@vielzeug/sandbox 1.2.2 → 1.2.3

package/dist/_dev.cjs

@@ -1,2 +1,2 @@
-var e=!globalThis.__SANDBOX_PROD__;function t(t){e&&console.warn(`[@vielzeug/sandbox] ${t}`)}function n(t){e&&t()}exports.devOnly=n,exports.warn=t;
+function e(e){}function t(e){}exports.devOnly=t,exports.warn=e;
 //# sourceMappingURL=_dev.cjs.map

package/dist/_dev.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"_dev.cjs","names":[],"sources":["../src/_dev.ts"],"sourcesContent":["const isDev = !(globalThis as { __SANDBOX_PROD__?: boolean }).__SANDBOX_PROD__;\n\n/** @internal @security — some callers interpolate user-supplied values (e.g. namedStyles key) into msg; do not log PII. */\nexport function warn(msg: string): void {\n  if (isDev) console.warn(`[@vielzeug/sandbox] ${msg}`);\n}\n\n/** @internal — Run fn only in dev builds. Use when dev-only logic goes beyond a single warn() / error() call. */\nexport function devOnly(fn: () => void): void {\n  if (isDev) fn();\n}\n"],"mappings":"AAAA,IAAM,EAAQ,CAAE,WAA8C,iBAG9D,SAAgB,EAAK,EAAmB,CAClC,GAAO,QAAQ,KAAK,uBAAuB,GAAK,CACtD,CAGA,SAAgB,EAAQ,EAAsB,CACxC,GAAO,EAAG,CAChB"}
+{"version":3,"file":"_dev.cjs","names":[],"sources":["../src/_dev.ts"],"sourcesContent":["const isDev = !(globalThis as { __SANDBOX_PROD__?: boolean }).__SANDBOX_PROD__;\n\n/** @internal @security — some callers interpolate user-supplied values (e.g. namedStyles key) into msg; do not log PII. */\nexport function warn(msg: string): void {\n  if (isDev) console.warn(`[@vielzeug/sandbox] ${msg}`);\n}\n\n/** @internal — Run fn only in dev builds. Use when dev-only logic goes beyond a single warn() / error() call. */\nexport function devOnly(fn: () => void): void {\n  if (isDev) fn();\n}\n"],"mappings":"AAGA,SAAgB,EAAK,EAAmB,CAExC,CAGA,SAAgB,EAAQ,EAAsB,CAE9C"}

package/dist/_dev.js

@@ -1,12 +1,7 @@
 //#region src/_dev.ts
-var e = !globalThis.__SANDBOX_PROD__;
-function t(t) {
-	e && console.warn(`[@vielzeug/sandbox] ${t}`);
-}
-function n(t) {
-	e && t();
-}
+function e(e) {}
+function t(e) {}
 //#endregion
-export { n as devOnly, t as warn };
+export { t as devOnly, e as warn };
 
 //# sourceMappingURL=_dev.js.map

package/dist/_dev.js.map

@@ -1 +1 @@
-{"version":3,"file":"_dev.js","names":[],"sources":["../src/_dev.ts"],"sourcesContent":["const isDev = !(globalThis as { __SANDBOX_PROD__?: boolean }).__SANDBOX_PROD__;\n\n/** @internal @security — some callers interpolate user-supplied values (e.g. namedStyles key) into msg; do not log PII. */\nexport function warn(msg: string): void {\n  if (isDev) console.warn(`[@vielzeug/sandbox] ${msg}`);\n}\n\n/** @internal — Run fn only in dev builds. Use when dev-only logic goes beyond a single warn() / error() call. */\nexport function devOnly(fn: () => void): void {\n  if (isDev) fn();\n}\n"],"mappings":";AAAA,IAAM,IAAQ,CAAE,WAA8C;AAG9D,SAAgB,EAAK,GAAmB;CACtC,AAAI,KAAO,QAAQ,KAAK,uBAAuB,GAAK;AACtD;AAGA,SAAgB,EAAQ,GAAsB;CAC5C,AAAI,KAAO,EAAG;AAChB"}
+{"version":3,"file":"_dev.js","names":[],"sources":["../src/_dev.ts"],"sourcesContent":["const isDev = !(globalThis as { __SANDBOX_PROD__?: boolean }).__SANDBOX_PROD__;\n\n/** @internal @security — some callers interpolate user-supplied values (e.g. namedStyles key) into msg; do not log PII. */\nexport function warn(msg: string): void {\n  if (isDev) console.warn(`[@vielzeug/sandbox] ${msg}`);\n}\n\n/** @internal — Run fn only in dev builds. Use when dev-only logic goes beyond a single warn() / error() call. */\nexport function devOnly(fn: () => void): void {\n  if (isDev) fn();\n}\n"],"mappings":";AAGA,SAAgB,EAAK,GAAmB,CAExC;AAGA,SAAgB,EAAQ,GAAsB,CAE9C"}

package/dist/_sandbox.cjs

@@ -1,4 +1,4 @@
-const e=require("./_dev.cjs"),t=require("./errors.cjs");var n=`ready`,r=`state-update`,i=`state-update-all`,a=`style-patch`,o=`html-patch`,s=`error`,c=`custom`,l=`resize`;function u(e){return typeof e==`object`&&!!e&&typeof e.type==`string`}function d(e){try{let t=new URL(e).origin;return t===`null`?null:t}catch{return null}}function f(e){return e.replace(/<\/style/gi,`\\3C /style`)}function p(e){return e.replace(/&/g,`&amp;`).replace(/"/g,`&quot;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`)}function m(e){return e.replace(/&/g,`&amp;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`)}var h=/['";\n\r]/g;function g(e){return e.replace(h,``)}function _(e){return e.replace(h,``)}function v(e={}){let t=e.nonce?_(e.nonce):null,n=[`'unsafe-inline'`,...t?[`'nonce-${t}'`]:[],...(e.allowedScriptOrigins??[]).map(g),...(e.scripts??[]).map(d).filter(e=>e!==null)].join(` `),r=[`'unsafe-inline'`,...(e.allowedStyleOrigins??[]).map(g)].join(` `),i=[`data:`,...(e.allowedImageOrigins??[]).map(g)].join(` `),a=(e.allowedFontOrigins??[]).map(g).join(` `)||`'none'`;return[`default-src 'none'`,`script-src ${n}`,`style-src ${r}`,`img-src ${i}`,`font-src ${a}`,`connect-src 'none'`,`form-action 'none'`,`base-uri 'none'`].join(`; `)}var y=`if ('ontouchstart' in window) document.addEventListener('touchstart', function() {}, { passive: true });
