@graview/guest 0.1.6 → 0.1.8

package/README.md

@@ -58,3 +58,89 @@ entries import nothing of the framework, so a guest bundle carries none of it.
 `edges` among them, `label`, `fidelity`, `cardinality`, `mode`, `selected`,
 `implicated`, `flagged` — and `acts`, the acts the viewer may run. A record
 the viewer may not see is in none of them.
+
+## In a worker
+
+Where a frame cannot be nested — a chat's widget, whose sandbox will not
+frame another origin — the same guest runs in a classic Web Worker the host
+starts from a `blob:` URL, and draws in the host's page from a component kit.
+
+```ts
+import { mountGuestWorker } from "@graview/guest/host/worker";
+
+const guest = mountGuestWorker(element, { worker: { script }, view: "recipe-card", store, principal,
+  onFailure: (reason) => showTheTierOneCard(reason) });   // refused, silent, or budget
+
+views.register("recipe", { fidelity: "full", cardinality: "one" },
+  guestView({ worker: { script }, name: "recipe-card" }));
+```
+
+`mountGuestWorker` starts the worker without `type: "module"`, which a
+`blob:` URL in an opaque origin cannot start, from the script's text or a
+URL it is given. It speaks the frame's protocol: one `guest-ready`, answered
+with a fresh nonce and a MessageChannel; the props as the viewer sees
+them; acts applied as the viewer, `via: "view:<name>"`, under the same
+limits. A second ready from the same worker is dropped. Once it is ready,
+the host sends a heartbeat over the port and the worker's runtime answers
+it; a worker that goes `limits.silentMs` (5 000 by default) without an
+answer — a guest spinning in `while (true)` — is terminated, and
+the host is told `silent`. A guest that is busy but yields is kept. What the guest draws
+comes over the port as Remote DOM mutation records, and the host draws only
+the kit (`GUEST_KIT`), with `createKitRenderer`. Both are
+`@graview/guest/host/worker`, apart from the frame's host, so a page that
+draws only frames loads none of it, and `guestView` fetches it only when it
+draws a worker.
+
+In the guest, `connectGuest` from `@graview/guest/worker` is the frame
+guest's API with a `root` to draw into:
+
+```ts
+import { connectGuest } from "@graview/guest/worker";
+
+const guest = connectGuest();
+guest.subscribe((props) => {
+  const card = document.createElement("gv-card");
+  const title = document.createElement("gv-title");
+  title.textContent = props.node?.label ?? "";
+  const cook = document.createElement("gv-button");
+  cook.textContent = "Cooked it";
+  cook.addEventListener("press", () => guest.act("mark-cooked", { recipeId: props.node!.id }));
+  card.append(title, cook);
+  guest.root.replaceChildren(card);
+});
+```
+
+The kit is one declaration for both sides: each component's host element,
+typed properties, events and children. The worker's remote elements are made
+from it, and the host draws from it alone. An element outside it, a property
+or event it does not declare, a value of another type, and a link that is
+not an absolute `https:` URL are not drawn, and `refused` says why. A link
+opens with `rel="noopener noreferrer"` and no referrer, in a new tab unless
+the kit says `target: "_self"`; a host that passes
+`links: { origins: ["https://recipes.example"] }` draws a link only to one
+of those origins, and any other with no `href`.
+
+Before the guest runs, the worker entry hardens the worker's global: every
+name outside `GUEST_GLOBALS` goes, from the global and every prototype on its
+chain — the network, storage, channels, nested workers, importScripts,
+`eval` and every function constructor — and what is left is frozen. A name
+that will not go stops the worker before any guest code runs. `hardening`
+says what was removed.
+
+Build the guest with `buildGuestBundle` from `@graview/guest/build` (Node,
+with esbuild installed): one strict classic script, the worker entry first
+and the guest after it, with nothing to load at run time.
+
+```ts
+import { buildGuestBundle } from "@graview/guest/build";
+
+const { script, sha256 } = await buildGuestBundle({ entry: "src/recipe-card.ts" });
+```
+
+A guest that writes `import()` or importScripts is refused at build, and
+`checkGuestBundle` says the same of a script built elsewhere. Hardening holds
+only for a bundle whose first module is the worker entry, so a host that
+runs guests it did not build checks them, or better, builds them itself.
+
+The worker entry carries Remote DOM (`@remote-dom/core` and its polyfill,
+MIT, pinned); the frame guest and the host do not.

