@lumencast/runtime 0.5.0 → 0.7.0

package/dist/index-C6viWFcT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-C6viWFcT.js","sources":["../src/overlay/runtime-context.tsx","../src/app.tsx","../src/render/diagnostics.ts","../src/render/filter-clamp.ts","../src/animate/transitions.ts","../src/state/apply-delta.ts","../src/state/apply-snapshot.ts","../src/state/store.ts","../src/render/bundle.ts","../src/transport/reconnect.ts","../src/transport/ws.ts","../src/internal/validate-options.ts","../src/mount.ts","../src/render/prop-allowlist.ts"],"sourcesContent":["import { createContext, useContext, type ReactNode } from \"react\";\nimport type { Patch } from \"@lumencast/protocol\";\nimport type { Store } from \"../state/store\";\nimport type { RenderBundle } from \"../render/bundle\";\nimport type { ConnectionStatus } from \"../transport/ws\";\nimport type { LumencastMode } from \"../types\";\n\nexport interface LumencastRuntime {\n  mode: LumencastMode;\n  store: Store;\n  bundle: RenderBundle;\n  status: ConnectionStatus;\n  /** Send LSDP/1 input patches to the server. */\n  sendInput: (patches: Patch[]) => void;\n}\n\nconst Ctx = createContext<LumencastRuntime | null>(null);\n\nexport function LumencastRuntimeProvider({\n  value,\n  children,\n}: {\n  value: LumencastRuntime;\n  children: ReactNode;\n}) {\n  return <Ctx.Provider value={value}>{children}</Ctx.Provider>;\n}\n\nexport function useLumencastRuntime(): LumencastRuntime {\n  const v = useContext(Ctx);\n  if (!v) {\n    throw new Error(\n      \"Lumencast overlay components must be rendered inside LumencastRuntimeProvider\",\n    );\n  }\n  return v;\n}\n","// Top-level React component for a mounted Lumencast instance. Reads the runtime\n// signals (bundle / status) and dispatches to the right mode.\n//\n// Per-mode code splitting: BroadcastMode / ControlMode / TestMode live in\n// separate chunks loaded only when the corresponding mode is requested. A\n// broadcast mount never downloads the overlay or test code — the broadcast\n// chunk is the bare minimum a CEF host needs to render the scene.\n//\n// Crossfade: AnimatePresence freezes the props of an exiting child so its render\n// tree keeps using the values it held at the moment it started exiting.\n\nimport { useSignals } from \"@preact/signals-react/runtime\";\nimport type { Signal } from \"@preact/signals-react\";\nimport { AnimatePresence, motion } from \"framer-motion\";\nimport { lazy, Suspense } from \"react\";\nimport type { Patch } from \"@lumencast/protocol\";\nimport type { Store } from \"./state/store.js\";\nimport type { RenderBundle } from \"./render/bundle.js\";\nimport type { ConnectionStatus } from \"./transport/ws.js\";\nimport { LumencastRuntimeProvider } from \"./overlay/runtime-context.js\";\nimport type { LumencastMode } from \"./types.js\";\n\nconst LazyBroadcastMode = lazy(() =>\n  import(\"./modes/broadcast.js\").then((m) => ({ default: m.BroadcastMode })),\n);\nconst LazyControlMode = lazy(() =>\n  import(\"./modes/control.js\").then((m) => ({ default: m.ControlMode })),\n);\nconst LazyTestMode = lazy(() => import(\"./modes/test.js\").then((m) => ({ default: m.TestMode })));\n\nexport interface LumencastAppProps {\n  mode: LumencastMode;\n  store: Store;\n  bundleSignal: Signal<RenderBundle | null>;\n  statusSignal: Signal<ConnectionStatus>;\n  crossfadeKeySignal: Signal<string>;\n  sendInput: (patches: Patch[]) => void;\n}\n\nexport function LumencastApp({\n  mode,\n  store,\n  bundleSignal,\n  statusSignal,\n  crossfadeKeySignal,\n  sendInput,\n}: LumencastAppProps) {\n  useSignals();\n\n  const bundle = bundleSignal.value;\n  const status = statusSignal.value;\n  const trackKey = crossfadeKeySignal.value;\n  if (!bundle) return null;\n\n  const ModeComponent =\n    mode === \"broadcast\" ? LazyBroadcastMode : mode === \"control\" ? LazyControlMode : LazyTestMode;\n\n  return (\n    <AnimatePresence mode=\"sync\">\n      <motion.div\n        key={trackKey}\n        initial={{ opacity: 0 }}\n        animate={{ opacity: 1 }}\n        exit={{ opacity: 0 }}\n        transition={{ duration: 0.4, ease: \"easeInOut\" }}\n        style={{ position: \"absolute\", inset: 0 }}\n      >\n        <LumencastRuntimeProvider\n          value={{\n            mode,\n            store,\n            bundle,\n            status,\n            sendInput,\n          }}\n        >\n          <Suspense fallback={null}>\n            <ModeComponent />\n          </Suspense>\n        </LumencastRuntimeProvider>\n      </motion.div>\n    </AnimatePresence>\n  );\n}\n","// Anti-silent-drop diagnostics channel (ADR 001 §3.4 D4, issue #34).\n//\n// Every render-side diagnostic — rejected colour/filter/path/typography\n// value, unknown prop, unrendered spec'd field — flows through\n// `emitDiagnostic`. The diagnostic is an EVENT, not a console.log :\n// hosts subscribe via `MountOptions.onDiagnostic` (wired by `mount()`)\n// and receive a structured `{ nodeId, field, reason }`. When no handler\n// is registered, the runtime falls back to a DEV-only `console.warn`\n// so authors still see drops during development — and `broadcast`\n// builds stay silent on the console, per the CLAUDE.md \"no logs in\n// broadcast\" rule.\n//\n// ── Hygiene contract (Bastion R9, ADR 001 §5.1) ─────────────────────\n// A diagnostic NEVER carries the value of a leaf or a prop — only the\n// node id, the field name and a STATIC reason string. Leaf values can\n// hold sensitive on-air content ; they must not transit any diagnostic\n// channel. Callers pass field names and literal reasons exclusively.\n// The R9 sentinel test (r9-sentinel.test.tsx) enforces this end to end,\n// and statically checks that `console.warn` only exists in this module.\n// ─────────────────────────────────────────────────────────────────────\n\n/** Placeholder id for nodes that don't declare an `id`. */\nexport const ANON_NODE_ID = \"<anon>\";\n\nexport interface RenderDiagnostic {\n  /** `RenderNode.id` of the node the field belongs to (RC#7), or\n   *  `ANON_NODE_ID` when the node has none. */\n  nodeId: string;\n  /** Name of the field/prop concerned (e.g. `text.colour`,\n   *  `shape.paths.data`, `bindAnimate.opacity`). Never its value (R9). */\n  field: string;\n  /** Static reason — why the field was rejected or not rendered. */\n  reason: string;\n}\n\nexport type DiagnosticHandler = (diagnostic: RenderDiagnostic) => void;\n\nconst handlers = new Set<DiagnosticHandler>();\n\n/**\n * Register a diagnostics handler (one per `mount()`, plus tests).\n * Returns the unregister function. Multiple concurrent mounts each\n * receive every diagnostic — node ids are bundle-scoped, so a host\n * running several mounts should disambiguate on its side.\n */\nexport function addDiagnosticsHandler(handler: DiagnosticHandler): () => void {\n  handlers.add(handler);\n  return () => {\n    handlers.delete(handler);\n  };\n}\n\n/**\n * Emit one anti-drop diagnostic. `field` and `reason` MUST be static\n * strings / field names — never interpolate a prop or leaf value (R9).\n */\nexport function emitDiagnostic(nodeId: string | undefined, field: string, reason: string): void {\n  const diagnostic: RenderDiagnostic = { nodeId: nodeId ?? ANON_NODE_ID, field, reason };\n  if (handlers.size > 0) {\n    for (const handler of handlers) {\n      try {\n        handler(diagnostic);\n      } catch {\n        // A host handler that throws must never break the render path.\n      }\n    }\n    return;\n  }\n  // DEV-only console fallback — broadcast builds log nothing.\n  if (import.meta.env.DEV) {\n    console.warn(\n      `[lumencast] node \"${diagnostic.nodeId}\": field \"${field}\" ${reason} (value withheld per R9)`,\n    );\n  }\n}\n","// Runtime half of the R8 filter gate (ADR 001 §5.1 R8, issue #42).\n//\n// The compiler clamps `filter` values at lowering (`lowerFilter`,\n// packages/compiler/src/compile.ts) — but a filter value pushed by a\n// LIVE LSDP delta reaches the runtime through `resolveProps` /\n// `animateBindings` without ever passing through the compiler. R8\n// requires the clamp at compile AND at runtime : an unbounded filter is\n// a compositing DoS in CEF. Every filter value that can reach an inline\n// style at render time MUST pass through this module.\n//\n// NOTE on duplication : these caps intentionally mirror the compiler's\n// `MAX_FILTER_BLUR_PX` / `MAX_FILTER_BRIGHTNESS` constants. Unifying\n// them behind a single shared module is tracked by issue #41 (same\n// model as the shared colour module) — do NOT change one side without\n// the other until #41 lands.\n//\n// ── Linear-time justification (RC#12) ────────────────────────────────\n// The string form is validated by a single ANCHORED regex made of\n// literals and bounded quantifiers ({1,7} / {1,4} digit runs, one\n// optional space run) — exactly one possible parse per input, no\n// backtracking blow-up. Inputs longer than MAX_FILTER_STRING_LEN are\n// rejected before the regex runs.\n// ─────────────────────────────────────────────────────────────────────\n\nimport { emitDiagnostic } from \"./diagnostics\";\n\n/** Max CSS `blur()` radius accepted at runtime, in px (mirror of the\n *  compiler cap — see issue #41). */\nexport const MAX_FILTER_BLUR_PX = 100;\n/** Max CSS `brightness()` factor accepted at runtime (mirror of the\n *  compiler cap — see issue #41 ; spec §6.1 blesses clamping to 4). */\nexport const MAX_FILTER_BRIGHTNESS = 4;\n\nconst MAX_FILTER_STRING_LEN = 64;\n\nconst CAPS: Record<FilterChannel, number> = {\n  blur: MAX_FILTER_BLUR_PX,\n  brightness: MAX_FILTER_BRIGHTNESS,\n};\n\nexport type FilterChannel = \"blur\" | \"brightness\";\n\n/**\n * Gate one live numeric filter channel (R8 runtime half).\n *\n * Returns the clamped value, or `null` when the value is rejected\n * (non-number, non-finite, negative — including `-0`, which would\n * stringify to an accepted `0`). A `null` MUST be handled as \"keep the\n * last known-good value / identity\" — never apply the raw input.\n */\nexport function clampFilterChannel(channel: FilterChannel, value: unknown): number | null {\n  if (typeof value !== \"number\" || !Number.isFinite(value)) return null;\n  if (value < 0 || Object.is(value, -0)) return null;\n  const cap = CAPS[channel];\n  return value > cap ? cap : value;\n}\n\n// The ONLY string form the compiler ever emits (`lowerFilter`) :\n// `blur(<n>px) brightness(<n>)`. Anything else — extra functions,\n// `url(`, negative signs, exponents — is rejected by construction\n// (the grammar has no `-`, no `e`, no second parenthesis pair).\nconst FILTER_STRING_RE =\n  /^blur\\((\\d{1,7}(?:\\.\\d{1,4})?)px\\) brightness\\((\\d{1,7}(?:\\.\\d{1,4})?)\\)$/;\n\n/** Identity filter — matches the compiler's neutral emission and\n *  `INITIAL_IDENTITY.filter` in transitions.ts. */\nexport const FILTER_IDENTITY = \"blur(0px) brightness(1)\";\n\n/**\n * Gate a CSS filter STRING reaching framer-motion at runtime\n * (`animate_initial.filter`, keyframe `steps[].filter`). Hand-crafted\n * bundles bypass the compiler clamps, so the runtime re-validates and\n * re-clamps (R8). Returns the safe, clamped canonical string or `null`\n * on rejection — never the raw input.\n */\nexport function sanitizeCssFilterString(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  if (value.length === 0 || value.length > MAX_FILTER_STRING_LEN) return null;\n  const m = FILTER_STRING_RE.exec(value);\n  if (!m) return null;\n  const blur = clampFilterChannel(\"blur\", Number(m[1]));\n  const brightness = clampFilterChannel(\"brightness\", Number(m[2]));\n  if (blur === null || brightness === null) return null;\n  return `blur(${blur}px) brightness(${brightness})`;\n}\n\n/**\n * Diagnostic for a rejected filter value. Bastion R9 (ADR 001 §5.1) :\n * the rejected VALUE is never logged nor forwarded — only `node.id`\n * (RC#7, issue #34), the field name and a static reason. Routed through\n * the structured diagnostics channel (events, no logs in `broadcast`).\n */\nexport function warnRejectedFilter(field: string, nodeId?: string): void {\n  emitDiagnostic(\n    nodeId,\n    field,\n    \"rejected unsafe filter value : outside the R8 caps or not a finite number >= 0\",\n  );\n}\n","// Local Transition type + Framer Motion translation.\n//\n// LSML 1.0 §6 declares `animate` directives at the primitive level (transition,\n// transform, opacity, filter). LSDP/1.1 §3.2.2 added per-leaf transition\n// directives on delta patches — incoming deltas can carry a transition hint\n// that overrides the bundle-level default for the next animation cycle.\n// `parseWireTransition` ingests the wire shape ; `Store.lastTransition(path)`\n// surfaces the most-recent directive to the renderer.\n//\n// We deliberately animate only GPU-friendly properties (transform, opacity,\n// filter). Primitives enforce this at the DOM level by exposing those props as\n// motion-bindable values rather than raw CSS.\n\nimport { sanitizeCssFilterString, warnRejectedFilter } from \"../render/filter-clamp\";\n\nexport type TransitionKind = \"none\" | \"tween\" | \"spring\" | \"crossfade\";\n\nexport interface TweenTransition {\n  kind: \"tween\";\n  duration_ms: number;\n  ease?: \"linear\" | \"cubic-in\" | \"cubic-out\" | \"cubic-in-out\";\n}\n\nexport interface SpringTransition {\n  kind: \"spring\";\n  stiffness?: number;\n  damping?: number;\n  /** LSML 1.1 §6.2 — spring mass (kg). Default 1 (framer default). */\n  mass?: number;\n}\n\nexport interface CrossfadeTransition {\n  kind: \"crossfade\";\n  duration_ms?: number;\n}\n\nexport interface NoTransition {\n  kind: \"none\";\n}\n\nexport type Transition = NoTransition | TweenTransition | SpringTransition | CrossfadeTransition;\n\nexport type FramerEasing = \"linear\" | \"easeIn\" | \"easeOut\" | \"easeInOut\";\n\nexport interface FramerTransition {\n  duration?: number;\n  ease?: FramerEasing;\n  type?: \"tween\" | \"spring\";\n  stiffness?: number;\n  damping?: number;\n  mass?: number;\n}\n\nconst NO_ANIMATION: FramerTransition = { duration: 0 };\n\nconst EASE_MAP: Record<string, FramerEasing> = {\n  linear: \"linear\",\n  \"cubic-in\": \"easeIn\",\n  \"cubic-out\": \"easeOut\",\n  \"cubic-in-out\": \"easeInOut\",\n};\n\nexport function toFramer(t: Transition | undefined): FramerTransition {\n  if (!t || t.kind === \"none\") return NO_ANIMATION;\n  if (t.kind === \"tween\") {\n    return {\n      type: \"tween\",\n      duration: (t.duration_ms ?? 0) / 1000,\n      ease: t.ease ? (EASE_MAP[t.ease] ?? \"easeOut\") : \"easeOut\",\n    };\n  }\n  if (t.kind === \"spring\") {\n    return {\n      type: \"spring\",\n      ...(t.stiffness !== undefined ? { stiffness: t.stiffness } : {}),\n      ...(t.damping !== undefined ? { damping: t.damping } : {}),\n      ...(t.mass !== undefined ? { mass: t.mass } : {}),\n    };\n  }\n  // crossfade at the per-prop level degenerates into a tween on opacity.\n  return {\n    type: \"tween\",\n    duration: (t.duration_ms ?? 400) / 1000,\n    ease: \"easeInOut\",\n  };\n}\n\n// --- mount-play (LSML 1.1 `animate.from`) ---------------------------\n\n/** Identity (animation-end) value for each framer key an `animate.from`\n *  may declare. A primitive that doesn't natively animate a given key\n *  still converges it to this neutral value on mount so the element ends\n *  up visually correct (e.g. a `from.scale: 0.85` settles at `scale: 1`). */\nconst INITIAL_IDENTITY: Record<string, number | string> = {\n  opacity: 1,\n  scale: 1,\n  scaleX: 1,\n  scaleY: 1,\n  rotate: 0,\n  x: 0,\n  y: 0,\n  // LSML §6.1 filter identity — both functions are always present so\n  // framer interpolates between structurally-identical filter lists\n  // (the compiler emits the same two-function form, clamped per R8).