+require("./_dev.cjs");const e=require("./errors.cjs");var t=`ready`,n=`state-update`,r=`state-update-all`,i=`style-patch`,a=`html-patch`,o=`error`,s=`custom`,c=`resize`;function l(e){return typeof e==`object`&&!!e&&typeof e.type==`string`}function u(e){try{let t=new URL(e).origin;return t===`null`?null:t}catch{return null}}function d(e){return e.replace(/<\/style/gi,`\\3C /style`)}function f(e){return e.replace(/&/g,`&amp;`).replace(/"/g,`&quot;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`)}function p(e){return e.replace(/&/g,`&amp;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`)}var m=/['";\n\r]/g;function h(e){return e.replace(m,``)}function g(e){return e.replace(m,``)}function _(e={}){let t=e.nonce?g(e.nonce):null,n=[`'unsafe-inline'`,...t?[`'nonce-${t}'`]:[],...(e.allowedScriptOrigins??[]).map(h),...(e.scripts??[]).map(u).filter(e=>e!==null)].join(` `),r=[`'unsafe-inline'`,...(e.allowedStyleOrigins??[]).map(h)].join(` `),i=[`data:`,...(e.allowedImageOrigins??[]).map(h)].join(` `),a=(e.allowedFontOrigins??[]).map(h).join(` `)||`'none'`;return[`default-src 'none'`,`script-src ${n}`,`style-src ${r}`,`img-src ${i}`,`font-src ${a}`,`connect-src 'none'`,`form-action 'none'`,`base-uri 'none'`].join(`; `)}var v=`if ('ontouchstart' in window) document.addEventListener('touchstart', function() {}, { passive: true });
 window.addEventListener('message', function(e) {
   var msg = e.data;
   if (msg && msg.type === 'state-update') {
@@ -59,23 +59,23 @@ if (typeof ResizeObserver !== 'undefined') {
       : entry.contentRect.height;
     post({ type: 'resize', height: h });
   }).observe(document.body);
-}`;function b(e,t={}){let n=p(v(t)),r=t.namedStyles??{};return`<!doctype html>
-<html lang="${p(t.lang??`en`)}">
+}`;function y(e,t={}){let n=f(_(t)),r=t.namedStyles??{};return`<!doctype html>
+<html lang="${f(t.lang??`en`)}">
 <head>
 <meta http-equiv="Content-Security-Policy" content="${n}">
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<title>${m(t.title??``)}</title>
-${Object.entries(r).map(([e,t])=>`<style id="${p(e)}">${f(t)}</style>`).join(`
+<title>${p(t.title??``)}</title>
+${Object.entries(r).map(([e,t])=>`<style id="${f(e)}">${d(t)}</style>`).join(`
 `)}
 </head>
 <body>
-${(t.scripts??[]).map(e=>`<script crossorigin="anonymous" src="${p(e)}"><\/script>`).join(`
+${(t.scripts??[]).map(e=>`<script crossorigin="anonymous" src="${f(e)}"><\/script>`).join(`
 `)}
 ${e}
-<script${t.nonce?` nonce="${p(_(t.nonce))}"`:``}>
-${y}
+<script${t.nonce?` nonce="${f(g(t.nonce))}"`:``}>
+${v}
 <\/script>
 </body>
-</html>`}var x=5e3;function S(d,f={}){let p=null,m=new Set,h=!1,g=new AbortController,_={...f.namedStyles??{}},v=!1,y=0,S,C=new Promise(e=>{S=e}),w=null,T=null;function E(){T!==null&&(clearTimeout(T),T=null)}function D(){E(),w?.resolve(),w=null,v=!1}let O={[c]:e=>{typeof e.event==`string`&&k({detail:e.detail,event:e.event,type:c})},[s]:e=>{typeof e.message==`string`&&k({message:e.message,...typeof e.stack==`string`?{stack:e.stack}:{},type:s})},[n]:()=>{D(),S(),v=!0},[l]:e=>{typeof e.height==`number`&&k({height:e.height,type:l})}};function k(e){for(let t of m)t(e)}function A(e){if(!p||e.source!==p.contentWindow||!u(e.data))return;let t=e.data.generation;typeof t==`number`&&t!==y||Object.hasOwn(O,e.data.type)&&O[e.data.type](e.data)}function j(){return p||(p=document.createElement(`iframe`),p.setAttribute(`sandbox`,`allow-scripts`),p.setAttribute(`referrerpolicy`,`no-referrer`),d.appendChild(p),window.addEventListener(`message`,A),p)}function M(){h||(h=!0,D(),g.abort(),S(),p&&=(window.removeEventListener(`message`,A),p.remove(),null),m.clear())}function N(t){return h?(e.warn(`onMessage() called on a disposed sandbox — handler will never fire.`),()=>{}):(m.add(t),()=>{m.delete(t)})}function P(n,r){if(h)return e.warn(`render() called on a disposed sandbox.`),Promise.resolve();if(r?.signal?.aborted)return Promise.resolve();n.trim()||e.warn(`render() called with empty HTML.`),D();let i=++y,a=b(n,Object.keys(_).length>0?{...f,namedStyles:{..._}}:f).replace(`<head>`,`<head>\n<script>window.__sandboxGeneration=${i};<\/script>`);j().srcdoc=a;let o=new Promise((e,t)=>{w={reject:t,resolve:e}});return T=setTimeout(()=>{w&&(w.reject(new t.SandboxTimeoutError(`render() did not receive a 'ready' signal from the sandbox document within ${x}ms. The document is likely missing the bridge script — use buildDocument() to generate documents that include it.`)),w=null,T=null)},x),o}function F(t){if(h){e.warn(`patch() called on a disposed sandbox.`);return}if(!v||!p?.contentWindow){e.warn(`patch() called before render() has resolved — bridge is not yet initialized. Await the Promise returned by render() first.