@forgecart/designer-runtime 1.0.0

package/dist/runtime/descriptor/element-descriptor-extractor.js

@@ -0,0 +1,190 @@
+import { SOURCE_ATTRIBUTE } from '../../protocol/protocol.constant.js';
+/** How many ancestors may answer for an unstamped element's source. */
+const SOURCE_ANCESTOR_HOPS = 3;
+/** Maximum DOM-path length before the middle is elided. */
+const DOM_PATH_DEPTH_CAP = 14;
+/** Leading segments kept when a DOM path is elided. */
+const DOM_PATH_HEAD_SEGMENTS = 6;
+/** Trailing segments kept when a DOM path is elided. */
+const DOM_PATH_TAIL_SEGMENTS = 7;
+/**
+ * Placeholder segment marking elided middle segments of a too-deep DOM
+ * path: `{ tag: '…', nthOfType: 0 }`. `nthOfType` 0 is unreachable for real
+ * segments (they are 1-based), so consumers can detect the elision.
+ */
+const DOM_PATH_ELISION_SEGMENT = { tag: '…', nthOfType: 0 };
+/** Maximum text length carried on a descriptor before truncation. */
+const TEXT_LENGTH_CAP = 120;
+/** Maximum number of classes carried on a descriptor. */
+const CLASS_LIST_CAP = 10;
+/** Attributes worth carrying across the wire for element identification. */
+const ATTRIBUTE_WHITELIST = [
+    'href',
+    'src',
+    'alt',
+    'type',
+    'name',
+    'placeholder',
+    'aria-label',
+    'data-testid',
+];
+/** Implicit ARIA roles for tags whose role does not depend on attributes. */
+const IMPLICIT_ROLES = new Map([
+    ['button', 'button'],
+    ['textarea', 'textbox'],
+    ['select', 'combobox'],
+    ['img', 'img'],
+    ['nav', 'navigation'],
+    ['main', 'main'],
+    ['header', 'banner'],
+    ['footer', 'contentinfo'],
+    ['h1', 'heading'],
+    ['h2', 'heading'],
+    ['h3', 'heading'],
+    ['h4', 'heading'],
+    ['h5', 'heading'],
+    ['h6', 'heading'],
+    ['ul', 'list'],
+    ['ol', 'list'],
+    ['li', 'listitem'],
+]);
+/**
+ * Projects a resolved DOM element into the wire {@link ElementDescriptor} —
+ * everything the host (and ultimately the AI agent) needs to identify the
+ * element in the storefront source tree without access to the live DOM.
+ */
+export class ElementDescriptorExtractor {
+    win;
+    constructor(win) {
+        this.win = win;
+    }
+    extract(element, refId, coverage) {
+        return {
+            refId,
+            tagName: element.tagName.toLowerCase(),
+            id: element.id.length > 0 ? element.id : null,
+            classList: Array.from(element.classList).slice(0, CLASS_LIST_CAP),
+            domPath: this.buildDomPath(element),
+            source: this.resolveSource(element),
+            text: this.extractText(element),
+            role: this.resolveRole(element),
+            attributes: this.collectAttributes(element),
+            bounds: this.toRect(element.getBoundingClientRect()),
+            coverage,
+            childCount: element.childElementCount,
+        };
+    }
+    /**
+     * Finds the nearest `data-fc-source` stamp on the element or up to three
+     * ancestors (components often render a stamped wrapper around unstamped
+     * children). The first stamp found is authoritative: a malformed stamp
+     * yields null instead of climbing further, which would misattribute the
+     * element to an outer component.
+     */
+    resolveSource(element) {
+        let current = element;
+        for (let hop = 0; hop <= SOURCE_ANCESTOR_HOPS && current !== null; hop++) {
+            const raw = current.getAttribute(SOURCE_ATTRIBUTE);
+            if (raw !== null)
+                return this.parseSource(raw);
+            current = current.parentElement;
+        }
+        return null;
+    }
+    /**
+     * Parses `<file>:<line>:<col>:<ComponentName>` by splitting from the
+     * right — the trailing three segments are component, column and line; the
+     * rest re-joins as the file path, so colon-bearing paths survive.