package/dist/build.d.ts

@@ -0,0 +1,43 @@
+/**
+ * What every guest bundle starts with: strict mode for the whole script —
+ * so no frame of the runtime hands its `this` or itself to a stack trace's
+ * reader — and the licences of what it carries.
+ */
+export declare const GUEST_BUNDLE_BANNER = "\"use strict\";\n/*! @remote-dom/core and @remote-dom/polyfill \u2014 Copyright 2020-present, Shopify Inc. \u2014 MIT License.\n * Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:\n * The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n * @graview/guest's worker runtime \u2014 Elastic License 2.0. */";
+export interface BuildGuestOptions {
+    /** The guest's entry module, a path. It imports `connectGuest` from `@graview/guest/worker`. */
+    readonly entry: string;
+    /** Minify. True by default. */
+    readonly minify?: boolean;
+    /** Replace these names at build time, as esbuild's `define`. */
+    readonly define?: Readonly<Record<string, string>>;
+}
+export interface GuestBundle {
+    /** The script: hand it to `mountGuestWorker` as `{ script }`. */
+    readonly script: string;
+    /** Its length in bytes, as UTF-8. */
+    readonly bytes: number;
+    /** Its SHA-256, hex: what a host that serves bundles through a tool call can pin. */
+    readonly sha256: string;
+}
+/** Why a script is not a classic guest bundle. */
+export declare class GuestBundleError extends Error {
+    readonly findings: readonly string[];
+    constructor(findings: readonly string[]);
+}
+/**
+ * What in a script would keep it from being a classic guest bundle, read
+ * from the script with its comments taken out: anything that loads code at
+ * run time (`import()`, `importScripts`, `import.meta`), and module syntax.
+ * A string that merely says `import(` is refused too: a bundle is checked
+ * as text, and a guest has no need to say it.
+ */
+export declare function checkGuestBundle(script: string): Promise<readonly string[]>;
+/**
+ * BUILD A GUEST'S BUNDLE: the worker entry first, then the guest's entry,
+ * as one strict IIFE with nothing to load at run time. A dynamic `import()`
+ * the guest writes is refused rather than kept, and so is anything
+ * `checkGuestBundle` finds in the result.
+ */
+export declare function buildGuestBundle(options: BuildGuestOptions): Promise<GuestBundle>;
+//# sourceMappingURL=build.d.ts.map

package/dist/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AA0BA;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,mtCAAwC,CAAC;AAEzE,MAAM,WAAW,iBAAiB;IAChC,gGAAgG;IAChG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,WAAW;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,kDAAkD;AAClD,qBAAa,gBAAiB,SAAQ,KAAK;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE;gBAA3B,QAAQ,EAAE,SAAS,MAAM,EAAE;CAIjD;AAeD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAiBjF;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CA6BvF"}