`);return}p.contentWindow.postMessage({html:t,type:o},`*`)}function I(t,n){if(h){e.warn(`setState() called on a disposed sandbox.`);return}if(!p?.contentWindow){e.warn(`setState() called before render() — sandbox has no document yet.`);return}v||e.warn(`setState() called before ready — state update may be lost if bridge is not yet initialized. Await the Promise returned by render() first.`),p.contentWindow.postMessage({key:t,type:r,value:n},`*`)}function L(t){if(h){e.warn(`setStateAll() called on a disposed sandbox.`);return}if(!p?.contentWindow){e.warn(`setStateAll() called before render() — sandbox has no document yet.`);return}v||e.warn(`setStateAll() called before ready — state updates may be lost. Await the Promise returned by render() first.`),p.contentWindow.postMessage({record:t,type:i},`*`)}function R(t,n){h||(e.devOnly(()=>{t in _||e.warn(`updateStyle('${t}', …) — '${t}' is not a known namedStyles key. The live patch will have no effect. Pass the id as a key in namedStyles when calling createSandbox().`)}),_[t]=n,v&&p?.contentWindow&&p.contentWindow.postMessage({css:n,id:t,type:a},`*`))}return{get disposalSignal(){return g.signal},dispose:M,get disposed(){return h},onMessage:N,patch:F,ready:C,render:P,setState:I,setStateAll:L,[Symbol.dispose](){M()},updateStyle:R}}exports.buildCsp=v,exports.buildDocument=b,exports.createSandbox=S;
+</html>`}var b=5e3;function x(u,d={}){let f=null,p=new Set,m=!1,h=new AbortController,g={...d.namedStyles??{}},_=!1,v=0,x,S=new Promise(e=>{x=e}),C=null,w=null;function T(){w!==null&&(clearTimeout(w),w=null)}function E(){T(),C?.resolve(),C=null,_=!1}let D={[s]:e=>{typeof e.event==`string`&&O({detail:e.detail,event:e.event,type:s})},[o]:e=>{typeof e.message==`string`&&O({message:e.message,...typeof e.stack==`string`?{stack:e.stack}:{},type:o})},[t]:()=>{E(),x(),_=!0},[c]:e=>{typeof e.height==`number`&&O({height:e.height,type:c})}};function O(e){for(let t of p)t(e)}function k(e){if(!f||e.source!==f.contentWindow||!l(e.data))return;let t=e.data.generation;(typeof t!=`number`||t===v)&&Object.hasOwn(D,e.data.type)&&D[e.data.type](e.data)}function A(){return f||(f=document.createElement(`iframe`),f.setAttribute(`sandbox`,`allow-scripts`),f.setAttribute(`referrerpolicy`,`no-referrer`),u.appendChild(f),window.addEventListener(`message`,k),f)}function j(){m||(m=!0,E(),h.abort(),x(),f&&=(window.removeEventListener(`message`,k),f.remove(),null),p.clear())}function M(e){return m?()=>{}:(p.add(e),()=>{p.delete(e)})}function N(t,n){if(m||n?.signal?.aborted)return Promise.resolve();t.trim(),E();let r=++v,i=y(t,Object.keys(g).length>0?{...d,namedStyles:{...g}}:d).replace(`<head>`,`<head>\n<script>window.__sandboxGeneration=${r};<\/script>`);A().srcdoc=i;let a=new Promise((e,t)=>{C={reject:t,resolve:e}});return w=setTimeout(()=>{C&&(C.reject(new e.SandboxTimeoutError(`render() did not receive a 'ready' signal from the sandbox document within ${b}ms. The document is likely missing the bridge script — use buildDocument() to generate documents that include it.`)),C=null,w=null)},b),a}function P(e){m||!_||!f?.contentWindow||f.contentWindow.postMessage({html:e,type:a},`*`)}function F(e,t){m||f?.contentWindow&&f.contentWindow.postMessage({key:e,type:n,value:t},`*`)}function I(e){m||f?.contentWindow&&f.contentWindow.postMessage({record:e,type:r},`*`)}function L(e,t){m||(g[e]=t,_&&f?.contentWindow&&f.contentWindow.postMessage({css:t,id:e,type:i},`*`))}return{get disposalSignal(){return h.signal},dispose:j,get disposed(){return m},onMessage:M,patch:P,ready:S,render:N,setState:F,setStateAll:I,[Symbol.dispose](){j()},updateStyle:L}}exports.buildCsp=_,exports.buildDocument=y,exports.createSandbox=x;
 //# sourceMappingURL=_sandbox.cjs.map

package/dist/_sandbox.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"_sandbox.cjs","names":[],"sources":["../src/_sandbox.ts"],"sourcesContent":["import type { SandboxHandle, SandboxMessage, SandboxOptions, Unsubscribe } from './types.js';\n\nimport { devOnly, warn } from './_dev';\nimport { SandboxTimeoutError } from './errors.js';\n\n// Re-export types so that _sandbox.ts still exposes them via its original named exports.\n// index.ts now imports types from ./types.js directly — these re-exports are kept only\n// to avoid breaking any direct imports of _sandbox.js in tests.\nexport type {\n  SandboxBridge,\n  SandboxHandle,\n  SandboxMessage,\n  SandboxOptions,\n  SandboxStateUpdateDetail,\n  Unsubscribe,\n} from './types.js';\n\n// ---------------------------------------------------------------------------\n// Protocol constants\n//\n// String values for the postMessage type field crossing the host↔sandbox\n// boundary. Inlined here (not a shared module) because the bridge script is\n// a plain-JS string that cannot import TypeScript modules.