.postToActive({
+			type: "swarm-control",
+			message: t.message
+		});
+	}
+	postToActive(e, t) {
+		if (!this.worker || !this.active) return !1;
+		try {
+			return this.worker.postMessage({
+				id: this.active.id,
+				...e
+			}, t ?? []), !0;
+		} catch {
+			return !1;
+		}
+	}
+	sendControl(t, n) {
+		let r = n ?? t?.taskId;
+		return typeof r == "string" && r !== this.active?.id ? this.worker ? (this.pendingControls.push({
+			taskId: r,
+			message: t
+		}), this.pendingControls.length > e.MAX_PENDING_CONTROLS && this.pendingControls.shift(), !1) : !1 : this.postToActive({
+			type: "swarm-control",
+			message: t
+		});
+	}
+	sendFrame(e) {
+		return this.postToActive({
+			type: "swarm-frame",
+			frame: e
+		}, [e]);
+	}
+	abort(e, t) {
+		let n = this.queue.findIndex((t) => t.id === e);
+		if (n >= 0) {
+			let [r] = this.queue.splice(n, 1);
+			return this.pendingControls = this.pendingControls.filter((t) => t.taskId !== e), J(`task aborted before start id=${e} reason=${t}`), r.reject(Error(t)), !0;
+		}
+		if (this.active?.id !== e || !this.worker) return !1;
+		try {
+			return this.worker.postMessage({
+				id: e,
+				type: "abort",
+				reason: t
+			}), J(`task abort sent id=${e} reason=${t}`), !0;
+		} catch {
+			return !1;
 		}
 	}
 	handleWorkerError(e) {
-		x(`worker error error=${e.message}`);
+		J(`worker error error=${e.message}`);
 		let t = this.active;
 		this.cleanupWorker(), t && (clearTimeout(t.timer), this.active = null, t.reject(e), this.dequeue());
 	}
 	dequeue() {
 		let e = this.queue.shift();
-		e && e();
+		e && e.job();
 	}
 	cleanupWorker() {
 		this.worker &&= (this.worker.terminate(), null), this.initWorker();
 	}
 	terminate() {
-		this.queue = [], this.active &&= (clearTimeout(this.active.timer), this.active.reject(/* @__PURE__ */ Error("TERMINATED")), null), this.worker &&= (this.worker.terminate(), null);
+		let e = this.queue;
+		this.queue = [], this.pendingControls = [];
+		for (let t of e) t.reject(/* @__PURE__ */ Error("TERMINATED"));
+		this.active &&= (clearTimeout(this.active.timer), this.active.reject(/* @__PURE__ */ Error("TERMINATED")), null), this.worker &&= (this.worker.terminate(), null);
 	}
 	resume() {
 		this.worker || this.initWorker();
@@ -216,13 +601,30 @@ var d = () => {
 	get lastCpuLoad() {
 		return this._lastCpuLoad;
 	}
-}, C = (...e) => console.log("[flaxia-node]", ...e), w = (...e) => console.error("[flaxia-node]", ...e), T = "flaxia_node_id", E = "flaxia_node_token", D = class {
+}, Y = (...e) => console.log("[flaxia-node]", ...e), X = (...e) => console.error("[flaxia-node]", ...e);
+function Z(e) {
+	let t = /* @__PURE__ */ new Set();
+	if (!Array.isArray(e)) return [];
+	for (let n of e.slice(0, 32)) try {
+		let e = l(n);
+		e.origin === n && t.add(e.origin);
+	} catch {}
+	return [...t];
+}
+var et = "flaxia_node_id", tt = "flaxia_node_token", nt = class {
+	retireSwarmSession(e) {
+		this.swarmHopKeys.delete(e), this.retiredSwarmSessions.add(e), this.retiredSwarmSessions.size > 64 && this.retiredSwarmSessions.delete(this.retiredSwarmSessions.values().next().value);
+	}
 	constructor(e, t, n) {
-		this.config = e, this.workerPool = t, this.nodeId = n, this.ws = null, this.reconnectAttempts = 0, this.MAX_RECONNECT_DELAY = 3e4, this.destroyed = !1, this.suspended = !1, this.visibilityHandler = null, this.inflightTasks = /* @__PURE__ */ new Set();
