@graview/guest 0.1.9 → 0.1.12

package/dist/host/worker-start.d.ts

@@ -0,0 +1,66 @@
+import type { GuestLimiter } from "./session.js";
+/**
+ * Where a worker guest's code comes from: a URL the host already holds (a
+ * `blob:` URL, typically, or a script the host serves from its own origin),
+ * or the script's text, which the host makes into a `blob:` URL itself. A
+ * chat's widget receives the text through a tool call and never fetches it.
+ */
+export type GuestWorkerSource = {
+    readonly url: string;
+} | {
+    readonly script: string;
+};
+/**
+ * Why the worker is not running, as the start and the watchdog say it.
+ * `start`: it never said ready — the page's policy refused it, it failed
+ * before its first line ran, or `readyMs` passed. `silent`: it said ready,
+ * then went `silentMs` without answering the heartbeat.
+ */
+export type WorkerStop = "start" | "silent";
+export interface StartedWorker {
+    readonly worker: Worker | undefined;
+    /** Whether a port message was the runtime's answer to a heartbeat (and so not the session's). */
+    answer(data: unknown): boolean;
+    /** Terminate it, close the port, and stop watching. */
+    stop(): void;
+}
+export interface StartWorkerOptions {
+    readonly source: GuestWorkerSource;
+    /** The worker's name: the view's. */
+    readonly name: string;
+    readonly limiter: GuestLimiter;
+    /** How long it has to say ready. */
+    readonly readyMs: number;
+    /** How long its runtime may go without answering a heartbeat, once ready. */
+    readonly silentMs: number;
+    /** A message to the worker's owner that was not one ready: dropped, and counted. */
+    readonly onDropped: () => void;
+    /** It said ready: here is its nonce and the host's end of its port, the hello already sent. */
+    readonly onReady: (nonce: string, port: MessagePort) => void;
+    /**
+     * It never started (`start`), or stopped answering (`silent`): it has
+     * been stopped, and this is said once. `detail` says why it did not
+     * start: the directive the page's policy lacks, the engine's own words,
+     * or the time it was given.
+     */
+    readonly onStop: (reason: WorkerStop, detail?: string) => void;
+    /** It threw, uncaught, after it said ready: the engine's words for it. */
+    readonly onError?: (detail: string) => void;
+}
+/**
+ * START A CLASSIC WORKER AND WATCH IT (FR-68): never `type: "module"`,
+ * which a `blob:` URL in an opaque origin cannot start; one `guest-ready`,
+ * answered with a fresh nonce and a MessageChannel; and, once it is ready,
+ * a heartbeat its runtime must answer, so a worker whose event loop is
+ * blocked is stopped. Shared by the kit's guest (`mountGuestWorker`) and the
+ * open kit's view (`mountWorkerView`).
+ *
+ * A WORKER THAT DOES NOT START SAYS `start` (FR-102), once: `new Worker`
+ * threw, it erred before it said ready, or `readyMs` passed with no ready.
+ * Each runtime says ready before a line of the guest runs, so no ready is
+ * no start. When the page's policy was the cause — a SecurityError, or a
+ * `securitypolicyviolation` the page reported for it — the sentence names
+ * the directive it lacks.
+ */
+export declare function startWorker(window: Window & typeof globalThis, options: StartWorkerOptions): StartedWorker;
+//# sourceMappingURL=worker-start.d.ts.map

package/dist/host/worker-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-start.d.ts","sourceRoot":"","sources":["../../src/host/worker-start.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvF;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,iGAAiG;IACjG,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IAC/B,uDAAuD;IACvD,IAAI,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,qCAAqC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oFAAoF;IACpF,QAAQ,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;IAC/B,+FAA+F;IAC/F,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IAC7D;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/D,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7C;AA0CD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,UAAU,EAAE,OAAO,EAAE,kBAAkB,GAAG,aAAa,CAqI1G"}

package/dist/host/worker-start.js

@@ -0,0 +1,188 @@
+import { GUEST_PROTOCOL, isGuestReady } from "../protocol.js";
+import { mintNonce } from "./nonce.js";
+/*
+ * WHAT A PAGE'S POLICY MUST ALLOW (FR-102). The engines refuse a worker
+ * three ways: Chromium and WebKit throw a SecurityError from `new Worker`;
+ * Firefox makes the worker, fires `securitypolicyviolation` on the document
+ * and then `error` on the worker with no message. The directive is
+ * `worker-src`, or `script-src` on a page with no `worker-src`, or
+ * `default-src` on a page with neither.