\n  filter: \"blur(0px) brightness(1)\",\n};\n\nexport interface MountPlay {\n  initial: Record<string, number | string>;\n  animate: Record<string, number | string>;\n}\n\n/**\n * Default mount-play timing — applies when a node carries an\n * `animate_initial` (LSML 1.1 `animate.from`) but no per-prop\n * `transitions` entry resolves for any animated key. The compiler\n * documents that `from` without an explicit `transition` mount-plays\n * \"with the runtime's default timing\" ; before this constant existed the\n * fallback was `toFramer(undefined)` → `{ duration: 0 }`, which snapped\n * the element straight to its settled state (the mount-play never\n * visibly played). 400 ms ease-out matches the runtime's other implicit\n * timings (crossfade fallback, scene-track fade).\n */\nexport const DEFAULT_MOUNT_PLAY_TRANSITION: Transition = {\n  kind: \"tween\",\n  duration_ms: 400,\n  ease: \"cubic-out\",\n};\n\n/**\n * Resolve the transition a primitive should hand framer-motion.\n *\n * `keys` are the primitive's native animated prop keys, scanned in\n * order (e.g. `[\"opacity\", \"src\"]` for Image). When the node also\n * carries an `animate_initial`, the lookup widens to the keys the\n * mount-play actually moves (`from.scale` may have lowered a `scale`\n * transition that an opacity-only primitive would otherwise never look\n * up), and — critically — falls back to\n * `DEFAULT_MOUNT_PLAY_TRANSITION` instead of \"no animation\" : a\n * mount-play must tween, never complete in zero frames.\n *\n * Without `animate_initial` the prior behaviour is preserved exactly :\n * first declared transition among `keys`, else `undefined` (deltas\n * snap unless a transition is declared).\n */\nexport function resolveTransition(\n  transitionFor: (key: string) => Transition | undefined,\n  keys: string[],\n  animateInitial?: Record<string, number | string>,\n): Transition | undefined {\n  for (const key of keys) {\n    const t = transitionFor(key);\n    if (t !== undefined) return t;\n  }\n  if (animateInitial && Object.keys(animateInitial).length > 0) {\n    for (const key of Object.keys(animateInitial)) {\n      const t = transitionFor(key);\n      if (t !== undefined) return t;\n    }\n    return DEFAULT_MOUNT_PLAY_TRANSITION;\n  }\n  return undefined;\n}\n\n/**\n * Build framer-motion `initial` / `animate` props for a primitive that\n * may carry an LSML 1.1 `animate.from` initial state.\n *\n * `base` is the primitive's own animated target (e.g. `{ opacity }` for\n * Image/Text/Shape, or `{ opacity, x, y, scale, rotate }` for Frame).\n * `initial` is the lowered `animate.from` map (or `undefined`).\n *\n * When `initial` is absent, this returns `{ initial: base, animate: base }`\n * — framer mounts at the target and never moves, exactly the prior\n * no-mount-play behaviour (backward compatible). When `initial` is\n * present, the element mounts at `initial` and animates to `base`,\n * augmented with identity convergence for any `from` key the primitive\n * doesn't already drive — so the mount-play plays out and settles\n * correctly even on opacity-only primitives.\n */\nexport function mountPlay(\n  base: Record<string, number | string>,\n  initial: Record<string, number | string> | undefined,\n  nodeId?: string,\n): MountPlay {\n  if (!initial || Object.keys(initial).length === 0) {\n    // No `from` → mount directly at target. Pinning `initial` to the\n    // target (rather than letting framer infer from current style)\n    // preserves the existing \"no jump, no mount-play\" behaviour.\n    return { initial: base, animate: base };\n  }\n  // R8 runtime half (ADR 001 §5.1, issue #42) — `animate_initial` may\n  // come from a hand-crafted bundle that never went through the\n  // compiler clamps. Re-gate the filter string ; rejected → drop the\n  // key (the element mounts at the identity filter instead).\n  let from = initial;\n  if (initial[\"filter\"] !== undefined) {\n    const safe = sanitizeCssFilterString(initial[\"filter\"]);\n    from = { ...initial };\n    if (safe === null) {\n      warnRejectedFilter(\"animate_initial.filter\", nodeId);\n      delete from[\"filter\"];\n    } else {\n      from[\"filter\"] = safe;\n    }\n  }\n  const animate: Record<string, number | string> = { ...base };\n  for (const key of Object.keys(from)) {\n    if (!(key in animate)) {\n      animate[key] = INITIAL_IDENTITY[key] ?? 0;\n    }\n  }\n  return { initial: from, animate };\n}\n\n/**\n * Parse a wire-format `TransitionSpec` (LSDP/1.1 §3.2.2) into the\n * runtime's local Transition type. Returns `undefined` for malformed\n * input so the caller falls back to whatever bundle-level default\n * applies. The wire shape uses kebab-case `easing` values\n * (`linear`, `ease-in`, `ease-out`, `ease-in-out`) which we map to\n * the runtime's `cubic-*` vocabulary.\n */\nexport function parseWireTransition(value: unknown): Transition | undefined {\n  if (typeof value !== \"object\" || value === null) return undefined;\n  const v = value as Record<string, unknown>;\n  const kind = v.kind;\n  if (kind === \"snap\") {\n    return { kind: \"none\" };\n  }\n  if (kind === \"tween\") {\n    const duration_ms = typeof v.duration_ms === \"number\" ? v.duration_ms : 0;\n    const easing = WIRE_EASING_MAP[v.easing as string] ?? \"cubic-out\";\n    return { kind: \"tween\", duration_ms, ease: easing };\n  }\n  if (kind === \"spring\") {\n    const out: SpringTransition = { kind: \"spring\" };\n    if (typeof v.stiffness === \"number\") out.stiffness = v.stiffness;\n    if (typeof v.damping === \"number\") out.damping = v.damping;\n    // LSML §6.2 — mass rides the same wire spring shape.\n    if (typeof v.mass === \"number\") out.mass = v.mass;\n    return out;\n  }\n  return undefined;\n}\n\nconst WIRE_EASING_MAP: Record<string, \"linear\" | \"cubic-in\" | \"cubic-out\" | \"cubic-in-out\"> = {\n  linear: \"linear\",\n  \"ease-in\": \"cubic-in\",\n  \"ease-out\": \"cubic-out\",\n  \"ease-in-out\": \"cubic-in-out\",\n};\n","import { batch } from \"@preact/signals-react\";\nimport type { DeltaFrame } from \"@lumencast/protocol\";\nimport type { Store } from \"./store.js\";\nimport { parseWireTransition } from \"../animate/transitions\";\n\n/** Apply an LSDP/1 delta. All patches in the frame land in a single signals\n *  batch — components reading multiple paths see them flip in one render pass.\n *\n *  LSDP/1.1 §3.2.2 — a patch may carry a `transition` directive overriding\n *  the bundle-level default for the next animation cycle on that leaf. We\n *  thread it through the store so the renderer reads the correct directive\n *  alongside the new value. */\nexport function applyDelta(store: Store, frame: DeltaFrame): void {\n  batch(() => {\n    for (const patch of frame.patches) {\n      const transition = parseWireTransition(patch.transition);\n      if (transition !== undefined) {\n        store.setWithTransition(patch.path, patch.value, transition);\n      } else {\n        store.set(patch.path, patch.value);\n      }\n    }\n  });\n}\n","import type { SnapshotFrame } from \"@lumencast/protocol\";\nimport type { Store } from \"./store.js\";\n\n/** Apply an LSDP/1 snapshot to the store. Replaces the entire state — paths\n *  not present in the snapshot are reset to `undefined`. */\nexport function applySnapshot(store: Store, frame: SnapshotFrame): void {\n  store.reset(frame.state);\n}\n","// State store — one signal per leaf path.\n//\n// Integration point between the WS layer (snapshot + delta) and the render\n// layer. Each path Lumencast has ever seen owns a `Signal<unknown>`;\n// readers subscribe via @preact/signals-react `useSignals()` and re-render\n// only when their path's value changes.\n//\n// LSDP/1.1 §3.2.2 — incoming deltas may carry a per-leaf `transition`\n// directive. The store keeps the most-recent directive per path so the\n// renderer can pick it up on the next animation cycle. Snapshots clear\n// any pending transitions for the affected paths (snapshots are not\n// animated transitions).\n\nimport { signal, type Signal, batch } from \"@preact/signals-react\";\nimport type { Transition } from \"../animate/transitions\";\n\nexport interface Store {\n  /** Get-or-create the signal for a path. New paths start as `undefined`. */\n  signal(path: string): Signal<unknown>;\n  /** Apply a single leaf write. */\n  set(path: string, value: unknown): void;\n  /** Apply a single leaf write with an LSDP/1.1 §3.2.2 transition directive.\n   * The directive lives in a separate signal so the renderer can subscribe\n   * to it independently. Passing `undefined` clears any pending directive. */\n  setWithTransition(path: string, value: unknown, transition: Transition | undefined): void;\n  /** Read the most-recent transition directive for a path (or undefined\n   * when no directive has been applied since the last snapshot). The\n   * returned signal is reactive — components reading via `useSignals()`\n   * re-render when the directive changes. */\n  transitionSignal(path: string): Signal<Transition | undefined>;\n  /**\n   * Replace the whole state — used by `apply-snapshot`. Existing signals are\n   * reused (subscribers stay attached); paths missing from the snapshot reset\n   * to `undefined`. Pending per-path transitions are cleared (a snapshot is\n   * a state restore, not an animated change).\n   */\n  reset(state: Record<string, unknown>): void;\n  /** Snapshot of every known path → current value. For debug / state inspector. */\n  toRecord(): Record<string, unknown>;\n}\n\nclass StoreImpl implements Store {\n  private readonly signals = new Map<string, Signal<unknown>>();\n  private readonly transitions = new Map<string, Signal<Transition | undefined>>();\n\n  signal(path: string): Signal<unknown> {\n    let s = this.signals.get(path);\n    if (!s) {\n      s = signal<unknown>(undefined);\n      this.signals.set(path, s);\n    }\n    return s;\n  }\n\n  transitionSignal(path: string): Signal<Transition | undefined> {\n    let s = this.transitions.get(path);\n    if (!s) {\n      s = signal<Transition | undefined>(undefined);\n      this.transitions.set(path, s);\n    }\n    return s;\n  }\n\n  set(path: string, value: unknown): void {\n    const s = this.signal(path);\n    if (!shallowEqual(s.peek(), value)) {\n      s.value = value;\n    }\n  }\n\n  setWithTransition(path: string, value: unknown, transition: Transition | undefined): void {\n    batch(() => {\n      const ts = this.transitionSignal(path);\n      // Update transition before value so the render that observes the\n      // new value sees the correct transition.\n      if (ts.peek() !== transition) ts.value = transition;\n      const s = this.signal(path);\n      if (!shallowEqual(s.peek(), value)) s.value = value;\n    });\n  }\n\n  reset(state: Record<string, unknown>): void {\n    batch(() => {\n      const seen = new Set<string>();\n      for (const [path, value] of Object.entries(state)) {\n        seen.add(path);\n        const s = this.signal(path);\n        if (!shallowEqual(s.peek(), value)) {\n          s.value = value;\n        }\n        // Snapshots are not animated transitions — clear any pending\n        // per-path directive (LSDP/1.1 §3.2.2 — directives apply to\n        // the NEXT delta only, snapshots reseed state authoritatively).\n        const ts = this.transitions.get(path);\n        if (ts && ts.peek() !== undefined) ts.value = undefined;\n      }\n      for (const path of this.signals.keys()) {\n        if (!seen.has(path)) {\n          const s = this.signals.get(path);\n          if (s && s.peek() !== undefined) s.value = undefined;\n        }\n      }\n    });\n  }\n\n  toRecord(): Record<string, unknown> {\n    const out: Record<string, unknown> = {};\n    for (const [path, s] of this.signals.entries()) {\n      out[path] = s.peek();\n    }\n    return out;\n  }\n}\n\nexport function createStore(): Store {\n  return new StoreImpl();\n}\n\nfunction shallowEqual(a: unknown, b: unknown): boolean {\n  if (a === b) return true;\n  if (a === null || b === null) return false;\n  if (typeof a !== typeof b) return false;\n  if (typeof a !== \"object\") return false;\n  if (Array.isArray(a) !== Array.isArray(b)) return false;\n  if (Array.isArray(a) && Array.isArray(b)) {\n    if (a.length !== b.length) return false;\n    for (let i = 0; i < a.length; i++) {\n      if (a[i] !== b[i]) return false;\n    }\n    return true;\n  }\n  const ao = a as Record<string, unknown>;\n  const bo = b as Record<string, unknown>;\n  const ak = Object.keys(ao);\n  const bk = Object.keys(bo);\n  if (ak.length !== bk.length) return false;\n  for (const k of ak) {\n    if (ao[k] !== bo[k]) return false;\n  }\n  return true;\n}\n","// Render bundle — the runtime's flat, pre-compiled representation of a scene.\n//\n// The bundle is content-addressed by `scene_version` (sha256 of the\n// canonical JSON form). Lumencast fetches it once per `scene_version` and\n// caches forever; the server serves it with long-TTL immutable cache headers.\n//\n// Note on shape: this `RenderBundle` is the flat, runtime-internal form. The\n// canonical *authoring* format (LSML 1.0, see lumencast-protocol/spec/LSML-1.md)\n// uses inline `bind: { value: \"path\" }` per primitive instead of a `bindings`\n// map. A compiler step (forthcoming `@lumencast/compiler`) will translate\n// LSML 1.0 → RenderBundle. For now, callers who want to feed an LSML 1.0\n// bundle pre-compile or use a hand-rolled adapter.\n\nimport type { Transition } from \"../animate/transitions.js\";\nimport type { Keyframes } from \"../animate/keyframes.js\";\n\n// --- bundle shape ----------------------------------------------------\n\nexport type RenderKind =\n  | \"stack\"\n  | \"grid\"\n  | \"frame\"\n  | \"text\"\n  | \"image\"\n  | \"shape\"\n  | \"media\"\n  | \"repeat\"\n  | \"instance\";\n\nexport interface RenderNode {\n  kind: RenderKind;\n  /** Stable identifier for keyed reconciliation. */\n  id?: string;\n  /** Static props (frozen at build/compile time). */\n  props?: Record<string, unknown>;\n  /** Prop name → state path. The render layer subscribes the path's signal\n   *  and applies the value to the named prop on each change. */\n  bindings?: Record<string, string>;\n  /** Default transition per bound prop. Aligns with LSML 1.0 §6 `animate`\n   *  directives. The runtime applies these as CSS transitions / Framer Motion\n   *  configs at render time. */\n  transitions?: Record<string, Transition>;\n  /** LSML 1.1 §6 `animate.from` — mount-time initial state, lowered to a\n   *  flat framer-motion `initial` map (keys: `opacity`, `scale`, `rotate`,\n   *  `x`, `y`, `filter`). When present, the rendering primitive passes this\n   *  as framer-motion `initial={...