+		this.config = e, this.workerPool = t, this.nodeId = n, this.ws = null, this.reconnectAttempts = 0, this.MAX_RECONNECT_DELAY = 3e4, this.destroyed = !1, this.suspended = !1, this.visibilityHandler = null, this.inflightTasks = /* @__PURE__ */ new Set(), this.abortedTasks = /* @__PURE__ */ new Set(), this.swarmSessions = /* @__PURE__ */ new Map(), this.retiredSwarmSessions = /* @__PURE__ */ new Set(), this.swarmHopKeys = /* @__PURE__ */ new Map(), this.swarmInboundChain = Promise.resolve(), this.swarmOutboundChain = Promise.resolve(), this.attempts = /* @__PURE__ */ new Map(), this.cachedToken = null;
 	}
 	async connect() {
 		if (this.destroyed) return;
-		if (C(`connect nodeId=${this.nodeId}`), this.ws) {
+		if (H() !== "granted") {
+			this.disconnect();
+			return;
+		}
+		if (Y(`connect nodeId=${this.nodeId}`), this.ws) {
 			let e = this.ws;
 			e.onclose = null;
 			try {
@@ -231,48 +633,111 @@ var d = () => {
 			this.ws = null;
 		}
 		this.setupVisibilityHandler();
-		let e = await this.obtainToken();
-		if (!e) {
-			w("token acquisition failed; scheduling reconnect"), this.scheduleReconnect();
+		let r = await this.obtainToken();
+		if (H() !== "granted") {
+			Y("connect cancelled because consent was revoked while obtaining a token");
 			return;
 		}
-		let t = this.config.orchestratorUrl.replace(/\/+$/, "").replace(/^http/, "ws"), n = new URL(`${t}/crowd/signal`);
-		n.searchParams.set("token", e.token);
-		let r = new WebSocket(n.toString());
-		this.ws = r, r.onopen = () => {
-			this.reconnectAttempts = 0, C(`signal connected ${n.toString()}`);
-		}, r.onmessage = async (e) => {
-			let t;
+		if (!r) {
+			X("token acquisition failed; scheduling reconnect"), this.scheduleReconnect();
+			return;
+		}
+		let i = e(this.config.orchestratorUrl, "/crowd/signal"), o = new WebSocket(i, a(r.token));
+		o.binaryType = "arraybuffer", this.ws = o;
+		let s = !1;
+		o.onopen = () => {
+			s = !0, this.reconnectAttempts = 0, Y(`signal connected ${i}`);
+		}, o.onmessage = async (e) => {
+			if (this.ws !== o) return;
+			if (typeof e.data != "string") {
+				let r = n(e.data);
+				if (!r || ![...this.swarmSessions.values()].includes(r.sessionId)) return;
+				this.swarmInboundChain = this.swarmInboundChain.then(async () => {
+					let e = this.swarmHopKeys.get(r.sessionId);
+					if (e && e.chainLength > 1) {
+						if (!r.mac || !e.inboundKey) return;
+						if (!await t(e.inboundKey, r.sessionId, r.frame, r.mac)) {
+							X(`swarm frame rejected: bad hop MAC sessionId=${r.sessionId}`);
+							return;
+						}
+					}
+					this.workerPool.sendFrame(r.frame);
+				}).catch(() => {});
+				return;
+			}
+			let r;
 			try {
-				t = JSON.parse(e.data);
+				r = JSON.parse(e.data);
 			} catch {
 				return;
 			}
-			if (t.type === "ping") {
+			if (r.type === "ping") {
 				this.send({
 					type: "pong",
 					cpuLoad: this.workerPool.lastCpuLoad
 				});
 				return;
 			}
-			if (t.type === "task") {
-				let e = t;
-				C(`task received taskId=${e.taskId} workload=${e.workload} timeoutMs=${e.timeoutMs ?? "default"}`);
+			if (r.type === "task") {
+				let e = r;
+				Y(`task received taskId=${e.taskId} workload=${e.workload} timeoutMs=${e.timeoutMs ?? "default"}`), typeof e.attemptId == "string" && this.attempts.set(e.taskId, e.attemptId);
+				let t = e.attemptId ?? this.attempts.get(e.taskId);