\n// ---------------------------------------------------------------------------\n\nconst MSG_READY = 'ready';\nconst MSG_STATE_UPDATE = 'state-update';\nconst MSG_STATE_UPDATE_ALL = 'state-update-all';\nconst MSG_STYLE_PATCH = 'style-patch';\nconst MSG_HTML_PATCH = 'html-patch';\nconst MSG_ERROR = 'error';\nconst MSG_CUSTOM = 'custom';\nconst MSG_RESIZE = 'resize';\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction isMsgObject(data: unknown): data is Record<string, unknown> & { type: string } {\n  return typeof data === 'object' && data !== null && typeof (data as { type?: unknown }).type === 'string';\n}\n\nfunction extractOrigin(url: string): string | null {\n  try {\n    const o = new URL(url).origin;\n\n    return o !== 'null' ? o : null;\n  } catch {\n    return null;\n  }\n}\n\n// Prevent CSS breakout: the HTML spec treats <style> as a raw-text element —\n// it ends at the first `</style` token and the sequence cannot be escaped in\n// HTML. The correct fix is to escape `<` in CSS using its CSS unicode escape\n// `\\3C ` (trailing space terminates the escape sequence). This produces valid\n// CSS that the browser parses correctly, but breaks the HTML tokenizer's\n// `</style` match. The backslash itself is safe because CSS ignores unknown\n// escape sequences.\nfunction escapeCss(css: string): string {\n  return css.replace(/<\\/style/gi, '\\\\3C /style');\n}\n\n// Escape a string for safe interpolation into an HTML double-quoted attribute\n// value (e.g. lang=\"…\", id=\"…\", nonce=\"…\"). Encodes the four characters that\n// can break out of an attribute or inject new attributes.\nfunction escapeAttr(value: string): string {\n  return value.replace(/&/g, '&amp;').replace(/\"/g, '&quot;').replace(/</g, '&lt;').replace(/>/g, '&gt;');\n}\n\n// Escape a string for safe interpolation into HTML text content (e.g. <title>).\n// Encodes & and < to prevent tag/entity injection; > is included for symmetry.\nfunction escapeText(value: string): string {\n  return value.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');\n}\n\n// ---------------------------------------------------------------------------\n// CSP builder\n// ---------------------------------------------------------------------------\n\n// Characters illegal inside CSP source-list tokens (origins and nonces alike) that\n// would allow directive injection or HTML attribute breakout. Specifically:\n//   ';'  — CSP directive separator (would inject a new directive)\n//   '\"' / \"'\" — breaks out of the HTML content=\"...\" / nonce=\"...\" attribute\n//   '\\n' / '\\r' — CSP header line folding / response-splitting\nconst CSP_UNSAFE_CHARS = /['\";\\n\\r]/g;\n\n// Origins must be scheme+host(+port) form; none of CSP_UNSAFE_CHARS belong there.\nfunction sanitizeCspOrigin(origin: string): string {\n  return origin.replace(CSP_UNSAFE_CHARS, '');\n}\n\n// Sanitize a nonce for CSP-token embedding — CSP nonces must be base64\n// characters only; stripping quotes/semicolons/newlines prevents early token\n// termination inside 'nonce-{value}'. buildCsp() and buildDocument() MUST both\n// derive their nonce from this exact function: the CSP header's nonce token and\n// the bridge <script nonce=\"...\"> attribute have to match byte-for-byte, or the\n// browser silently rejects the script — breaking the bridge (and CSP nonce\n// matching is stricter than HTML-attribute escaping, so applying escapeAttr()\n// to the raw, unsanitized nonce for the attribute while sanitizing separately\n// for the CSP token can produce two different strings).\nfunction sanitizeNonce(nonce: string): string {\n  return nonce.replace(CSP_UNSAFE_CHARS, '');\n}\n\n/**\n * Builds a strict Content-Security-Policy string for sandboxed iframe documents.\n *\n * Accepts SandboxOptions directly — origins from `scripts` URLs are extracted and\n * merged with `allowedScriptOrigins` automatically.\n */\nexport function buildCsp(options: SandboxOptions = {}): string {\n  const safeNonce = options.nonce ? sanitizeNonce(options.nonce) : null;\n\n  const scriptOrigins = [\n    \"'unsafe-inline'\",\n    ...(safeNonce ? [`'nonce-${safeNonce}'`] : []),\n    ...(options.allowedScriptOrigins ?? []).map(sanitizeCspOrigin),\n    ...(options.scripts ?? []).map(extractOrigin).filter((o): o is string => o !== null),\n  ].join(' ');\n\n  const styleOrigins = [\"'unsafe-inline'\", ...(options.allowedStyleOrigins ?? []).map(sanitizeCspOrigin)].join(' ');\n  const imgOrigins = ['data:', ...(options.allowedImageOrigins ?? []).map(sanitizeCspOrigin)].join(' ');\n  const fontOrigins = (options.allowedFontOrigins ?? []).map(sanitizeCspOrigin).join(' ') || \"'none'\";\n\n  return [\n    \"default-src 'none'\",\n    `script-src ${scriptOrigins}`,\n    `style-src ${styleOrigins}`,\n    `img-src ${imgOrigins}`,\n    `font-src ${fontOrigins}`,\n    \"connect-src 'none'\",\n    \"form-action 'none'\",\n    \"base-uri 'none'\",\n  ].join('; ');\n}\n\n// ---------------------------------------------------------------------------\n// Document builder\n// ---------------------------------------------------------------------------\n\n// Bridge script embedded in every sandbox document.