@graview/guest 0.1.6 → 0.1.8

package/dist/kit.js

@@ -0,0 +1,69 @@
+/**
+ * THE COMPONENT KIT A WORKER GUEST DRAWS WITH (FR-69), declared once.
+ *
+ * A guest in a worker has no DOM of its own: it builds a tree of these
+ * elements with Remote DOM, and the host draws it in its own document. The
+ * kit is Tier 1's closed set of blocks (FR-03: title, text, badge, field,
+ * progress, group, divider), plus the few a view that asks for acts needs —
+ * a card to hold them, a button, an input, and a link.
+ *
+ * Each component says, once, its typed properties and its events. The
+ * worker side defines one `RemoteElement` per component from it
+ * (worker/elements.ts), and the host side draws from it (host/kit.ts): only
+ * a component in the kit, only a property or event it declares, only a
+ * value of the declared type, and a `url` only when it is `https:`. Adding
+ * a property here makes it a property on both sides; nothing else changes.
+ *
+ * This module has no imports: a guest bundle carries it and nothing of the
+ * framework.
+ */
+/** The tones a block may take: FR-03's own (`VIEW_TONES` in @graview/core/document, held to it by a test). */
+export const KIT_TONES = ["good", "warn", "bad", "neutral", "accent"];
+/**
+ * The host attributes a property may be drawn as, besides the default
+ * `data-gv-<name>`. A closed list: never an event handler, a style, a
+ * source or a frame.
+ */
+export const KIT_HOST_ATTRIBUTES = ["value", "max", "aria-label", "placeholder", "disabled"];
+/** The DOM events a kit event may come from, on the element the host drew. */
+export const KIT_HOST_EVENTS = ["click", "change"];
+/**
+ * Where a link may open. A new tab (`_blank`) unless the kit says
+ * otherwise; never `_top` or `_parent`, which would take the host's page.
+ */
+export const KIT_LINK_TARGETS = ["_blank", "_self"];
+/** The host elements a component may be drawn as. */
+export const KIT_HOST_TAGS = ["section", "div", "span", "strong", "p", "hr", "a", "button", "input", "progress"];
+const tone = { type: { oneOf: KIT_TONES } };
+/** The kit, by element name. Every name starts `gv-`. */
+export const GUEST_KIT = {
+    "gv-card": { host: "section", properties: { tone }, events: {}, children: "any" },
+    "gv-group": { host: "div", properties: { direction: { type: { oneOf: ["row", "column"] } } }, events: {}, children: "any" },
+    "gv-title": { host: "strong", properties: {}, events: {}, children: "text" },
+    "gv-text": { host: "p", properties: { tone }, events: {}, children: "text" },
+    "gv-badge": { host: "span", properties: { tone }, events: {}, children: "text" },
+    "gv-field": { host: "div", properties: { label: { type: "string" } }, events: {}, children: "text" },
+    "gv-progress": {
+        host: "progress",
+        properties: { value: { type: "number", as: "value" }, max: { type: "number", as: "max" }, label: { type: "string", as: "aria-label" } },
+        events: {},
+        children: "none",
+    },
+    "gv-divider": { host: "hr", properties: {}, events: {}, children: "none" },
+    "gv-link": { host: "a", properties: { href: { type: "url" } }, events: {}, children: "text" },
+    "gv-button": {
+        host: "button",
+        properties: { tone, disabled: { type: "boolean", as: "disabled" } },
+        events: { press: { from: "click" } },
+        children: "text",
+    },
+    "gv-input": {
+        host: "input",
+        properties: { label: { type: "string", as: "aria-label" }, value: { type: "string", as: "value" }, placeholder: { type: "string", as: "placeholder" } },
+        events: { change: { from: "change", detail: "value" } },
+        children: "none",
+    },
+};
+/** The longest text a kit node may hold, in characters; longer is cut. */
+export const KIT_MAX_TEXT = 10_000;
+//# sourceMappingURL=kit.js.map

package/dist/kit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kit.js","sourceRoot":"","sources":["../src/kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,8GAA8G;AAC9G,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAU/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,CAAU,CAAC;AAStG,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAS5D;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;AAE7D,qDAAqD;AACrD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAU,CAAC;AAe1H,MAAM,IAAI,GAAgB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;AAEzD,yDAAyD;AACzD,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjF,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC3H,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC5E,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC5E,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;IAChF,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;IACpG,aAAa,EAAE;QACb,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE;QACvI,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,MAAM;KACjB;IACD,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1E,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC7F,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE;QACnE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACpC,QAAQ,EAAE,MAAM;KACjB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE;QACvJ,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QACvD,QAAQ,EAAE,MAAM;KACjB;CACqB,CAAC;AAIzB,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC"}

