@noodleseed/one 0.141.1 → 0.141.2

package/node_modules/@noodle-borg/assistant-gateway/dist/portable.d.ts

@@ -1,6 +1,5 @@
 /** Assistant gateway contracts and in-memory adapters safe for the published CLI runtime. */
 export * from './artifact-projection.js';
-export * from './assistant-app-sandbox.js';
 export * from './assistant-context.js';
 export * from './assistant-customer-issuer.js';
 export * from './assistant-customer-routing.js';

package/node_modules/@noodle-borg/assistant-gateway/dist/portable.js

@@ -1,6 +1,5 @@
 /** Assistant gateway contracts and in-memory adapters safe for the published CLI runtime. */
 export * from './artifact-projection.js';
-export * from './assistant-app-sandbox.js';
 export * from './assistant-context.js';
 export * from './assistant-customer-issuer.js';
 export * from './assistant-customer-routing.js';

package/node_modules/@noodle-borg/service/dist/routes/assistant-dispatch.js

@@ -1,4 +1,3 @@
-import { isAssistantSandboxHost, } from '@noodle-borg/assistant-gateway/portable';
 import { handleAssistantAppRequest, handleAssistantPreflight, handleAssistantSession, handleAssistantTurn, handleConsoleApprovalNonce, } from './assistant.js';
 import { handleAssistantClients } from './assistant-clients.js';
 import { handleAssistantDoctor } from './assistant-doctor.js';
@@ -36,9 +35,7 @@ export function dispatchAssistantRoutes(req, res, url, deps) {
         deps.applySecurityHeaders(res, deps.tls);
         if (deps.enforceHttps(req, res, deps.tls))
             return true;
-        const sandboxBase = deps.sandboxBase?.(req);
-        const isolatedOrigin = isAssistantSandboxHost(req.headers.host, sandboxBase);
-        handleAssistantSandbox(req, res, { isolatedOrigin });
+        handleAssistantSandbox(req, res);
         return true;
     }
     if (url.pathname === '/v1/assistant/public-sessions' && req.method === 'POST') {

package/node_modules/@noodle-borg/service/dist/routes/assistant-public-session.js

@@ -98,7 +98,7 @@ export async function handlePublicAssistantSession(req, res, deps) {
     const sessionBody = {
         token: result.token,
         expiresAt: result.expiresAt,
-        endpoints: assistantSessionEndpoints(deps.serviceBase(req), deps.sandboxBase?.(req)),
+        endpoints: assistantSessionEndpoints(deps.serviceBase(req)),
         ...(configuration ? { configuration } : {}),
     };
     // Parse rather than trust: every published @noodleseed/assistant widget consumes this shape, and the

package/node_modules/@noodle-borg/service/dist/routes/assistant-route-http.js

@@ -48,13 +48,13 @@ export function now(deps) {
     return deps.clock?.() ?? new Date();
 }
 /** The one endpoint map every session mint returns; three mints, one source of truth. */
-export function assistantSessionEndpoints(base, sandboxBase = base) {
+export function assistantSessionEndpoints(base) {
     return {
         turns: `${base}/v1/assistant/turns`,
         toolConfirmations: `${base}/v1/assistant/tool-confirmations`,
         interactions: `${base}/v1/assistant/interactions`,
         apps: `${base}/v1/assistant/apps`,
-        sandbox: `${sandboxBase}/v1/assistant/sandbox`,
+        sandbox: `${base}/v1/assistant/sandbox`,
         transcript: `${base}/v1/assistant/transcript`,
     };
 }