}` so the element mounts in this state\n   *  and animates to its declared target on mount (mount-play). When absent,\n   *  the primitive applies no `initial` and the prior no-mount-play\n   *  behaviour holds (backward compatible). */\n  animate_initial?: Record<string, number | string>;\n  /** LSML 1.1 §6.3 — animation targets bound to leaf paths\n   *  (`bindAnimate`). Keys are the spec property names (`opacity`,\n   *  `transform.translate`, `transform.scale`, `transform.rotate`,\n   *  `filter.blur`, `filter.brightness`, plus the kind's colour-typed\n   *  property per §6.5 : `style.color` / `fill` / `background`) ; values\n   *  are LeafPaths. The runtime subscribes each path's leaf-grain signal\n   *  and retargets a Framer motion value on change — continuous\n   *  interpolation toward the live value, no remount. Deltas are\n   *  coalesced per frame (one retarget max per rAF per binding,\n   *  ADR 001 RC#13). */\n  animateBindings?: Record<string, string>;\n  /** LSML 1.1 §6.6 — multi-step keyframe sequence played on mount or\n   *  whenever `keyframes.key` (LeafPath) changes. Coexists with\n   *  `transitions` ; the runtime applies whichever was last triggered\n   *  (no blending — see §6.6 last paragraph). */\n  keyframes?: Keyframes;\n  /** LSML 1.1 §6.7 — only meaningful on `repeat`. Each iteration's\n   *  animations start `index * stagger_ms` after iteration 0. */\n  stagger_ms?: number;\n  /** Children — already-inlined primitives only. */\n  children?: RenderNode[];\n}\n\nexport type OperatorInputType =\n  | \"boolean\"\n  | \"number\"\n  | \"text\"\n  | \"select\"\n  | \"enum\"\n  | \"path-ref\"\n  | \"colour\"\n  | \"duration\";\n\nexport interface OperatorInput {\n  path: string;\n  label: string;\n  type: OperatorInputType;\n  default?: unknown;\n  group?: string;\n  writable_by?: string[];\n  [extra: string]: unknown;\n}\n\nexport interface ExternalAdapter {\n  key: string;\n  label: string;\n  kind: string;\n  target_paths: string[];\n  [extra: string]: unknown;\n}\n\nexport interface Asset {\n  id: string;\n  url: string;\n  kind: string;\n  [extra: string]: unknown;\n}\n\nexport interface RenderBundle {\n  scene_version: string;\n  root: RenderNode;\n  operator_inputs?: OperatorInput[];\n  external_adapters?: ExternalAdapter[];\n  /** Bundle-level asset declarations. `allowedHosts` is the host\n   *  allowlist (LSML 1.2 §3.2, Bastion T1) every image / image-fill `src`\n   *  is gated against at render BEFORE reaching the DOM. Absent / empty =\n   *  deny every remote host (deny-by-default). Other keys (`fonts`,\n   *  `preload`) are forwarded opaquely by the compiler. */\n  assets?: { allowedHosts?: string[]; [key: string]: unknown };\n  /** LSML 1.1 §17.3 — capability profiles required for correct rendering.\n   * Each entry is an `x-<vendor>.<name>/<version>` string. The runtime\n   * checks every behavioural entry against its supported list ; an\n   * unrecognised behavioural profile raises BUNDLE_INCOMPATIBLE per\n   * §17.3.1. Authoring profiles (`x-<vendor>.authoring/<major>`, §17.5.1)\n   * are advisory : ignored at render time, never a rejection cause. */\n  profiles?: string[];\n}\n\n/**\n * Profiles the JS runtime advertises support for. Bundle authors who\n * declare `profiles: [...]` get a hard `BUNDLE_INCOMPATIBLE` rejection\n * when any entry is not in this set (LSML 1.1 §17.3.1).\n *\n * 1.1 ships with no standard profiles ; future minors / vendor specs\n * register here. The `x-lumencast.color-srgb-1.0` entry is the\n * default-color-space marker ; bundles that opt into a perceptual\n * space (OKLCH) would request a different profile and currently\n * reject.\n */\nexport const SUPPORTED_PROFILES: ReadonlySet<string> = new Set<string>([\n  \"x-lumencast.color-srgb-1.0\",\n]);\n\n// LSML 1.1 §17.5.1 + ADR 001 RC#14 — authoring-profile detection.\n//\n// An authoring profile is advisory : a runtime that does not support it\n// MUST NOT reject the bundle and renders the underlying primitives as if\n// the profile were absent. Detection matches the COMPLETE identifier form\n// `x-<vendor>.authoring/<major>` :\n//\n//   - `x-` prefix, then one or more lowercase name segments separated by\n//     dots, where `.authoring` is the EXACT TERMINAL segment before `/` ;\n//   - `<major>` is a bare integer (no `.minor`) ;\n//   - never a substring test : a behavioural profile whose name merely\n//     *contains* `.authoring` in a non-terminal position is NOT exempted\n//     and keeps §17.3.1 hard-rejection semantics.\n//\n// Anti-ReDoS note : both regexes below are anchored and unambiguous —\n// the character classes exclude the `.` and `/` separators, so there is\n// exactly one possible parse per input (linear time, no backtracking).\nconst AUTHORING_NAME_RE = /^x-[a-z0-9-]+(?:\\.[a-z0-9-]+)*$/;\nconst AUTHORING_MAJOR_RE = /^(?:0|[1-9][0-9]*)$/;\nconst AUTHORING_SUFFIX = \".authoring\";\n\n/** True when `id` has the complete authoring-profile form\n * `x-<vendor>.authoring/<major>` (LSML 1.1 §17.5.1, ADR 001 RC#14).\n * Such profiles are advisory : ignored at render time, never rejected. */\nexport function isAuthoringProfile(id: string): boolean {\n  const slash = id.indexOf(\"/\");\n  if (slash < 0) return false;\n  const name = id.slice(0, slash);\n  const major = id.slice(slash + 1);\n  if (!AUTHORING_MAJOR_RE.test(major)) return false;\n  if (!name.endsWith(AUTHORING_SUFFIX)) return false;\n  // `name` minus the terminal `.authoring` segment must still be a valid\n  // `x-<vendor>[.<segment>...]` prefix — this is what makes `.authoring`\n  // a real terminal segment rather than a substring of another one\n  // (e.g. `x-evilauthoring/1` or `x-evil.authoring.fx/1` do not match).\n  return AUTHORING_NAME_RE.test(name.slice(0, -AUTHORING_SUFFIX.length));\n}\n\nexport class BundleIncompatibleError extends Error {\n  public readonly code = \"BUNDLE_INCOMPATIBLE\" as const;\n  public readonly unsupportedProfiles: string[];\n  constructor(unsupportedProfiles: string[]) {\n    super(\n      `BUNDLE_INCOMPATIBLE: profile(s) not supported by this runtime: ${unsupportedProfiles.join(\n        \", \",\n      )}`,\n    );\n    this.name = \"BundleIncompatibleError\";\n    this.unsupportedProfiles = unsupportedProfiles;\n  }\n}\n\n/** Validate a bundle's `profiles[]` against the runtime's supported\n * set. Throws `BundleIncompatibleError` listing every offending entry\n * when at least one behavioural profile is not supported.\n *\n * Authoring profiles (`x-<vendor>.authoring/<major>`, LSML 1.1 §17.5.1)\n * are advisory and skipped : their absence from the supported set is\n * never a rejection cause. Every other (behavioural) unsupported profile\n * keeps the hard §17.3.1 `BUNDLE_INCOMPATIBLE` rejection.\n *\n * Malformed-shape guard : `bundle` may come from an unchecked\n * `json as RenderBundle` cast on untrusted server JSON\n * (`FetcherImpl.get`). A non-array `profiles` or a non-string entry is\n * therefore reachable at runtime and is rejected as\n * `BundleIncompatibleError` (typed, code BUNDLE_INCOMPATIBLE) — never a\n * raw TypeError. The diagnostic never echoes the malformed value, only a\n * shape placeholder. */\nexport function validateBundleProfiles(\n  bundle: { profiles?: string[] },\n  supported: ReadonlySet<string> = SUPPORTED_PROFILES,\n): void {\n  const profiles: unknown = bundle.profiles;\n  if (!profiles) return;\n  if (!Array.isArray(profiles)) {\n    throw new BundleIncompatibleError([\"<malformed: profiles is not an array>\"]);\n  }\n  if (profiles.length === 0) return;\n  const missing = profiles\n    .filter((p) => typeof p !== \"string\" || (!isAuthoringProfile(p) && !supported.has(p)))\n    .map((p) => (typeof p === \"string\" ? p : \"<malformed: non-string profile entry>\"));\n  if (missing.length > 0) {\n    throw new BundleIncompatibleError(missing);\n  }\n}\n\n// --- fetch + cache ---------------------------------------------------\n\nexport interface BundleFetcher {\n  /** Fetch the bundle for a scene version. Cached forever by hash. */\n  get(sceneId: string, sceneVersion: string): Promise<RenderBundle>;\n  /** Inject a bundle directly — used by tests and for the \"scene already in\n   *  flight\" handoff path. */\n  preload(bundle: RenderBundle): void;\n}\n\n/** Resolves the absolute URL of a scene's render bundle. Supplied by the\n *  host (`MountOptions.resolveBundleUrl`) when the server is not at the\n *  default host-root LSDP/1 layout — e.g. reached through a gateway prefix\n *  (`https://gw/orion/api/v1/scenes/{id}/render-bundle?v={hash}`). */\nexport type BundleUrlResolver = (sceneId: string, sceneVersion: string) => string;\n\nexport interface BundleFetcherOptions {\n  /** Base URL of the server. The fetcher constructs\n   *  `${baseUrl}/lsdp/v1/scenes/{id}/bundle?v={hash}`. Ignored when\n   *  `resolveUrl` is provided. */\n  baseUrl: string;\n  /** Path prefix for bundle resolution. Defaults to `/lsdp/v1/scenes`.\n   *  Ignored when `resolveUrl` is provided. */\n  pathPrefix?: string;\n  /** When set, takes full control of URL construction — the host owns the\n   *  whole URL (base, path prefix and `/bundle` vs `/render-bundle` suffix).\n   *  Lets a gateway-prefixed server be addressed without changing the\n   *  host-root default. */\n  resolveUrl?: BundleUrlResolver;\n  /** Resolve the bearer token used to authenticate each bundle GET. The\n   *  render-bundle endpoint is auth-gated identically to the LSDP/1 WS\n   *  subscription, so the fetch carries the same session token as\n   *  `Authorization: Bearer <token>`. Resolved per request so a token swap\n   *  (`setToken`) takes effect on the next fetch ; a `LumencastTokenProvider`\n   *  is awaited. When omitted — or when it resolves to an empty/undefined\n   *  value — no `Authorization` header is sent (v0.5.0 behaviour). */\n  getAuthToken?: () => string | undefined | Promise<string | undefined>;\n  fetchImpl?: typeof fetch;\n}\n\nclass FetcherImpl implements BundleFetcher {\n  private readonly cache = new Map<string, RenderBundle>();\n  private readonly baseUrl: string;\n  private readonly pathPrefix: string;\n  private readonly resolveUrl: BundleUrlResolver | undefined;\n  private readonly getAuthToken: BundleFetcherOptions[\"getAuthToken\"];\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(opts: BundleFetcherOptions) {\n    this.baseUrl = opts.baseUrl.replace(/\\/$/, \"\");\n    this.pathPrefix = (opts.pathPrefix ?? \"/lsdp/v1/scenes\").replace(/\\/$/, \"\");\n    this.resolveUrl = opts.resolveUrl;\n    this.getAuthToken = opts.getAuthToken;\n    this.fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);\n  }\n\n  /** Build the request init carrying the bearer token, if any. Returns\n   *  `undefined` when no token is available — the fetch stays header-less,\n   *  preserving v0.5.0 behaviour. */\n  private async buildInit(): Promise<RequestInit | undefined> {\n    if (!this.getAuthToken) return undefined;\n    const token = await this.getAuthToken();\n    if (!token) return undefined;\n    return { headers: { Authorization: `Bearer ${token}` } };\n  }\n\n  private buildUrl(sceneId: string, sceneVersion: string): string {\n    if (this.resolveUrl) {\n      return this.resolveUrl(sceneId, sceneVersion);\n    }\n    return `${this.baseUrl}${this.pathPrefix}/${encodeURIComponent(sceneId)}/bundle?v=${encodeURIComponent(sceneVersion)}`;\n  }\n\n  preload(bundle: RenderBundle): void {\n    // LSML 1.1 §17.3.1 — reject early if any declared profile is\n    // unsupported by this runtime. Authors get an actionable error\n    // instead of a silent rendering glitch.\n    validateBundleProfiles(bundle);\n    this.cache.set(bundle.scene_version, bundle);\n  }\n\n  async get(sceneId: string, sceneVersion: string): Promise<RenderBundle> {\n    const cached = this.cache.get(sceneVersion);\n    if (cached) return cached;\n    const url = this.buildUrl(sceneId, sceneVersion);\n    const init = await this.buildInit();\n    const response = init ? await this.fetchImpl(url, init) : await this.fetchImpl(url);\n    if (!response.ok) {\n      throw new Error(`bundle fetch failed: ${response.status} ${response.statusText}`);\n    }\n    const json = (await response.json()) as RenderBundle;\n    if (json.scene_version !== sceneVersion) {\n      throw new Error(\n        `bundle scene_version mismatch: expected ${sceneVersion}, got ${json.scene_version}`,\n      );\n    }\n    validateBundleProfiles(json);\n    this.cache.set(sceneVersion, json);\n    return json;\n  }\n}\n\nexport function createBundleFetcher(opts: BundleFetcherOptions): BundleFetcher {\n  return new FetcherImpl(opts);\n}\n","// Exponential backoff schedule for the WS reconnect loop.\n//\n// Aggressive at first (200 ms, 400 ms, 800 ms…) then capped at 5 s so a\n// sustained outage doesn't hammer the gateway. Jittered to avoid thundering\n// herds when several Lumencast instances reconnect together (e.g. a CEF\n// host + a webview waking from suspend at the same time).\n//\n// The reference schedule in LSDP/1 §7 is \"0 ms, 500 ms, 1 s, 2 s, 4 s, 8 s,\n// 15 s, 30 s, 60 s cap\". This implementation defaults are tighter; both are\n// MAY-bounded by the spec.\n\nexport interface ReconnectScheduleOptions {\n  /** First delay in milliseconds. */\n  initial?: number;\n  /** Maximum delay in milliseconds. */\n  max?: number;\n  /** Multiplicative factor between attempts (>= 1). */\n  factor?: number;\n  /** Jitter as a fraction of the delay (0 disables, 0.2 = ±20 %). */\n  jitter?: number;\n  /** Random source — only injected for tests. */\n  random?: () => number;\n}\n\nconst DEFAULTS: Required<Omit<ReconnectScheduleOptions, \"random\">> = {\n  initial: 200,\n  max: 5_000,\n  factor: 2,\n  jitter: 0.2,\n};\n\nexport interface ReconnectSchedule {\n  /** Returns the delay to wait before the n-th attempt (1-indexed). */\n  delayFor(attempt: number): number;\n  /** Reset to attempt 1 (called on a successful connection). */\n  reset(): void;\n  /** Current attempt counter. */\n  readonly attempt: number;\n}\n\nclass ScheduleImpl implements ReconnectSchedule {\n  private _attempt = 0;\n  constructor(\n    private readonly opts: Required<Omit<ReconnectScheduleOptions, \"random\">>,\n    private readonly random: () => number,\n  ) {}\n\n  get attempt(): number {\n    return this._attempt;\n  }\n\n  delayFor(attempt: number): number {\n    if (!Number.isInteger(attempt) || attempt < 1) {\n      throw new RangeError(`attempt must be a positive integer, got ${attempt}`);\n    }\n    this._attempt = attempt;\n    const base = Math.min(\n      this.opts.initial * Math.pow(this.opts.factor, attempt - 1),\n      this.opts.max,\n    );\n    if (this.opts.jitter <= 0) return base;\n    const offset = (this.random() * 2 - 1) * this.opts.jitter * base;\n    return Math.max(0, base + offset);\n  }\n\n  reset(): void {\n    this._attempt = 0;\n  }\n}\n\nexport function createReconnectSchedule(opts: ReconnectScheduleOptions = {}): ReconnectSchedule {\n  const merged = {\n    initial: opts.initial ?? DEFAULTS.initial,\n    max: opts.max ?? DEFAULTS.max,\n    factor: opts.factor ?? DEFAULTS.factor,\n    jitter: opts.jitter ?? DEFAULTS.jitter,\n  };\n  if (merged.initial <= 0) throw new RangeError(\"initial must be > 0\");\n  if (merged.max < merged.initial) throw new RangeError(\"max must be >= initial\");\n  if (merged.factor < 1) throw new RangeError(\"factor must be >= 1\");\n  if (merged.jitter < 0 || merged.jitter > 1) throw new RangeError(\"jitter must be within [0, 1]\");\n  return new ScheduleImpl(merged, opts.random ?? Math.random);\n}\n","// LSDP/1 WebSocket client.