+     */
+    parseSource(raw) {
+        const parts = raw.split(':');
+        if (parts.length < 4)
+            return null;
+        const componentName = parts[parts.length - 1];
+        const column = this.parsePosition(parts[parts.length - 2]);
+        const line = this.parsePosition(parts[parts.length - 3]);
+        const file = parts.slice(0, parts.length - 3).join(':');
+        if (line === null || column === null || file.length === 0)
+            return null;
+        return {
+            file,
+            line,
+            column,
+            componentName: componentName.length > 0 ? componentName : null,
+        };
+    }
+    parsePosition(segment) {
+        if (!/^\d+$/.test(segment))
+            return null;
+        const value = Number(segment);
+        return Number.isSafeInteger(value) ? value : null;
+    }
+    /**
+     * Body-rooted `tag:nth-of-type` path. `nthOfType` counts same-tag element
+     * siblings, 1-based. Paths deeper than 14 segments keep the first 6 and
+     * last 7 with {@link DOM_PATH_ELISION_SEGMENT} marking the elided middle.
+     */
+    buildDomPath(element) {
+        const segments = [];
+        let current = element;
+        while (current !== null && current !== this.win.document.documentElement) {
+            segments.unshift({ tag: current.tagName.toLowerCase(), nthOfType: this.nthOfType(current) });
+            if (current === this.win.document.body)
+                break;
+            current = current.parentElement;
+        }
+        if (segments.length <= DOM_PATH_DEPTH_CAP)
+            return segments;
+        return [
+            ...segments.slice(0, DOM_PATH_HEAD_SEGMENTS),
+            DOM_PATH_ELISION_SEGMENT,
+            ...segments.slice(segments.length - DOM_PATH_TAIL_SEGMENTS),
+        ];
+    }
+    nthOfType(element) {
+        let index = 1;
+        let sibling = element.previousElementSibling;
+        while (sibling !== null) {
+            if (sibling.tagName === element.tagName)
+                index++;
+            sibling = sibling.previousElementSibling;
+        }
+        return index;
+    }
+    extractText(element) {
+        const collapsed = element.textContent.replace(/\s+/g, ' ').trim();
+        if (collapsed.length === 0)
+            return null;
+        if (collapsed.length <= TEXT_LENGTH_CAP)
+            return collapsed;
+        return `${collapsed.slice(0, TEXT_LENGTH_CAP)}…`;
+    }
+    resolveRole(element) {
+        const explicit = element.getAttribute('role');
+        if (explicit !== null && explicit.length > 0)
+            return explicit;
+        const tag = element.tagName.toLowerCase();
+        if (tag === 'a')
+            return element.hasAttribute('href') ? 'link' : null;
+        if (tag === 'input')
+            return this.inputRole(element);
+        return IMPLICIT_ROLES.get(tag) ?? null;
+    }
+    inputRole(element) {
+        const type = element.getAttribute('type');
+        return type === 'submit' || type === 'button' ? 'button' : 'textbox';
+    }
+    collectAttributes(element) {
+        const attributes = {};
+        for (const name of ATTRIBUTE_WHITELIST) {
+            const value = element.getAttribute(name);
+            if (value !== null)
+                attributes[name] = value;
+        }
+        return attributes;
+    }
+    toRect(rect) {
+        return { x: rect.x, y: rect.y, width: rect.width, height: rect.height };
+    }
+}
+//# sourceMappingURL=element-descriptor-extractor.js.map

package/dist/runtime/descriptor/element-descriptor-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"element-descriptor-extractor.js","sourceRoot":"","sources":["../../../src/runtime/descriptor/element-descriptor-extractor.