+ */
+const warned = new WeakSet();
+/** The source a refused URL needed: `blob:` for a `blob:` URL, else the URL's origin. */
+function sourceOf(url, window) {
+    if (url.startsWith("blob:"))
+        return "blob:";
+    try {
+        return new URL(url, window.location.href).origin;
+    }
+    catch {
+        return url;
+    }
+}
+/** The sentence for a start the page's policy refused; the page's console is told once, however many views it refuses. */
+function refusedByPolicy(window, url, directive) {
+    const source = sourceOf(url, window);
+    const said = `this page's Content-Security-Policy${directive ? ` (${directive})` : ""} does not allow a worker from ${source}: it needs worker-src ${source}`;
+    if (!warned.has(window)) {
+        warned.add(window);
+        window.console?.warn?.(`Graview: worker views cannot start on this page, because ${said}. A host that will not allow ${source} serves each view's whole script from its own origin and passes worker: { url } (the @graview/guest README, "What the host page allows").`);
+    }
+    return said;
+}
+/** Whether a policy violation is about this worker's URL: a `blob:` URL is reported as its scheme alone. */
+function aboutUrl(blocked, url) {
+    if (blocked === "")
+        return true;
+    if (url.startsWith("blob:"))
+        return blocked.startsWith("blob");
+    return url.startsWith(blocked) || blocked.startsWith(url);
+}
+/**
+ * START A CLASSIC WORKER AND WATCH IT (FR-68): never `type: "module"`,
+ * which a `blob:` URL in an opaque origin cannot start; one `guest-ready`,
+ * answered with a fresh nonce and a MessageChannel; and, once it is ready,
+ * a heartbeat its runtime must answer, so a worker whose event loop is
+ * blocked is stopped. Shared by the kit's guest (`mountGuestWorker`) and the
+ * open kit's view (`mountWorkerView`).
+ *
+ * A WORKER THAT DOES NOT START SAYS `start` (FR-102), once: `new Worker`
+ * threw, it erred before it said ready, or `readyMs` passed with no ready.
+ * Each runtime says ready before a line of the guest runs, so no ready is
+ * no start. When the page's policy was the cause — a SecurityError, or a
+ * `securitypolicyviolation` the page reported for it — the sentence names
+ * the directive it lacks.
+ */
+export function startWorker(window, options) {
+    const made = "script" in options.source ? window.URL.createObjectURL(new window.Blob([options.source.script], { type: "text/javascript" })) : undefined;
+    const url = "script" in options.source ? made : options.source.url;
+    let worker;
+    let port;
+    let ready = false;
+    let stopped = false;
+    let silence = 0;
+    let watchdog = 0;
+    let nonce = "";
+    let beat = 0;
+    let answered = 0;
+    const clock = window.performance;
+    let heard = clock.now();
+    /* A policy violation on the page while this worker starts: Firefox's one sign that the policy, not the script, refused it. */
+    let violated;
+    const violation = (event) => {
+        const said = event;
+        const directive = String(said.effectiveDirective || said.violatedDirective || "").split(" ")[0];
+        if (!/^(worker-src|script-src|script-src-elem|child-src|default-src)$/.test(directive))
+            return;
+        if (aboutUrl(String(said.blockedURI ?? ""), url))
+            violated = directive;
+    };
+    const page = window.document;
+    page?.addEventListener("securitypolicyviolation", violation);
+    const unhear = () => page?.removeEventListener("securitypolicyviolation", violation);
+    const stop = () => {
+        if (stopped)
+            return;
+        stopped = true;
+        port?.close();
+        worker?.terminate();
+        worker = undefined;
+        window.clearTimeout(silence);
+        window.clearInterval(watchdog);
+        unhear();
+        if (made)
+            window.URL.revokeObjectURL(made);
+    };
+    const halt = (reason, detail) => {
+        if (stopped)
+            return;
+        stop();
+        options.onStop(reason, detail);
+    };
+    const begin = () => {
+        window.clearTimeout(silence);
+        unhear();
+        nonce = mintNonce();
+        const channel = new window.MessageChannel();
+        port = channel.port1;
+        /*
+         * THE WATCHDOG. The host asks on an interval, and the worker's runtime
+         * answers with the beat and the nonce. An answer is not a request: it
+         * spends none of the guest's message allowance.