package/node_modules/@noodle-borg/service/dist/routes/assistant-sandbox.js

@@ -1,23 +1,58 @@
-import { ASSISTANT_SANDBOX_DOCUMENT, resolveAssistantSandboxResponsePolicy, } from '@noodle-borg/assistant-gateway/portable';
-/** Serve the static, secret-free sandbox relay and apply its validated CSP before writing the body. */
-export function handleAssistantSandbox(req, res, options = {}) {
+/**
+ * Hosted widget sandbox document (ADR 0151 addendum). The embedded assistant renders MCP App
+ * widgets in a double iframe; when the outer frame is an `about:srcdoc` document it inherits the
+ * customer page's CSP, so a strict `script-src` silently blanks every widget. Serving this relay
+ * document from the service origin gives it — and the inner `srcdoc` widget document that inherits
+ * from it — a CSP the platform controls. The body is pinned byte-for-byte to
+ * `contract/v1/assistant-sandbox-document.html` and to the published client's srcdoc fallback; any
+ * relay-protocol change is a coordinated contract event, never a local edit.
+ */
+export const ASSISTANT_SANDBOX_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><script>
+let inner;
+const ready={jsonrpc:'2.0',method:'ui/notifications/sandbox-proxy-ready',params:{}};
+// Re-announce until the host acknowledges with the resource: when this document is hosted
+// cross-origin, the first announcement can arrive before the host's load handler is listening.
+const announce=setInterval(()=>parent.postMessage(ready,'*'),120);
+setTimeout(()=>clearInterval(announce),15000);
+addEventListener('message',(event)=>{
+  if(event.source===parent){
+    const message=event.data;
+    if(message?.method==='ui/notifications/sandbox-resource-ready'){
+      clearInterval(announce);
+      if(inner)return;
+      inner=document.createElement('iframe');
+      inner.setAttribute('sandbox',message.params?.sandbox||'allow-scripts');
+      inner.setAttribute('referrerpolicy','no-referrer');
+      inner.srcdoc=String(message.params?.html||'');
+      document.body.replaceChildren(inner);
+      return;
+    }
+    inner?.contentWindow?.postMessage(message,'*');
+  } else if(inner && event.source===inner.contentWindow) {
+    parent.postMessage(event.data,'*');
+  }
+});
+parent.postMessage(ready,'*');
+</script>`;
+/**
+ * The sandbox document's own CSP. `sandbox allow-scripts` forces an opaque origin server-side even
+ * if a future embedder frames the URL without a sandbox attribute (the document can never read
+ * service cookies or storage); inline script/style must be allowed because the relay script and the
+ * inner widget document's injected bridge are inline by design; everything else stays closed —
+ * widget data flows only over the postMessage bridge, never direct fetch.
+ */
+const SANDBOX_CSP = "sandbox allow-scripts; default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; frame-src about:; form-action 'none'; base-uri 'none'; frame-ancestors *";
+/** Serve the static, secret-free sandbox document. GET-only; cacheable despite the no-store baseline. */
+export function handleAssistantSandbox(req, res) {
     if (req.method !== 'GET') {
         res.statusCode = 405;
         res.setHeader('Allow', 'GET');
         res.end();
         return;
     }
-    const policy = resolveAssistantSandboxResponsePolicy(req.url ?? '/', options.isolatedOrigin === true);
-    res.setHeader('Content-Security-Policy', policy.contentSecurityPolicy);
-    if (!policy.ok) {
-        res.statusCode = 400;
-        res.setHeader('Content-Type', 'text/plain; charset=utf-8');
-        res.setHeader('Cache-Control', 'no-store');
-        res.end('Invalid sandbox policy');
-        return;
-    }
     res.statusCode = 200;
     res.setHeader('Content-Type', 'text/html; charset=utf-8');
+    res.setHeader('Content-Security-Policy', SANDBOX_CSP);
     res.setHeader('Cache-Control', 'public, max-age=300');
     res.end(ASSISTANT_SANDBOX_DOCUMENT);
 }

package/node_modules/@noodle-borg/service/dist/routes/assistant.js

@@ -142,7 +142,7 @@ export async function handleAssistantSession(req, res, deps) {
                 : {}),
             caller,
             configuration,
-            endpoints: assistantSessionEndpoints(deps.serviceBase(req), deps.sandboxBase?.(req)),
+            endpoints: assistantSessionEndpoints(deps.serviceBase(req)),
         });
     }
     const session = await deps.store.createSession({
@@ -166,7 +166,7 @@ export async function handleAssistantSession(req, res, deps) {
     const sessionBody = {
         token: session.token,
         expiresAt: session.session.expiresAt,
-        endpoints: assistantSessionEndpoints(deps.serviceBase(req), deps.sandboxBase?.(req)),
+        endpoints: assistantSessionEndpoints(deps.serviceBase(req)),
         ...(configuration ? { configuration } : {}),
     };
     // Every published @noodleseed/assistant widget consumes this shape; parse (don't just test)