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAEvE,uEAAuE;AACvE,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,2DAA2D;AAC3D,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,uDAAuD;AACvD,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,wDAAwD;AACxD,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC;;;;GAIG;AACH,MAAM,wBAAwB,GAAmB,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAE5E,qEAAqE;AACrE,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,yDAAyD;AACzD,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,4EAA4E;AAC5E,MAAM,mBAAmB,GAAsB;IAC7C,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,aAAa;IACb,YAAY;IACZ,aAAa;CACd,CAAC;AAEF,6EAA6E;AAC7E,MAAM,cAAc,GAAgC,IAAI,GAAG,CAAC;IAC1D,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,UAAU,EAAE,SAAS,CAAC;IACvB,CAAC,QAAQ,EAAE,UAAU,CAAC;IACtB,CAAC,KAAK,EAAE,KAAK,CAAC;IACd,CAAC,KAAK,EAAE,YAAY,CAAC;IACrB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,QAAQ,EAAE,aAAa,CAAC;IACzB,CAAC,IAAI,EAAE,SAAS,CAAC;IACjB,CAAC,IAAI,EAAE,SAAS,CAAC;IACjB,CAAC,IAAI,EAAE,SAAS,CAAC;IACjB,CAAC,IAAI,EAAE,SAAS,CAAC;IACjB,CAAC,IAAI,EAAE,SAAS,CAAC;IACjB,CAAC,IAAI,EAAE,SAAS,CAAC;IACjB,CAAC,IAAI,EAAE,MAAM,CAAC;IACd,CAAC,IAAI,EAAE,MAAM,CAAC;IACd,CAAC,IAAI,EAAE,UAAU,CAAC;CACnB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,OAAO,0BAA0B;IACR;IAA7B,YAA6B,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAE5C,OAAO,CAAC,OAAgB,EAAE,KAAa,EAAE,QAAgB;QACvD,OAAO;YACL,KAAK;YACL,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE;YACtC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;YAC7C,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC;YACjE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YACnC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YAC/B,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YAC3C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACpD,QAAQ;YACR,UAAU,EAAE,OAAO,CAAC,iBAAiB;SACtC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CAAC,OAAgB;QACpC,IAAI,OAAO,GAAmB,OAAO,CAAC;QACtC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,oBAAoB,IAAI,OAAO,KAAK,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;YACzE,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;YACnD,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC/C,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,WAAW,CAAC,GAAW;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,OAAO;YACL,IAAI;YACJ,IAAI;YACJ,MAAM;YACN,aAAa,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;SAC/D,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,OAAe;QACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,OAAgB;QACnC,MAAM,QAAQ,GAAqB,EAAE,CAAC;QACtC,IAAI,OAAO,GAAmB,OAAO,CAAC;QACtC,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7F,IAAI,OAAO,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;gBAAE,MAAM;YAC9C,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;QAClC,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,IAAI,kBAAkB;YAAE,OAAO,QAAQ,CAAC;QAC3D,OAAO;YACL,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;YAC5C,wBAAwB;YACxB,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,sBAAsB,CAAC;SAC5D,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,OAAgB;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC;QAC7C,OAAO,OAAO,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;gBAAE,KAAK,EAAE,CAAC;YACjD,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,WAAW,CAAC,OAAgB;QAClC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,SAAS,CAAC,MAAM,IAAI,eAAe;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC;IACnD,CAAC;IAEO,WAAW,CAAC,OAAgB;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;QAE9D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACzC,CAAC;IAEO,SAAS,CAAC,OAAgB;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;IAEO,iBAAiB,CAAC,OAAgB;QACxC,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,KAAK,IAAI;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC/C,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,IAAa;QAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1E,CAAC;CACF"}

package/dist/runtime/designer-runtime.d.ts

@@ -0,0 +1,85 @@
+import type { MessageCodec } from '../protocol/message-codec.js';
+import type { GuestMessenger } from './guest-messenger.js';
+import type { HandshakeGate } from './handshake-gate.js';
+import type { HighlightOverlay } from './highlight/highlight-overlay.js';
+import type { SprayRegionResolver } from './region/spray-region-resolver.js';
+/**
+ * The guest endpoint of the visual-editor wire protocol. Owns the runtime
+ * state machine and routes every inbound window message: foreign traffic is
+ * ignored silently, namespaced-but-malformed traffic from the trusted host
+ * is answered with INVALID_MESSAGE, and valid host messages dispatch to the
+ * region/highlight subsystems. Trust is never implicit — apart from HELLO
+ * (validated by the {@link HandshakeGate}), every message must come from the
+ * parent window at the pinned origin while the runtime is handshaken.