package/dist/protocol.d.ts

@@ -15,6 +15,26 @@
  *   guest → host     { type: "size", nonce, height }                 (over the port: the height it wants)
  *   host  → guest    { type: "answer", id, ok, … }                   (over the port: what became of an act)
  *
+ * A GUEST IN A WORKER (FR-68) says the same things. Its `guest-ready` goes
+ * to the worker's owner (`self.postMessage`), which is the host by
+ * construction, and the hello comes back the same way with the port. A
+ * worker has no DOM of its own to draw in, so it draws in the host's, from
+ * the component kit alone (kit.ts):
+ *
+ *   guest → host     { type: "render", nonce, records }              (over the port: Remote DOM mutation records)
+ *   host  → guest    { type: "event", listener, detail }             (over the port: a kit event the viewer raised)
+ *
+ * A frame guest never sends `render`; a host that is not drawing a worker
+ * drops it unread.
+ *
+ * A worker's host also watches that the worker is alive. Its runtime — not
+ * the guest's code, which can stop it only by blocking its own event loop —
+ * answers each heartbeat with the beat it was asked, and a worker that goes
+ * `limits.silentMs` without an answer is stopped:
+ *
+ *   host  → guest    { type: "heartbeat", beat }                     (over the port, on an interval)
+ *   guest → host     { type: "heartbeat", nonce, beat }              (over the port: the runtime's answer)
+ *
  * The host answers a `guest-ready` only from its own frame's window and
  * only from the opaque origin, and every request over the port carries the
  * nonce of that hello. What the guest is pushed is the store as the viewer
@@ -112,10 +132,25 @@ export interface HostHello {
     readonly nonce: string;
     readonly view: string;
 }
+/**
+ * A kit event the viewer raised on something a worker guest drew: which of
+ * the guest's listeners to call, and the one plain value the kit declares
+ * for it (an input's text), if any.
+ */
+export interface GuestEvent {
+    readonly type: "event";
+    readonly listener: number;
+    readonly detail?: string | number | boolean | null;
+}
+/** The host asking a worker guest's runtime whether it is still answering. */
+export interface HostHeartbeat {
+    readonly type: "heartbeat";
+    readonly beat: number;
+}
 export type HostMessage = {
     readonly type: "props";
     readonly props: GuestProps;
-} | GuestAnswer;
+} | GuestAnswer | GuestEvent | HostHeartbeat;
 export type GuestRequest = {
     readonly type: "act";
     readonly nonce: string;
@@ -130,6 +165,18 @@ export type GuestRequest = {
     readonly type: "size";
     readonly nonce: string;
     readonly height: number;
+}
+/** A worker guest's drawing: Remote DOM mutation records, with each listener sent as `{ listener: id }`. */
+ | {
+    readonly type: "render";
+    readonly nonce: string;
+    readonly records: readonly unknown[];
+}
+/** The runtime's answer to a heartbeat, with the beat it was asked. */
+ | {
+    readonly type: "heartbeat";
+    readonly nonce: string;
+    readonly beat: number;
 };
 /** Whether a window message is a guest saying it is ready. */
 export declare function isGuestReady(data: unknown): data is GuestReady;

package/dist/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,gFAAgF;AAChF,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC,gFAAgF;AAChF,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C,2EAA2E;AAC3E,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,qFAAqF;AACrF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CACnC;AAED,0DAA0D;AAC1D,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,uEAAuE;AACvE,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACtF;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,sCAAsC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACtC,yCAAyC;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,YAAY,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,CAAC;CACpC;AAED,6DAA6D;AAC7D,MAAM,MAAM,YAAY;AACtB,0FAA0F;AACxF,SAAS;AACX,yDAAyD;GACvD,cAAc;AAChB,2BAA2B;GACzB,aAAa;AACf,kDAAkD;GAChD,WAAW;AACb,iFAAiF;GAC/E,QAAQ,CAAC;AAEb,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3I,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG,WAAW,CAAC;AAE/F,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,GACvJ;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,UAAU,CAE9D;AAED,oDAAoD;AACpD,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,SAAS,CAG5D"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,gFAAgF;AAChF,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC,gFAAgF;AAChF,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C,2EAA2E;AAC3E,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,qFAAqF;AACrF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CACnC;AAED,0DAA0D;AAC1D,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,uEAAuE;AACvE,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACtF;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,sCAAsC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACtC,yCAAyC;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,YAAY,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,CAAC;CACpC;AAED,6DAA6D;AAC7D,MAAM,MAAM,YAAY;AACtB,0FAA0F;AACxF,SAAS;AACX,yDAAyD;GACvD,cAAc;AAChB,2BAA2B;GACzB,aAAa;AACf,kDAAkD;GAChD,WAAW;AACb,iFAAiF;GAC/E,QAAQ,CAAC;AAEb,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3I,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;CACpD;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;AAE5H,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,GACvJ;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC5E,4GAA4G;GAC1G;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE;AAC3F,uEAAuE;GACrE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAElF,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,UAAU,CAE9D;AAED,oDAAoD;AACpD,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,SAAS,CAG5D"}