 				try {
 					await this.handleTask(e);
 				} catch (n) {
-					let r = n instanceof Error ? n.message : String(n);
-					w(`task failed taskId=${e.taskId} workload=${e.workload} error=${r}`), this.send({
+					let i = n instanceof Error ? n.message : String(n);
+					if (this.abortedTasks.delete(e.taskId)) {
+						Y(`task stopped on coordinator abort taskId=${e.taskId} error=${i}`);
+						return;
+					}
+					X(`task failed taskId=${e.taskId} workload=${e.workload} error=${i}`), this.send({
 						type: "error",
-						taskId: String(t.taskId ?? ""),
-						error: r
+						taskId: String(r.taskId ?? ""),
+						error: i,
+						attemptId: t
 					});
 				}
+				return;
+			}
+			if (r.type === "swarm-init" || r.type === "swarm-slice") {
+				let e = String(r.taskId ?? "");
+				if (!e || typeof r.sessionId != "string" || this.retiredSwarmSessions.has(r.sessionId)) return;
+				if (r.type === "swarm-slice" && this.swarmHopKeys.set(r.sessionId, {
+					inboundKey: typeof r.inboundKey == "string" ? r.inboundKey : void 0,
+					outboundKey: typeof r.outboundKey == "string" ? r.outboundKey : void 0,
+					chainLength: typeof r.chainLength == "number" ? r.chainLength : 1
+				}), typeof r.attemptId == "string" && this.attempts.set(e, r.attemptId), this.swarmSessions.get(e) === r.sessionId) {
+					this.workerPool.sendControl(r, r.sessionId);
+					return;
+				}
+				this.startSwarm(e, r);
+				return;
+			}
+			if (r.type === "swarm-start") {
+				this.swarmSessions.get(String(r.taskId)) === r.sessionId && this.workerPool.sendControl(r, r.sessionId);
+				return;
+			}
+			if (r.type === "swarm-error") {
+				let e = String(r.taskId ?? "");
+				e && this.swarmSessions.get(e) === r.sessionId && this.workerPool.sendControl(r, r.sessionId);
+				return;
+			}
+			if (r.type === "abort") {
+				this.handleAbort(r);
+				return;
 			}
-		}, r.onclose = () => {
-			r.onclose = null, this.ws === r && (this.ws = null, !this.destroyed && (C(`signal disconnected; scheduling reconnect attempt=${this.reconnectAttempts + 1}`), this.scheduleReconnect()));
+		}, o.onclose = () => {
+			o.onclose = null, this.ws === o && (this.ws = null, s || (this.cachedToken = null), !this.destroyed && (Y(`signal disconnected; scheduling reconnect attempt=${this.reconnectAttempts + 1}`), this.scheduleReconnect()));
 		};
 	}
+	handleAbort(e) {
+		let t = String(e.taskId ?? "");
+		if (!t || !this.inflightTasks.has(t)) return;
+		let n = typeof e.error == "string" && e.error ? e.error : "aborted by the coordinator", r = this.swarmSessions.get(t);
+		if (r && r !== e.sessionId) return;
+		let i = r ?? t;
+		r && this.retireSwarmSession(r), this.workerPool.abort(i, n) && this.abortedTasks.add(i), Y(`task abort received taskId=${t} error=${n}`);
+	}
 	scheduleReconnect() {
 		let e = Math.min(1e3 * 2 ** this.reconnectAttempts, this.MAX_RECONNECT_DELAY);
 		setTimeout(() => {
@@ -280,13 +745,13 @@ var d = () => {
 		}, e);
 	}
 	disconnect() {
-		C(`disconnect nodeId=${this.nodeId}`), this.destroyed = !0, this.suspended = !1, this.removeVisibilityHandler();
+		Y(`disconnect nodeId=${this.nodeId}`), this.destroyed = !0, this.suspended = !1, this.removeVisibilityHandler();
 		try {
 			this.ws?.close();
 		} catch {}
 		this.ws = null;
 		try {
-			delete window[k];
+			delete window[$];
 		} catch {}
 		try {