\n//\n// Plain JS — cannot import TypeScript modules. Message type strings must\n// match the MSG_* constants above.\n//\n// Auto-resize: ResizeObserver on document.body emits 'resize' messages\n// automatically — consumers don't need to wire ResizeObserver in their\n// sandbox content. The observer is set up AFTER the 'ready' postMessage so\n// that the first resize callback (which fires synchronously on observe()) does\n// not arrive at the host before bridgeReady is set.\n//\n// style-patch is scoped to <style> elements (tagName guard) to prevent\n// accidental content injection into non-style elements with a matching id.\nconst BRIDGE_SCRIPT = `\nif ('ontouchstart' in window) document.addEventListener('touchstart', function() {}, { passive: true });\nwindow.addEventListener('message', function(e) {\n  var msg = e.data;\n  if (msg && msg.type === 'state-update') {\n    document.dispatchEvent(new CustomEvent('sandbox:state-update', { detail: { key: msg.key, value: msg.value } }));\n  }\n  if (msg && msg.type === 'state-update-all' && msg.record && typeof msg.record === 'object') {\n    var keys = Object.keys(msg.record);\n    for (var i = 0; i < keys.length; i++) {\n      var k = keys[i];\n      document.dispatchEvent(new CustomEvent('sandbox:state-update', { detail: { key: k, value: msg.record[k] } }));\n    }\n  }\n  if (msg && msg.type === 'style-patch' && msg.id && typeof msg.css === 'string') {\n    var el = document.getElementById(msg.id);\n    if (el && el.tagName === 'STYLE') el.textContent = msg.css;\n  }\n  if (msg && msg.type === 'html-patch' && typeof msg.html === 'string') {\n    document.body.innerHTML = msg.html;\n  }\n});\n// post() tags every outgoing message with window.__sandboxGeneration (set by render(),\n// see below) and always targets '*' — srcdoc iframes have origin 'null' so no specific\n// origin can be addressed. The host uses the generation tag to ignore messages from a\n// document a newer render() has already superseded.\nfunction post(msg) {\n  msg.generation = window.__sandboxGeneration;\n  parent.postMessage(msg, '*');\n}\nwindow.onerror = function(message, _src, _line, _col, err) {\n  post({ type: 'error', message: String(message), stack: err && err.stack });\n  return true;\n};\nwindow.addEventListener('unhandledrejection', function(e) {\n  var reason = e.reason;\n  post({ type: 'error', message: String(reason), stack: reason && reason.stack });\n});\nwindow.__sandbox__ = {\n  emit: function(event, detail) {\n    post({ type: 'custom', event: event, detail: detail });\n  },\n  onState: function(key, handler) {\n    function listener(e) {\n      if (e.detail && e.detail.key === key) handler(e.detail.value);\n    }\n    document.addEventListener('sandbox:state-update', listener);\n    return function() {\n      document.removeEventListener('sandbox:state-update', listener);\n    };\n  }\n};\npost({ type: 'ready' });\nif (typeof ResizeObserver !== 'undefined') {\n  new ResizeObserver(function(entries) {\n    var entry = entries[0];\n    if (!entry) return;\n    var h = entry.borderBoxSize && entry.borderBoxSize[0]\n      ? entry.borderBoxSize[0].blockSize\n      : entry.contentRect.height;\n    post({ type: 'resize', height: h });\n  }).observe(document.body);\n}\n`.trim();\n\n/**\n * Builds a complete, standalone sandbox HTML document.\n *\n * `namedStyles` entries are rendered as `<style id=\"key\">` elements in the\n * document `<head>`. External scripts carry `crossorigin=\"anonymous\"` so the\n * bridge's error handler receives full error details for cross-origin scripts.\n * The bridge script auto-emits `resize` messages via `ResizeObserver`.\n */\nexport function buildDocument(html: string, options: SandboxOptions = {}): string {\n  // escapeAttr is applied to the whole CSP string when embedding it in content=\"...\"\n  // because buildCsp() does not know the embedding context. Any user-supplied origin\n  // values that survived sanitizeCspOrigin() but still contain & or < (very unusual)\n  // would otherwise break the HTML attribute.\n  const csp = escapeAttr(buildCsp(options));\n  const named = options.namedStyles ?? {};\n  const lang = escapeAttr(options.lang ?? 