+ */
+export declare class DesignerRuntime {
+    private readonly win;
+    private readonly codec;
+    private readonly gate;
+    private readonly messenger;
+    private readonly resolver;
+    private readonly overlay;
+    private state;
+    private messageListener;
+    private armed;
+    private scrollFrame;
+    private resizeFrame;
+    constructor(win: Window, codec: MessageCodec, gate: HandshakeGate, messenger: GuestMessenger, resolver: SprayRegionResolver, overlay: HighlightOverlay);
+    /**
+     * Registers exactly one window `message` listener and posts the READY
+     * beacon so an already-listening host can start the handshake. Calling
+     * install on an installed runtime is a no-op.
+     */
+    install(): void;
+    /**
+     * Full idempotent teardown: emitters disarmed, overlay removed, ref
+     * stamps stripped, the message listener removed and the state machine
+     * reset to dormant.
+     */
+    dispose(): void;
+    /**
+     * Dispatch boundary. The runtime lives inside arbitrary tenant pages with
+     * no error transport of its own, so this is the one try/catch: a throw
+     * anywhere in dispatch becomes a protocol ERROR(INTERNAL) to the pinned
+     * host (a silent no-op pre-handshake) instead of an unhandled exception
+     * in the storefront's console.
+     */
+    private onMessage;
+    private routeMessage;
+    /**
+     * Namespaced traffic that failed validation is only answered when it
+     * provably came from the handshaken host — anything else stays silent so
+     * the runtime leaks nothing to arbitrary message senders.
+     */
+    private handleUnparseable;
+    private handleHello;
+    private dispatch;
+    private handleActivate;
+    private handleDeactivate;
+    private handlePing;
+    private handleRegionSelect;
+    /**
+     * Stale refs (elements unmounted since their REGION_SELECT) are skipped;
+     * only a request where every ref is stale is answered with UNKNOWN_REF —
+     * partial selections still highlight what is left.
+     */
+    private handleHighlightSet;
+    private handleElementBoundsQuery;
+    private armEmitters;
+    private disarmEmitters;
+    /** rAF throttle: at most one pending frame per emitter channel. */
+    private scheduleFrame;
+    private cancelFrames;
+    private emitScroll;
+    private emitResize;
+    private emitNavigated;
+    private postError;
+    private teardownActivation;
+    private stripRefStamps;
+    private findByRef;
+    private isTrustedHostEvent;
+    private extractRequestId;
+    private getViewport;
+    private getScroll;
+    private toRect;
+}

package/dist/runtime/designer-runtime.js

@@ -0,0 +1,321 @@
+import { REF_ATTRIBUTE, SOURCE_ATTRIBUTE } from '../protocol/protocol.constant.js';
+/**
+ * The guest endpoint of the visual-editor wire protocol. Owns the runtime
+ * state machine and routes every inbound window message: foreign traffic is
+ * ignored silently, namespaced-but-malformed traffic from the trusted host
+ * is answered with INVALID_MESSAGE, and valid host messages dispatch to the
+ * region/highlight subsystems. Trust is never implicit — apart from HELLO
+ * (validated by the {@link HandshakeGate}), every message must come from the
+ * parent window at the pinned origin while the runtime is handshaken.