 			this.workerPool.terminate();
@@ -294,7 +759,7 @@ var d = () => {
 	}
 	suspend() {
 		if (!(this.suspended || this.destroyed)) {
-			if (C("suspended (visibility or manual)"), this.suspended = !0, this.ws) {
+			if (Y("suspended (visibility or manual)"), this.suspended = !0, this.ws) {
 				let e = this.ws;
 				e.onclose = null;
 				try {
@@ -306,62 +771,129 @@ var d = () => {
 		}
 	}
 	resume() {
-		!this.suspended || this.destroyed || (C("resumed"), this.suspended = !1, this.workerPool.resume(), this.connect());
+		!this.suspended || this.destroyed || (Y("resumed"), this.suspended = !1, this.workerPool.resume(), this.connect());
 	}
 	async obtainToken() {
+		let e = () => H() === "granted";
+		if (!e()) return null;
 		try {
-			let n = _(E);
-			if (n) try {
-				let e = JSON.parse(n);
-				if (e.token && e.nodeId && e.expiresAt > Date.now() + 6e4) return C(`token cached nodeId=${e.nodeId} expiresIn=${Math.round((e.expiresAt - Date.now()) / 1e3)}s`), e;
-			} catch {}
-			let r = e(), i = r >= t, a = i ? this.config.capabilities ?? ["ai-inference", "image-process"] : [];
-			C(`register capability probe capable=${i} wasmMemoryBytes=${r} capabilities=${JSON.stringify(a)}`);
-			let o = this.config.orchestratorUrl.replace(/\/+$/, ""), s = await fetch(`${o}/crowd/nodes/register`, {
+			if (this.cachedToken && this.cachedToken.expiresAt > Date.now() + 6e4) return Y(`token cached nodeId=${this.cachedToken.nodeId} expiresIn=${Math.round((this.cachedToken.expiresAt - Date.now()) / 1e3)}s`), this.cachedToken;
+			let t = s(), n = t >= c, r = this.config.capabilities ?? ["ai-inference", "image-process"], i = n ? [...r] : [];
+			Z(this.config.containerImageOrigins).length === 0 && (i = i.filter((e) => e !== "container"));
+			let a;
+			if (n && r.includes("swarm-inference") && this.config.allowModelDownload === !0) {
+				if (a = await o(), !e()) return null;
+				a.webgpu || (i = i.filter((e) => e !== "swarm-inference"), a = void 0);
+			} else i = i.filter((e) => e !== "swarm-inference");
+			Y(`register capability probe capable=${n} wasmMemoryBytes=${t} capabilities=${JSON.stringify(i)} webgpu=${a?.webgpu ?? !1}`);
+			let l = this.config.orchestratorUrl.replace(/\/+$/, "");
+			if (!e()) return null;
+			let u = await fetch(`${l}/crowd/nodes/register`, {
 				method: "POST",
 				headers: { "Content-Type": "application/json" },
 				body: JSON.stringify({
 					siteId: this.config.siteId,
-					nodeId: this.nodeId,
-					capabilities: a,
-					wasmMemoryBytes: e(),
-					deviceMemory: typeof navigator.deviceMemory == "number" ? navigator.deviceMemory : null
+					capabilities: i,
+					fileSources: Z(this.config.fileSourceOrigins).length > 0,
+					wasmMemoryBytes: s(),
+					deviceMemory: typeof navigator.deviceMemory == "number" ? navigator.deviceMemory : null,
+					swarm: a
 				})
 			});
-			if (!s.ok) return w(`node register failed HTTP ${s.status} (${o}/crowd/nodes/register)`), null;
-			let c = await s.json();
-			if (!c.token) return w("node register returned no token"), null;
-			C(`node registered nodeId=${this.nodeId} expiresIn=${Math.round((c.expiresAt - Date.now()) / 1e3)}s`);
-			try {
-				v(E, JSON.stringify(c));
-			} catch {}
-			return c;
+			if (!e()) return null;
+			if (!u.ok) return X(`node register failed HTTP ${u.status} (${l}/crowd/nodes/register)`), null;
+			let d = await u.json();