'en');\n  const title = escapeText(options.title ?? '');\n\n  const styleTags = Object.entries(named)\n    .map(([id, css]) => `<style id=\"${escapeAttr(id)}\">${escapeCss(css)}</style>`)\n    .join('\\n');\n\n  const scriptTags = (options.scripts ?? [])\n    .map((src) => `<script crossorigin=\"anonymous\" src=\"${escapeAttr(src)}\"></script>`)\n    .join('\\n');\n\n  // Must sanitize with the exact same sanitizeNonce() used by buildCsp() — see its\n  // comment. escapeAttr() alone is not enough: it HTML-encodes but does not strip,\n  // so a raw nonce containing e.g. ';' would attribute-escape differently than the\n  // CSP token strips it, producing a mismatched nonce and a silently broken bridge.\n  const nonceAttr = options.nonce ? ` nonce=\"${escapeAttr(sanitizeNonce(options.nonce))}\"` : '';\n\n  return `<!doctype html>\n<html lang=\"${lang}\">\n<head>\n<meta http-equiv=\"Content-Security-Policy\" content=\"${csp}\">\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>${title}</title>\n${styleTags}\n</head>\n<body>\n${scriptTags}\n${html}\n<script${nonceAttr}>\n${BRIDGE_SCRIPT}\n</script>\n</body>\n</html>`;\n}\n\n// ---------------------------------------------------------------------------\n// Sandbox factory\n// ---------------------------------------------------------------------------\n\n// Dev-only timeout: if the bridge never fires 'ready' after a render(), warn\n// so the developer knows the bridge script is missing or broken.\nconst READY_TIMEOUT_MS = 5000;\n\nexport function createSandbox(container: HTMLElement, options: SandboxOptions = {}): SandboxHandle {\n  // Iframe is created lazily on the first render() call — no DOM work until\n  // there is content to show.\n  let iframe: HTMLIFrameElement | null = null;\n  const listeners = new Set<(msg: SandboxMessage) => void>();\n  let disposed = false;\n  const ac = new AbortController();\n\n  // Mutable namedStyles baseline — updateStyle() patches this so re-renders\n  // automatically use the latest CSS without the caller re-passing options.\n  const namedStyles: Record<string, string> = { ...(options.namedStyles ?? {}) };\n\n  // bridgeReady: true once the bridge inside the current document has fired MSG_READY.\n  // Reset to false on each render() so setState/updateStyle guards work correctly.\n  let bridgeReady = false;\n\n  // Monotonic counter embedded into each srcdoc as window.__sandboxGeneration (see\n  // render()). iframe.contentWindow's identity is stable across srcdoc navigations in\n  // real browsers, so event.source alone cannot distinguish a superseded document's\n  // messages from the current one — the generation tag closes that gap.\n  let renderGeneration = 0;\n\n  // First-render gate — resolves on first ready signal or on dispose().\n  // Always resolves (never rejects) so callers can safely fire-and-forget it.\n  // Check sandbox.disposed afterward to distinguish a dispose-resolution.\n  let resolveReady!: () => void;\n  const ready = new Promise<void>((resolve) => {\n    resolveReady = resolve;\n  });\n\n  // Per-render settlers — replaced on each render(), resolved on the next 'ready'\n  // message or when superseded/disposed (not an error — the document navigated away\n  // or the sandbox was torn down intentionally), rejected only by the ready-timeout.\n  let currentRenderSettlers: { reject: (err: unknown) => void; resolve: () => void } | null = null;\n  let readyTimeoutId: ReturnType<typeof setTimeout> | null = null;\n\n  function clearReadyTimeout(): void {\n    if (readyTimeoutId !== null) {\n      clearTimeout(readyTimeoutId);\n      readyTimeoutId = null;\n    }\n  }\n\n  // Supersede the in-flight render: resolve (not reject) its promise, clear the\n  // timeout, and reset bridgeReady. All three must change together — keep them here.\n  function supersedePendingRender(): void {\n    clearReadyTimeout();\n    currentRenderSettlers?.resolve();\n    currentRenderSettlers = null;\n    bridgeReady = false;\n  }\n\n  // Dispatch table for incoming sandbox→host messages.\n  // Adding a new message type means adding one entry here — no separate allowlist.\n  // Each handler constructs a typed SandboxMessage rather than casting, so the\n  // compiler verifies the shape and malformed payloads are silently dropped.\n  const msgHandlers: Record<string, (msg: Record<string, unknown>) => void> = {\n    [MSG_CUSTOM]: (msg) => {\n      if (typeof msg.event === 'string') {\n        broadcast({ detail: msg.detail, event: msg.event, type: MSG_CUSTOM });\n      }\n    },\n    [MSG_ERROR]: (msg) => {\n      if (typeof msg.message === 'string') {\n        broadcast({\n          message: msg.message,\n          ...(typeof msg.stack === 'string' ? { stack: msg.stack } : {}),\n          type: MSG_ERROR,\n        });\n      }\n    },\n    [MSG_READY]: () => {\n      // supersedePendingRender clears the timeout and resolves the render promise.\n      // bridgeReady is re-set to true immediately after because the bridge IS ready.