\n//\n// Lifecycle (LSDP/1 §6):\n//   1. open() — opens the WS with subprotocol `lsdp.v1`\n//   2. on open: send `subscribe` with the resolved token (and scene + session\n//      for test mode)\n//   3. server replies `snapshot` (seq=1) → emit onSnapshot\n//   4. subsequent `delta` / `scene_changed` / `error` / `pong` are dispatched\n//   5. on a sequence gap → close + reconnect (fresh snapshot)\n//   6. on close → reconnect with backoff, unless close was triggered by close()\n//   7. setToken() opens a parallel WS with the new token; once its snapshot\n//      lands, atomically swap and close the old socket — no rendering gap\n\nimport {\n  decodeServerFrame,\n  encodeFrame,\n  LumencastError,\n  SequenceTracker,\n  WS_SUBPROTOCOL_V1_1,\n  WS_SUBPROTOCOLS,\n  input as inputFrame,\n  subscribe as subscribeFrame,\n  type DeltaFrame,\n  type ErrorCode,\n  type ErrorFrame,\n  type Patch,\n  type SceneChangedFrame,\n  type SnapshotFrame,\n} from \"@lumencast/protocol\";\nimport type { LumencastToken } from \"../types.js\";\nimport {\n  createReconnectSchedule,\n  type ReconnectSchedule,\n  type ReconnectScheduleOptions,\n} from \"./reconnect.js\";\n\nexport type ConnectionStatus = \"disconnected\" | \"connecting\" | \"live\";\n\nexport interface WsClientOptions {\n  url: string;\n  token: LumencastToken;\n  /** Optional scene identifier (test mode). */\n  scene?: string;\n  /** Optional session identifier (test mode). */\n  session?: string;\n  /** Override the WebSocket constructor (for tests / non-browser hosts). */\n  webSocketImpl?: typeof WebSocket;\n  /** Reconnect tuning. */\n  reconnect?: ReconnectScheduleOptions;\n  /** Inject scheduler for tests. */\n  scheduler?: {\n    setTimeout: typeof globalThis.setTimeout;\n    clearTimeout: typeof globalThis.clearTimeout;\n  };\n\n  onStatus?: (status: ConnectionStatus) => void;\n  onSnapshot?: (frame: SnapshotFrame) => void;\n  onDelta?: (frame: DeltaFrame) => void;\n  onSceneChanged?: (frame: SceneChangedFrame) => void;\n  onServerError?: (frame: ErrorFrame) => void;\n  /** Wire-level / codec / unrecoverable errors. */\n  onTransportError?: (err: TransportError) => void;\n}\n\nexport class TransportError extends Error {\n  public readonly recoverable: boolean;\n  public readonly code: ErrorCode;\n  public override readonly cause?: unknown;\n  constructor(\n    message: string,\n    recoverable: boolean,\n    code: ErrorCode = \"INTERNAL\",\n    cause?: unknown,\n  ) {\n    super(message);\n    this.name = \"TransportError\";\n    this.recoverable = recoverable;\n    this.code = code;\n    this.cause = cause;\n  }\n}\n\ntype Timer = ReturnType<typeof setTimeout>;\n\ninterface InternalScheduler {\n  setTimeout: typeof globalThis.setTimeout;\n  clearTimeout: typeof globalThis.clearTimeout;\n}\n\nexport class WsClient {\n  private status: ConnectionStatus = \"disconnected\";\n  private socket: WebSocket | null = null;\n  private token: LumencastToken;\n  private readonly url: string;\n  private readonly WebSocketCtor: typeof WebSocket;\n  private readonly schedule: ReconnectSchedule;\n  private readonly seq = new SequenceTracker();\n  private readonly opts: WsClientOptions;\n  private readonly scheduler: InternalScheduler;\n\n  private reconnectTimer: Timer | null = null;\n  private active = true;\n\n  constructor(opts: WsClientOptions) {\n    this.opts = opts;\n    this.url = opts.url;\n    this.token = opts.token;\n    const ctor = opts.webSocketImpl ?? globalThis.WebSocket;\n    if (!ctor) {\n      throw new TypeError(\n        \"Lumencast WsClient: no WebSocket implementation found in this environment\",\n      );\n    }\n    this.WebSocketCtor = ctor;\n    this.schedule = createReconnectSchedule(opts.reconnect);\n    this.scheduler = opts.scheduler ?? {\n      setTimeout: globalThis.setTimeout.bind(globalThis),\n      clearTimeout: globalThis.clearTimeout.bind(globalThis),\n    };\n  }\n\n  /** Open and start the connection lifecycle. Idempotent. */\n  start(): void {\n    if (!this.active) return;\n    if (this.socket || this.status === \"connecting\") return;\n    void this.openSocket();\n  }\n\n  /** Resolve the current session token (the one used for the WS\n   *  subscription). Mirrors `setToken` swaps. Used by the bundle fetcher to\n   *  authenticate the render-bundle GET with the same credential. A\n   *  `LumencastTokenProvider` is awaited. */\n  resolveCurrentToken(): Promise<string> {\n    return resolveToken(this.token);\n  }\n\n  /** Send `input` patches to the server. No-op if not connected. */\n  sendInput(patches: Patch[]): void {\n    if (!this.socket || this.socket.readyState !== this.WebSocketCtor.OPEN) return;\n    if (patches.length === 0) return;\n    this.socket.send(encodeFrame(inputFrame(patches)));\n  }\n\n  /** Replace the auth token. Closes and reopens with the new token. */\n  setToken(token: LumencastToken): void {\n    this.token = token;\n    if (!this.active) return;\n    if (this.socket) {\n      this.closeSocket();\n      this.scheduleReconnect(true);\n    }\n  }\n\n  /** Tear down for good. No more reconnect attempts. */\n  close(): void {\n    if (!this.active) return;\n    this.active = false;\n    this.cancelReconnect();\n    this.closeSocket();\n    this.setStatus(\"disconnected\");\n  }\n\n  // --- internals --------------------------------------------------\n\n  private async openSocket(): Promise<void> {\n    if (!this.active) return;\n    this.setStatus(\"connecting\");\n\n    let resolvedToken: string;\n    try {\n      resolvedToken = await resolveToken(this.token);\n    } catch (err) {\n      this.opts.onTransportError?.(\n        new TransportError(\n          `failed to resolve token: ${(err as Error).message}`,\n          true,\n          \"AUTH_DENIED\",\n          err,\n        ),\n      );\n      this.scheduleReconnect();\n      return;\n    }\n    if (!this.active) return;\n\n    let socket: WebSocket;\n    try {\n      // Advertise both 1.1 (preferred) and 1.0 (fallback) ; the server\n      // picks one. Spread to a mutable array — the WebSocket constructor\n      // type expects string[].\n      socket = new this.WebSocketCtor(this.url, [...WS_SUBPROTOCOLS]);\n    } catch (err) {\n      this.opts.onTransportError?.(\n        new TransportError(\n          `failed to open WebSocket: ${(err as Error).message}`,\n          true,\n          \"INTERNAL\",\n          err,\n        ),\n      );\n      this.scheduleReconnect();\n      return;\n    }\n\n    this.socket = socket;\n    socket.onopen = () => this.handleOpen(resolvedToken);\n    socket.onmessage = (event) => this.handleMessage(event);\n    socket.onerror = (event) => this.handleError(event);\n    socket.onclose = (event) => this.handleClose(event);\n  }\n\n  private handleOpen(token: string): void {\n    if (!this.socket) return;\n    // LSDP/1.1 §4.1, §18 — if we have a previously-observed seq AND the\n    // negotiated subprotocol is 1.1, request an incremental resume.\n    // The server will EITHER ship buffered deltas (cache stays valid)\n    // OR a fresh snapshot which we rebase via observeSnapshot.\n    const subprotocol = this.socket.protocol;\n    const canResume = subprotocol === WS_SUBPROTOCOL_V1_1 && this.seq.last > 0;\n    const sinceSequence = canResume ? this.seq.last : undefined;\n    if (!canResume) {\n      // Fresh subscription (no resume) — reset the tracker baseline.\n      this.seq.reset();\n    }\n    const frame = subscribeFrame({\n      token,\n      ...(this.opts.scene !== undefined ? { scene: this.opts.scene } : {}),\n      ...(this.opts.session !== undefined ? { session: this.opts.session } : {}),\n      ...(sinceSequence !== undefined ? { since_sequence: sinceSequence } : {}),\n    });\n    this.socket.send(encodeFrame(frame));\n  }\n\n  private handleMessage(event: MessageEvent): void {\n    const data = typeof event.data === \"string\" ? event.data : \"\";\n    if (!data) return;\n    let frame;\n    try {\n      frame = decodeServerFrame(data);\n    } catch (err) {\n      const message = err instanceof LumencastError ? err.message : (err as Error).message;\n      const code: ErrorCode = err instanceof LumencastError ? err.code : \"INTERNAL\";\n      this.opts.onTransportError?.(new TransportError(`codec: ${message}`, true, code, err));\n      this.closeSocket();\n      this.scheduleReconnect();\n      return;\n    }\n    if (frame === null) return; // unknown frame type — forward-compat ignore\n\n    switch (frame.type) {\n      case \"snapshot\": {\n        // LSDP/1.1 §18.1.1 — snapshot rebases the tracker to its seq\n        // value. This is the ONLY valid way to set or change the\n        // tracker's baseline (handles fresh sub, scene_changed, and\n        // back-pressure recovery uniformly).\n        if (frame.seq < 1) {\n          this.opts.onTransportError?.(\n            new TransportError(`snapshot seq must be >= 1, got ${frame.seq}`, true, \"VERSION_GAP\"),\n          );\n          this.closeSocket();\n          this.scheduleReconnect();\n          return;\n        }\n        this.seq.observeSnapshot(frame.seq);\n        this.schedule.reset();\n        this.setStatus(\"live\");\n        this.opts.onSnapshot?.(frame);\n        return;\n      }\n      case \"delta\": {\n        const obs = this.seq.observe(frame.seq);\n        if (obs.kind === \"gap\") {\n          this.opts.onTransportError?.(\n            new TransportError(\n              `sequence gap: expected ${this.seq.last + 1}, got ${frame.seq}`,\n              true,\n              \"VERSION_GAP\",\n            ),\n          );\n          this.closeSocket();\n          this.scheduleReconnect();\n          return;\n        }\n        if (obs.kind === \"duplicate\") return; // silent drop per LSDP/1 §5\n        this.opts.onDelta?.(frame);\n        return;\n      }\n      case \"scene_changed\": {\n        // The next snapshot will rebase the tracker via observeSnapshot.\n        // Reset here so the tracker doesn't fault on the SceneChanged's\n        // own seq (which advances prev's counter one final step).\n        this.seq.reset();\n        this.opts.onSceneChanged?.(frame);\n        return;\n      }\n      case \"error\": {\n        this.opts.onServerError?.(frame);\n        if (!frame.recoverable) this.close();\n        return;\n      }\n      case \"pong\":\n        return;\n    }\n  }\n\n  private handleError(_event: Event): void {\n    // The browser does not give us a real reason — `close` will follow.\n  }\n\n  private handleClose(event: CloseEvent): void {\n    this.socket = null;\n    if (!this.active) {\n      this.setStatus(\"disconnected\");\n      return;\n    }\n    if (event.code === 4401 || event.code === 4403 || event.code === 1008) {\n      // Auth-related close codes: not recoverable without operator intervention.\n      this.opts.onTransportError?.(\n        new TransportError(`server closed: ${event.code} ${event.reason}`, false, \"AUTH_DENIED\"),\n      );\n      this.close();\n      return;\n    }\n    this.scheduleReconnect();\n  }\n\n  private scheduleReconnect(immediate = false): void {\n    if (!this.active) return;\n    this.cancelReconnect();\n    const attempt = (this.schedule.attempt || 0) + 1;\n    const delay = immediate ? 0 : this.schedule.delayFor(attempt);\n    this.setStatus(\"disconnected\");\n    this.reconnectTimer = this.scheduler.setTimeout(() => {\n      this.reconnectTimer = null;\n      void this.openSocket();\n    }, delay);\n  }\n\n  private cancelReconnect(): void {\n    if (this.reconnectTimer) {\n      this.scheduler.clearTimeout(this.reconnectTimer);\n      this.reconnectTimer = null;\n    }\n  }\n\n  private closeSocket(): void {\n    if (this.socket) {\n      try {\n        this.socket.close(1000, \"client closing\");\n      } catch {\n        // ignore\n      }\n      this.socket = null;\n    }\n  }\n\n  private setStatus(next: ConnectionStatus): void {\n    if (this.status === next) return;\n    this.status = next;\n    this.opts.onStatus?.(next);\n  }\n}\n\nasync function resolveToken(token: LumencastToken): Promise<string> {\n  if (typeof token === \"string\") return token;\n  return await token.fetch();\n}\n","import type { MountOptions } from \"../types\";\n\n/** Throws on invalid mount options. Exposed separately so unit tests\n *  can exercise it without mounting a real React root. */\nexport function validateOptions(options: MountOptions): void {\n  if (!(options.target instanceof HTMLElement)) {\n    throw new TypeError(\"mount: `target` must be an HTMLElement\");\n  }\n  if (typeof options.serverUrl !== \"string\" || options.serverUrl.length === 0) {\n    throw new TypeError(\"mount: `serverUrl` must be a non-empty string\");\n  }\n  if (options.mode === \"test\") {\n    if (!options.testSession) {\n      throw new TypeError(\"mount: `testSession` is required when mode === 'test'\");\n    }\n    if (!options.scene) {\n      throw new TypeError(\"mount: `scene` is required when mode === 'test'\");\n    }\n  }\n}\n","// Public mount() entry — the only surface a host (browser, CEF, OBS plugin,\n// iframe) interacts with. Lifecycle and contract: see RUNTIME-API.md.\n\nimport { signal } from \"@preact/signals-react\";\nimport { createRoot, type Root } from \"react-dom/client\";\nimport { createElement } from \"react\";\nimport { LumencastApp } from \"./app.js\";\nimport { applyDelta } from \"./state/apply-delta.js\";\nimport { applySnapshot } from \"./state/apply-snapshot.js\";\nimport { createStore } from \"./state/store.js\";\nimport { createBundleFetcher, type BundleFetcher, type RenderBundle } from \"./render/bundle.js\";\nimport { WsClient, type ConnectionStatus, type TransportError } from \"./transport/ws.js\";\nimport { validateOptions } from \"./internal/validate-options.js\";\nimport { addDiagnosticsHandler } from \"./render/diagnostics.js\";\nimport type { LumencastError, LumencastHandle, LumencastToken, MountOptions } from \"./types.js\";\n\nexport function mount(options: MountOptions): LumencastHandle {\n  validateOptions(options);\n  options.onStatus?.(\"disconnected\");\n\n  const store = createStore();\n  const baseUrl = deriveBaseUrl(options.serverUrl);\n  // The render-bundle endpoint is auth-gated like the LSDP/1 WS. Resolve the\n  // current session token per fetch (mirrors `setToken`) so each bundle GET\n  // carries `Authorization: Bearer <token>`. `ws` is assigned below; the\n  // closure runs only at fetch time, after assignment.\n  const bundleFetcher = createBundleFetcher({\n    baseUrl,\n    ...(options.resolveBundleUrl !== undefined ? { resolveUrl: options.resolveBundleUrl } : {}),\n    getAuthToken: () => ws.resolveCurrentToken(),\n  });\n\n  const bundleSignal = signal<RenderBundle | null>(null);\n  const statusSignal = signal<ConnectionStatus>(\"disconnected\");\n  const crossfadeKeySignal = signal<string>(\"__initial__\");\n\n  const setStatus = (status: ConnectionStatus): void => {\n    statusSignal.value = status;\n    options.onStatus?.(status);\n  };\n\n  const reportError = (err: LumencastError): void => {\n    options.onError?.(err);\n  };\n\n  let active = true;\n\n  // ADR 001 §3.4 (issue #34) — anti-silent-drop diagnostics are events\n  // surfaced to the host, never console logs in `broadcast` mode.\n  const removeDiagnosticsHandler = options.onDiagnostic\n    ? addDiagnosticsHandler(options.onDiagnostic)\n    : undefined;\n\n  const ws = new WsClient({\n    url: options.serverUrl,\n    token: options.token,\n    ...(options.scene !== undefined ? { scene: options.scene } : {}),\n    ...(options.testSession !