+			return e() ? d.token ? (typeof d.nodeId == "string" && d.nodeId && (this.nodeId = d.nodeId), this.cachedToken = d, Y(`node registered nodeId=${this.nodeId} expiresIn=${Math.round((d.expiresAt - Date.now()) / 1e3)}s`), d) : (X("node register returned no token"), null) : null;
 		} catch (e) {
-			return w("node register threw", e instanceof Error ? e.message : e), null;
+			return X("node register threw", e instanceof Error ? e.message : e), null;
 		}
 	}
 	send(e) {
 		this.ws && this.ws.readyState === WebSocket.OPEN && this.ws.send(JSON.stringify(e));
 	}
+	sendBinary(e) {
+		this.ws && this.ws.readyState === WebSocket.OPEN && this.ws.send(e);
+	}
+	queueSwarmFrame(e, t) {
+		this.swarmOutboundChain = this.swarmOutboundChain.then(async () => {
+			let n = this.swarmHopKeys.get(e);
+			if (n && n.chainLength > 1) {
+				if (!n.outboundKey) {
+					X(`swarm frame not sent: no hop key sessionId=${e}`);
+					return;
+				}
+				this.sendBinary(await r(n.outboundKey, e, t));
+				return;
+			}
+			this.sendBinary(i(e, t));
+		}).catch(() => {});
+	}
+	async startSwarm(e, t) {
+		let n = t.sessionId;
+		if (typeof n != "string" || !n || this.swarmSessions.get(e) === n) return;
+		this.swarmSessions.set(e, n), this.inflightTasks.add(e);
+		let r = performance.now(), i = typeof t.timeoutMs == "number" ? t.timeoutMs + 3e4 : void 0, a = this.attempts.get(e);
+		try {
+			let o = await this.workerPool.run(n, "swarm-inference", t, i, (t) => {
+				this.send({
+					type: "progress",
+					taskId: e,
+					sessionId: n,
+					token: t,
+					attemptId: a
+				});
+			}, { maxCpuLoad: this.config.maxCpuLoad }, {
+				onFrame: (e) => this.queueSwarmFrame(n, e),
+				onMessage: (e) => this.send(e && typeof e == "object" && !("attemptId" in e) ? {
+					...e,
+					attemptId: a
+				} : e)
+			});
+			this.abortedTasks.delete(n) || this.send({
+				type: "result",
+				taskId: e,
+				sessionId: n,
+				payload: o,
+				attemptId: a
+			}), Y(`swarm result sent taskId=${e} durationMs=${Math.round(performance.now() - r)}`);
+		} catch (t) {
+			let r = t instanceof Error ? t.message : String(t);
+			this.abortedTasks.delete(n) ? Y(`swarm stopped on coordinator abort taskId=${e} error=${r}`) : (X(`swarm failed taskId=${e} error=${r}`), this.send({
+				type: "error",
+				taskId: e,
+				sessionId: n,
+				error: r,
+				attemptId: a
+			}));
+		} finally {
+			this.retireSwarmSession(n), this.swarmSessions.get(e) === n && (this.swarmSessions.delete(e), this.inflightTasks.delete(e), this.attempts.delete(e));
+		}
+	}
 	async handleTask(e) {
 		if (this.inflightTasks.has(e.taskId)) return;
 		this.inflightTasks.add(e.taskId);
-		let t = performance.now();
+		let t = performance.now(), n = e.attemptId ?? this.attempts.get(e.taskId);
 		try {
-			let n = e.timeoutMs ? e.timeoutMs + 3e4 : void 0, r = await this.workerPool.run(e.taskId, e.workload, e.payload, n, (t) => {
+			let r = e.timeoutMs ? e.timeoutMs + 3e4 : void 0, i = await this.workerPool.run(e.taskId, e.workload, e.payload, r, (t) => {
 				this.send({
 					type: "progress",
 					taskId: e.taskId,
-					token: t
+					token: t,
+					attemptId: n
 				});
-			}, { maxCpuLoad: this.config.maxCpuLoad });
+			}, {
+				maxCpuLoad: this.config.maxCpuLoad,
+				fileSourceOrigins: Z(this.config.fileSourceOrigins),
+				containerImageOrigins: Z(this.config.containerImageOrigins)