package/dist/build.js

@@ -0,0 +1,117 @@
+/*
+ * A GUEST BUNDLE, BUILT AS ONE CLASSIC SCRIPT (FR-71): `@graview/guest/build`.
+ *
+ * A chat's widget runs in an opaque origin (Claude) or one every widget
+ * shares (ChatGPT), and Chromium refuses a module worker from a `blob:` URL
+ * in an opaque origin. So a worker guest is a classic script: one IIFE,
+ * strict, with nothing to fetch at run time — no `import`, no `import()`,
+ * no `importScripts` — and the worker entry first, so the runtime is
+ * hardened (FR-70) before a line of the guest runs.
+ *
+ * `buildGuestBundle` makes one with esbuild, which a project installs (an
+ * optional peer: a host that only mounts guests needs none of this), and
+ * `checkGuestBundle` says what in a script would keep it from being one.
+ * This entry is Node's: it is how a guest is built, not what runs.
+ */
+import { createHash } from "node:crypto";
+import { fileURLToPath } from "node:url";
+import { Script } from "node:vm";
+/** Remote DOM's licence, carried by every guest bundle, which carries Remote DOM. */
+const REMOTE_DOM_NOTICE = `/*! @remote-dom/core and @remote-dom/polyfill — Copyright 2020-present, Shopify Inc. — MIT License.
+ * Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+ * The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+ * @graview/guest's worker runtime — Elastic License 2.0. */`;
+/**
+ * What every guest bundle starts with: strict mode for the whole script —
+ * so no frame of the runtime hands its `this` or itself to a stack trace's
+ * reader — and the licences of what it carries.
+ */
+export const GUEST_BUNDLE_BANNER = `"use strict";\n${REMOTE_DOM_NOTICE}`;
+/** Why a script is not a classic guest bundle. */
+export class GuestBundleError extends Error {
+    findings;
+    constructor(findings) {
+        super(`Not a classic guest bundle: ${findings.join("; ")}.`);
+        this.findings = findings;
+        this.name = "GuestBundleError";
+    }
+}
+async function esbuild() {
+    try {
+        return (await import("esbuild"));
+    }
+    catch {
+        throw new Error("buildGuestBundle needs esbuild: add it to the project's devDependencies.");
+    }
+}
+/** The worker entry this build of the package ships, beside this module. */
+const RUNTIME = fileURLToPath(new URL("./worker/index.js", import.meta.url));
+/**
+ * What in a script would keep it from being a classic guest bundle, read
+ * from the script with its comments taken out: anything that loads code at
+ * run time (`import()`, `importScripts`, `import.meta`), and module syntax.
+ * A string that merely says `import(` is refused too: a bundle is checked
+ * as text, and a guest has no need to say it.
+ */
+export async function checkGuestBundle(script) {
+    const findings = [];
+    /* A classic script, as a worker without `type: "module"` will compile it: `import` and `export` statements, and `import.meta`, do not. */
+    try {
+        new Script(script);
+    }
+    catch (error) {
+        findings.push(`it is not a classic script: ${error.message.split("\n")[0]}`);
+        return findings;
+    }
+    const { transform } = await esbuild();
+    const code = (await transform(script, { loader: "js", minifyWhitespace: true, legalComments: "none" })).code;
+    if (/\bimport\s*\(/.test(code))
+        findings.push("it loads code at run time with import()");
+    /* What esbuild leaves of an import() or require() it could not resolve: a call that throws, and a guest that meant to load something. */
+    if (/Dynamic require of/.test(code))
+        findings.push("it loads code at run time with import() or require()");
+    if (/\bimportScripts\b/.test(code))
+        findings.push("it names importScripts");
+    if (!script.startsWith('"use strict";'))
+        findings.push('it does not start "use strict";');
+    return findings;
+}
+/**
+ * BUILD A GUEST'S BUNDLE: the worker entry first, then the guest's entry,
+ * as one strict IIFE with nothing to load at run time. A dynamic `import()`
+ * the guest writes is refused rather than kept, and so is anything
+ * `checkGuestBundle` finds in the result.
+ */
+export async function buildGuestBundle(options) {
+    const { build } = await esbuild();
+    const result = await build({
+        stdin: {
+            /* The runtime first: it is evaluated, and the worker hardened, before any module of the guest's. */
+            contents: `import ${JSON.stringify(RUNTIME)};\nimport ${JSON.stringify(options.entry)};\n`,
+            resolveDir: process.cwd(),
+            loader: "js",
+        },
+        bundle: true,
+        format: "iife",
+        platform: "browser",
+        target: "es2022",
+        minify: options.minify ?? true,
+        banner: { js: GUEST_BUNDLE_BANNER },
+        legalComments: "none",
+        /* The guest's own import of the worker entry is the runtime already in the bundle: one module, one connection. */
+        alias: { "@graview/guest/worker": RUNTIME },
+        /* esbuild rewrites an import() it cannot resolve; with none supported, it refuses one instead. */
+        supported: { "dynamic-import": false },
+        define: { "process.env.NODE_ENV": '"production"', ...options.define },
+        write: false,
+        logLevel: "silent",
+    });
+    const script = result.outputFiles[0].text;
+    const findings = await checkGuestBundle(script);
+    if (findings.length > 0)
+        throw new GuestBundleError(findings);
+    const bytes = Buffer.byteLength(script, "utf8");
+    return { script, bytes, sha256: createHash("sha256").update(script).digest("hex") };
+}
+//# sourceMappingURL=build.js.map