+         */
+        const silentMs = Math.max(1, options.silentMs);
+        const every = Math.max(10, Math.min(1_000, Math.floor(silentMs / 4)));
+        heard = clock.now();
+        let ticked = heard;
+        watchdog = window.setInterval(() => {
+            const at = clock.now();
+            /* The host's own page was held up: that time is not the guest's silence. */
+            if (at - ticked > every * 2)
+                heard += at - ticked - every;
+            ticked = at;
+            if (at - heard >= silentMs)
+                return halt("silent");
+            beat += 1;
+            channel.port1.postMessage({ type: "heartbeat", beat });
+        }, every);
+        const hello = { graview: "host-hello", protocol: GUEST_PROTOCOL, nonce, view: options.name };
+        worker.postMessage(hello, [channel.port2]);
+        options.onReady(nonce, channel.port1);
+    };
+    try {
+        /* Classic, on purpose: a module worker from a blob: URL is refused in an opaque origin (Chromium), which is where a chat's widget runs. */
+        worker = new window.Worker(url, { name: options.name });
+    }
+    catch (error) {
+        worker = undefined;
+        const thrown = error;
+        const detail = thrown?.name === "SecurityError" ? refusedByPolicy(window, url, violated) : `the worker could not be made: ${String(thrown?.message ?? error)}`;
+        queueMicrotask(() => halt("start", detail));
+    }
+    if (worker) {
+        silence = window.setTimeout(() => halt("start", `it never said it was ready in ${options.readyMs.toLocaleString("en-US")} ms`), options.readyMs);
+        worker.onerror = (event) => {
+            const said = typeof event.message === "string" && event.message !== "" ? event.message : undefined;
+            if (ready)
+                return void options.onError?.(said ?? "an error");
+            window.clearTimeout(silence);
+            /* Decided a task later, so a violation the page reports after the error (the order is the engine's) is heard. */
+            window.setTimeout(() => !ready &&
+                halt("start", violated
+                    ? refusedByPolicy(window, url, violated)
+                    : said
+                        ? `it failed before it said ready: ${said}`
+                        : "it failed before it said ready, and the engine gave no reason (a page policy that refuses it, or a script that does not load)"), 0);
+        };
+        worker.onmessage = (event) => {
+            /*
+             * A worker's messages come from that worker alone. Its one message
+             * here is `guest-ready`, said once: a worker is one realm for its
+             * whole life, so a second ready is not a reload but a forgery.
+             */
+            if (!options.limiter.message() || ready || !isGuestReady(event.data) || event.data.protocol !== GUEST_PROTOCOL) {
+                options.onDropped();
+                return;
+            }
+            ready = true;
+            begin();
+        };
+    }
+    return {
+        get worker() {
+            return worker;
+        },
+        answer(data) {
+            const said = data;
+            if (typeof said !== "object" || said === null || said.type !== "heartbeat" || said.nonce !== nonce)
+                return false;
+            if (typeof said.beat === "number" && said.beat > answered && said.beat <= beat) {
+                answered = said.beat;
+                heard = clock.now();
+            }
+            return true;
+        },
+        stop,
+    };
+}
+//# sourceMappingURL=worker-start.js.map

package/dist/host/worker-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-start.js","sourceRoot":"","sources":["../../src/host/worker-start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAkB,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAmDvC;;;;;;;GAOG;AACH,MAAM,MAAM,GAAG,IAAI,OAAO,EAAU,CAAC;AAErC,yFAAyF;AACzF,SAAS,QAAQ,CAAC,GAAW,EAAE,MAAc;IAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,0HAA0H;AAC1H,SAAS,eAAe,CAAC,MAAc,EAAE,GAAW,EAAE,SAAkB;IACtE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,sCAAsC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,iCAAiC,MAAM,yBAAyB,MAAM,EAAE,CAAC;IAC9J,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClB,MAAyC,CAAC,OAAO,EAAE,IAAI,EAAE,CACxD,4DAA4D,IAAI,gCAAgC,MAAM,2IAA2I,CAClP,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4GAA4G;AAC5G,SAAS,QAAQ,CAAC,OAAe,EAAE,GAAW;IAC5C,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CAAC,MAAkC,EAAE,OAA2B;IACzF,MAAM,IAAI,GAAG,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxJ,MAAM,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;IACpE,IAAI,MAA0B,CAAC;IAC/B,IAAI,IAA6B,CAAC;IAClC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;IACjC,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAExB,8HAA8H;IAC9H,IAAI,QAA4B,CAAC;IACjC,MAAM,SAAS,GAAG,CAAC,KAAY,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,KAAiG,CAAC;QAC/G,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACjG,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO;QAC/F,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC;YAAE,QAAQ,GAAG,SAAS,CAAC;IACzE,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,IAAI,EAAE,gBAAgB,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,mBAAmB,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAC;IAErF,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,EAAE,KAAK,EAAE,CAAC;QACd,MAAM,EAAE,SAAS,EAAE,CAAC;QACpB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,CAAC;QACT,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAkB,EAAE,MAAe,EAAE,EAAE;QACnD,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,EAAE,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,EAAE,CAAC;QACT,KAAK,GAAG,SAAS,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QACrB;;;;WAIG;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACvB,4EAA4E;YAC5E,IAAI,EAAE,GAAG,MAAM,GAAG,KAAK,GAAG,CAAC;gBAAE,KAAK,IAAI,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC;YAC1D,MAAM,GAAG,EAAE,CAAC;YACZ,IAAI,EAAE,GAAG,KAAK,IAAI,QAAQ;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,IAAI,CAAC,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC,EAAE,KAAK,CAAC,CAAC;QACV,MAAM,KAAK,GAAc,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACxG,MAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,2IAA2I;QAC3I,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,MAAM,GAAG,KAAqD,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,EAAE,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,iCAAiC,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;QAC/J,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,iCAAiC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACjJ,MAAM,CAAC,OAAO,GAAG,CAAC,KAAiB,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,IAAI,KAAK;gBAAE,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC;YAC7D,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC7B,iHAAiH;YACjH,MAAM,CAAC,UAAU,CACf,GAAG,EAAE,CACH,CAAC,KAAK;gBACN,IAAI,CACF,OAAO,EACP,QAAQ;oBACN,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC;oBACxC,CAAC,CAAC,IAAI;wBACJ,CAAC,CAAC,mCAAmC,IAAI,EAAE;wBAC3C,CAAC,CAAC,+HAA+H,CACtI,EACH,CAAC,CACF,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;YACzC;;;;eAIG;YACH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBAC/G,OAAO,CAAC,SAAS,EAAE,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,KAAK,GAAG,IAAI,CAAC;YACb,KAAK,EAAE,CAAC;QACV,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,CAAC,IAAI;YACT,MAAM,IAAI,GAAG,IAAkE,CAAC;YAChF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,KAAK,CAAC;YACjH,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;gBAC/E,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;gBACrB,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACtB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/host/worker.d.ts

@@ -2,29 +2,26 @@ import type { AnySchema, Principal, Store } from "@graview/core";
 import type { Kit } from "../kit.js";
 import { type KitLinks, type KitRefusal } from "./kit.js";
 import { type GuestLimits, type GuestStats, type GuestViewInput } from "./session.js";
-/**
- * Where a worker guest's code comes from: a URL the host already holds (a
- * `blob:` URL, typically), or the script's text, which the host makes into
- * a `blob:` URL itself. A chat's widget receives the text through a tool
- * call and never fetches it.
- */
-export type GuestWorkerSource = {
-    readonly url: string;
-} | {
-    readonly script: string;
-};
+import { type GuestWorkerSource } from "./worker-start.js";
+export type { GuestWorkerSource } from "./worker-start.js";
 /** Why a worker guest is not shown, for a host that falls back to something else. */
 export type GuestWorkerFailure = 
-/** The page's policy refused the worker, or it failed before it said ready. */
-"refused"
 /**
- * It never said ready in `readyMs`, or after it did, its runtime went
- * `silentMs` without answering the host's heartbeat: its event loop is
- * blocked (a `while (true)`), and it was stopped.
+ * It never started (FR-102): the page's policy refused the worker (its
+ * Content-Security-Policy needs `worker-src blob:`), it failed before it
+ * said ready, or it did not say ready in `readyMs`. The detail says which.
+ */
+"start"
+/**
+ * It said ready, then its runtime went `silentMs` without answering the
+ * host's heartbeat: its event loop is blocked (a `while (true)`), and it
+ * was stopped.
  */
  | "silent"
 /** It drew more than `maxNodes`; it was stopped. */
- | "budget";
+ | "budget"
+/** What it sent took the page longer than `drawMs` of a second to draw; it was stopped, and the rest left undrawn. */
+ | "slow";
 export interface MountGuestWorkerOptions<S extends AnySchema> {
     readonly worker: GuestWorkerSource;
     /** The view's registered name: what the rail says an act came through (`via: "view:<name>"`). */
@@ -52,9 +49,15 @@ export interface MountGuestWorkerOptions<S extends AnySchema> {
          * up (a long task, a throttled background tab) is not counted.