package/dist/protocol.js

@@ -15,6 +15,26 @@
  *   guest → host     { type: "size", nonce, height }                 (over the port: the height it wants)
  *   host  → guest    { type: "answer", id, ok, … }                   (over the port: what became of an act)
  *
+ * A GUEST IN A WORKER (FR-68) says the same things. Its `guest-ready` goes
+ * to the worker's owner (`self.postMessage`), which is the host by
+ * construction, and the hello comes back the same way with the port. A
+ * worker has no DOM of its own to draw in, so it draws in the host's, from
+ * the component kit alone (kit.ts):
+ *
+ *   guest → host     { type: "render", nonce, records }              (over the port: Remote DOM mutation records)
+ *   host  → guest    { type: "event", listener, detail }             (over the port: a kit event the viewer raised)
+ *
+ * A frame guest never sends `render`; a host that is not drawing a worker
+ * drops it unread.
+ *
+ * A worker's host also watches that the worker is alive. Its runtime — not
+ * the guest's code, which can stop it only by blocking its own event loop —
+ * answers each heartbeat with the beat it was asked, and a worker that goes
+ * `limits.silentMs` without an answer is stopped:
+ *
+ *   host  → guest    { type: "heartbeat", beat }                     (over the port, on an interval)
+ *   guest → host     { type: "heartbeat", nonce, beat }              (over the port: the runtime's answer)
+ *
  * The host answers a `guest-ready` only from its own frame's window and
  * only from the opaque origin, and every request over the port carries the
  * nonce of that hello. What the guest is pushed is the store as the viewer

package/dist/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEhC,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAE7C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAuFpC,8DAA8D;AAC9D,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAK,IAAmB,CAAC,OAAO,KAAK,aAAa,CAAC;AACrG,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,MAAM,KAAK,GAAG,IAAiB,CAAC;IAChC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;AACxH,CAAC"}
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEhC,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAE7C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AA4GpC,8DAA8D;AAC9D,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAK,IAAmB,CAAC,OAAO,KAAK,aAAa,CAAC;AACrG,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,MAAM,KAAK,GAAG,IAAiB,CAAC;IAChC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;AACxH,CAAC"}

package/dist/worker/elements.d.ts

@@ -0,0 +1,11 @@
+import type { Kit, KitComponent } from "../kit.js";
+/**
+ * ONE COMPONENT OF THE KIT, AS A REMOTE ELEMENT: its declared properties
+ * (each also settable as an attribute of the same name) and its declared
+ * events, and nothing else. What it says goes to the host as mutation
+ * records, and the host draws only what the same declaration allows.
+ */
+export declare function kitElement(component: KitComponent): CustomElementConstructor;
+/** Define every component of a kit in a registry, by its element name. */
+export declare function defineKit(kit: Kit, registry?: CustomElementRegistry): void;
+//# sourceMappingURL=elements.d.ts.map

package/dist/worker/elements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elements.d.ts","sourceRoot":"","sources":["../../src/worker/elements.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAmB,MAAM,WAAW,CAAC;AAKpE;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,YAAY,GAAG,wBAAwB,CAU5E;AAED,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,GAAE,qBAAsC,GAAG,IAAI,CAI1F"}

package/dist/worker/elements.js

@@ -0,0 +1,28 @@
+import { RemoteElement } from "@remote-dom/core/elements";
+/** The Remote DOM type a kit property is kept as on the worker's side. */
+const remoteType = (type) => (type === "number" ? Number : type === "boolean" ? Boolean : String);
+/**
+ * ONE COMPONENT OF THE KIT, AS A REMOTE ELEMENT: its declared properties
+ * (each also settable as an attribute of the same name) and its declared
+ * events, and nothing else. What it says goes to the host as mutation
+ * records, and the host draws only what the same declaration allows.
+ */
+export function kitElement(component) {
+    const properties = Object.fromEntries(Object.entries(component.properties).map(([name, property]) => [name, { type: remoteType(property.type), attribute: true }]));
+    const events = Object.keys(component.events);
+    class KitElement extends RemoteElement {
+        /* A kit element is never slotted: the host has no slots to put it in. */
+        static slottable = false;
+        static remoteProperties = properties;
+        static remoteEvents = events;
+    }
+    return KitElement;
+}
+/** Define every component of a kit in a registry, by its element name. */
+export function defineKit(kit, registry = customElements) {
+    for (const [name, component] of Object.entries(kit)) {
+        if (!registry.get(name))
+            registry.define(name, kitElement(component));
+    }
+}
+//# sourceMappingURL=elements.js.map

package/dist/worker/elements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elements.js","sourceRoot":"","sources":["../../src/worker/elements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAG1D,0EAA0E;AAC1E,MAAM,UAAU,GAAG,CAAC,IAAqB,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnH;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,SAAuB;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpK,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,UAAW,SAAQ,aAAa;QACpC,yEAAyE;QACzE,MAAM,CAAmB,SAAS,GAAG,KAAc,CAAC;QACpD,MAAM,CAAmB,gBAAgB,GAAG,UAAU,CAAC;QACvD,MAAM,CAAmB,YAAY,GAAG,MAAM,CAAC;;IAEjD,OAAO,UAAiD,CAAC;AAC3D,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,GAAQ,EAAE,WAAkC,cAAc;IAClF,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;AACH,CAAC"}