+ */
+export class DesignerRuntime {
+    win;
+    codec;
+    gate;
+    messenger;
+    resolver;
+    overlay;
+    state = 'dormant';
+    messageListener = null;
+    armed = null;
+    scrollFrame = null;
+    resizeFrame = null;
+    constructor(win, codec, gate, messenger, resolver, overlay) {
+        this.win = win;
+        this.codec = codec;
+        this.gate = gate;
+        this.messenger = messenger;
+        this.resolver = resolver;
+        this.overlay = overlay;
+    }
+    /**
+     * Registers exactly one window `message` listener and posts the READY
+     * beacon so an already-listening host can start the handshake. Calling
+     * install on an installed runtime is a no-op.
+     */
+    install() {
+        if (this.messageListener !== null)
+            return;
+        this.messageListener = (event) => {
+            this.onMessage(event);
+        };
+        this.win.addEventListener('message', this.messageListener);
+        this.messenger.postReady();
+    }
+    /**
+     * Full idempotent teardown: emitters disarmed, overlay removed, ref
+     * stamps stripped, the message listener removed and the state machine
+     * reset to dormant.
+     */
+    dispose() {
+        this.teardownActivation();
+        if (this.messageListener !== null) {
+            this.win.removeEventListener('message', this.messageListener);
+            this.messageListener = null;
+        }
+        this.state = 'dormant';
+    }
+    /**
+     * Dispatch boundary. The runtime lives inside arbitrary tenant pages with
+     * no error transport of its own, so this is the one try/catch: a throw
+     * anywhere in dispatch becomes a protocol ERROR(INTERNAL) to the pinned
+     * host (a silent no-op pre-handshake) instead of an unhandled exception
+     * in the storefront's console.
+     */
+    onMessage(event) {
+        try {
+            this.routeMessage(event);
+        }
+        catch (error) {
+            this.messenger.post({
+                type: 'ERROR',
+                code: 'INTERNAL',
+                requestId: this.extractRequestId(event.data),
+                detail: error instanceof Error ? error.message : null,
+            });
+        }
+    }
+    routeMessage(event) {
+        const message = this.codec.parseHostMessage(event.data);
+        if (message === null) {
+            this.handleUnparseable(event);
+            return;
+        }
+        if (message.type === 'HELLO') {
+            this.handleHello(event, message);
+            return;
+        }
+        if (this.state === 'dormant' || !this.isTrustedHostEvent(event))
+            return;
+        this.dispatch(message);
+    }
+    /**
+     * Namespaced traffic that failed validation is only answered when it
+     * provably came from the handshaken host — anything else stays silent so
+     * the runtime leaks nothing to arbitrary message senders.
+     */
+    handleUnparseable(event) {
+        if (!this.codec.hasProtocolNamespace(event.data))
+            return;
+        if (this.state === 'dormant' || !this.isTrustedHostEvent(event))
+            return;
+        this.messenger.post({
+            type: 'ERROR',
+            code: 'INVALID_MESSAGE',
+            requestId: this.extractRequestId(event.data),
+            detail: 'message failed protocol validation',
+        });
+    }
+    handleHello(event, message) {
+        if (!this.gate.acceptHello(event, message))
+            return;
+        const pinned = this.gate.getPinnedOrigin();
+        if (pinned === null)
+            return;
+        this.messenger.pinOrigin(pinned);
+        if (this.state === 'dormant')
+            this.state = 'handshaken';
+        this.messenger.post({
+            type: 'HELLO_ACK',
+            capabilities: {
+                stamping: this.win.document.querySelector(`[${SOURCE_ATTRIBUTE}]`) !== null,
+                highlight: true,
+            },
+            url: this.win.location.href,
+            viewport: this.getViewport(),
+        });
+    }
+    dispatch(message) {
+        switch (message.type) {
+            case 'ACTIVATE':
+                this.handleActivate();
+                return;
+            case 'DEACTIVATE':
+                this.handleDeactivate();
+                return;
+            case 'PING':
+                this.handlePing();
+                return;
+            case 'REGION_SELECT':