== undefined ? { session: options.testSession } : {}),\n    onStatus: setStatus,\n    onSnapshot: (frame) => {\n      if (!active) return;\n      void onSnapshot(\n        bundleFetcher,\n        bundleSignal,\n        crossfadeKeySignal,\n        frame.scene_id,\n        frame.scene_version,\n        () => applySnapshot(store, frame),\n        reportError,\n      );\n      options.onMetric?.({\n        name: \"snapshot_received\",\n        scene_id: frame.scene_id,\n        path_count: Object.keys(frame.state).length,\n      });\n    },\n    onDelta: (frame) => {\n      if (!active) return;\n      const start = performance.now();\n      applyDelta(store, frame);\n      options.onMetric?.({\n        name: \"delta_applied\",\n        duration_ms: performance.now() - start,\n      });\n      options.onMetric?.({ name: \"delta_received\", count: 1, path_count: frame.patches.length });\n    },\n    onSceneChanged: (frame) => {\n      if (!active) return;\n      // The fresh snapshot that follows is the source of truth — it carries\n      // the new scene_version, drives the bundle fetch, and flips the\n      // crossfade key. Nothing eager to do here.\n      options.onMetric?.({\n        name: \"scene_changed\",\n        from: bundleSignal.value?.scene_version ?? null,\n        to: frame.scene_version,\n      });\n    },\n    onServerError: (frame) => {\n      reportError({\n        code: frame.code,\n        message: frame.message,\n        recoverable: frame.recoverable,\n      });\n    },\n    onTransportError: (err) => {\n      reportError(transportToLumencastError(err));\n    },\n  });\n\n  ws.start();\n\n  const root: Root = createRoot(options.target);\n  root.render(\n    createElement(LumencastApp, {\n      mode: options.mode,\n      store,\n      bundleSignal,\n      statusSignal,\n      crossfadeKeySignal,\n      sendInput: (patches) => ws.sendInput(patches),\n    }),\n  );\n\n  return {\n    disconnect() {\n      if (!active) return;\n      active = false;\n      removeDiagnosticsHandler?.();\n      ws.close();\n      root.unmount();\n    },\n    setToken(token: LumencastToken) {\n      if (!active) return;\n      ws.setToken(token);\n    },\n  };\n\n  // --- helpers ----------------------------------------------------------\n\n  async function onSnapshot(\n    fetcher: BundleFetcher,\n    bSignal: typeof bundleSignal,\n    cSignal: typeof crossfadeKeySignal,\n    sceneId: string,\n    sceneVersion: string,\n    applyState: () => void,\n    onErr: (err: LumencastError) => void,\n  ): Promise<void> {\n    let bundle: RenderBundle;\n    try {\n      bundle = await fetcher.get(sceneId, sceneVersion);\n    } catch (err) {\n      onErr({\n        code: \"BUNDLE_FETCH_FAILED\",\n        message: err instanceof Error ? err.message : \"render bundle fetch failed\",\n        recoverable: true,\n      });\n      return;\n    }\n    if (!active) return;\n    applyState();\n    bSignal.value = bundle;\n    cSignal.value = `${sceneId}::${sceneVersion}`;\n  }\n}\n\nfunction transportToLumencastError(err: TransportError): LumencastError {\n  return {\n    code: err.code,\n    message: err.message,\n    recoverable: err.recoverable,\n  };\n}\n\nfunction deriveBaseUrl(wsUrl: string): string {\n  // wss://<host>/lsdp/v1 → https://<host>\n  // ws://<host>/lsdp/v1  → http://<host>\n  try {\n    const u = new URL(wsUrl);\n    const httpScheme = u.protocol === \"wss:\" ? \"https:\" : \"http:\";\n    return `${httpScheme}//${u.host}`;\n  } catch {\n    return \"\";\n  }\n}\n","// Per-primitive prop allowlists (ADR 001 §3.4 D4, issue #34).\n//\n// Each primitive declares the exact set of resolved-prop keys it\n// consumes at render time. Any prop reaching the renderer outside the\n// allowlist — whether from a compiled bundle, a hand-rolled RenderNode\n// or a binding key — produces a structured diagnostic (never a silent\n// drop). Values are NEVER inspected nor reported (R9) : the check is\n// purely key-based.\n//\n// Key-based is sufficient for live deltas too : an LSDP delta can only\n// change the VALUE behind an already-declared binding key\n// (`resolveProps`, tree.tsx) — it can never introduce a new prop key.\n// The per-node key set is therefore static, and the check runs once per\n// RenderNode object (WeakSet dedup) instead of once per render.\n//\n// These sets mirror what each primitive's component ACTUALLY reads\n// today. Spec'd fields the renderer does not consume yet (e.g. `text`\n// `format`, `stack` `padding`) are deliberately NOT listed : per the\n// anti-silent-drop policy they must warn until they are implemented.\n\nimport type { RenderKind, RenderNode } from \"./bundle\";\nimport { emitDiagnostic } from \"./diagnostics\";\n\n/** Universal props consumed by the Tree renderer itself\n *  (`UniversalWrapper`, LSML 1.1 §5.4) on every primitive.\n *\n *  ADR 002 §3.1 (D1) — `x`/`y` (compiler-flattened LSML `position:{x,y}`)\n *  and `width`/`height` (flattened `size:{w,h}`) are consumed universally\n *  for absolute placement : the Tree reads them into the wrapper's\n *  `position`/`size`, so they are honoured on EVERY primitive, not\n *  silently dropped. Frame additionally reads them into its own absolute\n *  box (it lists them explicitly below too — the union is harmless). */\nconst UNIVERSAL_PROPS = [\n  \"visible\",\n  \"opacity\",\n  \"universal_opacity\",\n  \"rotation\",\n  \"sizing\",\n  \"x\",\n  \"y\",\n  \"width\",\n  \"height\",\n  // ADR 002 §3.2 (D2 / #D) — `blendMode` is consumed universally by the\n  // wrapper (→ CSS `mix-blend-mode`) on every primitive.\n  \"blendMode\",\n  // ADR 002 §3.2 (#E) — a typed `mask` is lowered onto EVERY primitive by the\n  // compiler and consumed by the Tree (built into a `<mask>` SVG element).\n  \"mask\",\n] as const;\n\nfunction allow(keys: readonly string[]): ReadonlySet<string> {\n  return new Set([...UNIVERSAL_PROPS, ...keys]);\n}\n\n/** Resolved-prop keys consumed per primitive (component + wrapper). */\nexport const PRIMITIVE_PROP_ALLOWLIST: Readonly<Record<RenderKind, ReadonlySet<string>>> = {\n  stack: allow([\"direction\", \"gap\", \"wrap\", \"crossGap\", \"align\", \"justify\"]),\n  grid: allow([\"cols\", \"rows\", \"gap\"]),\n  frame: allow([\n    \"x\",\n    \"y\",\n    \"width\",\n    \"height\",\n    \"scale\",\n    \"rotate\",\n    \"background\",\n    \"backgrounds\",\n    \"clipsContent\",\n  ]),\n  text: allow([\n    \"value\",\n    \"size\",\n    \"font\",\n    \"weight\",\n    \"colour\",\n    \"align\",\n    \"lineHeight\",\n    \"letterSpacing\",\n    \"textTransform\",\n    \"textDecoration\",\n    \"fontStyle\",\n    \"maxLines\",\n  ]),\n  image: allow([\"src\", \"alt\", \"fit\", \"position\", \"width\", \"height\"]),\n  shape: allow([\n    \"geometry\",\n    \"kind\",\n    \"width\",\n    \"height\",\n    \"radius\",\n    \"fill\",\n    \"fills\",\n    \"stroke\",\n    \"stroke_width\",\n    \"strokes\",\n    \"pathData\",\n    \"paths\",\n    \"ariaLabel\",\n  ]),\n  media: allow([\"src\", \"loop\", \"mute\", \"autoplay\", \"fit\"]),\n  instance: allow([\"scene_id\", \"scene_version\", \"size\", \"position\"]),\n  // `repeat` is dispatched specially by the tree ; its only consumed\n  // binding is `items`.\n  repeat: new Set([\"items\"]),\n};\n\nfunction isAllowed(kind: RenderKind, key: string): boolean {\n  const allowed = PRIMITIVE_PROP_ALLOWLIST[kind];\n  if (allowed === undefined) return true; // unknown kind warns separately (tree.tsx)\n  if (allowed.has(key)) return true;\n  // `instance` exposes bound sub-scene parameters under `params.*`\n  // (LSML §4.9) — the whole namespace is part of its contract.\n  if (kind === \"instance\" && (key === \"params\" || key.startsWith(\"params.\"))) return true;\n  return false;\n}\n\n// One check per RenderNode object — bundles are immutable once fetched,\n// and a node's key set cannot change live (see module header).\nconst checkedNodes = new WeakSet<RenderNode>();\n\n/**\n * Audit a node's static props + binding keys against its primitive's\n * allowlist. Every unknown key emits ONE structured diagnostic naming\n * `node.id` + the prop (never the value, R9). Idempotent per node.\n */\nexport function checkNodeProps(node: RenderNode): void {\n  if (checkedNodes.has(node)) return;\n  checkedNodes.add(node);\n  const keys = new Set<string>([\n    ...Object.keys(node.props ?? {}),\n    ...Object.keys(node.bindings ?? {}),\n  ]);\n  for (const key of keys) {\n    if (!isAllowed(node.kind, key)) {\n      emitDiagnostic(\n        node.id,\n        `${node.kind}.${key}`,\n        \"is not consumed by this primitive's renderer ; the prop is ignored (anti-silent-drop, ADR 001 §3.4)\",\n      );\n    }\n  }\n}\n"],"names":["Ctx","createContext","LumencastRuntimeProvider","value","children","jsx","useLumencastRuntime","v","useContext","LazyBroadcastMode","lazy","m","LazyControlMode","LazyTestMode","LumencastApp","mode","store","bundleSignal","statusSignal","crossfadeKeySignal","sendInput","useSignals","bundle","status","trackKey","ModeComponent","AnimatePresence","motion","Suspense","ANON_NODE_ID","handlers","addDiagnosticsHandler","handler","emitDiagnostic","nodeId","field","reason","diagnostic","MAX_FILTER_BLUR_PX","MAX_FILTER_BRIGHTNESS","MAX_FILTER_STRING_LEN","CAPS","clampFilterChannel","channel","cap","FILTER_STRING_RE","FILTER_IDENTITY","sanitizeCssFilterString","blur","brightness","warnRejectedFilter","NO_ANIMATION","EASE_MAP","toFramer","INITIAL_IDENTITY","DEFAULT_MOUNT_PLAY_TRANSITION","resolveTransition","transitionFor","keys","animateInitial","key","t","mountPlay","base","initial","from","safe","animate","parseWireTransition","kind","duration_ms","easing","WIRE_EASING_MAP","out","applyDelta","frame","batch","patch","transition","applySnapshot","StoreImpl","path","signal","s","shallowEqual","ts","state","seen","createStore","a","b","i","ao","bo","ak","bk","k","SUPPORTED_PROFILES","AUTHORING_NAME_RE","AUTHORING_MAJOR_RE","AUTHORING_SUFFIX","isAuthoringProfile","id","slash","name","major","BundleIncompatibleError","unsupportedProfiles","validateBundleProfiles","supported","profiles","missing","p","FetcherImpl","opts","token","sceneId","sceneVersion","cached","url","init","response","json","createBundleFetcher","DEFAULTS","ScheduleImpl","random","attempt","offset","createReconnectSchedule","merged","TransportError","message","recoverable","code","cause","WsClient","SequenceTracker","ctor","resolveToken","patches","encodeFrame","inputFrame","resolvedToken","err","socket","WS_SUBPROTOCOLS","event","canResume","WS_SUBPROTOCOL_V1_1","sinceSequence","subscribeFrame","data","decodeServerFrame","LumencastError","obs","_event","immediate","delay","next","validateOptions","options","mount","baseUrl","deriveBaseUrl","bundleFetcher","ws","setStatus","reportError","active","removeDiagnosticsHandler","onSnapshot","start","transportToLumencastError","root","createRoot","createElement","fetcher","bSignal","cSignal","applyState","onErr","wsUrl","u","UNIVERSAL_PROPS","allow","PRIMITIVE_PROP_ALLOWLIST","isAllowed","allowed","checkedNodes","checkNodeProps","node"],"mappings":";;;;;;;AAgBA,MAAMA,IAAMC,EAAuC,IAAI;AAEhD,SAASC,GAAyB;AAAA,EACvC,OAAAC;AAAA,EACA,UAAAC;AACF,GAGG;AACD,SAAO,gBAAAC,EAACL,EAAI,UAAJ,EAAa,OAAAG,GAAe,UAAAC,EAAA,CAAS;AAC/C;AAEO,SAASE,KAAwC;AACtD,QAAMC,IAAIC,EAAWR,CAAG;AACxB,MAAI,CAACO;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAGJ,SAAOA;AACT;ACdA,MAAME,KAAoBC;AAAA,EAAK,MAC7B,OAAO,yBAAsB,EAAE,KAAK,CAACC,OAAO,EAAE,SAASA,EAAE,gBAAgB;AAC3E,GACMC,KAAkBF;AAAA,EAAK,MAC3B,OAAO,uBAAoB,EAAE,KAAK,CAACC,OAAO,EAAE,SAASA,EAAE,cAAc;AACvE,GACME,KAAeH,EAAK,MAAM,OAAO,oBAAiB,EAAE,KAAK,CAACC,OAAO,EAAE,SAASA,EAAE,SAAA,EAAW,CAAC;AAWzF,SAASG,GAAa;AAAA,EAC3B,MAAAC;AAAA,EACA,OAAAC;AAAA,EACA,cAAAC;AAAA,EACA,cAAAC;AAAA,EACA,oBAAAC;AAAA,EACA,WAAAC;AACF,GAAsB;AACpB,EAAAC,EAAA;AAEA,QAAMC,IAASL,EAAa,OACtBM,IAASL,EAAa,OACtBM,IAAWL,EAAmB;AACpC,MAAI,CAACG,EAAQ,QAAO;AAEpB,QAAMG,IACJV,MAAS,cAAcN,KAAoBM,MAAS,YAAYH,KAAkBC;AAEpF,SACE,gBAAAR,EAACqB,GAAA,EAAgB,MAAK,QACpB,UAAA,gBAAArB;AAAA,IAACsB,EAAO;AAAA,IAAP;AAAA,MAEC,SAAS,EAAE,SAAS,EAAA;AAAA,MACpB,SAAS,EAAE,SAAS,EAAA;AAAA,MACpB,MAAM,EAAE,SAAS,EAAA;AAAA,MACjB,YAAY,EAAE,UAAU,KAAK,MAAM,YAAA;AAAA,MACnC,OAAO,EAAE,UAAU,YAAY,OAAO,EAAA;AAAA,MAEtC,UAAA,gBAAAtB;AAAA,QAACH;AAAA,QAAA;AAAA,UACC,OAAO;AAAA,YACL,MAAAa;AAAA,YACA,OAAAC;AAAA,YACA,QAAAM;AAAA,YACA,QAAAC;AAAA,YACA,WAAAH;AAAA,UAAA;AAAA,UAGF,4BAACQ,GAAA,EAAS,UAAU,MAClB,UAAA,gBAAAvB,EAACoB,KAAc,EAAA,CACjB;AAAA,QAAA;AAAA,MAAA;AAAA,IACF;AAAA,IAnBKD;AAAA,EAAA,GAqBT;AAEJ;AC7DO,MAAMK,KAAe,UAetBC,wBAAe,IAAA;AAQd,SAASC,GAAsBC,GAAwC;AAC5E,SAAAF,EAAS,IAAIE,CAAO,GACb,MAAM;AACX,IAAAF,EAAS,OAAOE,CAAO;AAAA,EACzB;AACF;AAMO,SAASC,EAAeC,GAA4BC,GAAeC,GAAsB;AAC9F,QAAMC,IAA+B,EAAE,QAAQH,KAAUL,IAAc,OAAAM,GAAO,QAAAC,EAAA;AAC9E,MAAIN,EAAS,OAAO,GAAG;AACrB,eAAWE,KAAWF;AACpB,UAAI;AACF,QAAAE,EAAQK,CAAU;AAAA,MACpB,QAAQ;AAAA,MAER;AAEF;AAAA,EACF;AAOF;AC9CO,MAAMC,KAAqB,KAGrBC,KAAwB,GAE/BC,KAAwB,IAExBC,KAAsC;AAAA,EAC1C,MAAMH;AAAA,EACN,YAAYC;AACd;AAYO,SAASG,EAAmBC,GAAwBxC,GAA+B;AAExF,MADI,OAAOA,KAAU,YAAY,CAAC,OAAO,SAASA,CAAK,KACnDA,IAAQ,KAAK,OAAO,GAAGA,GAAO,EAAE,EAAG,QAAO;AAC9C,QAAMyC,IAAMH,GAAKE,CAAO;AACxB,SAAOxC,IAAQyC,IAAMA,IAAMzC;AAC7B;AAMA,MAAM0C,KACJ,6EAIWC,KAAkB;AASxB,SAASC,GAAwB5C,GAA+B;AAErE,MADI,OAAOA,KAAU,YACjBA,EAAM,WAAW,KAAKA,EAAM,SAASqC,GAAuB,QAAO;AACvE,QAAM7B,IAAIkC,GAAiB,KAAK1C,CAAK;AACrC,MAAI,CAACQ,EAAG,QAAO;AACf,QAAMqC,IAAON,EAAmB,QAAQ,OAAO/B,EAAE,CAAC,CAAC,CAAC,GAC9CsC,IAAaP,EAAmB,cAAc,OAAO/B,EAAE,CAAC,CAAC,CAAC;AAChE,SAAIqC,MAAS,QAAQC,MAAe,OAAa,OAC1C,QAAQD,CAAI,kBAAkBC,CAAU;AACjD;AAQO,SAASC,GAAmBf,GAAeD,GAAuB;AACvE,EAAAD;AAAA,IACEC;AAAA,IACAC;AAAA,IACA;AAAA,EAAA;AAEJ;AC7CA,MAAMgB,KAAiC,EAAE,UAAU,EAAA,GAE7CC,KAAyC;AAAA,EAC7C,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,gBAAgB;AAClB;AAEO,SAASC,GAAS,GAA6C;AACpE,SAAI,CAAC,KAAK,EAAE,SAAS,SAAeF,KAChC,EAAE,SAAS,UACN;AAAA,IACL,MAAM;AAAA,IACN,WAAW,EAAE,eAAe,KAAK;AAAA,IACjC,MAAM,EAAE,OAAQC,GAAS,EAAE,IAAI,KAAK,YAAa;AAAA,EAAA,IAGjD,EAAE,SAAS,WACN;AAAA,IACL,MAAM;AAAA,IACN,GAAI,EAAE,cAAc,SAAY,EAAE,WAAW,EAAE,UAAA,IAAc,CAAA;AAAA,IAC7D,GAAI,EAAE,YAAY,SAAY,EAAE,SAAS,EAAE,QAAA,IAAY,CAAA;AAAA,IACvD,GAAI,EAAE,SAAS,SAAY,EAAE,MAAM,EAAE,SAAS,CAAA;AAAA,EAAC,IAI5C;AAAA,IACL,MAAM;AAAA,IACN,WAAW,EAAE,eAAe,OAAO;AAAA,IACnC,MAAM;AAAA,EAAA;AAEV;AAQA,MAAME,KAAoD;AAAA,EACxD,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,GAAG;AAAA,EACH,GAAG;AAAA;AAAA;AAAA;AAAA,EAIH,QAAQ;AACV,GAkBaC,KAA4C;AAAA,EACvD,MAAM;AAAA,EACN,aAAa;AAAA,EACb,MAAM;AACR;AAkBO,SAASC,GACdC,GACAC,GACAC,GACwB;AACxB,aAAWC,KAAOF,GAAM;AACtB,UAAMG,IAAIJ,EAAcG,CAAG;AAC3B,QAAIC,MAAM,OAAW,QAAOA;AAAA,EAC9B;AACA,MAAIF,KAAkB,OAAO,KAAKA,CAAc,EAAE,SAAS,GAAG;AAC5D,eAAWC,KAAO,OAAO,KAAKD,CAAc,GAAG;AAC7C,YAAME,IAAIJ,EAAcG,CAAG;AAC3B,UAAIC,MAAM,OAAW,QAAOA;AAAA,IAC9B;AACA,WAAON;AAAA,EACT;AAEF;AAkBO,SAASO,GACdC,GACAC,GACA9B,GACW;AACX,MAAI,CAAC8B,KAAW,OAAO,KAAKA,CAAO,EAAE,WAAW;AAI9C,WAAO,EAAE,SAASD,GAAM,SAASA,EAAA;AAMnC,MAAIE,IAAOD;AACX,MAAIA,EAAQ,WAAc,QAAW;AACnC,UAAME,IAAOnB,GAAwBiB,EAAQ,MAAS;AACtD,IAAAC,IAAO,EAAE,GAAGD,EAAA,GACRE,MAAS,QACXhB,GAAmB,0BAA0BhB,CAAM,GACnD,OAAO+B,EAAK,UAEZA,EAAK,SAAYC;AAAA,EAErB;AACA,QAAMC,IAA2C,EAAE,GAAGJ,EAAA;AACtD,aAAWH,KAAO,OAAO,KAAKK,CAAI;AAChC,IAAML,KAAOO,MACXA,EAAQP,CAAG,IAAIN,GAAiBM,CAAG,KAAK;AAG5C,SAAO,EAAE,SAASK,GAAM,SAAAE,EAAA;AAC1B;AAUO,SAASC,GAAoBjE,GAAwC;AAC1E,MAAI,OAAOA,KAAU,YAAYA,MAAU,KAAM;AACjD,QAAMI,IAAIJ,GACJkE,IAAO9D,EAAE;AACf,MAAI8D,MAAS;AACX,WAAO,EAAE,MAAM,OAAA;AAEjB,MAAIA,MAAS,SAAS;AACpB,UAAMC,IAAc,OAAO/D,EAAE,eAAgB,WAAWA,EAAE,cAAc,GAClEgE,IAASC,GAAgBjE,EAAE,MAAgB,KAAK;AACtD,WAAO,EAAE,MAAM,SAAS,aAAA+D,GAAa,MAAMC,EAAA;AAAA,EAC7C;AACA,MAAIF,MAAS,UAAU;AACrB,UAAMI,IAAwB,EAAE,MAAM,SAAA;AACtC,WAAI,OAAOlE,EAAE,aAAc,aAAUkE,EAAI,YAAYlE,EAAE,YACnD,OAAOA,EAAE,WAAY,aAAUkE,EAAI,UAAUlE,EAAE,UAE/C,OAAOA,EAAE,QAAS,aAAUkE,EAAI,OAAOlE,EAAE,OACtCkE;AAAA,EACT;AAEF;AAEA,MAAMD,KAAwF;AAAA,EAC5F,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,eAAe;AACjB;AC/OO,SAASE,GAAW1D,GAAc2D,GAAyB;AAChE,EAAAC,EAAM,MAAM;AACV,eAAWC,KAASF,EAAM,SAAS;AACjC,YAAMG,IAAaV,GAAoBS,EAAM,UAAU;AACvD,MAAIC,MAAe,SACjB9D,EAAM,kBAAkB6D,EAAM,MAAMA,EAAM,OAAOC,CAAU,IAE3D9D,EAAM,IAAI6D,EAAM,MAAMA,EAAM,KAAK;AAAA,IAErC;AAAA,EACF,CAAC;AACH;AClBO,SAASE,GAAc/D,GAAc2D,GAA4B;AACtE,EAAA3D,EAAM,MAAM2D,EAAM,KAAK;AACzB;ACkCA,MAAMK,GAA2B;AAAA,EACd,8BAAc,IAAA;AAAA,EACd,kCAAkB,IAAA;AAAA,EAEnC,OAAOC,GAA+B;AACpC,QAAI,IAAI,KAAK,QAAQ,IAAIA,CAAI;AAC7B,WAAK,MACH,IAAIC,EAAgB,MAAS,GAC7B,KAAK,QAAQ,IAAID,GAAM,CAAC,IAEnB;AAAA,EACT;AAAA,EAEA,iBAAiBA,GAA8C;AAC7D,QAAI,IAAI,KAAK,YAAY,IAAIA,CAAI;AACjC,WAAK,MACH,IAAIC,EAA+B,MAAS,GAC5C,KAAK,YAAY,IAAID,GAAM,CAAC,IAEvB;AAAA,EACT;AAAA,EAEA,IAAIA,GAAc9E,GAAsB;AACtC,UAAMgF,IAAI,KAAK,OAAOF,CAAI;AAC1B,IAAKG,EAAaD,EAAE,KAAA,GAAQhF,CAAK,MAC/BgF,EAAE,QAAQhF;AAAA,EAEd;AAAA,EAEA,kBAAkB8E,GAAc9E,GAAgB2E,GAA0C;AACxF,IAAAF,EAAM,MAAM;AACV,YAAMS,IAAK,KAAK,iBAAiBJ,CAAI;AAGrC,MAAII,EAAG,KAAA,MAAWP,QAAe,QAAQA;AACzC,YAAMK,IAAI,KAAK,OAAOF,CAAI;AAC1B,MAAKG,EAAaD,EAAE,KAAA,GAAQhF,CAAK,QAAK,QAAQA;AAAA,IAChD,CAAC;AAAA,EACH;AAAA,EAEA,MAAMmF,GAAsC;AAC1C,IAAAV,EAAM,MAAM;AACV,YAAMW,wBAAW,IAAA;AACjB,iBAAW,CAACN,GAAM9E,CAAK,KAAK,OAAO,QAAQmF,CAAK,GAAG;AACjD,QAAAC,EAAK,IAAIN,CAAI;AACb,cAAME,IAAI,KAAK,OAAOF,CAAI;AAC1B,QAAKG,EAAaD,EAAE,KAAA,GAAQhF,CAAK,MAC/BgF,EAAE,QAAQhF;AAKZ,cAAMkF,IAAK,KAAK,YAAY,IAAIJ,CAAI;AACpC,QAAII,KAAMA,EAAG,KAAA,MAAW,aAAc,QAAQ;AAAA,MAChD;AACA,iBAAWJ,KAAQ,KAAK,QAAQ,KAAA;AAC9B,YAAI,CAACM,EAAK,IAAIN,CAAI,GAAG;AACnB,gBAAME,IAAI,KAAK,QAAQ,IAAIF,CAAI;AAC/B,UAAIE,KAAKA,EAAE,KAAA,MAAW,aAAa,QAAQ;AAAA,QAC7C;AAAA,IAEJ,CAAC;AAAA,EACH;AAAA,EAEA,WAAoC;AAClC,UAAMV,IAA+B,CAAA;AACrC,eAAW,CAACQ,GAAME,CAAC,KAAK,KAAK,QAAQ;AACnC,MAAAV,EAAIQ,CAAI,IAAIE,EAAE,KAAA;AAEhB,WAAOV;AAAA,EACT;AACF;AAEO,SAASe,KAAqB;AACnC,SAAO,IAAIR,GAAA;AACb;AAEA,SAASI,EAAaK,GAAYC,GAAqB;AACrD,MAAID,MAAMC,EAAG,QAAO;AAIpB,MAHID,MAAM,QAAQC,MAAM,QACpB,OAAOD,KAAM,OAAOC,KACpB,OAAOD,KAAM,YACb,MAAM,QAAQA,CAAC,MAAM,MAAM,QAAQC,CAAC,EAAG,QAAO;AAClD,MAAI,MAAM,QAAQD,CAAC,KAAK,MAAM,QAAQC,CAAC,GAAG;AACxC,QAAID,EAAE,WAAWC,EAAE,OAAQ,QAAO;AAClC,aAASC,IAAI,GAAGA,IAAIF,EAAE,QAAQE;AAC5B,UAAIF,EAAEE,CAAC,MAAMD,EAAEC,CAAC,EAAG,QAAO;AAE5B,WAAO;AAAA,EACT;AACA,QAAMC,IAAKH,GACLI,IAAKH,GACLI,IAAK,OAAO,KAAKF,CAAE,GACnBG,IAAK,OAAO,KAAKF,CAAE;AACzB,MAAIC,EAAG,WAAWC,EAAG,OAAQ,QAAO;AACpC,aAAWC,KAAKF;AACd,QAAIF,EAAGI,CAAC,MAAMH,EAAGG,CAAC,EAAG,QAAO;AAE9B,SAAO;AACT;ACDO,MAAMC,yBAA8C,IAAY;AAAA,EACrE;AACF,CAAC,GAmBKC,KAAoB,mCACpBC,KAAqB,uBACrBC,IAAmB;AAKlB,SAASC,GAAmBC,GAAqB;AACtD,QAAMC,IAAQD,EAAG,QAAQ,GAAG;AAC5B,MAAIC,IAAQ,EAAG,QAAO;AACtB,QAAMC,IAAOF,EAAG,MAAM,GAAGC,CAAK,GACxBE,IAAQH,EAAG,MAAMC,IAAQ,CAAC;AAEhC,SADI,CAACJ,GAAmB,KAAKM,CAAK,KAC9B,CAACD,EAAK,SAASJ,CAAgB,IAAU,KAKtCF,GAAkB,KAAKM,EAAK,MAAM,GAAG,CAACJ,EAAiB,MAAM,CAAC;AACvE;AAEO,MAAMM,UAAgC,MAAM;AAAA,EACjC,OAAO;AAAA,EACP;AAAA,EAChB,YAAYC,GAA+B;AACzC;AAAA,MACE,kEAAkEA,EAAoB;AAAA,QACpF;AAAA,MAAA,CACD;AAAA,IAAA,GAEH,KAAK,OAAO,2BACZ,KAAK,sBAAsBA;AAAA,EAC7B;AACF;AAkBO,SAASC,EACdtF,GACAuF,IAAiCZ,IAC3B;AACN,QAAMa,IAAoBxF,EAAO;AACjC,MAAI,CAACwF,EAAU;AACf,MAAI,CAAC,MAAM,QAAQA,CAAQ;AACzB,UAAM,IAAIJ,EAAwB,CAAC,uCAAuC,CAAC;AAE7E,MAAII,EAAS,WAAW,EAAG;AAC3B,QAAMC,IAAUD,EACb,OAAO,CAACE,MAAM,OAAOA,KAAM,YAAa,CAACX,GAAmBW,CAAC,KAAK,CAACH,EAAU,IAAIG,CAAC,CAAE,EACpF,IAAI,CAACA,MAAO,OAAOA,KAAM,WAAWA,IAAI,uCAAwC;AACnF,MAAID,EAAQ,SAAS;AACnB,UAAM,IAAIL,EAAwBK,CAAO;AAE7C;AA0CA,MAAME,GAAqC;AAAA,EACxB,4BAAY,IAAA;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAYC,GAA4B;AACtC,SAAK,UAAUA,EAAK,QAAQ,QAAQ,OAAO,EAAE,GAC7C,KAAK,cAAcA,EAAK,cAAc,mBAAmB,QAAQ,OAAO,EAAE,GAC1E,KAAK,aAAaA,EAAK,YACvB,KAAK,eAAeA,EAAK,cACzB,KAAK,YAAYA,EAAK,aAAa,WAAW,MAAM,KAAK,UAAU;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,YAA8C;AAC1D,QAAI,CAAC,KAAK,aAAc;AACxB,UAAMC,IAAQ,MAAM,KAAK,aAAA;AACzB,QAAKA;AACL,aAAO,EAAE,SAAS,EAAE,eAAe,UAAUA,CAAK,KAAG;AAAA,EACvD;AAAA,EAEQ,SAASC,GAAiBC,GAA8B;AAC9D,WAAI,KAAK,aACA,KAAK,WAAWD,GAASC,CAAY,IAEvC,GAAG,KAAK,OAAO,GAAG,KAAK,UAAU,IAAI,mBAAmBD,CAAO,CAAC,aAAa,mBAAmBC,CAAY,CAAC;AAAA,EACtH;AAAA,EAEA,QAAQ/F,GAA4B;AAIlC,IAAAsF,EAAuBtF,CAAM,GAC7B,KAAK,MAAM,IAAIA,EAAO,eAAeA,CAAM;AAAA,EAC7C;AAAA,EAEA,MAAM,IAAI8F,GAAiBC,GAA6C;AACtE,UAAMC,IAAS,KAAK,MAAM,IAAID,CAAY;AAC1C,QAAIC,EAAQ,QAAOA;AACnB,UAAMC,IAAM,KAAK,SAASH,GAASC,CAAY,GACzCG,IAAO,MAAM,KAAK,UAAA,GAClBC,IAAWD,IAAO,MAAM,KAAK,UAAUD,GAAKC,CAAI,IAAI,MAAM,KAAK,UAAUD,CAAG;AAClF,QAAI,CAACE,EAAS;AACZ,YAAM,IAAI,MAAM,wBAAwBA,EAAS,MAAM,IAAIA,EAAS,UAAU,EAAE;AAElF,UAAMC,IAAQ,MAAMD,EAAS,KAAA;AAC7B,QAAIC,EAAK,kBAAkBL;AACzB,YAAM,IAAI;AAAA,QACR,2CAA2CA,CAAY,SAASK,EAAK,aAAa;AAAA,MAAA;AAGtF,WAAAd,EAAuBc,CAAI,GAC3B,KAAK,MAAM,IAAIL,GAAcK,CAAI,GAC1BA;AAAA,EACT;AACF;AAEO,SAASC,GAAoBT,GAA2C;AAC7E,SAAO,IAAID,GAAYC,CAAI;AAC7B;ACrTA,MAAMU,IAA+D;AAAA,EACnE,SAAS;AAAA,EACT,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,QAAQ;AACV;AAWA,MAAMC,GAA0C;AAAA,EAE9C,YACmBX,GACAY,GACjB;AAFiB,SAAA,OAAAZ,GACA,KAAA,SAAAY;AAAA,EAChB;AAAA,EAJK,WAAW;AAAA,EAMnB,IAAI,UAAkB;AACpB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,SAASC,GAAyB;AAChC,QAAI,CAAC,OAAO,UAAUA,CAAO,KAAKA,IAAU;AAC1C,YAAM,IAAI,WAAW,2CAA2CA,CAAO,EAAE;AAE3E,SAAK,WAAWA;AAChB,UAAMhE,IAAO,KAAK;AAAA,MAChB,KAAK,KAAK,UAAU,KAAK,IAAI,KAAK,KAAK,QAAQgE,IAAU,CAAC;AAAA,MAC1D,KAAK,KAAK;AAAA,IAAA;AAEZ,QAAI,KAAK,KAAK,UAAU,EAAG,QAAOhE;AAClC,UAAMiE,KAAU,KAAK,OAAA,IAAW,IAAI,KAAK,KAAK,KAAK,SAASjE;AAC5D,WAAO,KAAK,IAAI,GAAGA,IAAOiE,CAAM;AAAA,EAClC;AAAA,EAEA,QAAc;AACZ,SAAK,WAAW;AAAA,EAClB;AACF;AAEO,SAASC,GAAwBf,IAAiC,IAAuB;AAC9F,QAAMgB,IAAS;AAAA,IACb,SAAShB,EAAK,WAAWU,EAAS;AAAA,IAClC,KAAKV,EAAK,OAAOU,EAAS;AAAA,IAC1B,QAAQV,EAAK,UAAUU,EAAS;AAAA,IAChC,QAAQV,EAAK,UAAUU,EAAS;AAAA,EAAA;AAElC,MAAIM,EAAO,WAAW,EAAG,OAAM,IAAI,WAAW,qBAAqB;AACnE,MAAIA,EAAO,MAAMA,EAAO,QAAS,OAAM,IAAI,WAAW,wBAAwB;AAC9E,MAAIA,EAAO,SAAS,EAAG,OAAM,IAAI,WAAW,qBAAqB;AACjE,MAAIA,EAAO,SAAS,KAAKA,EAAO,SAAS,EAAG,OAAM,IAAI,WAAW,8BAA8B;AAC/F,SAAO,IAAIL,GAAaK,GAAQhB,EAAK,UAAU,KAAK,MAAM;AAC5D;AClBO,MAAMiB,UAAuB,MAAM;AAAA,EACxB;AAAA,EACA;AAAA,EACS;AAAA,EACzB,YACEC,GACAC,GACAC,IAAkB,YAClBC,GACA;AACA,UAAMH,CAAO,GACb,KAAK,OAAO,kBACZ,KAAK,cAAcC,GACnB,KAAK,OAAOC,GACZ,KAAK,QAAQC;AAAA,EACf;AACF;AASO,MAAMC,GAAS;AAAA,EACZ,SAA2B;AAAA,EAC3B,SAA2B;AAAA,EAC3B;AAAA,EACS;AAAA,EACA;AAAA,EACA;AAAA,EACA,MAAM,IAAIC,EAAA;AAAA,EACV;AAAA,EACA;AAAA,EAET,iBAA+B;AAAA,EAC/B,SAAS;AAAA,EAEjB,YAAYvB,GAAuB;AACjC,SAAK,OAAOA,GACZ,KAAK,MAAMA,EAAK,KAChB,KAAK,QAAQA,EAAK;AAClB,UAAMwB,IAAOxB,EAAK,iBAAiB,WAAW;AAC9C,QAAI,CAACwB;AACH,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AAGJ,SAAK,gBAAgBA,GACrB,KAAK,WAAWT,GAAwBf,EAAK,SAAS,GACtD,KAAK,YAAYA,EAAK,aAAa;AAAA,MACjC,YAAY,WAAW,WAAW,KAAK,UAAU;AAAA,MACjD,cAAc,WAAW,aAAa,KAAK,UAAU;AAAA,IAAA;AAAA,EAEzD;AAAA;AAAA,EAGA,QAAc;AACZ,IAAK,KAAK,WACN,KAAK,UAAU,KAAK,WAAW,gBAC9B,KAAK,WAAA;AAAA,EACZ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,sBAAuC;AACrC,WAAOyB,EAAa,KAAK,KAAK;AAAA,EAChC;AAAA;AAAA,EAGA,UAAUC,GAAwB;AAChC,IAAI,CAAC,KAAK,UAAU,KAAK,OAAO,eAAe,KAAK,cAAc,QAC9DA,EAAQ,WAAW,KACvB,KAAK,OAAO,KAAKC,EAAYC,EAAWF,CAAO,CAAC,CAAC;AAAA,EACnD;AAAA;AAAA,EAGA,SAASzB,GAA6B;AAEpC,IADA,KAAK,QAAQA,GACR,KAAK,UACN,KAAK,WACP,KAAK,YAAA,GACL,KAAK,kBAAkB,EAAI;AAAA,EAE/B;AAAA;AAAA,EAGA,QAAc;AACZ,IAAK,KAAK,WACV,KAAK,SAAS,IACd,KAAK,gBAAA,GACL,KAAK,YAAA,GACL,KAAK,UAAU,cAAc;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAc,aAA4B;AACxC,QAAI,CAAC,KAAK,OAAQ;AAClB,SAAK,UAAU,YAAY;AAE3B,QAAI4B;AACJ,QAAI;AACF,MAAAA,IAAgB,MAAMJ,EAAa,KAAK,KAAK;AAAA,IAC/C,SAASK,GAAK;AACZ,WAAK,KAAK;AAAA,QACR,IAAIb;AAAA,UACF,4BAA6Ba,EAAc,OAAO;AAAA,UAClD;AAAA,UACA;AAAA,UACAA;AAAA,QAAA;AAAA,MACF,GAEF,KAAK,kBAAA;AACL;AAAA,IACF;AACA,QAAI,CAAC,KAAK,OAAQ;AAElB,QAAIC;AACJ,QAAI;AAIF,MAAAA,IAAS,IAAI,KAAK,cAAc,KAAK,KAAK,CAAC,GAAGC,CAAe,CAAC;AAAA,IAChE,SAASF,GAAK;AACZ,WAAK,KAAK;AAAA,QACR,IAAIb;AAAA,UACF,6BAA8Ba,EAAc,OAAO;AAAA,UACnD;AAAA,UACA;AAAA,UACAA;AAAA,QAAA;AAAA,MACF,GAEF,KAAK,kBAAA;AACL;AAAA,IACF;AAEA,SAAK,SAASC,GACdA,EAAO,SAAS,MAAM,KAAK,WAAWF,CAAa,GACnDE,EAAO,YAAY,CAACE,MAAU,KAAK,cAAcA,CAAK,GACtDF,EAAO,UAAU,CAACE,MAAU,KAAK,YAAYA,CAAK,GAClDF,EAAO,UAAU,CAACE,MAAU,KAAK,YAAYA,CAAK;AAAA,EACpD;AAAA,EAEQ,WAAWhC,GAAqB;AACtC,QAAI,CAAC,KAAK,OAAQ;AAMlB,UAAMiC,IADc,KAAK,OAAO,aACEC,KAAuB,KAAK,IAAI,OAAO,GACnEC,IAAgBF,IAAY,KAAK,IAAI,OAAO;AAClD,IAAKA,KAEH,KAAK,IAAI,MAAA;AAEX,UAAMzE,IAAQ4E,GAAe;AAAA,MAC3B,OAAApC;AAAA,MACA,GAAI,KAAK,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,KAAK,MAAA,IAAU,CAAA;AAAA,MACjE,GAAI,KAAK,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,KAAK,QAAA,IAAY,CAAA;AAAA,MACvE,GAAImC,MAAkB,SAAY,EAAE,gBAAgBA,EAAA,IAAkB,CAAA;AAAA,IAAC,CACxE;AACD,SAAK,OAAO,KAAKT,EAAYlE,CAAK,CAAC;AAAA,EACrC;AAAA,EAEQ,cAAcwE,GAA2B;AAC/C,UAAMK,IAAO,OAAOL,EAAM,QAAS,WAAWA,EAAM,OAAO;AAC3D,QAAI,CAACK,EAAM;AACX,QAAI7E;AACJ,QAAI;AACF,MAAAA,IAAQ8E,GAAkBD,CAAI;AAAA,IAChC,SAASR,GAAK;AACZ,YAAMZ,KAAUY,aAAeU,GAAiBV,EAAI,UAC9CV,IAAkBU,aAAeU,IAAiBV,EAAI,OAAO;AACnE,WAAK,KAAK,mBAAmB,IAAIb,EAAe,UAAUC,CAAO,IAAI,IAAME,GAAMU,CAAG,CAAC,GACrF,KAAK,YAAA,GACL,KAAK,kBAAA;AACL;AAAA,IACF;AACA,QAAIrE,MAAU;AAEd,cAAQA,EAAM,MAAA;AAAA,QACZ,KAAK,YAAY;AAKf,cAAIA,EAAM,MAAM,GAAG;AACjB,iBAAK,KAAK;AAAA,cACR,IAAIwD,EAAe,kCAAkCxD,EAAM,GAAG,IAAI,IAAM,aAAa;AAAA,YAAA,GAEvF,KAAK,YAAA,GACL,KAAK,kBAAA;AACL;AAAA,UACF;AACA,eAAK,IAAI,gBAAgBA,EAAM,GAAG,GAClC,KAAK,SAAS,MAAA,GACd,KAAK,UAAU,MAAM,GACrB,KAAK,KAAK,aAAaA,CAAK;AAC5B;AAAA,QACF;AAAA,QACA,KAAK,SAAS;AACZ,gBAAMgF,IAAM,KAAK,IAAI,QAAQhF,EAAM,GAAG;AACtC,cAAIgF,EAAI,SAAS,OAAO;AACtB,iBAAK,KAAK;AAAA,cACR,IAAIxB;AAAA,gBACF,0BAA0B,KAAK,IAAI,OAAO,CAAC,SAASxD,EAAM,GAAG;AAAA,gBAC7D;AAAA,gBACA;AAAA,cAAA;AAAA,YACF,GAEF,KAAK,YAAA,GACL,KAAK,kBAAA;AACL;AAAA,UACF;AACA,cAAIgF,EAAI,SAAS,YAAa;AAC9B,eAAK,KAAK,UAAUhF,CAAK;AACzB;AAAA,QACF;AAAA,QACA,KAAK,iBAAiB;AAIpB,eAAK,IAAI,MAAA,GACT,KAAK,KAAK,iBAAiBA,CAAK;AAChC;AAAA,QACF;AAAA,QACA,KAAK,SAAS;AACZ,eAAK,KAAK,gBAAgBA,CAAK,GAC1BA,EAAM,eAAa,KAAK,MAAA;AAC7B;AAAA,QACF;AAAA,QACA,KAAK;AACH;AAAA,MAAA;AAAA,EAEN;AAAA,EAEQ,YAAYiF,GAAqB;AAAA,EAEzC;AAAA,EAEQ,YAAYT,GAAyB;AAE3C,QADA,KAAK,SAAS,MACV,CAAC,KAAK,QAAQ;AAChB,WAAK,UAAU,cAAc;AAC7B;AAAA,IACF;AACA,QAAIA,EAAM,SAAS,QAAQA,EAAM,SAAS,QAAQA,EAAM,SAAS,MAAM;AAErE,WAAK,KAAK;AAAA,QACR,IAAIhB,EAAe,kBAAkBgB,EAAM,IAAI,IAAIA,EAAM,MAAM,IAAI,IAAO,aAAa;AAAA,MAAA,GAEzF,KAAK,MAAA;AACL;AAAA,IACF;AACA,SAAK,kBAAA;AAAA,EACP;AAAA,EAEQ,kBAAkBU,IAAY,IAAa;AACjD,QAAI,CAAC,KAAK,OAAQ;AAClB,SAAK,gBAAA;AACL,UAAM9B,KAAW,KAAK,SAAS,WAAW,KAAK,GACzC+B,IAAQD,IAAY,IAAI,KAAK,SAAS,SAAS9B,CAAO;AAC5D,SAAK,UAAU,cAAc,GAC7B,KAAK,iBAAiB,KAAK,UAAU,WAAW,MAAM;AACpD,WAAK,iBAAiB,MACjB,KAAK,WAAA;AAAA,IACZ,GAAG+B,CAAK;AAAA,EACV;AAAA,EAEQ,kBAAwB;AAC9B,IAAI,KAAK,mBACP,KAAK,UAAU,aAAa,KAAK,cAAc,GAC/C,KAAK,iBAAiB;AAAA,EAE1B;AAAA,EAEQ,cAAoB;AAC1B,QAAI,KAAK,QAAQ;AACf,UAAI;AACF,aAAK,OAAO,MAAM,KAAM,gBAAgB;AAAA,MAC1C,QAAQ;AAAA,MAER;AACA,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,UAAUC,GAA8B;AAC9C,IAAI,KAAK,WAAWA,MACpB,KAAK,SAASA,GACd,KAAK,KAAK,WAAWA,CAAI;AAAA,EAC3B;AACF;AAEA,eAAepB,EAAaxB,GAAwC;AAClE,SAAI,OAAOA,KAAU,WAAiBA,IAC/B,MAAMA,EAAM,MAAA;AACrB;AC1WO,SAAS6C,GAAgBC,GAA6B;AAC3D,MAAI,EAAEA,EAAQ,kBAAkB;AAC9B,UAAM,IAAI,UAAU,wCAAwC;AAE9D,MAAI,OAAOA,EAAQ,aAAc,YAAYA,EAAQ,UAAU,WAAW;AACxE,UAAM,IAAI,UAAU,+CAA+C;AAErE,MAAIA,EAAQ,SAAS,QAAQ;AAC3B,QAAI,CAACA,EAAQ;AACX,YAAM,IAAI,UAAU,uDAAuD;AAE7E,QAAI,CAACA,EAAQ;AACX,YAAM,IAAI,UAAU,iDAAiD;AAAA,EAEzE;AACF;ACHO,SAASC,GAAMD,GAAwC;AAC5D,EAAAD,GAAgBC,CAAO,GACvBA,EAAQ,WAAW,cAAc;AAEjC,QAAMjJ,IAAQwE,GAAA,GACR2E,IAAUC,GAAcH,EAAQ,SAAS,GAKzCI,IAAgB1C,GAAoB;AAAA,IACxC,SAAAwC;AAAA,IACA,GAAIF,EAAQ,qBAAqB,SAAY,EAAE,YAAYA,EAAQ,iBAAA,IAAqB,CAAA;AAAA,IACxF,cAAc,MAAMK,EAAG,oBAAA;AAAA,EAAoB,CAC5C,GAEKrJ,IAAeiE,EAA4B,IAAI,GAC/ChE,IAAegE,EAAyB,cAAc,GACtD/D,IAAqB+D,EAAe,aAAa,GAEjDqF,IAAY,CAAChJ,MAAmC;AACpD,IAAAL,EAAa,QAAQK,GACrB0I,EAAQ,WAAW1I,CAAM;AAAA,EAC3B,GAEMiJ,IAAc,CAACxB,MAA8B;AACjD,IAAAiB,EAAQ,UAAUjB,CAAG;AAAA,EACvB;AAEA,MAAIyB,IAAS;AAIb,QAAMC,IAA2BT,EAAQ,eACrClI,GAAsBkI,EAAQ,YAAY,IAC1C,QAEEK,IAAK,IAAI9B,GAAS;AAAA,IACtB,KAAKyB,EAAQ;AAAA,IACb,OAAOA,EAAQ;AAAA,IACf,GAAIA,EAAQ,UAAU,SAAY,EAAE,OAAOA,EAAQ,MAAA,IAAU,CAAA;AAAA,IAC7D,GAAIA,EAAQ,gBAAgB,SAAY,EAAE,SAASA,EAAQ,YAAA,IAAgB,CAAA;AAAA,IAC3E,UAAUM;AAAA,IACV,YAAY,CAAC5F,MAAU;AACrB,MAAK8F,MACAE;AAAA,QACHN;AAAA,QACApJ;AAAA,QACAE;AAAA,QACAwD,EAAM;AAAA,QACNA,EAAM;AAAA,QACN,MAAMI,GAAc/D,GAAO2D,CAAK;AAAA,QAChC6F;AAAA,MAAA,GAEFP,EAAQ,WAAW;AAAA,QACjB,MAAM;AAAA,QACN,UAAUtF,EAAM;AAAA,QAChB,YAAY,OAAO,KAAKA,EAAM,KAAK,EAAE;AAAA,MAAA,CACtC;AAAA,IACH;AAAA,IACA,SAAS,CAACA,MAAU;AAClB,UAAI,CAAC8F,EAAQ;AACb,YAAMG,IAAQ,YAAY,IAAA;AAC1B,MAAAlG,GAAW1D,GAAO2D,CAAK,GACvBsF,EAAQ,WAAW;AAAA,QACjB,MAAM;AAAA,QACN,aAAa,YAAY,QAAQW;AAAA,MAAA,CAClC,GACDX,EAAQ,WAAW,EAAE,MAAM,kBAAkB,OAAO,GAAG,YAAYtF,EAAM,QAAQ,OAAA,CAAQ;AAAA,IAC3F;AAAA,IACA,gBAAgB,CAACA,MAAU;AACzB,MAAK8F,KAILR,EAAQ,WAAW;AAAA,QACjB,MAAM;AAAA,QACN,MAAMhJ,EAAa,OAAO,iBAAiB;AAAA,QAC3C,IAAI0D,EAAM;AAAA,MAAA,CACX;AAAA,IACH;AAAA,IACA,eAAe,CAACA,MAAU;AACxB,MAAA6F,EAAY;AAAA,QACV,MAAM7F,EAAM;AAAA,QACZ,SAASA,EAAM;AAAA,QACf,aAAaA,EAAM;AAAA,MAAA,CACpB;AAAA,IACH;AAAA,IACA,kBAAkB,CAACqE,MAAQ;AACzB,MAAAwB,EAAYK,GAA0B7B,CAAG,CAAC;AAAA,IAC5C;AAAA,EAAA,CACD;AAED,EAAAsB,EAAG,MAAA;AAEH,QAAMQ,IAAaC,EAAWd,EAAQ,MAAM;AAC5C,SAAAa,EAAK;AAAA,IACHE,EAAclK,IAAc;AAAA,MAC1B,MAAMmJ,EAAQ;AAAA,MACd,OAAAjJ;AAAA,MACA,cAAAC;AAAA,MACA,cAAAC;AAAA,MACA,oBAAAC;AAAA,MACA,WAAW,CAACyH,MAAY0B,EAAG,UAAU1B,CAAO;AAAA,IAAA,CAC7C;AAAA,EAAA,GAGI;AAAA,IACL,aAAa;AACX,MAAK6B,MACLA,IAAS,IACTC,IAAA,GACAJ,EAAG,MAAA,GACHQ,EAAK,QAAA;AAAA,IACP;AAAA,IACA,SAAS3D,GAAuB;AAC9B,MAAKsD,KACLH,EAAG,SAASnD,CAAK;AAAA,IACnB;AAAA,EAAA;AAKF,iBAAewD,EACbM,GACAC,GACAC,GACA/D,GACAC,GACA+D,GACAC,GACe;AACf,QAAI/J;AACJ,QAAI;AACF,MAAAA,IAAS,MAAM2J,EAAQ,IAAI7D,GAASC,CAAY;AAAA,IAClD,SAAS2B,GAAK;AACZ,MAAAqC,EAAM;AAAA,QACJ,MAAM;AAAA,QACN,SAASrC,aAAe,QAAQA,EAAI,UAAU;AAAA,QAC9C,aAAa;AAAA,MAAA,CACd;AACD;AAAA,IACF;AACA,IAAKyB,MACLW,EAAA,GACAF,EAAQ,QAAQ5J,GAChB6J,EAAQ,QAAQ,GAAG/D,CAAO,KAAKC,CAAY;AAAA,EAC7C;AACF;AAEA,SAASwD,GAA0B7B,GAAqC;AACtE,SAAO;AAAA,IACL,MAAMA,EAAI;AAAA,IACV,SAASA,EAAI;AAAA,IACb,aAAaA,EAAI;AAAA,EAAA;AAErB;AAEA,SAASoB,GAAckB,GAAuB;AAG5C,MAAI;AACF,UAAMC,IAAI,IAAI,IAAID,CAAK;AAEvB,WAAO,GADYC,EAAE,aAAa,SAAS,WAAW,OAClC,KAAKA,EAAE,IAAI;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;ACxJA,MAAMC,KAAkB;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA,EAGA;AAAA;AAAA;AAAA,EAGA;AACF;AAEA,SAASC,EAAM/H,GAA8C;AAC3D,6BAAW,IAAI,CAAC,GAAG8H,IAAiB,GAAG9H,CAAI,CAAC;AAC9C;AAGO,MAAMgI,KAA8E;AAAA,EACzF,OAAOD,EAAM,CAAC,aAAa,OAAO,QAAQ,YAAY,SAAS,SAAS,CAAC;AAAA,EACzE,MAAMA,EAAM,CAAC,QAAQ,QAAQ,KAAK,CAAC;AAAA,EACnC,OAAOA,EAAM;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AAAA,EACD,MAAMA,EAAM;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AAAA,EACD,OAAOA,EAAM,CAAC,OAAO,OAAO,OAAO,YAAY,SAAS,QAAQ,CAAC;AAAA,EACjE,OAAOA,EAAM;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AAAA,EACD,OAAOA,EAAM,CAAC,OAAO,QAAQ,QAAQ,YAAY,KAAK,CAAC;AAAA,EACvD,UAAUA,EAAM,CAAC,YAAY,iBAAiB,QAAQ,UAAU,CAAC;AAAA;AAAA;AAAA,EAGjE,QAAQ,oBAAI,IAAI,CAAC,OAAO,CAAC;AAC3B;AAEA,SAASE,GAAUtH,GAAkBT,GAAsB;AACzD,QAAMgI,IAAUF,GAAyBrH,CAAI;AAK7C,SAJI,GAAAuH,MAAY,UACZA,EAAQ,IAAIhI,CAAG,KAGfS,MAAS,eAAeT,MAAQ,YAAYA,EAAI,WAAW,SAAS;AAE1E;AAIA,MAAMiI,wBAAmB,QAAA;AAOlB,SAASC,GAAeC,GAAwB;AACrD,MAAIF,EAAa,IAAIE,CAAI,EAAG;AAC5B,EAAAF,EAAa,IAAIE,CAAI;AACrB,QAAMrI,wBAAW,IAAY;AAAA,IAC3B,GAAG,OAAO,KAAKqI,EAAK,SAAS,CAAA,CAAE;AAAA,IAC/B,GAAG,OAAO,KAAKA,EAAK,YAAY,CAAA,CAAE;AAAA,EAAA,CACnC;AACD,aAAWnI,KAAOF;AAChB,IAAKiI,GAAUI,EAAK,MAAMnI,CAAG,KAC3B3B;AAAA,MACE8J,EAAK;AAAA,MACL,GAAGA,EAAK,IAAI,IAAInI,CAAG;AAAA,MACnB;AAAA,IAAA;AAIR;"}