package/dist/worker/harden.d.ts

@@ -0,0 +1,39 @@
+/** The language's own globals: ECMAScript, ES2025 and the proposals engines already ship. */
+export declare const LANGUAGE: readonly ["globalThis", "Infinity", "NaN", "undefined", "isFinite", "isNaN", "parseFloat", "parseInt", "decodeURI", "decodeURIComponent", "encodeURI", "encodeURIComponent", "escape", "unescape", "Object", "Function", "Array", "Number", "Boolean", "String", "Symbol", "BigInt", "Date", "Promise", "RegExp", "Math", "JSON", "Reflect", "Proxy", "Intl", "Error", "AggregateError", "EvalError", "RangeError", "ReferenceError", "SyntaxError", "TypeError", "URIError", "SuppressedError", "Map", "Set", "WeakMap", "WeakSet", "WeakRef", "FinalizationRegistry", "Iterator", "AsyncIterator", "DisposableStack", "AsyncDisposableStack", "ArrayBuffer", "SharedArrayBuffer", "DataView", "Atomics", "Int8Array", "Uint8Array", "Uint8ClampedArray", "Int16Array", "Uint16Array", "Int32Array", "Uint32Array", "Float16Array", "Float32Array", "Float64Array", "BigInt64Array", "BigUint64Array"];
+/** What Remote DOM's polyfill puts on the global: a document to build in, and the classes of what it builds. */
+export declare const POLYFILLED_DOM: readonly ["window", "parent", "top", "document", "customElements", "Event", "ErrorEvent", "PromiseRejectionEvent", "ToggleEvent", "FocusEvent", "ClipboardEvent", "CustomEvent", "EventTarget", "Node", "ParentNode", "ChildNode", "DocumentFragment", "Document", "CharacterData", "Comment", "Text", "Element", "HTMLElement", "SVGElement", "HTMLTemplateElement", "MutationObserver"];
+/** The platform's few that stay (see the top of this module for why each). */
+export declare const PLATFORM: readonly ["self", "postMessage", "setTimeout", "clearTimeout", "setInterval", "clearInterval", "queueMicrotask", "structuredClone", "crypto", "console", "DOMException"];
+/**
+ * Numbers an engine will not let go: Chromium's worker global defines
+ * `TEMPORARY` (0) and `PERSISTENT` (1), the constants of the FileSystem API
+ * it no longer ships, as non-configurable. They are numbers and hand back
+ * nothing, so they may stay — only while they are numbers; anything else
+ * by these names is removed or stops the worker.
+ */
+export declare const INERT: readonly ["TEMPORARY", "PERSISTENT"];
+/**
+ * EVERY NAME A GUEST'S WORKER GLOBAL MAY HAVE, on the global or any
+ * prototype on its chain before `Object.prototype` (where a prototype's
+ * `constructor` and `Symbol.toStringTag` stay too). Anything else is
+ * removed before the guest runs.
+ */
+export declare const GUEST_GLOBALS: readonly string[];
+/** What `Object.prototype` holds in every engine; it is the language's, and the walk does not touch it. */
+export declare const OBJECT_PROTOTYPE: readonly string[];
+/** What hardening did: every name it took, and any it could not. */
+export interface Hardening {
+    readonly removed: readonly string[];
+    /** Names outside the allowlist that could not be removed. Empty, or the worker is not hardened. */
+    readonly stuck: readonly string[];
+    /** Whether the global takes no new names. Where the engine refuses, a guest can add its own, which reach nothing removed. */
+    readonly sealed: boolean;
+    /** False when the runtime is not in a worker, and so hardened nothing. */
+    readonly worker?: false;
+}
+/**
+ * HARDEN A WORKER'S GLOBAL before guest code runs. Called once by the
+ * worker entry, after Remote DOM's polyfill and the kit are in place.
+ */
+export declare function harden(scope?: typeof globalThis): Hardening;
+//# sourceMappingURL=harden.d.ts.map

package/dist/worker/harden.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harden.d.ts","sourceRoot":"","sources":["../../src/worker/harden.ts"],"names":[],"mappings":"AA0CA,6FAA6F;AAC7F,eAAO,MAAM,QAAQ,y2BAQX,CAAC;AAEX,gHAAgH;AAChH,eAAO,MAAM,cAAc,2XAIjB,CAAC;AAEX,8EAA8E;AAC9E,eAAO,MAAM,QAAQ,0KAA2K,CAAC;AAEjM;;;;;;GAMG;AACH,eAAO,MAAM,KAAK,sCAAuC,CAAC;AAE1D;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAA2E,CAAC;AAEvH,2GAA2G;AAC3G,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAG5C,CAAC;AAEH,oEAAoE;AACpE,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,mGAAmG;IACnG,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,6HAA6H;IAC7H,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;CACzB;AAID;;;GAGG;AACH,wBAAgB,MAAM,CAAC,KAAK,GAAE,OAAO,UAAuB,GAAG,SAAS,CAoFvE"}