package/dist/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,qFAAqF;AACrF,MAAM,iBAAiB,GAAG;;;;6DAImC,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,iBAAiB,EAAE,CAAC;AAoBzE,kDAAkD;AAClD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACpB;IAArB,YAAqB,QAA2B;QAC9C,KAAK,CAAC,+BAA+B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAD1C,aAAQ,GAAR,QAAQ,CAAmB;QAE9C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAID,KAAK,UAAU,OAAO;IACpB,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAY,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc;IACnD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,0IAA0I;IAC1I,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC,+BAAgC,KAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7G,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzF,yIAAyI;IACzI,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAC3G,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC1F,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAA0B;IAC/D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;QACzB,KAAK,EAAE;YACL,oGAAoG;YACpG,QAAQ,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;YAC1F,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,IAAI;SACb;QACD,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;QAC9B,MAAM,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE;QACnC,aAAa,EAAE,MAAM;QACrB,kHAAkH;QAClH,KAAK,EAAE,EAAE,uBAAuB,EAAE,OAAO,EAAE;QAC3C,kGAAkG;QAClG,SAAS,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE;QACtC,MAAM,EAAE,EAAE,sBAAsB,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;QACrE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtF,CAAC"}

package/dist/channel.d.ts

@@ -0,0 +1,51 @@
+import { type GuestAnswer, type GuestEvent, type GuestProps, type GuestRequest } from "./protocol.js";
+/**
+ * A GUEST'S ONE CHANNEL to the host that started it. It can read what the
+ * host pushed and ask; it cannot reach the store, and an act it asks for
+ * is the viewer's to be refused.
+ */
+export interface Guest {
+    /** What the host last pushed, or undefined until the first push. */
+    readonly props: GuestProps | undefined;
+    /** Called with every push. Returns the unsubscribe. */
+    subscribe(listener: (props: GuestProps) => void): () => void;
+    /** Ask for an act by name. Resolves with the host's answer; never rejects for a refusal. */
+    act(name: string, args?: Readonly<Record<string, unknown>>): Promise<GuestAnswer>;
+    /** Ask the host to go to a record. A record the viewer may not see goes nowhere. */
+    navigate(to: string): void;
+    /** Ask for a height, in CSS pixels. */
+    size(height: number): void;
+    /** Ask for the height of an element whenever it changes. Returns the stop. In a worker, where nothing is laid out, it does nothing. */
+    autoSize(element?: Element): () => void;
+    close(): void;
+}
+/** A request before the nonce is put on it. */
+export type Unsent = GuestRequest extends infer R ? (R extends GuestRequest ? Omit<R, "nonce"> : never) : never;
+/**
+ * Where a guest's hello comes from, and where it says it is ready: the
+ * parent window for a frame, the worker's owner for a worker. Everything
+ * after the hello is the port's, and the same for both.
+ */
+export interface GuestLink {
+    /** Start hearing messages that might be the hello. Returns the stop. */
+    listen(heard: (event: MessageEvent) => void): () => void;
+    /** Whether a message came from where a hello may come from. */
+    fromHost(event: MessageEvent): boolean;
+    /** Say ready. */
+    ready(message: {
+        readonly graview: "guest-ready";
+        readonly protocol: number;
+    }): void;
+}
+/**
+ * The guest's half of the protocol, whatever it runs in: say ready, take
+ * the first hello from the host, and talk only over the port that came
+ * with it, every request carrying the hello's nonce.
+ */
+export declare function openGuest(link: GuestLink, hooks?: {
+    readonly onEvent?: (event: GuestEvent) => void;
+}): {
+    readonly guest: Guest;
+    send(request: Unsent): void;
+};
+//# sourceMappingURL=channel.d.ts.map