+                this.handleRegionSelect(message);
+                return;
+            case 'HIGHLIGHT_SET':
+                this.handleHighlightSet(message);
+                return;
+            case 'HIGHLIGHT_CLEAR':
+                this.overlay.clear();
+                return;
+            case 'ELEMENT_BOUNDS_QUERY':
+                this.handleElementBoundsQuery(message);
+                return;
+        }
+    }
+    handleActivate() {
+        if (this.state !== 'active') {
+            this.armEmitters();
+            this.state = 'active';
+        }
+        this.messenger.post({ type: 'ACTIVATED' });
+    }
+    handleDeactivate() {
+        this.teardownActivation();
+        this.state = 'handshaken';
+        this.messenger.post({ type: 'DEACTIVATED' });
+    }
+    handlePing() {
+        this.messenger.post({
+            type: 'PONG',
+            url: this.win.location.href,
+            scroll: this.getScroll(),
+        });
+    }
+    handleRegionSelect(message) {
+        if (this.state !== 'active') {
+            this.postError('NOT_ACTIVE', message.requestId);
+            return;
+        }
+        const resolution = this.resolver.resolve(message.stroke, message.radius, message.maxElements);
+        if (resolution.kind === 'too-large') {
+            this.postError('REGION_TOO_LARGE', message.requestId);
+            return;
+        }
+        this.messenger.post({
+            type: 'REGION_RESOLVED',
+            requestId: message.requestId,
+            elements: resolution.elements,
+            regionBounds: resolution.regionBounds,
+            truncated: resolution.truncated,
+        });
+    }
+    /**
+     * Stale refs (elements unmounted since their REGION_SELECT) are skipped;
+     * only a request where every ref is stale is answered with UNKNOWN_REF —
+     * partial selections still highlight what is left.
+     */
+    handleHighlightSet(message) {
+        const found = [];
+        for (const refId of message.refIds) {
+            const element = this.findByRef(refId);
+            if (element !== null)
+                found.push(element);
+        }
+        if (found.length === 0 && message.refIds.length > 0) {
+            this.postError('UNKNOWN_REF', null);
+            return;
+        }
+        this.overlay.show(found);
+    }
+    handleElementBoundsQuery(message) {
+        const entries = message.refIds.map((refId) => {
+            const element = this.findByRef(refId);
+            return {
+                refId,
+                bounds: element === null ? null : this.toRect(element.getBoundingClientRect()),
+            };
+        });
+        this.messenger.post({ type: 'ELEMENT_BOUNDS', requestId: message.requestId, entries });
+    }
+    armEmitters() {
+        if (this.armed !== null)
+            return;
+        this.armed = {
+            scroll: () => {
+                this.scheduleFrame('scrollFrame', () => {
+                    this.emitScroll();
+                });
+            },
+            resize: () => {
+                this.scheduleFrame('resizeFrame', () => {
+                    this.emitResize();
+                });
+            },
+            popstate: () => {
+                this.emitNavigated();
+            },
+            hashchange: () => {
+                this.emitNavigated();
+            },
+        };
+        this.win.addEventListener('scroll', this.armed.scroll, { passive: true });
+        this.win.addEventListener('resize', this.armed.resize);
+        this.win.addEventListener('popstate', this.armed.popstate);
+        this.win.addEventListener('hashchange', this.armed.hashchange);
+    }
+    disarmEmitters() {
+        if (this.armed === null)
+            return;
+        this.win.removeEventListener('scroll', this.armed.scroll);
+        this.win.removeEventListener('resize', this.armed.resize);
+        this.win.removeEventListener('popstate', this.armed.popstate);
+        this.win.removeEventListener('hashchange', this.armed.hashchange);
+        this.armed = null;
+        this.cancelFrames();
+    }
+    /** rAF throttle: at most one pending frame per emitter channel. */
+    scheduleFrame(channel, emit) {
+        if (this[channel] !== null)
+            return;
+        this[channel] = this.win.requestAnimationFrame(() => {
+            this[channel] = null;
+            this.overlay.refresh();