package/dist/worker/harden.js

@@ -0,0 +1,175 @@
+/*
+ * A HARDENED WORKER (FR-70).
+ *
+ * A worker's policy and origin are the host's to set, and on ChatGPT the
+ * origin is shared by every widget an app's connector shows: Graview
+ * Cloud's spike watched one view's worker plant IndexedDB and Cache Storage
+ * data that a second view's worker read, and ChatGPT's `connect-src` always
+ * names a list of public CDNs. So before any guest code runs, the runtime
+ * takes from the worker's global everything outside a short allowlist —
+ * the network, storage, channels, nested workers, more code — from the
+ * global itself and from every prototype on its chain, so no reference is
+ * left to recover them by, and makes what is left stay as it is.
+ *
+ * What stays, and why:
+ *
+ *   the language          Object, Array, Promise, JSON, Intl, the typed arrays, … (LANGUAGE)
+ *   postMessage           it reaches only the worker's owner, the host, which drops all but one ready
+ *   timers                setTimeout and setInterval refuse a string, which would be code from text
+ *   queueMicrotask, structuredClone
+ *   crypto                as an object with getRandomValues alone
+ *   console               it reaches the developer's tools, nothing else; a guest's errors stay readable
+ *   DOMException          an error class, which the polyfill throws
+ *   the polyfilled DOM    Remote DOM's document, window and node classes (POLYFILLED_DOM)
+ *
+ * And what goes that a reader might expect to stay:
+ *
+ *   eval, Function        code from text could write `import()`, which no global's removal can take
+ *                         away and which reaches every origin script-src allows (ChatGPT's CDNs, or in
+ *                         WebKit under Claude's policy any https origin). Without them a guest's code is
+ *                         the bundle it was built as, and the build refuses one with `import()` in it
+ *                         (FR-71). `Function` stays as a name, for `instanceof`, but makes nothing, and
+ *                         so do the async and generator function constructors.
+ *   performance           a fine clock, which is a side channel and draws nothing
+ *   addEventListener, onmessage, onerror, close, name, location, navigator, self.fonts, WebAssembly, …
+ *
+ * The removal is deletion in the same realm, so it holds only while no
+ * remaining API can hand back what was removed. The allowlist is what keeps
+ * that true as browsers add APIs: a name not on it goes, whatever it is.
+ * `scripts/guest-sandbox.mjs` enumerates the worker's global in Chromium and
+ * WebKit and fails on any name outside it, and tries the ways back.
+ */
+/** The language's own globals: ECMAScript, ES2025 and the proposals engines already ship. */
+export const LANGUAGE = [
+    "globalThis", "Infinity", "NaN", "undefined", "isFinite", "isNaN", "parseFloat", "parseInt",
+    "decodeURI", "decodeURIComponent", "encodeURI", "encodeURIComponent", "escape", "unescape",
+    "Object", "Function", "Array", "Number", "Boolean", "String", "Symbol", "BigInt", "Date", "Promise", "RegExp", "Math", "JSON", "Reflect", "Proxy", "Intl",
+    "Error", "AggregateError", "EvalError", "RangeError", "ReferenceError", "SyntaxError", "TypeError", "URIError", "SuppressedError",
+    "Map", "Set", "WeakMap", "WeakSet", "WeakRef", "FinalizationRegistry", "Iterator", "AsyncIterator", "DisposableStack", "AsyncDisposableStack",
+    "ArrayBuffer", "SharedArrayBuffer", "DataView", "Atomics",
+    "Int8Array", "Uint8Array", "Uint8ClampedArray", "Int16Array", "Uint16Array", "Int32Array", "Uint32Array", "Float16Array", "Float32Array", "Float64Array", "BigInt64Array", "BigUint64Array",
+];
+/** What Remote DOM's polyfill puts on the global: a document to build in, and the classes of what it builds. */
+export const POLYFILLED_DOM = [
+    "window", "parent", "top", "document", "customElements",
+    "Event", "ErrorEvent", "PromiseRejectionEvent", "ToggleEvent", "FocusEvent", "ClipboardEvent", "CustomEvent", "EventTarget",
+    "Node", "ParentNode", "ChildNode", "DocumentFragment", "Document", "CharacterData", "Comment", "Text", "Element", "HTMLElement", "SVGElement", "HTMLTemplateElement", "MutationObserver",
+];
+/** The platform's few that stay (see the top of this module for why each). */
+export const PLATFORM = ["self", "postMessage", "setTimeout", "clearTimeout", "setInterval", "clearInterval", "queueMicrotask", "structuredClone", "crypto", "console", "DOMException"];
+/**
+ * Numbers an engine will not let go: Chromium's worker global defines
+ * `TEMPORARY` (0) and `PERSISTENT` (1), the constants of the FileSystem API
+ * it no longer ships, as non-configurable. They are numbers and hand back
+ * nothing, so they may stay — only while they are numbers; anything else
+ * by these names is removed or stops the worker.
+ */
+export const INERT = ["TEMPORARY", "PERSISTENT"];
+/**
+ * EVERY NAME A GUEST'S WORKER GLOBAL MAY HAVE, on the global or any
+ * prototype on its chain before `Object.prototype` (where a prototype's
+ * `constructor` and `Symbol.toStringTag` stay too). Anything else is
+ * removed before the guest runs.
+ */
+export const GUEST_GLOBALS = Object.freeze([...LANGUAGE, ...POLYFILLED_DOM, ...PLATFORM, ...INERT]);
+/** What `Object.prototype` holds in every engine; it is the language's, and the walk does not touch it. */
+export const OBJECT_PROTOTYPE = Object.freeze([
+    "constructor", "__defineGetter__", "__defineSetter__", "hasOwnProperty", "__lookupGetter__", "__lookupSetter__",
+    "isPrototypeOf", "propertyIsEnumerable", "toString", "valueOf", "__proto__", "toLocaleString",
+]);
+const nameOf = (key) => (typeof key === "symbol" ? `[${key.description ?? "symbol"}]` : key);
+/**
+ * HARDEN A WORKER'S GLOBAL before guest code runs. Called once by the
+ * worker entry, after Remote DOM's polyfill and the kit are in place.
+ */
+export function harden(scope = globalThis) {
+    const removed = [];
+    const stuck = [];
+    const allowed = new Set([...LANGUAGE, ...POLYFILLED_DOM, ...PLATFORM, "constructor", Symbol.toStringTag]);
+    /* A name on the inert list stays only if it will not go and holds a number that cannot be changed. */
+    const inert = (at, key) => {
+        const descriptor = Reflect.getOwnPropertyDescriptor(at, key);
+        return INERT.includes(key) && descriptor !== undefined && "value" in descriptor && typeof descriptor.value === "number" && !descriptor.writable && !descriptor.configurable;
+    };
+    const global = scope;
+    /* Kept, but narrowed: what the guest is handed in place of the platform's own. */
+    const nativeSetTimeout = global["setTimeout"];
+    const nativeSetInterval = global["setInterval"];
+    const nativeCrypto = global["crypto"];
+    const timer = (native, name) => function (handler, ms, ...args) {
+        if (typeof handler !== "function")
+            throw new TypeError(`${name} takes a function: a guest view cannot run code from text`);
+        return native.call(scope, handler, ms, ...args);
+    };
+    const crypto = nativeCrypto ? Object.freeze({ getRandomValues: (array) => nativeCrypto.getRandomValues(array) }) : undefined;
+    /*
+     * THE POLYFILL'S WINDOW. Remote DOM's `window` (and `document.defaultView`)
+     * is an object of its own, which took the platform's `navigator` and
+     * `location` when it was made; they go from it as from the global.
+     */
+    const view = global["document"]?.defaultView;
+    if (view && view !== global) {
+        for (const key of Reflect.ownKeys(view)) {
+            if (typeof key === "symbol" || allowed.has(key))
+                continue;
+            if (!Reflect.deleteProperty(view, key))
+                stuck.push(`window.${key}`);
+        }
+    }
+    /* THE CHAIN: the global, and every prototype up to Object.prototype. */
+    const chain = [];
+    for (let at = scope; at && at !== Object.prototype; at = Object.getPrototypeOf(at))
+        chain.push(at);
+    for (const at of chain) {
+        for (const key of Reflect.ownKeys(at)) {
+            if (allowed.has(key))
+                continue;
+            if (Reflect.deleteProperty(at, key))
+                removed.push(nameOf(key));
+            else if (!inert(at, key))
+                stuck.push(nameOf(key));
+        }
+    }
+    /* CODE FROM TEXT: eval went with the rest; every function constructor now refuses. */
+    const refuse = () => function Function() {
+        throw new EvalError("A guest view cannot make code from text.");
+    };
+    const prototypes = [Function.prototype, Object.getPrototypeOf(async function () { }), Object.getPrototypeOf(function* () { }), Object.getPrototypeOf(async function* () { })];
+    for (const prototype of prototypes) {
+        const stand = refuse();
+        Object.defineProperty(stand, "prototype", { value: prototype, writable: false, enumerable: false, configurable: false });
+        if (!Reflect.defineProperty(prototype, "constructor", { value: stand, writable: false, enumerable: false, configurable: false }))
+            stuck.push("Function.prototype.constructor");
+        if (prototype === Function.prototype)
+            Reflect.defineProperty(scope, "Function", { value: stand, writable: true, enumerable: false, configurable: true });
+    }
+    const keep = (name, value) => {
+        if (!Reflect.defineProperty(scope, name, { value, writable: true, enumerable: true, configurable: true }))
+            stuck.push(name);
+    };
+    keep("setTimeout", timer(nativeSetTimeout, "setTimeout"));
+    keep("setInterval", timer(nativeSetInterval, "setInterval"));
+    if (crypto)
+        keep("crypto", crypto);
+    /*
+     * MAKE IT STICK. Every prototype on the chain is frozen, every property
+     * left on the global is made non-configurable and read-only, and the
+     * global takes no new ones: what a guest finds is what stays.
+     */
+    for (const at of chain.slice(1))
+        Object.freeze(at);
+    for (const key of Reflect.ownKeys(scope)) {
+        const descriptor = Reflect.getOwnPropertyDescriptor(scope, key);
+        Reflect.defineProperty(scope, key, "value" in descriptor ? { ...descriptor, writable: false, configurable: false } : { ...descriptor, configurable: false });
+    }
+    /* Where an engine will not have a global made inextensible, a guest can add its own names: nothing it adds reaches anything removed. */
+    let sealed;
+    try {
+        sealed = Reflect.preventExtensions(scope);
+    }
+    catch {
+        sealed = false;
+    }
+    return { removed, stuck, sealed };
+}
+//# sourceMappingURL=harden.js.map