package/node_modules/@noodle-borg/service/dist/service.js

@@ -1,4 +1,4 @@
-import { InMemoryAssistantStore, isAssistantSandboxHost, validateAssistantSandboxBaseUrl, } from '@noodle-borg/assistant-gateway/portable';
+import { InMemoryAssistantStore } from '@noodle-borg/assistant-gateway/portable';
 import { allowAllGate, InMemoryControlPlaneStore } from '@noodle-borg/control-plane/portable';
 import { dispatchKnowledgeRequest } from '@noodle-borg/knowledge-operations/portable';
 import { OPENAI_APPS_CHALLENGE_PATH } from '@noodle-borg/module';
@@ -50,9 +50,6 @@ const DEFAULT_MAX_BODY = 1 << 20;
 const DEFAULT_MAX_DEPLOY_BODY = 32 * 1024 * 1024;
 /** The combined service listener: tenant-scoped deploy management plus the multi-tenant MCP router. */
 export function createServiceHandler(registry, options = {}) {
-    const assistantSandboxBaseUrl = options.assistantSandboxBaseUrl === undefined
-        ? undefined
-        : validateAssistantSandboxBaseUrl(options.assistantSandboxBaseUrl, options.publicBaseUrl);
     const logger = options.logger ?? noopLogger;
     const tls = options.tls ?? {};
     const buildInfo = options.buildInfo ?? resolveBuildInfo();
@@ -158,14 +155,6 @@ export function createServiceHandler(registry, options = {}) {
     };
     return (req, res) => {
         const url = new URL(req.url ?? '/', 'http://localhost');
-        const onAssistantSandboxHost = isAssistantSandboxHost(req.headers.host, assistantSandboxBaseUrl);
-        if (onAssistantSandboxHost && url.pathname !== '/v1/assistant/sandbox') {
-            applySecurityHeaders(res, tls);
-            if (enforceHttps(req, res, tls))
-                return;
-            sendJson(res, 404, { error: 'not found' });
-            return;
-        }
         // Liveness/readiness probes: un-gated and **not** HTTPS-enforced — Cloud Run's internal probe is plain
         // HTTP, so enforcing HTTPS here would `426` the probe and the revision would never go healthy (ADR 0034).
         // `/healthz` is a pure liveness 200 (no store touch); `/readyz` reflects the injected readiness probe.
@@ -261,9 +250,6 @@ export function createServiceHandler(registry, options = {}) {
             audit: activeAudit,
             maxBody,
             serviceBase: (request) => options.publicBaseUrl ?? baseFromRequest(request, tls),
-            ...(assistantSandboxBaseUrl === undefined
-                ? {}
-                : { sandboxBase: () => assistantSandboxBaseUrl }),
             ...(options.assistantModelFetch !== undefined
                 ? { modelFetch: options.assistantModelFetch }
                 : {}),

package/node_modules/@noodleseed/assistant/README.md

@@ -35,8 +35,8 @@ troubleshooting) lives at <https://docs.noodleseed.dev/guides/embedded-assistant
 the server itself is `@noodleseed/one` (`npm install -g @noodleseed/one`).
 
 If your page sends a `Content-Security-Policy`, allow the Noodle service origin in `connect-src` (turns and
-event streams) and the exact session-advertised `endpoints.sandbox` origin in `frame-src` (it may be a
-dedicated sandbox origin, so your `script-src` can stay strict). Details are in the guide's
+event streams) **and** `frame-src` (app widgets render inside a hosted sandbox document served from the
+service origin, `endpoints.sandbox`, so your `script-src` can stay strict). Details are in the guide's
 "Content-Security-Policy on your page" section.
 