          */
         readonly silentMs?: number;
+        /**
+         * The most of any one second the host's page may spend drawing what the
+         * guest sent, in milliseconds: past it the batch is left undrawn, the
+         * worker is stopped and `onFailure` hears `slow`. 100 by default.
+         */
+        readonly drawMs?: number;
     };
-    /** The guest is not going to be shown, and why: the host can show something else in its place. */
-    readonly onFailure?: (reason: GuestWorkerFailure) => void;
+    /** The guest is not going to be shown, and why, once: the host can show something else in its place. `detail` says why it did not start. */
+    readonly onFailure?: (reason: GuestWorkerFailure, detail?: string) => void;
     /** The kit it may draw from. `GUEST_KIT` by default. */
     readonly kit?: Kit;
     /**
@@ -93,4 +96,10 @@ export { createKitRenderer, GUEST_KIT_CSS, hostAttribute, kitValue } from "./kit
 export type { KitLinks, KitRefusal, KitRefusalReason, KitRenderer, KitRendererOptions } from "./kit.js";
 export { GUEST_KIT, KIT_LINK_TARGETS, KIT_TONES } from "../kit.js";
 export type { GuestKitElement, Kit, KitComponent, KitEvent, KitProperty, KitPropertyType, KitTone } from "../kit.js";
+export { mountWorkerView } from "./view.js";
+export type { MountWorkerViewOptions, WorkerView, WorkerViewCode, WorkerViewFailure, WorkerViewLimits } from "./view.js";
+export type { ViewRefusal } from "./open-draw.js";
+export type { OpenRefusal, OpenRefusalReason } from "./open-judge.js";
+export type { CssRefusal, CssRefusalReason } from "./css.js";
+export type { Destination } from "./links.js";
 //# sourceMappingURL=worker.d.ts.map

package/dist/host/worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/host/worker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAoC,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAoB,MAAM,UAAU,CAAC;AAE9G,OAAO,EAAuD,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAE3I;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvF,qFAAqF;AACrF,MAAM,MAAM,kBAAkB;AAC5B,+EAA+E;AAC7E,SAAS;AACX;;;;GAIG;GACD,QAAQ;AACV,oDAAoD;GAClD,QAAQ,CAAC;AAEb,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,SAAS;IAC1D,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,iGAAiG;IACjG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,iGAAiG;IACjG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,cAAc,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG;QAC9B,kGAAkG;QAClG,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,8EAA8E;QAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B;;;;;;;;WAQG;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,kGAAkG;IAClG,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC1D,wDAAwD;IACxD,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,0CAA0C;IAC1C,MAAM,IAAI,IAAI,CAAC;IACf,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,OAAO,IAAI,IAAI,CAAC;CACjB;AAID;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,GAAG,WAAW,CA+K5H;AAED,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACrF,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AACxG,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACnE,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/host/worker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAoC,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAoB,MAAM,UAAU,CAAC;AAC9G,OAAO,EAAuD,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAC3I,OAAO,EAAe,KAAK,iBAAiB,EAAsB,MAAM,mBAAmB,CAAC;AAG5F,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,qFAAqF;AACrF,MAAM,MAAM,kBAAkB;AAC5B;;;;GAIG;AACD,OAAO;AACT;;;;GAIG;GACD,QAAQ;AACV,oDAAoD;GAClD,QAAQ;AACV,sHAAsH;GACpH,MAAM,CAAC;AAEX,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,SAAS;IAC1D,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,iGAAiG;IACjG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,iGAAiG;IACjG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,cAAc,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG;QAC9B,kGAAkG;QAClG,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,8EAA8E;QAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B;;;;;;;;WAQG;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;WAIG;QACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,4IAA4I;IAC5I,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3E,wDAAwD;IACxD,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,0CAA0C;IAC1C,MAAM,IAAI,IAAI,CAAC;IACf,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,OAAO,IAAI,IAAI,CAAC;CACjB;AAID;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,GAAG,WAAW,CA+G5H;AAED,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACrF,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AACxG,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACnE,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOrH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,YAAY,EAAE,sBAAsB,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACzH,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACtE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC7D,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/host/worker.js

@@ -1,7 +1,7 @@
-import { GUEST_PROTOCOL, isGuestReady } from "../protocol.js";
 import { createKitRenderer, GUEST_KIT_CSS } from "./kit.js";
-import { mintNonce } from "./nonce.js";
 import { createGuestHost, createGuestLimiter } from "./session.js";
+import { startWorker } from "./worker-start.js";
+import { createDrawBudget } from "./draw-budget.js";
 const STYLE_ID = "graview-guest-kit";
 /**
  * MOUNT A GUEST VIEW IN A WORKER (FR-68): a classic Web Worker — never
@@ -29,10 +29,10 @@ export function mountGuestWorker(element, options) {
     element.appendChild(container);