package/dist/index.html

@@ -3,7 +3,7 @@
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <meta name="generator" content="@lumencast/runtime 0.5.0" />
+    <meta name="generator" content="@lumencast/runtime 0.7.0" />
     <title>Lumencast</title>
     <style>
       html, body { margin: 0; padding: 0; height: 100%; background: #000; }

package/dist/lumencast.js

@@ -1,4 +1,4 @@
-import { A as i, B as o, P as r, S as P, b as e, i as d, d as l, v as n } from "./index-CyOlpZAL.js";
+import { A as i, B as o, P as r, S as P, b as e, i as d, d as l, v as n } from "./index-C6viWFcT.js";
 export {
   i as ANON_NODE_ID,
   o as BundleIncompatibleError,

package/dist/modes/broadcast.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"broadcast.d.ts","sourceRoot":"","sources":["../../src/modes/broadcast.tsx"],"names":[],"mappings":"AAGA,wDAAwD;AACxD,wBAAgB,aAAa,4CAG5B"}
+{"version":3,"file":"broadcast.d.ts","sourceRoot":"","sources":["../../src/modes/broadcast.tsx"],"names":[],"mappings":"AAMA,wDAAwD;AACxD,wBAAgB,aAAa,4CAW5B"}

package/dist/modes/broadcast.js

@@ -1,9 +1,14 @@
 import { jsx as _jsx } from "react/jsx-runtime";
+import { useMemo } from "react";
 import { Tree } from "../render/tree";
+import { AllowedHostsProvider, readAllowedHosts } from "../render/allowed-hosts";
+import { ShapeIndexProvider, buildShapeIndex } from "../render/shape-index";
 import { useLumencastRuntime } from "../overlay/runtime-context";
 /** Broadcast mode : pure scene render, no UI chrome. */
 export function BroadcastMode() {
     const { store, bundle } = useLumencastRuntime();
-    return _jsx(Tree, { node: bundle.root, store: store });
+    // ADR 002 A2.1 (#K) — build the `id → shape` index once per bundle.
+    const shapeIndex = useMemo(() => buildShapeIndex(bundle.root), [bundle.root]);
+    return (_jsx(AllowedHostsProvider, { hosts: readAllowedHosts(bundle), children: _jsx(ShapeIndexProvider, { index: shapeIndex, children: _jsx(Tree, { node: bundle.root, store: store }) }) }));
 }
 //# sourceMappingURL=broadcast.js.map

package/dist/modes/broadcast.js.map

@@ -1 +1 @@
-{"version":3,"file":"broadcast.js","sourceRoot":"","sources":["../../src/modes/broadcast.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,wDAAwD;AACxD,MAAM,UAAU,aAAa;IAC3B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAChD,OAAO,KAAC,IAAI,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAI,CAAC;AACnD,CAAC"}
+{"version":3,"file":"broadcast.js","sourceRoot":"","sources":["../../src/modes/broadcast.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,wDAAwD;AACxD,MAAM,UAAU,aAAa;IAC3B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAChD,oEAAoE;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,OAAO,CACL,KAAC,oBAAoB,IAAC,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,YACnD,KAAC,kBAAkB,IAAC,KAAK,EAAE,UAAU,YACnC,KAAC,IAAI,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAI,GACtB,GACA,CACxB,CAAC;AACJ,CAAC"}

package/dist/modes/control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control.d.ts","sourceRoot":"","sources":["../../src/modes/control.tsx"],"names":[],"mappings":"AAKA;mCACmC;AACnC,wBAAgB,WAAW,4CAS1B"}
+{"version":3,"file":"control.d.ts","sourceRoot":"","sources":["../../src/modes/control.tsx"],"names":[],"mappings":"AAQA;mCACmC;AACnC,wBAAgB,WAAW,4CAe1B"}

package/dist/modes/control.js

@@ -1,5 +1,8 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { useMemo } from "react";
 import { Tree } from "../render/tree";
+import { AllowedHostsProvider, readAllowedHosts } from "../render/allowed-hosts";
+import { ShapeIndexProvider, buildShapeIndex } from "../render/shape-index";
 import { ControlPanel } from "../overlay/control";
 import { StatusPill } from "../overlay/status-pill";
 import { useLumencastRuntime } from "../overlay/runtime-context";
@@ -7,6 +10,8 @@ import { useLumencastRuntime } from "../overlay/runtime-context";
  *  panel from operator_inputs). */
 export function ControlMode() {
     const { store, bundle } = useLumencastRuntime();
-    return (_jsxs(_Fragment, { children: [_jsx(Tree, { node: bundle.root, store: store }), _jsx(StatusPill, {}), _jsx(ControlPanel, {})] }));
+    // ADR 002 A2.1 (#K) — build the `id → shape` index once per bundle.
+    const shapeIndex = useMemo(() => buildShapeIndex(bundle.root), [bundle.root]);
+    return (_jsxs(_Fragment, { children: [_jsx(AllowedHostsProvider, { hosts: readAllowedHosts(bundle), children: _jsx(ShapeIndexProvider, { index: shapeIndex, children: _jsx(Tree, { node: bundle.root, store: store }) }) }), _jsx(StatusPill, {}), _jsx(ControlPanel, {})] }));
 }
 //# sourceMappingURL=control.js.map

package/dist/modes/control.js.map

@@ -1 +1 @@
-{"version":3,"file":"control.js","sourceRoot":"","sources":["../../src/modes/control.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE;mCACmC;AACnC,MAAM,UAAU,WAAW;IACzB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAChD,OAAO,CACL,8BACE,KAAC,IAAI,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAI,EACzC,KAAC,UAAU,KAAG,EACd,KAAC,YAAY,KAAG,IACf,CACJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../../src/modes/control.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE;mCACmC;AACnC,MAAM,UAAU,WAAW;IACzB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAChD,oEAAoE;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,OAAO,CACL,8BACE,KAAC,oBAAoB,IAAC,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,YACnD,KAAC,kBAAkB,IAAC,KAAK,EAAE,UAAU,YACnC,KAAC,IAAI,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAI,GACtB,GACA,EACvB,KAAC,UAAU,KAAG,EACd,KAAC,YAAY,KAAG,IACf,CACJ,CAAC;AACJ,CAAC"}

package/dist/modes/test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../../src/modes/test.tsx"],"names":[],"mappings":"AAMA;+CAC+C;AAC/C,wBAAgB,QAAQ,4CAUvB"}
+{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../../src/modes/test.tsx"],"names":[],"mappings":"AAOA;+CAC+C;AAC/C,wBAAgB,QAAQ,4CAYvB"}

package/dist/modes/test.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 import { Tree } from "../render/tree";
+import { AllowedHostsProvider, readAllowedHosts } from "../render/allowed-hosts";
 import { ControlPanel } from "../overlay/control";
 import { TestPanel } from "../overlay/test";
 import { StatusPill } from "../overlay/status-pill";
@@ -8,6 +9,6 @@ import { useLumencastRuntime } from "../overlay/runtime-context";
  *  mocker, state inspector, time controls). */
 export function TestMode() {
     const { store, bundle } = useLumencastRuntime();
-    return (_jsxs(_Fragment, { children: [_jsx(Tree, { node: bundle.root, store: store }), _jsx(StatusPill, {}), _jsx(ControlPanel, {}), _jsx(TestPanel, {})] }));
+    return (_jsxs(_Fragment, { children: [_jsx(AllowedHostsProvider, { hosts: readAllowedHosts(bundle), children: _jsx(Tree, { node: bundle.root, store: store }) }), _jsx(StatusPill, {}), _jsx(ControlPanel, {}), _jsx(TestPanel, {})] }));
 }
 //# sourceMappingURL=test.js.map

package/dist/modes/test.js.map

@@ -1 +1 @@
-{"version":3,"file":"test.js","sourceRoot":"","sources":["../../src/modes/test.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE;+CAC+C;AAC/C,MAAM,UAAU,QAAQ;IACtB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAChD,OAAO,CACL,8BACE,KAAC,IAAI,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAI,EACzC,KAAC,UAAU,KAAG,EACd,KAAC,YAAY,KAAG,EAChB,KAAC,SAAS,KAAG,IACZ,CACJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"test.js","sourceRoot":"","sources":["../../src/modes/test.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE;+CAC+C;AAC/C,MAAM,UAAU,QAAQ;IACtB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAChD,OAAO,CACL,8BACE,KAAC,oBAAoB,IAAC,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,YACnD,KAAC,IAAI,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAI,GACpB,EACvB,KAAC,UAAU,KAAG,EACd,KAAC,YAAY,KAAG,EAChB,KAAC,SAAS,KAAG,IACZ,CACJ,CAAC;AACJ,CAAC"}

package/dist/mount.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../src/mount.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAkB,eAAe,EAAkB,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhG,wBAAgB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,eAAe,CA+I5D"}
+{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../src/mount.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAkB,eAAe,EAAkB,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhG,wBAAgB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,eAAe,CAoJ5D"}

package/dist/mount.js

@@ -16,9 +16,14 @@ export function mount(options) {
     options.onStatus?.("disconnected");
     const store = createStore();
     const baseUrl = deriveBaseUrl(options.serverUrl);
+    // The render-bundle endpoint is auth-gated like the LSDP/1 WS. Resolve the
+    // current session token per fetch (mirrors `setToken`) so each bundle GET
+    // carries `Authorization: Bearer <token>`. `ws` is assigned below; the
+    // closure runs only at fetch time, after assignment.
     const bundleFetcher = createBundleFetcher({
         baseUrl,
         ...(options.resolveBundleUrl !== undefined ? { resolveUrl: options.resolveBundleUrl } : {}),
+        getAuthToken: () => ws.resolveCurrentToken(),
     });
     const bundleSignal = signal(null);
     const statusSignal = signal("disconnected");