 ## Quick start
@@ -410,8 +410,13 @@ import "@noodleseed/assistant/app-view";
 </template>
 ```
 
-Framework setup, lifecycle ownership, sandbox/CSP behavior, and staged diagnostics are owned by the
-[Bring your own UI guide](https://docs.noodleseed.dev/docs/guides/bring-your-own-ui).
+Configure Vue's `isCustomElement` for `noodle-app-view`. Angular uses the same element with `[client]`,
+`[view]`, and `[theme]` property bindings. Do not serialize `client` or `view` into attributes.
+
+`<noodle-app-view>` is the canonical host; `NoodleAppView` delegates to it. Both use the
+service-advertised sandbox URL, route App calls through the supplied client, publish theme changes without
+replacing the iframe, and request standard teardown on semantic replacement, disconnect, or an App teardown
+request.
 
 The App document owns its action intent: it calls standard `tools/call` after connecting and never relies on
 native form navigation. If that call needs input or confirmation, the same `client` publishes the normal

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/one",
-  "version": "0.141.1",
+  "version": "0.141.2",
   "private": false,
   "description": "Noodle CLI by Noodle Seed — author, run, and deploy declarative MCP servers. Embedding the assistant in your own web app is @noodleseed/assistant.",
   "license": "Apache-2.0",

package/node_modules/@noodle-borg/assistant-gateway/dist/assistant-app-sandbox.d.ts

@@ -1,13 +0,0 @@
-/** Relay body pinned to `contract/v1/assistant-sandbox-document.html` and the browser client. */
-export declare const ASSISTANT_SANDBOX_DOCUMENT = "<!doctype html><meta charset=\"utf-8\"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><body><script>\nlet inner,loaded=false;\nif(self===top)throw new Error('The assistant sandbox relay must be embedded');\nconst standardSandbox='allow-scripts allow-same-origin allow-forms';\nconst rawParentOrigin=new URLSearchParams(location.hash.slice(1)).get('parentOrigin');\nlet expectedParentOrigin;\ntry{const parsed=new URL(rawParentOrigin||'');if(parsed.origin===rawParentOrigin&&/^https?:$/.test(parsed.protocol))expectedParentOrigin=parsed.origin}catch{}\nconst parentTarget=expectedParentOrigin||'*';\nconst ownOrigin=self.origin;\nconst ready={jsonrpc:'2.0',method:'ui/notifications/sandbox-proxy-ready',params:{}};\n// Re-announce until the host acknowledges with the resource: when this document is hosted\n// cross-origin, the first announcement can arrive before the host's load handler is listening.\nconst announce=setInterval(()=>parent.postMessage(ready,parentTarget),120);\nsetTimeout(()=>clearInterval(announce),15000);\naddEventListener('message',(event)=>{\n  if(event.source===parent){\n    if(expectedParentOrigin&&event.origin!==expectedParentOrigin)return;\n    const message=event.data;\n    if(message?.method==='ui/notifications/sandbox-resource-ready'){\n      clearInterval(announce);\n      if(loaded)return;\n      loaded=true;\n      const requestedSandbox=message.params?.sandbox;\n      inner=document.createElement('iframe');\n      inner.setAttribute('sandbox',requestedSandbox===standardSandbox?standardSandbox:'allow-scripts');\n      inner.setAttribute('referrerpolicy','no-referrer');\n      const permissions=message.params?.permissions;\n      const allow=[];\n      if(permissions?.camera)allow.push('camera');\n      if(permissions?.microphone)allow.push('microphone');\n      if(permissions?.geolocation)allow.push('geolocation');\n      if(permissions?.clipboardWrite)allow.push('clipboard-write');\n      if(allow.length)inner.setAttribute('allow',allow.join('; '));\n      document.body.append(inner);\n      let html=String(message.params?.html||'');\n      const csp=message.params?.csp;\n      if(csp&&typeof csp==='object'){\n        const list=(value,fallback)=>Array.isArray(value)&&value.length?value.join(' '):fallback;\n        const resources=Array.isArray(csp.resourceDomains)?csp.resourceDomains:[];\n        