     const stats = { applied: 0, refused: 0, dropped: 0 };
     const limiter = createGuestLimiter(options.limits);
+    const budget = createDrawBudget(options.limits?.drawMs ?? 100, () => window.performance.now());
     let session;
-    let port;
     let renderer;
-    let worker;
+    let started;
     let failed = false;
     let counted = { applied: 0, refused: 0, dropped: 0 };
     const tally = () => {
@@ -44,135 +44,69 @@ export function mountGuestWorker(element, options) {
         stats.dropped += now.dropped - counted.dropped;
         counted = { ...now };
     };
-    const made = "script" in options.worker ? window.URL.createObjectURL(new window.Blob([options.worker.script], { type: "text/javascript" })) : undefined;
-    const url = "script" in options.worker ? made : options.worker.url;
-    let silence = 0;
-    let watchdog = 0;
     const stop = () => {
         tally();
         session?.dispose();
-        port?.close();
-        worker?.terminate();
         session = undefined;
-        port = undefined;
-        worker = undefined;
-        window.clearTimeout(silence);
-        window.clearInterval(watchdog);
-        if (made)
-            window.URL.revokeObjectURL(made);
+        started?.stop();
     };
-    const fail = (reason) => {
+    const fail = (reason, detail) => {
         if (failed)
             return;
         failed = true;
         stop();
         renderer?.dispose();
-        options.onFailure?.(reason);
+        options.onFailure?.(reason, detail);
     };
-    const ready = () => {
-        window.clearTimeout(silence);
-        const nonce = mintNonce();
-        const channel = new window.MessageChannel();
-        port = channel.port1;
-        const draw = createKitRenderer(container, {
-            ...(options.kit ? { kit: options.kit } : {}),
-            ...(options.links ? { links: options.links } : {}),
-            onEvent: (listener, detail) => channel.port1.postMessage({ type: "event", listener, ...(detail !== undefined ? { detail } : {}) }),
-            ...(options.limits?.maxNodes !== undefined ? { maxNodes: options.limits.maxNodes } : {}),
-            onOverBudget: () => fail("budget"),
-        });
-        renderer = draw;
-        const live = createGuestHost({
-            store: options.store,
-            principal: options.principal,
-            view: options.view,
-            nonce,
-            send: (message) => channel.port1.postMessage(message),
-            onRender: (records) => draw.apply(records),
-            ...(options.input ? { input: options.input } : {}),
-            ...(options.onNavigate ? { onNavigate: options.onNavigate } : {}),
-            onSize: options.onSize ?? ((height) => (container.style.minHeight = `${height}px`)),
-            ...(options.limits ? { limits: options.limits } : {}),
-            limiter,
-        });
-        session = live;
-        /*
-         * THE WATCHDOG. The host asks on an interval, and the worker's runtime
-         * answers with the beat and the nonce. An answer is not a request: it
-         * spends none of the guest's message allowance. One with any other
-         * nonce goes to the session, which drops it.
-         */
-        const silentMs = Math.max(1, options.limits?.silentMs ?? 5_000);
-        const every = Math.max(10, Math.min(1_000, Math.floor(silentMs / 4)));
-        const clock = window.performance;
-        let beat = 0;
-        let answered = 0;
-        let heard = clock.now();
-        let ticked = heard;
-        watchdog = window.setInterval(() => {
-            const at = clock.now();
-            /* The host's own page was held up: that time is not the guest's silence. */
-            if (at - ticked > every * 2)
-                heard += at - ticked - every;
-            ticked = at;
-            if (at - heard >= silentMs)
-                return fail("silent");
-            beat += 1;
-            channel.port1.postMessage({ type: "heartbeat", beat });
-        }, every);
-        const answer = (data) => {
-            const said = data;
-            if (typeof said !== "object" || said === null || said.type !== "heartbeat" || said.nonce !== nonce)
-                return false;
-            if (typeof said.beat === "number" && said.beat > answered && said.beat <= beat) {
-                answered = said.beat;
-                heard = clock.now();
-            }
-            return true;
-        };
-        channel.port1.onmessage = (message) => {
-            if (answer(message.data))
-                return;
-            live.receive(message.data);
-            tally();
-        };
-        const hello = { graview: "host-hello", protocol: GUEST_PROTOCOL, nonce, view: options.view };
-        worker.postMessage(hello, [channel.port2]);
-        live.push();
-    };
-    try {
-        /* Classic, on purpose: a module worker from a blob: URL is refused in an opaque origin (Chromium), which is where a chat's widget runs. */
-        worker = new window.Worker(url, { name: options.view });
-    }
-    catch {
-        worker = undefined;
-    }
-    if (!worker) {
-        queueMicrotask(() => fail("refused"));
-    }
-    else {
-        silence = window.setTimeout(() => fail("silent"), options.limits?.readyMs ?? 5_000);
-        worker.onerror = () => {
-            if (!session)
-                fail("refused");
-        };
-        worker.onmessage = (event) => {
-            /*
-             * A worker's messages come from that worker alone. Its one message
-             * here is `guest-ready`, said once: a worker is one realm for its
-             * whole life, so a second ready is not a reload but a forgery.