package/dist/channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,YAAY,EAElB,MAAM,eAAe,CAAC;AAEvB;;;;GAIG;AACH,MAAM,WAAW,KAAK;IACpB,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC;IACvC,uDAAuD;IACvD,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC7D,4FAA4F;IAC5F,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClF,oFAAoF;IACpF,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,uCAAuC;IACvC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,uIAAuI;IACvI,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI,CAAC;IACxC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,+CAA+C;AAC/C,MAAM,MAAM,MAAM,GAAG,YAAY,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,YAAY,GAAG,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;AAEhH;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,wEAAwE;IACxE,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACzD,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC;IACvC,iBAAiB;IACjB,KAAK,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACtF;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,GAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;CAAO,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAwFjK"}

package/dist/channel.js

@@ -0,0 +1,105 @@
+import { GUEST_PROTOCOL, isHostHello, } from "./protocol.js";
+/**
+ * The guest's half of the protocol, whatever it runs in: say ready, take
+ * the first hello from the host, and talk only over the port that came
+ * with it, every request carrying the hello's nonce.
+ */
+export function openGuest(link, hooks = {}) {
+    let port;
+    let nonce = "";
+    let props;
+    let next = 0;
+    const listeners = new Set();
+    const waiting = new Map();
+    const queued = [];
+    const send = (request) => {
+        if (!port)
+            queued.push(request);
+        else
+            port.postMessage({ ...request, nonce });
+    };
+    const fromHost = (event) => {
+        const message = event.data;
+        if (!message || typeof message !== "object")
+            return;
+        if (message.type === "props") {
+            props = message.props;
+            for (const listener of listeners)
+                listener(message.props);
+        }
+        else if (message.type === "answer") {
+            waiting.get(message.id)?.(message);
+            waiting.delete(message.id);
+        }
+        else if (message.type === "event" && typeof message.listener === "number") {
+            hooks.onEvent?.(message);
+        }
+        else if (message.type === "heartbeat" && typeof message.beat === "number") {
+            /* The runtime answers, so only a blocked event loop goes quiet. */
+            send({ type: "heartbeat", beat: message.beat });
+        }
+    };
+    let stop = () => { };
+    const hello = (event) => {
+        if (port)
+            return;
+        if (!link.fromHost(event))
+            return;
+        if (!isHostHello(event.data) || event.data.protocol !== GUEST_PROTOCOL)
+            return;
+        const given = event.ports[0];
+        if (!given)
+            return;
+        port = given;
+        nonce = event.data.nonce;
+        port.onmessage = fromHost;
+        port.start?.();
+        stop();
+        for (const request of queued.splice(0))
+            send(request);
+    };
+    stop = link.listen(hello);
+    link.ready({ graview: "guest-ready", protocol: GUEST_PROTOCOL });
+    let observer;
+    const guest = {
+        get props() {
+            return props;
+        },
+        subscribe(listener) {
+            listeners.add(listener);
+            return () => listeners.delete(listener);
+        },
+        act(name, args = {}) {
+            const id = (next += 1);
+            return new Promise((resolve) => {
+                waiting.set(id, resolve);
+                send({ type: "act", id, name, args });
+            });
+        },
+        navigate(to) {
+            send({ type: "navigate", to });
+        },
+        size(height) {
+            send({ type: "size", height });
+        },
+        autoSize(element) {
+            const target = element ?? globalThis.document?.documentElement;
+            const Observer = globalThis.ResizeObserver;
+            if (!target || !Observer || typeof target.getBoundingClientRect !== "function")
+                return () => { };
+            observer?.disconnect();
+            const watching = new Observer(() => guest.size(Math.ceil(target.getBoundingClientRect().height)));
+            watching.observe(target);
+            observer = watching;
+            return () => watching.disconnect();
+        },
+        close() {
+            observer?.disconnect();
+            stop();
+            port?.close();
+            listeners.clear();
+        },
+    };
+    return { guest, send };
+}
+//# sourceMappingURL=channel.js.map