const suffix=resources.length?' '+resources.join(' '):'';\n        const policy=[\"default-src 'none'\",\"script-src 'unsafe-inline'\"+suffix,\"style-src 'unsafe-inline'\"+suffix,'img-src data: blob:'+suffix,'font-src data: blob:'+suffix,'media-src data: blob:'+suffix,'worker-src blob:'+suffix,'connect-src '+list(csp.connectDomains,\"'none'\"),'frame-src '+list(csp.frameDomains,\"'none'\"),\"object-src 'none'\",\"form-action 'none'\",'base-uri '+list(csp.baseUriDomains,\"'none'\")].join('; ');\n        const meta='<meta http-equiv=\"Content-Security-Policy\" content=\"'+policy.replace(/&/g,'&amp;').replace(/\"/g,'&quot;')+'\">';\n        const doctype=html.match(/^\\s*<!doctype[^>]*>/i);\n        html=doctype?html.slice(0,doctype[0].length)+meta+html.slice(doctype[0].length):meta+html;\n      }\n      try{\n        const doc=inner.contentDocument||inner.contentWindow?.document;\n        if(!doc)throw new Error('document unavailable');\n        doc.open();doc.write(html);doc.close();\n      }catch{inner.srcdoc=html}\n      return;\n    }\n    inner?.contentWindow?.postMessage(message,'*');\n  } else if(inner && event.source===inner.contentWindow) {\n    if(event.origin!==ownOrigin)return;\n    parent.postMessage(event.data,parentTarget);\n  }\n});\nparent.postMessage(ready,parentTarget);\n</script></body>";
-export interface AssistantSandboxResponsePolicy {
-    readonly ok: boolean;
-    readonly contentSecurityPolicy: string;
-}
-/** Match a request authority to the configured sandbox origin, normalizing default ports. */
-export declare function isAssistantSandboxHost(requestHost: string | undefined, sandboxBaseUrl: string | undefined): boolean;
-/** Validate an untrusted query and return the CSP response header to apply before navigation. */
-export declare function resolveAssistantSandboxResponsePolicy(requestUrl: string, isolatedOrigin?: boolean): AssistantSandboxResponsePolicy;
-/** Normalize the operator-provided dedicated sandbox origin and keep it off the service origin. */
-export declare function validateAssistantSandboxBaseUrl(value: string, serviceBase: string | undefined): string;
-//# sourceMappingURL=assistant-app-sandbox.d.ts.map

package/node_modules/@noodle-borg/assistant-gateway/dist/assistant-app-sandbox.js

@@ -1,204 +0,0 @@
-/** Relay body pinned to `contract/v1/assistant-sandbox-document.html` and the browser client. */
-export const ASSISTANT_SANDBOX_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><body><script>
-let inner,loaded=false;
-if(self===top)throw new Error('The assistant sandbox relay must be embedded');
-const standardSandbox='allow-scripts allow-same-origin allow-forms';
-const rawParentOrigin=new URLSearchParams(location.hash.slice(1)).get('parentOrigin');
-let expectedParentOrigin;
-try{const parsed=new URL(rawParentOrigin||'');if(parsed.origin===rawParentOrigin&&/^https?:$/.test(parsed.protocol))expectedParentOrigin=parsed.origin}catch{}
-const parentTarget=expectedParentOrigin||'*';
-const ownOrigin=self.origin;
-const ready={jsonrpc:'2.0',method:'ui/notifications/sandbox-proxy-ready',params:{}};
-// Re-announce until the host acknowledges with the resource: when this document is hosted
-// cross-origin, the first announcement can arrive before the host's load handler is listening.
-const announce=setInterval(()=>parent.postMessage(ready,parentTarget),120);
-setTimeout(()=>clearInterval(announce),15000);
-addEventListener('message',(event)=>{
-  if(event.source===parent){
-    if(expectedParentOrigin&&event.origin!==expectedParentOrigin)return;
-    const message=event.data;
-    if(message?.method==='ui/notifications/sandbox-resource-ready'){
-      clearInterval(announce);
-      if(loaded)return;
-      loaded=true;
-      const requestedSandbox=message.params?.sandbox;
-      inner=document.createElement('iframe');
-      inner.setAttribute('sandbox',requestedSandbox===standardSandbox?standardSandbox:'allow-scripts');