-             */
-            if (!limiter.message() || session || !isGuestReady(event.data) || event.data.protocol !== GUEST_PROTOCOL) {
-                stats.dropped += 1;
-                return;
-            }
-            ready();
-        };
-    }
+    started = startWorker(window, {
+        source: options.worker,
+        name: options.view,
+        limiter,
+        readyMs: options.limits?.readyMs ?? 5_000,
+        silentMs: options.limits?.silentMs ?? 5_000,
+        onDropped: () => (stats.dropped += 1),
+        onStop: (reason, detail) => fail(reason, detail),
+        onReady: (nonce, port) => {
+            const draw = createKitRenderer(container, {
+                ...(options.kit ? { kit: options.kit } : {}),
+                ...(options.links ? { links: options.links } : {}),
+                onEvent: (listener, detail) => port.postMessage({ type: "event", listener, ...(detail !== undefined ? { detail } : {}) }),
+                ...(options.limits?.maxNodes !== undefined ? { maxNodes: options.limits.maxNodes } : {}),
+                onOverBudget: () => fail("budget"),
+            });
+            renderer = draw;
+            const live = createGuestHost({
+                store: options.store,
+                principal: options.principal,
+                view: options.view,
+                nonce,
+                send: (message) => port.postMessage(message),
+                /* The host's own time drawing the guest, at most `drawMs` of any second (draw-budget.ts). */
+                onRender: (records) => {
+                    if (!budget.draw((spent) => draw.apply(records, spent)))
+                        fail("slow");
+                },
+                ...(options.input ? { input: options.input } : {}),
+                ...(options.onNavigate ? { onNavigate: options.onNavigate } : {}),
+                onSize: options.onSize ?? ((height) => (container.style.minHeight = `${height}px`)),
+                ...(options.limits ? { limits: options.limits } : {}),
+                limiter,
+            });
+            session = live;
+            /* An answer to the watchdog is the runtime's, not a request; one with any other nonce goes to the session, which drops it. */
+            port.onmessage = (message) => {
+                if (started?.answer(message.data))
+                    return;
+                live.receive(message.data);
+                tally();
+            };
+            live.push();
+        },
+    });
     return {
         element: container,
         get worker() {
-            return worker;
+            return started?.worker;
         },
         update: () => session?.push(),
         get stats() {
@@ -192,4 +126,11 @@ export function mountGuestWorker(element, options) {
 }
 export { createKitRenderer, GUEST_KIT_CSS, hostAttribute, kitValue } from "./kit.js";
 export { GUEST_KIT, KIT_LINK_TARGETS, KIT_TONES } from "../kit.js";
+/*
+ * A worker view on the open kit (FR-90): HTML, SVG and CSS drawn into a
+ * shadow root of the host's, with what could fetch or escape not drawn.
+ * Its sanitiser and renderer are a chunk of their own, fetched the first
+ * time a view draws.