package/dist/mount.js.map

@@ -1 +1 @@
-{"version":3,"file":"mount.js","sourceRoot":"","sources":["../src/mount.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,sEAAsE;AAEtE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAa,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAyC,MAAM,oBAAoB,CAAC;AAChG,OAAO,EAAE,QAAQ,EAA8C,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,MAAM,UAAU,KAAK,CAAC,OAAqB;IACzC,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,CAAC;IAEnC,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,mBAAmB,CAAC;QACxC,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5F,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,CAAsB,IAAI,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,MAAM,CAAmB,cAAc,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,MAAM,CAAS,aAAa,CAAC,CAAC;IAEzD,MAAM,SAAS,GAAG,CAAC,MAAwB,EAAQ,EAAE;QACnD,YAAY,CAAC,KAAK,GAAG,MAAM,CAAC;QAC5B,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,GAAmB,EAAQ,EAAE;QAChD,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,IAAI,MAAM,GAAG,IAAI,CAAC;IAElB,qEAAqE;IACrE,gEAAgE;IAChE,MAAM,wBAAwB,GAAG,OAAO,CAAC,YAAY;QACnD,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC;QACtB,GAAG,EAAE,OAAO,CAAC,SAAS;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YACpB,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,KAAK,UAAU,CACb,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,aAAa,EACnB,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,EACjC,WAAW,CACZ,CAAC;YACF,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACjB,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM;aAC5C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAChC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACzB,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACjB,IAAI,EAAE,eAAe;gBACrB,WAAW,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;aACvC,CAAC,CAAC;YACH,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE;YACxB,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,sEAAsE;YACtE,gEAAgE;YAChE,2CAA2C;YAC3C,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACjB,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,aAAa,IAAI,IAAI;gBAC/C,EAAE,EAAE,KAAK,CAAC,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;QACD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,WAAW,CAAC;gBACV,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,WAAW,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC,CAAC;IAEH,EAAE,CAAC,KAAK,EAAE,CAAC;IAEX,MAAM,IAAI,GAAS,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CACT,aAAa,CAAC,YAAY,EAAE;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK;QACL,YAAY;QACZ,YAAY;QACZ,kBAAkB;QAClB,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9C,CAAC,CACH,CAAC;IAEF,OAAO;QACL,UAAU;YACR,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,GAAG,KAAK,CAAC;YACf,wBAAwB,EAAE,EAAE,CAAC;YAC7B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QACD,QAAQ,CAAC,KAAqB;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;IAEF,yEAAyE;IAEzE,KAAK,UAAU,UAAU,CACvB,OAAsB,EACtB,OAA4B,EAC5B,OAAkC,EAClC,OAAe,EACf,YAAoB,EACpB,UAAsB,EACtB,KAAoC;QAEpC,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC;gBACJ,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;gBAC1E,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC;QACvB,OAAO,CAAC,KAAK,GAAG,GAAG,OAAO,KAAK,YAAY,EAAE,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAmB;IACpD,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,WAAW;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,wCAAwC;IACxC,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9D,OAAO,GAAG,UAAU,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"mount.js","sourceRoot":"","sources":["../src/mount.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,sEAAsE;AAEtE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAa,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAyC,MAAM,oBAAoB,CAAC;AAChG,OAAO,EAAE,QAAQ,EAA8C,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,MAAM,UAAU,KAAK,CAAC,OAAqB;IACzC,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,CAAC;IAEnC,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,aAAa,GAAG,mBAAmB,CAAC;QACxC,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,YAAY,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,mBAAmB,EAAE;KAC7C,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,CAAsB,IAAI,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,MAAM,CAAmB,cAAc,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,MAAM,CAAS,aAAa,CAAC,CAAC;IAEzD,MAAM,SAAS,GAAG,CAAC,MAAwB,EAAQ,EAAE;QACnD,YAAY,CAAC,KAAK,GAAG,MAAM,CAAC;QAC5B,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,GAAmB,EAAQ,EAAE;QAChD,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,IAAI,MAAM,GAAG,IAAI,CAAC;IAElB,qEAAqE;IACrE,gEAAgE;IAChE,MAAM,wBAAwB,GAAG,OAAO,CAAC,YAAY;QACnD,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC;QACtB,GAAG,EAAE,OAAO,CAAC,SAAS;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YACpB,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,KAAK,UAAU,CACb,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,aAAa,EACnB,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,EACjC,WAAW,CACZ,CAAC;YACF,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACjB,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM;aAC5C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAChC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACzB,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACjB,IAAI,EAAE,eAAe;gBACrB,WAAW,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;aACvC,CAAC,CAAC;YACH,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE;YACxB,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,sEAAsE;YACtE,gEAAgE;YAChE,2CAA2C;YAC3C,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACjB,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,aAAa,IAAI,IAAI;gBAC/C,EAAE,EAAE,KAAK,CAAC,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;QACD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,WAAW,CAAC;gBACV,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,WAAW,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC,CAAC;IAEH,EAAE,CAAC,KAAK,EAAE,CAAC;IAEX,MAAM,IAAI,GAAS,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CACT,aAAa,CAAC,YAAY,EAAE;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK;QACL,YAAY;QACZ,YAAY;QACZ,kBAAkB;QAClB,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9C,CAAC,CACH,CAAC;IAEF,OAAO;QACL,UAAU;YACR,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,GAAG,KAAK,CAAC;YACf,wBAAwB,EAAE,EAAE,CAAC;YAC7B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QACD,QAAQ,CAAC,KAAqB;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;IAEF,yEAAyE;IAEzE,KAAK,UAAU,UAAU,CACvB,OAAsB,EACtB,OAA4B,EAC5B,OAAkC,EAClC,OAAe,EACf,YAAoB,EACpB,UAAsB,EACtB,KAAoC;QAEpC,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC;gBACJ,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;gBAC1E,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC;QACvB,OAAO,CAAC,KAAK,GAAG,GAAG,OAAO,KAAK,YAAY,EAAE,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAmB;IACpD,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,WAAW;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,wCAAwC;IACxC,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9D,OAAO,GAAG,UAAU,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/render/allowed-hosts.d.ts

@@ -0,0 +1,41 @@
+import { type ReactNode } from "react";
+/**
+ * Provide the bundle's host allowlist to the render subtree. Mounted ONCE at
+ * the render root by each mode (broadcast / control / test), wrapping
+ * `<Tree>`. The value should come from {@link readAllowedHosts} so the
+ * legacy `Asset[]` and the LSML 1.2 object `assets` shapes are both handled
+ * and non-string entries are dropped.
+ *
+ * Prop name is `hosts` (the canonical render-side spelling, #F).
+ */
+export declare function AllowedHostsProvider({ hosts, children, }: {
+    hosts: readonly string[] | undefined;
+    children: ReactNode;
+}): import("react/jsx-runtime").JSX.Element;
+/** Read the active host allowlist. `undefined` when no provider is mounted —
+ *  which `checkHostAllowed` treats as deny-by-default (never a passthrough). */
+export declare function useAllowedHosts(): readonly string[] | undefined;
+/** Read `assets.allowedHosts` defensively off a render bundle, for the mode
+ *  that provides the context. The LSML 1.2 compiler forwards `assets` in the
+ *  object form `{ allowedHosts?: string[] }` (see `RenderBundle.assets`) ;
+ *  a legacy bundle may still carry the old `Asset[]` form. Either way we
+ *  extract a `string[]` of hostnames, or `undefined` (deny-by-default). A
+ *  non-string entry is dropped — it can never match `new URL().hostname`. */
+export declare function readAllowedHosts(bundle: {
+    assets?: unknown;
+}): readonly string[] | undefined;
+/**
+ * Gate an asset `src` against the host + scheme allowlist BEFORE it reaches
+ * the DOM (Bastion T1/T2). Returns the `src` unchanged when allowed, or
+ * `undefined` when rejected — in which case the caller MUST omit the asset
+ * (never passthrough). On rejection an R9-clean diagnostic is emitted : it
+ * carries only `{ nodeId, field, reason }`, never the URL itself.
+ *
+ * The decision is delegated to `checkHostAllowed` and is deny-by-default :
+ * an absent / empty `allowedHosts` rejects every remote host.
+ * `undefined`/non-string/empty `src` resolves to `undefined` (absent asset)
+ * WITHOUT a diagnostic — that is a primitive with no source, not a rejected
+ * one.
+ */
+export declare function gateSrc(src: unknown, allowedHosts: readonly string[] | undefined, field: string, nodeId?: string): string | undefined;
+//# sourceMappingURL=allowed-hosts.d.ts.map

package/dist/render/allowed-hosts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowed-hosts.d.ts","sourceRoot":"","sources":["../../src/render/allowed-hosts.tsx"],"names":[],"mappings":"AA8BA,OAAO,EAA6B,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAMlE;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,KAAK,EACL,QAAQ,GACT,EAAE;IACD,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACrC,QAAQ,EAAE,SAAS,CAAC;CACrB,2CAEA;AAED;gFACgF;AAChF,wBAAgB,eAAe,IAAI,SAAS,MAAM,EAAE,GAAG,SAAS,CAE/D;AAED;;;;;6EAK6E;AAC7E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAM5F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,OAAO,CACrB,GAAG,EAAE,OAAO,EACZ,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC3C,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,GAAG,SAAS,CAMpB"}

package/dist/render/allowed-hosts.js

@@ -0,0 +1,88 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// Render-side host-allowlist context (LSML 1.2, ADR 002 #E + #F ; Bastion T1/T2).
+//
+// CANONICAL host-gate module for the runtime. There is exactly ONE
+// `AllowedHostsProvider` and ONE allowlist context for the whole render
+// tree. The bundle's `assets.allowedHosts` rides this context from the
+// render root down to every consumer that places an untrusted asset URL
+// into the DOM :
+//
+//   - image-fill `src` on frame / shape backgrounds (#F, via `gateImageFills`
+//     / `gateSrc` in `fill.tsx`),
+//   - the `<img src>` of the `image` primitive (#F — closes the latent 1.1
+//     hole where `image.tsx` placed `src` with no host check at all),
+//   - a `mask.source`-image `href` (#E, via `checkHostAllowed` in
+//     `mask.tsx`, which reads the allowlist off this same context through
+//     `tree.tsx`).
+//
+// The underlying decision is ALWAYS delegated to `@lumencast/protocol`'s
+// `checkHostAllowed` / `isHostAllowed` (the #C foundation, single source of
+// truth for host + scheme matching). This module never re-implements that
+// logic ; it only threads the allowlist and adapts it for each call-site.
+//
+// Deny-by-default : a consumer rendered outside any provider, or one whose
+// bundle declares no `allowedHosts`, sees `undefined` — which
+// `checkHostAllowed` treats as "no allowlist → reject every remote host".
+// There is no path by which a missing provider silently re-opens the gate.
+//
+// The context value is a read-only, mount-stable `string[] | undefined`
+// (the allowlist is part of the content-addressed bundle), so a plain React
+// context is the right tool.
+import { createContext, useContext } from "react";
+import { checkHostAllowed } from "@lumencast/protocol";
+import { emitDiagnostic } from "./diagnostics";
+const AllowedHostsCtx = createContext(undefined);
+/**
+ * Provide the bundle's host allowlist to the render subtree. Mounted ONCE at
+ * the render root by each mode (broadcast / control / test), wrapping
+ * `<Tree>`. The value should come from {@link readAllowedHosts} so the
+ * legacy `Asset[]` and the LSML 1.2 object `assets` shapes are both handled
+ * and non-string entries are dropped.
+ *
+ * Prop name is `hosts` (the canonical render-side spelling, #F).
+ */
+export function AllowedHostsProvider({ hosts, children, }) {
+    return _jsx(AllowedHostsCtx.Provider, { value: hosts, children: children });
+}
+/** Read the active host allowlist. `undefined` when no provider is mounted —
+ *  which `checkHostAllowed` treats as deny-by-default (never a passthrough). */
+export function useAllowedHosts() {
+    return useContext(AllowedHostsCtx);
+}
+/** Read `assets.allowedHosts` defensively off a render bundle, for the mode
+ *  that provides the context. The LSML 1.2 compiler forwards `assets` in the
+ *  object form `{ allowedHosts?: string[] }` (see `RenderBundle.assets`) ;
+ *  a legacy bundle may still carry the old `Asset[]` form. Either way we
+ *  extract a `string[]` of hostnames, or `undefined` (deny-by-default). A
+ *  non-string entry is dropped — it can never match `new URL().hostname`. */
+export function readAllowedHosts(bundle) {
+    const assets = bundle.assets;
+    const list = assets?.allowedHosts;
+    if (!Array.isArray(list))
+        return undefined;
+    const hosts = list.filter((h) => typeof h === "string");
+    return hosts.length > 0 ? hosts : undefined;
+}
+/**
+ * Gate an asset `src` against the host + scheme allowlist BEFORE it reaches
+ * the DOM (Bastion T1/T2). Returns the `src` unchanged when allowed, or
+ * `undefined` when rejected — in which case the caller MUST omit the asset
+ * (never passthrough). On rejection an R9-clean diagnostic is emitted : it
+ * carries only `{ nodeId, field, reason }`, never the URL itself.
+ *
+ * The decision is delegated to `checkHostAllowed` and is deny-by-default :
+ * an absent / empty `allowedHosts` rejects every remote host.
+ * `undefined`/non-string/empty `src` resolves to `undefined` (absent asset)
+ * WITHOUT a diagnostic — that is a primitive with no source, not a rejected
+ * one.
+ */
+export function gateSrc(src, allowedHosts, field, nodeId) {
+    if (typeof src !== "string" || src.length === 0)
+        return undefined;
+    const decision = checkHostAllowed(src, allowedHosts);
+    if (decision.allowed)
+        return src;
+    emitDiagnostic(nodeId, field, decision.reason ?? "asset host/scheme rejected");
+    return undefined;
+}
+//# sourceMappingURL=allowed-hosts.js.map

package/dist/render/allowed-hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowed-hosts.js","sourceRoot":"","sources":["../../src/render/allowed-hosts.tsx"],"names":[],"mappings":";AAAA,kFAAkF;AAClF,EAAE;AACF,mEAAmE;AACnE,wEAAwE;AACxE,uEAAuE;AACvE,wEAAwE;AACxE,iBAAiB;AACjB,EAAE;AACF,8EAA8E;AAC9E,kCAAkC;AAClC,2EAA2E;AAC3E,sEAAsE;AACtE,kEAAkE;AAClE,0EAA0E;AAC1E,mBAAmB;AACnB,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,EAAE;AACF,2EAA2E;AAC3E,8DAA8D;AAC9D,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,6BAA6B;AAE7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAkB,MAAM,OAAO,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,eAAe,GAAG,aAAa,CAAgC,SAAS,CAAC,CAAC;AAEhF;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,KAAK,EACL,QAAQ,GAIT;IACC,OAAO,KAAC,eAAe,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAA4B,CAAC;AACvF,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;AACrC,CAAC;AAED;;;;;6EAK6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,MAA4B;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAgD,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,EAAE,YAAY,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,OAAO,CACrB,GAAY,EACZ,YAA2C,EAC3C,KAAa,EACb,MAAe;IAEf,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IACjC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAAC;IAC/E,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/render/blend-mode.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Re-validate a resolved `blendMode` against the closed enum. Returns the
+ * CSS `mix-blend-mode` keyword when recognised, else `undefined` (caller
+ * omits — the value never reaches the style). Never passthrough.
+ */
+export declare function parseBlendMode(value: unknown): string | undefined;
+//# sourceMappingURL=blend-mode.d.ts.map

package/dist/render/blend-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blend-mode.d.ts","sourceRoot":"","sources":["../../src/render/blend-mode.ts"],"names":[],"mappings":"AA0CA;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAEjE"}

package/dist/render/blend-mode.js

@@ -0,0 +1,49 @@
+// Strict `mix-blend-mode` gate — the runtime half of the T4 double-gate
+// (Bastion conditions 1.2, ADR 002 §3.2 / #D).
+//
+// The compiler already validates `blendMode` against its closed enum
+// (`parseBlendMode`, @lumencast/compiler) before emitting the universal
+// prop. This module is the INDEPENDENT runtime gate : a bundle prop OR a
+// live LSDP delta value reaching the wrapper is re-validated here against
+// the same closed allowlist before it may touch an inline CSS style.
+// Anything outside the enum is omitted (never passthrough) — mirroring
+// the `css-color.ts` discipline (self-contained second gate, no untrusted
+// string ever interpolated into CSS).
+//
+// The allowlist is intentionally duplicated rather than imported from the
+// compiler : the runtime does not depend on @lumencast/compiler, and the
+// gate must hold even if a hand-rolled / tampered bundle bypasses the
+// compiler entirely. It is a fixed, finite set of CSS keywords (Figma
+// blend modes minus PASS_THROUGH) — the single source of truth for the
+// CSS value is this closed set.
+/** Closed `mix-blend-mode` allowlist (ADR 002 §3.2 — Figma minus
+ *  `PASS_THROUGH`). Mirrors the compiler's `BLEND_MODES`. */
+const BLEND_MODES = new Set([
+    "normal",
+    "multiply",
+    "screen",
+    "overlay",
+    "darken",
+    "lighten",
+    "color-dodge",
+    "color-burn",
+    "hard-light",
+    "soft-light",
+    "difference",
+    "exclusion",
+    "hue",
+    "saturation",
+    "color",
+    "luminosity",
+    // Figma LINEAR_DODGE (add) — exact additive blend, gentler than color-dodge.
+    "plus-lighter",
+]);
+/**
+ * Re-validate a resolved `blendMode` against the closed enum. Returns the
+ * CSS `mix-blend-mode` keyword when recognised, else `undefined` (caller
+ * omits — the value never reaches the style). Never passthrough.
+ */
+export function parseBlendMode(value) {
+    return typeof value === "string" && BLEND_MODES.has(value) ? value : undefined;
+}
+//# sourceMappingURL=blend-mode.js.map

package/dist/render/blend-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blend-mode.js","sourceRoot":"","sources":["../../src/render/blend-mode.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,+CAA+C;AAC/C,EAAE;AACF,qEAAqE;AACrE,wEAAwE;AACxE,yEAAyE;AACzE,0EAA0E;AAC1E,qEAAqE;AACrE,uEAAuE;AACvE,0EAA0E;AAC1E,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,gCAAgC;AAEhC;6DAC6D;AAC7D,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC;IAC/C,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,KAAK;IACL,YAAY;IACZ,OAAO;IACP,YAAY;IACZ,6EAA6E;IAC7E,cAAc;CACf,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC"}