-      inner.setAttribute('referrerpolicy','no-referrer');
-      const permissions=message.params?.permissions;
-      const allow=[];
-      if(permissions?.camera)allow.push('camera');
-      if(permissions?.microphone)allow.push('microphone');
-      if(permissions?.geolocation)allow.push('geolocation');
-      if(permissions?.clipboardWrite)allow.push('clipboard-write');
-      if(allow.length)inner.setAttribute('allow',allow.join('; '));
-      document.body.append(inner);
-      let html=String(message.params?.html||'');
-      const csp=message.params?.csp;
-      if(csp&&typeof csp==='object'){
-        const list=(value,fallback)=>Array.isArray(value)&&value.length?value.join(' '):fallback;
-        const resources=Array.isArray(csp.resourceDomains)?csp.resourceDomains:[];
-        const suffix=resources.length?' '+resources.join(' '):'';
-        const policy=["default-src 'none'","script-src 'unsafe-inline'"+suffix,"style-src 'unsafe-inline'"+suffix,'img-src data: blob:'+suffix,'font-src data: blob:'+suffix,'media-src data: blob:'+suffix,'worker-src blob:'+suffix,'connect-src '+list(csp.connectDomains,"'none'"),'frame-src '+list(csp.frameDomains,"'none'"),"object-src 'none'","form-action 'none'",'base-uri '+list(csp.baseUriDomains,"'none'")].join('; ');
-        const meta='<meta http-equiv="Content-Security-Policy" content="'+policy.replace(/&/g,'&amp;').replace(/"/g,'&quot;')+'">';
-        const doctype=html.match(/^\\s*<!doctype[^>]*>/i);
-        html=doctype?html.slice(0,doctype[0].length)+meta+html.slice(doctype[0].length):meta+html;
-      }
-      try{
-        const doc=inner.contentDocument||inner.contentWindow?.document;
-        if(!doc)throw new Error('document unavailable');
-        doc.open();doc.write(html);doc.close();
-      }catch{inner.srcdoc=html}
-      return;
-    }
-    inner?.contentWindow?.postMessage(message,'*');
-  } else if(inner && event.source===inner.contentWindow) {
-    if(event.origin!==ownOrigin)return;
-    parent.postMessage(event.data,parentTarget);
-  }
-});
-parent.postMessage(ready,parentTarget);
-</script></body>`;
-const COMPATIBILITY_CSP = "sandbox allow-scripts; default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; frame-src about:; form-action 'none'; base-uri 'none'; frame-ancestors *";
-const MAX_CSP_QUERY_LENGTH = 8_192;
-const MAX_DOMAINS_PER_DIRECTIVE = 32;
-const CSP_KEYS = ['connectDomains', 'resourceDomains', 'frameDomains', 'baseUriDomains'];
-const CSP_KEY_SET = new Set(CSP_KEYS);
-/** Match a request authority to the configured sandbox origin, normalizing default ports. */
-export function isAssistantSandboxHost(requestHost, sandboxBaseUrl) {
-    if (requestHost === undefined || sandboxBaseUrl === undefined)
-        return false;
-    try {
-        const sandboxUrl = new URL(sandboxBaseUrl);
-        const requestUrl = new URL(`${sandboxUrl.protocol}//${requestHost}`);
-        return requestUrl.href === `${sandboxUrl.origin}/`;
-    }
-    catch {
-        return false;
-    }
-}
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function isLoopback(hostname) {
-    return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '[::1]';
-}
-function normalizeCspDomain(value, connect) {
-    if (value.length > 512 || /[;\r\n'"\s]/u.test(value))
-        return undefined;
-    try {
-        const parsed = new URL(value);
-        const secure = parsed.protocol === 'https:' || (connect && parsed.protocol === 'wss:');
-        const local = isLoopback(parsed.hostname) &&
-            (parsed.protocol === 'http:' || (connect && parsed.protocol === 'ws:'));
-        if (!secure && !local)
-            return undefined;
-        if (parsed.username ||
-            parsed.password ||
-            parsed.pathname !== '/' ||
-            parsed.search ||
-            parsed.hash) {
-            return undefined;
-        }
-        return parsed.origin;
-    }
-    catch {
-        return undefined;
-    }
-}
-function parseSandboxCsp(requestUrl) {