+            emit();
+        });
+    }
+    cancelFrames() {
+        if (this.scrollFrame !== null) {
+            this.win.cancelAnimationFrame(this.scrollFrame);
+            this.scrollFrame = null;
+        }
+        if (this.resizeFrame !== null) {
+            this.win.cancelAnimationFrame(this.resizeFrame);
+            this.resizeFrame = null;
+        }
+    }
+    emitScroll() {
+        this.messenger.post({ type: 'SCROLL', scroll: this.getScroll() });
+    }
+    emitResize() {
+        this.messenger.post({ type: 'RESIZE', viewport: this.getViewport() });
+    }
+    emitNavigated() {
+        this.messenger.post({ type: 'NAVIGATED', url: this.win.location.href });
+    }
+    postError(code, requestId) {
+        this.messenger.post({ type: 'ERROR', code, requestId, detail: null });
+    }
+    teardownActivation() {
+        this.overlay.dispose();
+        this.stripRefStamps();
+        this.disarmEmitters();
+    }
+    stripRefStamps() {
+        for (const element of this.win.document.querySelectorAll(`[${REF_ATTRIBUTE}]`)) {
+            element.removeAttribute(REF_ATTRIBUTE);
+        }
+    }
+    findByRef(refId) {
+        const escaped = refId.replace(/[\\"]/g, '\\$&');
+        return this.win.document.querySelector(`[${REF_ATTRIBUTE}="${escaped}"]`);
+    }
+    isTrustedHostEvent(event) {
+        const pinned = this.gate.getPinnedOrigin();
+        return pinned !== null && event.origin === pinned && event.source === this.win.parent;
+    }
+    extractRequestId(data) {
+        if (typeof data !== 'object' || data === null)
+            return null;
+        if (!('requestId' in data))
+            return null;
+        return typeof data.requestId === 'string' ? data.requestId : null;
+    }
+    getViewport() {
+        return { width: this.win.innerWidth, height: this.win.innerHeight };
+    }
+    getScroll() {
+        return { x: this.win.scrollX, y: this.win.scrollY };
+    }
+    toRect(rect) {
+        return { x: rect.x, y: rect.y, width: rect.width, height: rect.height };
+    }
+}
+//# sourceMappingURL=designer-runtime.js.map

package/dist/runtime/designer-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"designer-runtime.js","sourceRoot":"","sources":["../../src/runtime/designer-runtime.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAyBnF;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAe;IAQP;IACA;IACA;IACA;IACA;IACA;IAZX,KAAK,GAAiB,SAAS,CAAC;IAChC,eAAe,GAA2C,IAAI,CAAC;IAC/D,KAAK,GAAyB,IAAI,CAAC;IACnC,WAAW,GAAkB,IAAI,CAAC;IAClC,WAAW,GAAkB,IAAI,CAAC;IAE1C,YACmB,GAAW,EACX,KAAmB,EACnB,IAAmB,EACnB,SAAyB,EACzB,QAA6B,EAC7B,OAAyB;QALzB,QAAG,GAAH,GAAG,CAAQ;QACX,UAAK,GAAL,KAAK,CAAc;QACnB,SAAI,GAAJ,IAAI,CAAe;QACnB,cAAS,GAAT,SAAS,CAAgB;QACzB,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,YAAO,GAAP,OAAO,CAAkB;IACzC,CAAC;IAEJ;;;;OAIG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI;YAAE,OAAO;QAC1C,IAAI,CAAC,eAAe,GAAG,CAAC,KAAmB,EAAQ,EAAE;YACnD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IAED;;;;;;OAMG;IACK,SAAS,CAAC,KAAmB;QACnC,IAAI,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC5C,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;aACtD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,KAAmB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;YAAE,OAAO;QACxE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CAAC,KAAmB;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO;QACzD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;YAAE,OAAO;QACxE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;YAC5C,MAAM,EAAE,oCAAoC;SAC7C,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,KAAmB,EAAE,OAAqB;QAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC;YAAE,OAAO;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO;QAC5B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;QACxD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,YAAY,EAAE;gBACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,gBAAgB,GAAG,CAAC,KAAK,IAAI;gBAC3E,SAAS,EAAE,IAAI;aAChB;YACD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;YAC3B,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,OAA2C;QAC1D,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,UAAU;gBACb,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,OAAO;YACT,KAAK,YAAY;gBACf,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACxB,OAAO;YACT,KAAK,MAAM;gBACT,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