package/dist/worker/harden.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harden.js","sourceRoot":"","sources":["../../src/worker/harden.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,6FAA6F;AAC7F,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU;IAC3F,WAAW,EAAE,oBAAoB,EAAE,WAAW,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU;IAC1F,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM;IACzJ,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB;IACjI,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,sBAAsB,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,sBAAsB;IAC7I,aAAa,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS;IACzD,WAAW,EAAE,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB;CACnL,CAAC;AAEX,gHAAgH;AAChH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB;IACvD,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa;IAC3H,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,qBAAqB,EAAE,kBAAkB;CAChL,CAAC;AAEX,8EAA8E;AAC9E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAU,CAAC;AAEjM;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,YAAY,CAAU,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AAEvH,2GAA2G;AAC3G,MAAM,CAAC,MAAM,gBAAgB,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC/D,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB;IAC/G,eAAe,EAAE,sBAAsB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB;CAC9F,CAAC,CAAC;AAaH,MAAM,MAAM,GAAG,CAAC,GAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAE9G;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,QAA2B,UAAU;IAC1D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAkB,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3H,sGAAsG;IACtG,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,GAAoB,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,OAAO,CAAC,wBAAwB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAQ,KAAsC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,SAAS,IAAI,OAAO,IAAI,UAAU,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;IAChN,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAoD,CAAC;IAEpE,kFAAkF;IAClF,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAkE,CAAC;IAC/G,MAAM,iBAAiB,GAAG,MAAM,CAAC,aAAa,CAAkE,CAAC;IACjH,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAuB,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,MAA+B,EAAE,IAAY,EAAE,EAAE,CAC9D,UAAU,OAAgB,EAAE,EAAW,EAAE,GAAG,IAAe;QACzD,IAAI,OAAO,OAAO,KAAK,UAAU;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,2DAA2D,CAAC,CAAC;QAC3H,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,CAAmC,KAAQ,EAAK,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,KAAc,CAAM,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnL;;;;OAIG;IACH,MAAM,IAAI,GAAI,MAAM,CAAC,UAAU,CAA2C,EAAE,WAA2D,CAAC;IACxI,IAAI,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC1D,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,EAAE,GAAkB,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClH,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;iBAC1D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,MAAM,MAAM,GAAG,GAAG,EAAE,CAClB,SAAS,QAAQ;QACf,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAClE,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK,eAAc,CAAC,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAK,CAAC,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK,SAAS,CAAC,MAAK,CAAC,CAAC,CAAa,CAAC;IACvL,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC/K,IAAI,SAAS,KAAK,QAAQ,CAAC,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3J,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAc,EAAE,EAAE;QAC5C,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9H,CAAC,CAAC;IACF,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7D,IAAI,MAAM;QAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEnC;;;;OAIG;IACH,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,OAAO,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAE,CAAC;QACjE,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/J,CAAC;IACD,wIAAwI;IACxI,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}