\n      supersedePendingRender();\n      resolveReady();\n      bridgeReady = true;\n    },\n    [MSG_RESIZE]: (msg) => {\n      if (typeof msg.height === 'number') broadcast({ height: msg.height, type: MSG_RESIZE });\n    },\n  };\n\n  function broadcast(msg: SandboxMessage): void {\n    for (const listener of listeners) listener(msg);\n  }\n\n  function handleMessage(event: MessageEvent): void {\n    if (!iframe || event.source !== iframe.contentWindow) return;\n\n    if (!isMsgObject(event.data)) return;\n\n    // Reject messages tagged with a superseded generation — a document torn down by a\n    // newer render() may still have a message in flight. Messages with no generation\n    // (or a non-number one, e.g. from testing helpers) are trusted and pass through.\n    const generation = event.data.generation;\n\n    if (typeof generation === 'number' && generation !== renderGeneration) return;\n\n    // Guard against prototype-inherited properties on msgHandlers (e.g. '__proto__',\n    // '__defineGetter__') — these are not functions and calling them via ?.() throws.\n    // Object.hasOwn ensures only keys explicitly defined in the dispatch table are invoked.\n    if (Object.hasOwn(msgHandlers, event.data.type)) {\n      msgHandlers[event.data.type]!(event.data);\n    }\n  }\n\n  function ensureIframe(): HTMLIFrameElement {\n    if (iframe) return iframe;\n\n    iframe = document.createElement('iframe');\n    iframe.setAttribute('sandbox', 'allow-scripts');\n    iframe.setAttribute('referrerpolicy', 'no-referrer');\n    container.appendChild(iframe);\n    window.addEventListener('message', handleMessage);\n\n    return iframe;\n  }\n\n  function dispose(): void {\n    if (disposed) return;\n\n    disposed = true;\n    supersedePendingRender();\n    ac.abort();\n    resolveReady();\n\n    if (iframe) {\n      window.removeEventListener('message', handleMessage);\n      iframe.remove();\n      iframe = null;\n    }\n\n    listeners.clear();\n  }\n\n  function onMessage(handler: (msg: SandboxMessage) => void): Unsubscribe {\n    if (disposed) {\n      warn('onMessage() called on a disposed sandbox — handler will never fire.');\n\n      return () => {};\n    }\n\n    listeners.add(handler);\n\n    return () => {\n      listeners.delete(handler);\n    };\n  }\n\n  function render(html: string, renderOptions?: { signal?: AbortSignal }): Promise<void> {\n    if (disposed) {\n      warn('render() called on a disposed sandbox.');\n\n      return Promise.resolve();\n    }\n\n    if (renderOptions?.signal?.aborted) return Promise.resolve();\n\n    if (!html.trim()) {\n      warn('render() called with empty HTML.');\n    }\n\n    // Supersede any in-flight render — its document navigated away.\n    supersedePendingRender();\n\n    const generation = ++renderGeneration;\n    const docOptions = Object.keys(namedStyles).length > 0 ? { ...options, namedStyles: { ...namedStyles } } : options;\n\n    // Inject the generation marker into <head> — it always appears before any user\n    // content in the template, so this replace can never hit HTML inside `html`.\n    const doc = buildDocument(html, docOptions).replace(\n      '<head>',\n      `<head>\\n<script>window.__sandboxGeneration=${generation};</script>`,\n    );\n\n    ensureIframe().srcdoc = doc;\n\n    const p = new Promise<void>((resolve, reject) => {\n      currentRenderSettlers = { reject, resolve };\n    });\n\n    // If the bridge never fires 'ready', reject with SandboxTimeoutError so the\n    // document-missing-bridge-script failure is catchable rather than hanging forever.\n    readyTimeoutId = setTimeout(() => {\n      if (currentRenderSettlers) {\n        currentRenderSettlers.reject(\n          new SandboxTimeoutError(\n            `render() did not receive a 'ready' signal from the sandbox document within ${READY_TIMEOUT_MS}ms. ` +\n              'The document is likely missing the bridge script — use buildDocument() to generate documents that include it.',\n          ),\n        );\n        currentRenderSettlers = null;\n        readyTimeoutId = null;\n      }\n    }, READY_TIMEOUT_MS);\n\n    return p;\n  }\n\n  function patch(html: string): void {\n    if (disposed) {\n      warn('patch() called on a disposed sandbox.');\n\n      return;\n    }\n\n    if (!bridgeReady || !iframe?.contentWindow) {\n      warn(\n        'patch() called before render() has resolved — bridge is not yet initialized. Await the Promise returned by render() first.',\n      );\n\n      return;\n    }\n\n    // srcdoc iframes have origin 'null' — '*' is required because no specific origin can be targeted.