,OAAO;YACT,KAAK,eAAe;gBAClB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO;YACT,KAAK,eAAe;gBAClB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO;YACT,KAAK,iBAAiB;gBACpB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACrB,OAAO;YACT,KAAK,sBAAsB;gBACzB,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;gBACvC,OAAO;QACX,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;QAC1B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/C,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;YAC3B,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE;SACzB,CAAC,CAAC;IACL,CAAC;IAEO,kBAAkB,CAAC,OAA4B;QACrD,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9F,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,kBAAkB,CAAC,OAA4B;QACrD,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,OAAO,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAEO,wBAAwB,CAAC,OAAkC;QACjE,MAAM,OAAO,GAAyB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO;gBACL,KAAK;gBACL,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;aAC/E,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QAChC,IAAI,CAAC,KAAK,GAAG;YACX,MAAM,EAAE,GAAS,EAAE;gBACjB,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,GAAG,EAAE;oBACrC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,EAAE,GAAS,EAAE;gBACjB,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,GAAG,EAAE;oBACrC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,CAAC,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,EAAE,GAAS,EAAE;gBACnB,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,CAAC;YACD,UAAU,EAAE,GAAS,EAAE;gBACrB,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,CAAC;SACF,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QAChC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,mEAAmE;IAC3D,aAAa,CAAC,OAAsC,EAAE,IAAgB;QAC5E,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI;YAAE,OAAO;QACnC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,GAAS,EAAE;YACxD,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,SAAS,CAAC,IAAuD,EAAE,SAAwB;QACjG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAEO,kBAAkB;QACxB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAEO,cAAc;QACpB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YAC/E,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,KAAK,OAAO,IAAI,CAAC,CAAC;IAC5E,CAAC;IAEO,kBAAkB,CAAC,KAAmB;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,OAAO,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACxF,CAAC;IAEO,gBAAgB,CAAC,IAAa;QACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,CAAC;IAEO,WAAW;QACjB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IACtE,CAAC;IAEO,SAAS;QACf,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC;IAEO,MAAM,CAAC,IAAa;QAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1E,CAAC;CACF"}

package/dist/runtime/guest-messenger.d.ts

@@ -0,0 +1,37 @@
+import type { GuestMessage } from '../protocol/message.types.js';
+/**
+ * A {@link GuestMessage} without the protocol envelope — the messenger stamps
+ * `ns` + `v` on every send so no call site can forget (or fake) them.
+ */
+export type GuestMessageBody = {
+    [K in GuestMessage['type']]: Omit<Extract<GuestMessage, {
+        type: K;
+    }>, 'ns' | 'v'>;
+}[GuestMessage['type']];
+/**
+ * The guest's only postMessage exit. Every message except the boot READY
+ * beacon is posted with the origin pinned by the handshake — the browser
+ * drops the message if the embedding page navigated elsewhere, so guest data
+ * can never leak to a window that is no longer the dashboard.
+ */
+export declare class GuestMessenger {
+    private readonly targetWindow;
+    private pinnedOrigin;
+    constructor(targetWindow: Window);
+    /**
+     * The pre-handshake boot beacon — the single message ever posted with
+     * targetOrigin `'*'`. It carries zero payload beyond the envelope, so an
+     * arbitrary embedder learns nothing it could not infer from the public
+     * storefront template.
+     */
+    postReady(): void;
+    /** Pin the host origin after a validated HELLO; later pins must match. */
+    pinOrigin(origin: string): void;
+    getPinnedOrigin(): string | null;
+    /**
+     * Post a protocol message to the pinned host origin. Before the handshake
+     * pinned an origin this is a silent no-op — pre-handshake the guest says
+     * nothing but READY.
+     */
+    post(body: GuestMessageBody): void;
+}