package/dist/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,WAAW,GAMZ,MAAM,eAAe,CAAC;AAwCvB;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAe,EAAE,QAA4D,EAAE;IACvG,IAAI,IAA6B,CAAC;IAClC,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,KAA6B,CAAC;IAClC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkD,CAAC;IAC1E,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;QAC/B,IAAI,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;YAC3B,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,KAAmB,EAAE,EAAE;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAmB,CAAC;QAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO;QACpD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YACtB,KAAK,MAAM,QAAQ,IAAI,SAAS;gBAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC5E,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5E,mEAAmE;YACnE,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,KAAmB,EAAE,EAAE;QACpC,IAAI,IAAI;YAAE,OAAO;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QAClC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,cAAc;YAAE,OAAO;QAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,GAAG,KAAK,CAAC;QACb,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACf,IAAI,EAAE,CAAC;QACP,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC;IACF,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IAEjE,IAAI,QAA4C,CAAC;IACjD,MAAM,KAAK,GAAU;QACnB,IAAI,KAAK;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,SAAS,CAAC,QAAQ;YAChB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE;YACjB,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;YACvB,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;gBAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACzB,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,EAAE;YACT,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,MAAM;YACT,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,OAAO;YACd,MAAM,MAAM,GAAG,OAAO,IAAK,UAAsC,CAAC,QAAQ,EAAE,eAAe,CAAC;YAC5F,MAAM,QAAQ,GAAI,UAAyD,CAAC,cAAc,CAAC;YAC3F,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,qBAAqB,KAAK,UAAU;gBAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;YAChG,QAAQ,EAAE,UAAU,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAClG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzB,QAAQ,GAAG,QAAQ,CAAC;YACpB,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACrC,CAAC;QACD,KAAK;YACH,QAAQ,EAAE,UAAU,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,KAAK,EAAE,CAAC;YACd,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/guest.d.ts

@@ -1,4 +1,4 @@
-import { type GuestAnswer, type GuestProps } from "./protocol.js";
+import { type Guest } from "./channel.js";
 /** The window a guest runs in, as far as the SDK reads it. */
 interface GuestWindow {
     readonly parent: {
@@ -17,30 +17,10 @@ export interface ConnectGuestOptions {
     /** The window to connect from. The global one by default. */
     readonly window?: GuestWindow;
 }
-/**
- * A GUEST'S ONE CHANNEL to the page that framed it. It can read what the
- * host pushed and ask; it cannot reach the store, and an act it asks for
- * is the viewer's to be refused.
- */
-export interface Guest {
-    /** What the host last pushed, or undefined until the first push. */
-    readonly props: GuestProps | undefined;
-    /** Called with every push. Returns the unsubscribe. */
-    subscribe(listener: (props: GuestProps) => void): () => void;
-    /** Ask for an act by name. Resolves with the host's answer; never rejects for a refusal. */
-    act(name: string, args?: Readonly<Record<string, unknown>>): Promise<GuestAnswer>;
-    /** Ask the host to go to a record. A record the viewer may not see goes nowhere. */
-    navigate(to: string): void;
-    /** Ask for a height, in CSS pixels. */
-    size(height: number): void;
-    /** Ask for the height of an element whenever it changes. Returns the stop. */
-    autoSize(element?: Element): () => void;
-    close(): void;
-}
+export type { Guest };
 /**
  * Connect a guest view to its host: say it is ready, take the first hello
  * from the parent, and talk only over the port that came with it.
  */
 export declare function connectGuest(options?: ConnectGuestOptions): Guest;
-export {};
 //# sourceMappingURL=guest.d.ts.map