-    const url = new URL(requestUrl, 'http://sandbox.invalid');
-    const values = url.searchParams.getAll('csp');
-    if (values.length === 0)
-        return { ok: true };
-    const serialized = values[0];
-    if (values.length !== 1 || serialized === undefined || serialized.length > MAX_CSP_QUERY_LENGTH) {
-        return { ok: false };
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(serialized);
-    }
-    catch {
-        return { ok: false };
-    }
-    if (!isRecord(parsed) || Object.keys(parsed).some((key) => !CSP_KEY_SET.has(key))) {
-        return { ok: false };
-    }
-    const csp = {};
-    for (const key of CSP_KEYS) {
-        const raw = parsed[key];
-        if (raw === undefined)
-            continue;
-        if (!Array.isArray(raw) || raw.length > MAX_DOMAINS_PER_DIRECTIVE)
-            return { ok: false };
-        const normalized = [];
-        for (const entry of raw) {
-            if (typeof entry !== 'string')
-                return { ok: false };
-            const domain = normalizeCspDomain(entry, key === 'connectDomains');
-            if (!domain)
-                return { ok: false };
-            normalized.push(domain);
-        }
-        csp[key] = [...new Set(normalized)];
-    }
-    return { ok: true, value: csp };
-}
-function sources(values, fallback) {
-    return values && values.length > 0 ? values.join(' ') : fallback;
-}
-function sandboxCsp(csp, isolatedOrigin) {
-    const resources = csp.resourceDomains ?? [];
-    const resourceSuffix = resources.length > 0 ? ` ${resources.join(' ')}` : '';
-    return [
-        isolatedOrigin
-            ? 'sandbox allow-scripts allow-same-origin allow-forms'
-            : 'sandbox allow-scripts',
-        "default-src 'none'",
-        `script-src 'self' 'unsafe-inline'${resourceSuffix}`,
-        `style-src 'self' 'unsafe-inline'${resourceSuffix}`,
-        `img-src 'self' data: blob:${resourceSuffix}`,
-        `font-src 'self' data: blob:${resourceSuffix}`,
-        `media-src 'self' data: blob:${resourceSuffix}`,
-        `worker-src 'self' blob:${resourceSuffix}`,
-        `connect-src 'self'${csp.connectDomains && csp.connectDomains.length > 0 ? ` ${csp.connectDomains.join(' ')}` : ''}`,
-        `frame-src ${sources(csp.frameDomains, "'none'")}`,
-        "object-src 'none'",
-        "form-action 'none'",
-        `base-uri ${sources(csp.baseUriDomains, "'none'")}`,
-        'frame-ancestors *',
-    ].join('; ');
-}
-/** Validate an untrusted query and return the CSP response header to apply before navigation. */
-export function resolveAssistantSandboxResponsePolicy(requestUrl, isolatedOrigin = false) {
-    const parsed = parseSandboxCsp(requestUrl);
-    if (!parsed.ok)
-        return { ok: false, contentSecurityPolicy: COMPATIBILITY_CSP };
-    return {
-        ok: true,
-        contentSecurityPolicy: parsed.value !== undefined || isolatedOrigin
-            ? sandboxCsp(parsed.value ?? {}, isolatedOrigin)
-            : COMPATIBILITY_CSP,
-    };
-}
-/** Normalize the operator-provided dedicated sandbox origin and keep it off the service origin. */
-export function validateAssistantSandboxBaseUrl(value, serviceBase) {
-    let parsed;
-    try {
-        parsed = new URL(value);
-    }
-    catch {
-        throw new Error('assistantSandboxBaseUrl must be an exact HTTPS or HTTP loopback origin');
-    }
-    const loopback = isLoopback(parsed.hostname);
-    if (parsed.origin !== value ||
-        (parsed.protocol !== 'https:' && !(parsed.protocol === 'http:' && loopback))) {
-        throw new Error('assistantSandboxBaseUrl must be an exact HTTPS or HTTP loopback origin');
-    }
-    if (serviceBase !== undefined && new URL(serviceBase).origin === parsed.origin) {
-        throw new Error('assistantSandboxBaseUrl must use an origin separate from publicBaseUrl');
-    }
-    return parsed.origin;
-}
-//# sourceMappingURL=assistant-app-sandbox.js.map