+			});
 			this.send({
 				type: "result",
 				taskId: e.taskId,
-				payload: r
-			}), C(`task result sent taskId=${e.taskId} workload=${e.workload} durationMs=${Math.round(performance.now() - t)}`);
+				payload: i,
+				attemptId: n
+			}), Y(`task result sent taskId=${e.taskId} workload=${e.workload} durationMs=${Math.round(performance.now() - t)}`);
 		} finally {
-			this.inflightTasks.delete(e.taskId);
+			this.inflightTasks.delete(e.taskId), this.attempts.delete(e.taskId);
 		}
 	}
 	setupVisibilityHandler() {
@@ -372,62 +904,66 @@ var d = () => {
 	removeVisibilityHandler() {
 		this.visibilityHandler &&= (document.removeEventListener("visibilitychange", this.visibilityHandler), null);
 	}
-}, O = "__flaxia_node_signal_client", k = "__flaxia_node_init_started", A = "__flaxia_node_controller", j = (e) => {
-	let t = window[O];
-	t && t.disconnect();
-	let n = new URL("./worker.js", "" + import.meta.url).href, r = new S(n), i = _(T);
-	i || (i = b(), v(T, i));
-	let a = new D(e, r, i);
-	window[O] = a, a.connect();
-}, M = class {
+}, Q = "__flaxia_node_signal_client", $ = "__flaxia_node_init_started", rt = "__flaxia_node_controller", it = (e) => {
+	if (H() !== "granted") {
+		X("refusing to start the node without a granted consent record");
+		return;
+	}
+	let t = window[Q];
+	t && t.disconnect(), K(tt);
+	let n = new URL("./worker.js", "" + import.meta.url).href, r = new $e(n), i = Ae(et);
+	i || (i = Ne(), je(et, i));
+	let a = new nt(e, r, i);
+	window[Q] = a, a.connect();
+}, at = class {
 	constructor(e) {
 		this.config = e;
 	}
 	start() {
-		this.isRunning() || j(this.config);
+		this.isRunning() || !ye() || it(this.config);
 	}
 	stop() {
-		let e = window[O];
-		e && e.disconnect(), delete window[O], delete window[k];
+		let e = window[Q];
+		e && e.disconnect(), delete window[Q], delete window[$];
 	}
 	isRunning() {
-		return !!window[O];
+		return !!window[Q];
 	}
 	getConsentState() {
-		return g();
+		return H();
 	}
 	grant() {
-		f();
+		W();
 	}
 	deny() {
-		m(), this.stop(), y(E);
+		G(), this.stop(), K(tt);
 	}
 	clearConsent() {
-		h(), this.stop(), y(E);
+		ke(), this.stop(), K(tt);
 	}
-}, N = (e) => {
-	let t = window[A];
+}, ot = (e) => {
+	let t = window[rt];
 	if (t) return t;
-	let r = new M(e);
-	window[A] = r, window[k] = !0;
-	let i = g();
-	if (i === "granted") return r.start(), r;
-	if (i === "denied") return r;
+	let n = new at(e);
+	window[rt] = n, window[$] = !0;
+	let r = H();
+	if (r === "granted") return n.start(), n;
+	if (r === "denied") return n;
 	if (e.consent.onConsentRequired) return e.consent.onConsentRequired({
-		state: i,
+		state: r,
 		accept: () => {
-			f(), r.start();
+			W(), n.start();
 		},
 		reject: () => {
-			m();
+			G();
 		}
-	}), r;
-	let a = document.createElement("div");
-	return a.id = "flaxia-consent-container", document.body.appendChild(a), new n(a, e.consent, () => {
-		f(), a.remove(), r.start();
+	}), n;
+	let i = document.createElement("div");
+	return i.id = "flaxia-consent-container", document.body.appendChild(i), new Qe(i, e.consent, () => {
+		W(), i.remove(), n.start();
 	}, () => {
-		m(), a.remove();
-	}), r;
+		G(), i.remove();
+	}), n;
 };
 //#endregion
-export { N as initFlaxiaNode };
+export { H as getFlaxiaNodeConsentState, ot as initFlaxiaNode, U as initFlaxiaNodeConsent, Oe as setFlaxiaNodeHostManagedConsent };