package/dist/guest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guest.d.ts","sourceRoot":"","sources":["../src/guest.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,UAAU,EAGhB,MAAM,eAAe,CAAC;AAEvB,8DAA8D;AAC9D,UAAU,WAAW;IACnB,QAAQ,CAAC,MAAM,EAAE;QAAE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACtF,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI,CAAC;IACjF,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI,CAAC;CACrF;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,KAAK;IACpB,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC;IACvC,uDAAuD;IACvD,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC7D,4FAA4F;IAC5F,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClF,oFAAoF;IACpF,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,uCAAuC;IACvC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI,CAAC;IACxC,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,KAAK,CAoFrE"}
+{"version":3,"file":"guest.d.ts","sourceRoot":"","sources":["../src/guest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,cAAc,CAAC;AAErD,8DAA8D;AAC9D,UAAU,WAAW;IACnB,QAAQ,CAAC,MAAM,EAAE;QAAE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACtF,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI,CAAC;IACjF,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI,CAAC;CACrF;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,YAAY,EAAE,KAAK,EAAE,CAAC;AAEtB;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,KAAK,CAUrE"}

package/dist/guest.js

@@ -1,98 +1,17 @@
-import { GUEST_PROTOCOL, isHostHello, } from "./protocol.js";
+import { openGuest } from "./channel.js";
 /**
  * Connect a guest view to its host: say it is ready, take the first hello
  * from the parent, and talk only over the port that came with it.
  */
 export function connectGuest(options = {}) {
     const at = options.window ?? globalThis;
-    let port;
-    let nonce = "";
-    let props;
-    let next = 0;
-    const listeners = new Set();
-    const waiting = new Map();
-    const queued = [];
-    const send = (request) => {
-        if (!port)
-            queued.push(request);
-        else
-            port.postMessage({ ...request, nonce });
-    };
-    const fromHost = (event) => {
-        const message = event.data;
-        if (!message || typeof message !== "object")
-            return;
-        if (message.type === "props") {
-            props = message.props;
-            for (const listener of listeners)
-                listener(message.props);
-        }
-        else if (message.type === "answer") {
-            waiting.get(message.id)?.(message);
-            waiting.delete(message.id);
-        }
-    };
-    const hello = (event) => {
-        if (port)
-            return;
-        if (event.source !== at.parent)
-            return;
-        if (options.hostOrigin !== undefined && event.origin !== options.hostOrigin)
-            return;
-        if (!isHostHello(event.data) || event.data.protocol !== GUEST_PROTOCOL)
-            return;
-        const given = event.ports[0];
-        if (!given)
-            return;
-        port = given;
-        nonce = event.data.nonce;
-        port.onmessage = fromHost;
-        port.start?.();
-        at.removeEventListener("message", hello);
-        for (const request of queued.splice(0))
-            send(request);
-    };
-    at.addEventListener("message", hello);
-    at.parent?.postMessage({ graview: "guest-ready", protocol: GUEST_PROTOCOL }, "*");
-    let observer;
-    return {
-        get props() {
-            return props;
+    return openGuest({
+        listen(heard) {
+            at.addEventListener("message", heard);
+            return () => at.removeEventListener("message", heard);
         },
-        subscribe(listener) {
-            listeners.add(listener);
-            return () => listeners.delete(listener);
-        },
-        act(name, args = {}) {
-            const id = (next += 1);
-            return new Promise((resolve) => {
-                waiting.set(id, resolve);
-                send({ type: "act", id, name, args });
-            });
-        },
-        navigate(to) {
-            send({ type: "navigate", to });
-        },
-        size(height) {
-            send({ type: "size", height });
-        },
-        autoSize(element) {
-            const target = element ?? globalThis.document?.documentElement;
-            const Observer = globalThis.ResizeObserver;
-            if (!target || !Observer)
-                return () => { };
-            observer?.disconnect();
-            const watching = new Observer(() => this.size(Math.ceil(target.getBoundingClientRect().height)));
-            watching.observe(target);
-            observer = watching;
-            return () => watching.disconnect();
-        },
-        close() {
-            observer?.disconnect();
-            at.removeEventListener("message", hello);
-            port?.close();
-            listeners.clear();
-        },
-    };
+        fromHost: (event) => event.source === at.parent && (options.hostOrigin === undefined || event.origin === options.hostOrigin),
+        ready: (message) => at.parent?.postMessage(message, "*"),
+    }).guest;
 }
 //# sourceMappingURL=guest.js.map