package/dist/worker/index.d.ts

@@ -0,0 +1,32 @@
+import "@remote-dom/core/polyfill";
+import { type Guest } from "../channel.js";
+import { type Hardening } from "./harden.js";
+/** The element a worker guest draws into; the host's container stands for it. */
+export declare const GUEST_ROOT = "graview-root";
+/**
+ * WHAT HARDENING TOOK (FR-70), before any guest code ran. Should a name
+ * outside the allowlist refuse to go, the runtime stops here: no guest
+ * code runs in a worker that is not hardened, and the host hears it fail
+ * to start rather than a guest that is not held. Outside a worker (a test
+ * of the runtime in Node) there is no worker's global to harden, and
+ * `worker` says so.
+ */
+export declare const hardening: Hardening;
+/** A guest in a worker: a frame guest's channel, and the root its kit elements go in. */
+export interface WorkerGuest extends Guest {
+    /** Append kit elements here (`document.createElement("gv-card")`, …); the host draws them. */
+    readonly root: Element;
+}
+/**
+ * Connect a worker guest to its host: say ready to the worker's owner,
+ * take its hello, and draw from then on through the port. One connection
+ * per worker; asking again returns it.
+ */
+export declare function connectGuest(): WorkerGuest;
+export { GUEST_GLOBALS, INERT, LANGUAGE, OBJECT_PROTOTYPE, PLATFORM, POLYFILLED_DOM } from "./harden.js";
+export type { Hardening } from "./harden.js";
+export { GUEST_KIT, KIT_LINK_TARGETS, KIT_TONES } from "../kit.js";
+export type { GuestKitElement, Kit, KitComponent, KitEvent, KitProperty, KitPropertyType, KitTone } from "../kit.js";
+export type { Guest } from "../channel.js";
+export type { GuestAct, GuestAnswer, GuestEdge, GuestNode, GuestProps, GuestRefusal } from "../protocol.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/worker/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AAqBA,OAAO,2BAA2B,CAAC;AAEnC,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,eAAe,CAAC;AAGtD,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAGrD,iFAAiF;AACjF,eAAO,MAAM,UAAU,iBAAiB,CAAC;AAKzC;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,EAAE,SAAmH,CAAC;AAG5I,yFAAyF;AACzF,MAAM,WAAW,WAAY,SAAQ,KAAK;IACxC,8FAA8F;IAC9F,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAID;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,WAAW,CA6C1C;AAED,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACzG,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACnE,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACrH,YAAY,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/worker/index.js