+ */
+export { mountWorkerView } from "./view.js";
 //# sourceMappingURL=worker.js.map

package/dist/host/worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/host/worker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAkB,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAoD,MAAM,UAAU,CAAC;AAC9G,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAA0E,MAAM,cAAc,CAAC;AA+E3I,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAsB,OAAoB,EAAE,OAAmC;IAC7G,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAY,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC;QACpB,KAAK,CAAC,WAAW,GAAG,aAAa,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAChD,SAAS,CAAC,SAAS,GAAG,eAAe,CAAC;IACtC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,SAAS,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAE/B,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,OAA8B,CAAC;IACnC,IAAI,IAA6B,CAAC;IAClC,IAAI,QAAiC,CAAC;IACtC,IAAI,MAA0B,CAAC;IAC/B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAAO,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjE,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC;QAC1B,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/C,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/C,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/C,OAAO,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxJ,MAAM,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;IAEpE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,OAAO,EAAE,CAAC;QACnB,IAAI,EAAE,KAAK,EAAE,CAAC;QACd,MAAM,EAAE,SAAS,EAAE,CAAC;QACpB,OAAO,GAAG,SAAS,CAAC;QACpB,IAAI,GAAG,SAAS,CAAC;QACjB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAA0B,EAAE,EAAE;QAC1C,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QACrB,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,EAAE;YACxC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAClI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SACnC,CAAC,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,IAAI,GAAG,eAAe,CAAC;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK;YACL,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC;YACrD,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAC1C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC;YACnF,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO;SACR,CAAC,CAAC;QACH,OAAO,GAAG,IAAI,CAAC;QAEf;;;;;WAKG;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;QACjC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACxB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACvB,4EAA4E;YAC5E,IAAI,EAAE,GAAG,MAAM,GAAG,KAAK,GAAG,CAAC;gBAAE,KAAK,IAAI,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC;YAC1D,MAAM,GAAG,EAAE,CAAC;YACZ,IAAI,EAAE,GAAG,KAAK,IAAI,QAAQ;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,IAAI,CAAC,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC,EAAE,KAAK,CAAC,CAAC;QACV,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,EAAE;YAC/B,MAAM,IAAI,GAAG,IAAkE,CAAC;YAChF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,KAAK,CAAC;YACjH,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;gBAC/E,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;gBACrB,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACtB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAO,EAAE,EAAE;YACpC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO;YACjC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,KAAK,EAAE,CAAC;QACV,CAAC,CAAC;QACF,MAAM,KAAK,GAAc,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACxG,MAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,2IAA2I;QAC3I,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC;QACpF,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;YACpB,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;YACzC;;;;eAIG;YACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACzG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,KAAK,EAAE,CAAC;QACV,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE;QAC7B,IAAI,KAAK;YACP,KAAK,EAAE,CAAC;YACR,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO;YACT,OAAO,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,OAAO;YACL,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,EAAE,CAAC;YACP,QAAQ,EAAE,OAAO,EAAE,CAAC;YACpB,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAErF,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/host/worker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAoD,MAAM,UAAU,CAAC;AAC9G,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAA0E,MAAM,cAAc,CAAC;AAC3I,OAAO,EAAE,WAAW,EAA8C,MAAM,mBAAmB,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAqFpD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAsB,OAAoB,EAAE,OAAmC;IAC7G,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAY,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC;QACpB,KAAK,CAAC,WAAW,GAAG,aAAa,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAChD,SAAS,CAAC,SAAS,GAAG,eAAe,CAAC;IACtC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,SAAS,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAE/B,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/F,IAAI,OAA8B,CAAC;IACnC,IAAI,QAAiC,CAAC;IACtC,IAAI,OAAkC,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAAO,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjE,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC;QAC1B,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/C,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/C,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/C,OAAO,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,OAAO,EAAE,CAAC;QACnB,OAAO,GAAG,SAAS,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAA0B,EAAE,MAAe,EAAE,EAAE;QAC3D,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK;QACzC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,KAAK;QAC3C,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACrC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;QAChD,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,EAAE;gBACxC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzH,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;aACnC,CAAC,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,IAAI,GAAG,eAAe,CAAC;gBAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK;gBACL,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;gBAC5C,6FAA6F;gBAC7F,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;oBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;wBAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxE,CAAC;gBACD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC;gBACnF,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,OAAO;aACR,CAAC,CAAC;YACH,OAAO,GAAG,IAAI,CAAC;YACf,8HAA8H;YAC9H,IAAI,CAAC,SAAS,GAAG,CAAC,OAAO,EAAE,EAAE;gBAC3B,IAAI,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;oBAAE,OAAO;gBAC1C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC3B,KAAK,EAAE,CAAC;YACV,CAAC,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,IAAI,MAAM;YACR,OAAO,OAAO,EAAE,MAAM,CAAC;QACzB,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE;QAC7B,IAAI,KAAK;YACP,KAAK,EAAE,CAAC;YACR,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO;YACT,OAAO,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,OAAO;YACL,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,EAAE,CAAC;YACP,QAAQ,EAAE,OAAO,EAAE,CAAC;YACpB,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAErF,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEnE;;;;;GAKG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC"}