package/dist/guest.js.map

@@ -1 +1 @@
-{"version":3,"file":"guest.js","sourceRoot":"","sources":["../src/guest.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,WAAW,GAKZ,MAAM,eAAe,CAAC;AAyCvB;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,UAA+B,EAAE;IAC5D,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,IAAK,UAAqC,CAAC;IACpE,IAAI,IAA6B,CAAC;IAClC,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,KAA6B,CAAC;IAClC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkD,CAAC;IAE1E,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;QAC/B,IAAI,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;YAC3B,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,KAAmB,EAAE,EAAE;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAmB,CAAC;QAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO;QACpD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YACtB,KAAK,MAAM,QAAQ,IAAI,SAAS;gBAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,KAAmB,EAAE,EAAE;QACpC,IAAI,IAAI;YAAE,OAAO;QACjB,IAAI,KAAK,CAAC,MAAM,KAAM,EAAE,CAAC,MAAkB;YAAE,OAAO;QACpD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU;YAAE,OAAO;QACpF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,cAAc;YAAE,OAAO;QAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,GAAG,KAAK,CAAC;QACb,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACf,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC;IACF,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACtC,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAElF,IAAI,QAA4C,CAAC;IACjD,OAAO;QACL,IAAI,KAAK;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,SAAS,CAAC,QAAQ;YAChB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE;YACjB,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;YACvB,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;gBAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACzB,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,EAAE;YACT,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,MAAM;YACT,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,OAAO;YACd,MAAM,MAAM,GAAG,OAAO,IAAK,UAAsC,CAAC,QAAQ,EAAE,eAAe,CAAC;YAC5F,MAAM,QAAQ,GAAI,UAAyD,CAAC,cAAc,CAAC;YAC3F,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;gBAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1C,QAAQ,EAAE,UAAU,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzB,QAAQ,GAAG,QAAQ,CAAC;YACpB,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACrC,CAAC;QACD,KAAK;YACH,QAAQ,EAAE,UAAU,EAAE,CAAC;YACvB,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,EAAE,KAAK,EAAE,CAAC;YACd,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"guest.js","sourceRoot":"","sources":["../src/guest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAc,MAAM,cAAc,CAAC;AAsBrD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,UAA+B,EAAE;IAC5D,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,IAAK,UAAqC,CAAC;IACpE,OAAO,SAAS,CAAC;QACf,MAAM,CAAC,KAAK;YACV,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACtC,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAM,EAAE,CAAC,MAAkB,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC;QACzI,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC;KACzD,CAAC,CAAC,KAAK,CAAC;AACX,CAAC"}

package/dist/host/frame.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frame.d.ts","sourceRoot":"","sources":["../../src/host/frame.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEjE,OAAO,EAAuD,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAE3I,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,SAAS;IACxD,6FAA6F;IAC7F,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,iGAAiG;IACjG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,cAAc,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,0CAA0C;IAC1C,MAAM,IAAI,IAAI,CAAC;IACf,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,OAAO,IAAI,IAAI,CAAC;CACjB;AASD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,UAAU,CAgGvH"}
+{"version":3,"file":"frame.d.ts","sourceRoot":"","sources":["../../src/host/frame.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAGjE,OAAO,EAAuD,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAE3I,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,SAAS;IACxD,6FAA6F;IAC7F,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,iGAAiG;IACjG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,cAAc,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,0CAA0C;IAC1C,MAAM,IAAI,IAAI,CAAC;IACf,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,UAAU,CAgGvH"}

package/dist/host/frame.js

@@ -1,11 +1,6 @@
 import { GUEST_PROTOCOL, GUEST_SANDBOX, OPAQUE_ORIGIN, isGuestReady } from "../protocol.js";
+import { mintNonce } from "./nonce.js";
 import { createGuestHost, createGuestLimiter } from "./session.js";
-/** A nonce no other frame and no other load of this one shares. */
-function mintNonce() {
-    const bytes = new Uint8Array(16);
-    globalThis.crypto.getRandomValues(bytes);
-    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
-}
 /**
  * MOUNT A GUEST VIEW: an iframe sandboxed to scripts alone, so its origin
  * is opaque and nothing of the host's is reachable from it, and one