@@ -0,0 +1,92 @@
+/*
+ * A GUEST VIEW IN A WORKER (FR-68): `@graview/guest/worker`.
+ *
+ * Where a frame cannot be nested — a chat's widget, whose own sandbox will
+ * not frame another origin — a view somebody else wrote runs in a classic
+ * Web Worker the host starts from a `blob:` URL. This entry is the guest's
+ * whole runtime there, and it must be the first thing the worker runs:
+ *
+ *   1. it keeps, for itself, how to hear the host and say ready (natives.ts);
+ *   2. it boots Remote DOM's DOM polyfill, so the guest has a `document`;
+ *   3. it defines the component kit as remote elements (kit.ts, elements.ts);
+ *   4. it hardens the worker's global before guest code runs (harden.ts),
+ *      and stops if it cannot;
+ *   5. it offers the guest the same API a frame guest has — props in,
+ *      `act`, `navigate`, `size` — and a `root` to draw the kit into.
+ *
+ * The protocol is FR-04's (protocol.ts): ready, a hello with a nonce and a
+ * port, and everything after over the port. What the guest draws goes to
+ * the host as Remote DOM mutation records, and the host draws only the kit.
+ */
+import { natives } from "./natives.js";
+import "@remote-dom/core/polyfill";
+import { RemoteRootElement } from "@remote-dom/core/elements";
+import { openGuest } from "../channel.js";
+import { GUEST_KIT } from "../kit.js";
+import { defineKit } from "./elements.js";
+import { harden } from "./harden.js";
+import { createListenerLedger } from "./listeners.js";
+/** The element a worker guest draws into; the host's container stands for it. */
+export const GUEST_ROOT = "graview-root";
+defineKit(GUEST_KIT);
+customElements.define(GUEST_ROOT, RemoteRootElement);
+/**
+ * WHAT HARDENING TOOK (FR-70), before any guest code ran. Should a name
+ * outside the allowlist refuse to go, the runtime stops here: no guest
+ * code runs in a worker that is not hardened, and the host hears it fail
+ * to start rather than a guest that is not held. Outside a worker (a test
+ * of the runtime in Node) there is no worker's global to harden, and
+ * `worker` says so.
+ */
+export const hardening = "WorkerGlobalScope" in globalThis ? harden() : { removed: [], stuck: [], sealed: false, worker: false };
+if (hardening.stuck.length > 0)
+    throw new Error(`The guest's worker could not be hardened: ${hardening.stuck.join(", ")} would not go.`);
+let shared;
+/**
+ * Connect a worker guest to its host: say ready to the worker's owner,
+ * take its hello, and draw from then on through the port. One connection
+ * per worker; asking again returns it.
+ */
+export function connectGuest() {
+    if (shared)
+        return shared;
+    /*
+     * A listener cannot be cloned into a message, so it crosses as an id the
+     * host hands back when the viewer raises the event, and is let go when
+     * what it was on leaves the tree (listeners.ts).
+     */
+    const ledger = createListenerLedger();
+    const opened = openGuest({
+        listen(heard) {
+            natives.listen(heard);
+            return () => natives.unlisten(heard);
+        },
+        /* A dedicated worker hears only its owner: whoever posts to it is the host that started it. */
+        fromHost: () => true,
+        ready: (message) => natives.post(message),
+    }, { onEvent: (event) => void ledger.listener(event.listener)?.(event.detail) });
+    /* A microtask's mutations go as one message: building a card is one render, not one per node. */
+    let pending;
+    const connection = {
+        mutate(records) {
+            if (!pending) {
+                pending = [];
+                natives.microtask(() => {
+                    const records = pending ?? [];
+                    pending = undefined;
+                    opened.send({ type: "render", records: ledger.encode(records) });
+                });
+            }
+            pending.push(...records);
+        },
+        /* The kit declares no methods, so there is nothing of the host's to call. */
+        call: () => undefined,
+    };
+    const root = document.createElement(GUEST_ROOT);
+    root.connect(connection);
+    shared = Object.defineProperty(opened.guest, "root", { value: root, enumerable: true });
+    return shared;
+}
+export { GUEST_GLOBALS, INERT, LANGUAGE, OBJECT_PROTOTYPE, PLATFORM, POLYFILLED_DOM } from "./harden.js";
+export { GUEST_KIT, KIT_LINK_TARGETS, KIT_TONES } from "../kit.js";
+//# sourceMappingURL=index.js.map

package/dist/worker/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/worker/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAc,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,iFAAiF;AACjF,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAC;AAEzC,SAAS,CAAC,SAAS,CAAC,CAAC;AACrB,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAwD,CAAC,CAAC;AAE5F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAc,mBAAmB,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC5I,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;IAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAQzI,IAAI,MAA+B,CAAC;AAEpC;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B;;;;OAIG;IACH,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IAEtC,MAAM,MAAM,GAAG,SAAS,CACtB;QACE,MAAM,CAAC,KAAK;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,+FAA+F;QAC/F,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI;QACpB,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;KAC1C,EACD,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAC7E,CAAC;IAEF,iGAAiG;IACjG,IAAI,OAA8B,CAAC;IACnC,MAAM,UAAU,GAAG;QACjB,MAAM,CAAC,OAA2B;YAChC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE;oBACrB,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;oBAC9B,OAAO,GAAG,SAAS,CAAC;oBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACnE,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,6EAA6E;QAC7E,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;KACtB,CAAC;IACF,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAiC,CAAC;IAChF,IAAI,CAAC,OAAO,CAAC,UAAmB,CAAC,CAAC;IAElC,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAA0B,EAAE,UAAU,EAAE,IAAI,EAAE,CAAgB,CAAC;IAC7H,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzG,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC"}