\n    iframe.contentWindow.postMessage({ html, type: MSG_HTML_PATCH }, '*');\n  }\n\n  function setState(key: string, value: unknown): void {\n    if (disposed) {\n      warn('setState() called on a disposed sandbox.');\n\n      return;\n    }\n\n    if (!iframe?.contentWindow) {\n      warn('setState() called before render() — sandbox has no document yet.');\n\n      return;\n    }\n\n    if (!bridgeReady) {\n      warn(\n        'setState() called before ready — state update may be lost if bridge is not yet initialized. Await the Promise returned by render() first.',\n      );\n    }\n\n    // srcdoc iframes have origin 'null' — '*' is required because no specific origin can be targeted.\n    iframe.contentWindow.postMessage({ key, type: MSG_STATE_UPDATE, value }, '*');\n  }\n\n  function setStateAll(record: Record<string, unknown>): void {\n    if (disposed) {\n      warn('setStateAll() called on a disposed sandbox.');\n\n      return;\n    }\n\n    if (!iframe?.contentWindow) {\n      warn('setStateAll() called before render() — sandbox has no document yet.');\n\n      return;\n    }\n\n    if (!bridgeReady) {\n      warn(\n        'setStateAll() called before ready — state updates may be lost. Await the Promise returned by render() first.',\n      );\n    }\n\n    // srcdoc iframes have origin 'null' — '*' is required because no specific origin can be targeted.\n    iframe.contentWindow.postMessage({ record, type: MSG_STATE_UPDATE_ALL }, '*');\n  }\n\n  function updateStyle(id: string, css: string): void {\n    if (disposed) return;\n\n    devOnly(() => {\n      if (!(id in namedStyles)) {\n        warn(\n          `updateStyle('${id}', …) — '${id}' is not a known namedStyles key. ` +\n            'The live patch will have no effect. Pass the id as a key in namedStyles when calling createSandbox().',\n        );\n      }\n    });\n\n    namedStyles[id] = css;\n\n    if (bridgeReady && iframe?.contentWindow) {\n      // srcdoc iframes have origin 'null' — '*' is required because no specific origin can be targeted.\n      iframe.contentWindow.postMessage({ css, id, type: MSG_STYLE_PATCH }, '*');\n    }\n  }\n\n  return {\n    get disposalSignal() {\n      return ac.signal;\n    },\n    dispose,\n    get disposed() {\n      return disposed;\n    },\n    onMessage,\n    patch,\n    ready,\n    render,\n    setState,\n    setStateAll,\n    [Symbol.dispose]() {\n      dispose();\n    },\n    updateStyle,\n  };\n}\n"],"mappings":"wDAyBA,IAAM,EAAY,QACZ,EAAmB,eACnB,EAAuB,mBACvB,EAAkB,cAClB,EAAiB,aACjB,EAAY,QACZ,EAAa,SACb,EAAa,SAMnB,SAAS,EAAY,EAAmE,CACtF,OAAO,OAAO,GAAS,YAAY,GAAiB,OAAQ,EAA4B,MAAS,QACnG,CAEA,SAAS,EAAc,EAA4B,CACjD,GAAI,CACF,IAAM,EAAI,IAAI,IAAI,CAAG,CAAC,CAAC,OAEvB,OAAO,IAAM,OAAa,KAAJ,CACxB,MAAQ,CACN,OAAO,IACT,CACF,CASA,SAAS,EAAU,EAAqB,CACtC,OAAO,EAAI,QAAQ,aAAc,aAAa,CAChD,CAKA,SAAS,EAAW,EAAuB,CACzC,OAAO,EAAM,QAAQ,KAAM,OAAO,CAAC,CAAC,QAAQ,KAAM,QAAQ,CAAC,CAAC,QAAQ,KAAM,MAAM,CAAC,CAAC,QAAQ,KAAM,MAAM,CACxG,CAIA,SAAS,EAAW,EAAuB,CACzC,OAAO,EAAM,QAAQ,KAAM,OAAO,CAAC,CAAC,QAAQ,KAAM,MAAM,CAAC,CAAC,QAAQ,KAAM,MAAM,CAChF,CAWA,IAAM,EAAmB,aAGzB,SAAS,EAAkB,EAAwB,CACjD,OAAO,EAAO,QAAQ,EAAkB,EAAE,CAC5C,CAWA,SAAS,EAAc,EAAuB,CAC5C,OAAO,EAAM,QAAQ,EAAkB,EAAE,CAC3C,CAQA,SAAgB,EAAS,EAA0B,CAAC,EAAW,CAC7D,IAAM,EAAY,EAAQ,MAAQ,EAAc,EAAQ,KAAK,EAAI,KAE3D,EAAgB,CACpB,kBACA,GAAI,EAAY,CAAC,UAAU,EAAU,EAAE,EAAI,CAAC,EAC5C,IAAI,EAAQ,sBAAwB,CAAC,EAAA,CAAG,IAAI,CAAiB,EAC7D,IAAI,EAAQ,SAAW,CAAC,EAAA,CAAG,IAAI,CAAa,CAAC,CAAC,OAAQ,GAAmB,IAAM,IAAI,CACrF,CAAC,CAAC,KAAK,GAAG,EAEJ,EAAe,CAAC,kBAAmB,IAAI,EAAQ,qBAAuB,CAAC,EAAA,CAAG,IAAI,CAAiB,CAAC,CAAC,CAAC,KAAK,GAAG,EAC1G,EAAa,CAAC,QAAS,IAAI,EAAQ,qBAAuB,CAAC,EAAA,CAAG,IAAI,CAAiB,CAAC,CAAC,CAAC,KAAK,GAAG,EAC9F,GAAe,EAAQ,oBAAsB,CAAC,EAAA,CAAG,IAAI,CAAiB,CAAC,CAAC,KAAK,GAAG,GAAK,SAE3F,MAAO,CACL,qBACA,cAAc,IACd,aAAa,IACb,WAAW,IACX,YAAY,IACZ,qBACA,qBACA,iBACF,CAAC,CAAC,KAAK,IAAI,CACb,CAmBA,IAAM,EAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEtB,SAAgB,EAAc,EAAc,EAA0B,CAAC,EAAW,CAKhF,IAAM,EAAM,EAAW,EAAS,CAAO,CAAC,EAClC,EAAQ,EAAQ,aAAe,CAAC,EAkBtC,MAAO;cAjBM,EAAW,EAAQ,MAAQ,IAkB5B,EAAK;;sDAEmC,EAAI;;;SAnB1C,EAAW,EAAQ,OAAS,EAsBnC,EAAM;EApBK,OAAO,QAAQ,CAAK,CAAC,CACpC,KAAK,CAAC,EAAI,KAAS,cAAc,EAAW,CAAE,EAAE,IAAI,EAAU,CAAG,EAAE,SAAS,CAAC,CAC7E,KAAK;CAmBR,EAAU;;;GAjBU,EAAQ,SAAW,CAAC,EAAA,CACrC,IAAK,GAAQ,wCAAwC,EAAW,CAAG,EAAE,aAAY,CAAC,CAClF,KAAK;CAkBR,EAAW;EACX,EAAK;SAba,EAAQ,MAAQ,WAAW,EAAW,EAAc,EAAQ,KAAK,CAAC,EAAE,GAAK,GAc1E;EACjB,EAAc;;;QAIhB,CAQA,IAAM,EAAmB,IAEzB,SAAgB,EAAc,EAAwB,EAA0B,CAAC,EAAkB,CAGjG,IAAI,EAAmC,KACjC,EAAY,IAAI,IAClB,EAAW,GACT,EAAK,IAAI,gBAIT,EAAsC,CAAE,GAAI,EAAQ,aAAe,CAAC,CAAG,EAIzE,EAAc,GAMd,EAAmB,EAKnB,EACE,EAAQ,IAAI,QAAe,GAAY,CAC3C,EAAe,CACjB,CAAC,EAKG,EAAwF,KACxF,EAAuD,KAE3D,SAAS,GAA0B,CAC7B,IAAmB,OACrB,aAAa,CAAc,EAC3B,EAAiB,KAErB,CAIA,SAAS,GAA+B,CACtC,EAAkB,EAClB,GAAuB,QAAQ,EAC/B,EAAwB,KACxB,EAAc,EAChB,CAMA,IAAM,EAAsE,EACzE,GAAc,GAAQ,CACjB,OAAO,EAAI,OAAU,UACvB,EAAU,CAAE,OAAQ,EAAI,OAAQ,MAAO,EAAI,MAAO,KAAM,CAAW,CAAC,CAExE,GACC,GAAa,GAAQ,CAChB,OAAO,EAAI,SAAY,UACzB,EAAU,CACR,QAAS,EAAI,QACb,GAAI,OAAO,EAAI,OAAU,SAAW,CAAE,MAAO,EAAI,KAAM,EAAI,CAAC,EAC5D,KAAM,CACR,CAAC,CAEL,GACC,OAAkB,CAGjB,EAAuB,EACvB,EAAa,EACb,EAAc,EAChB,GACC,GAAc,GAAQ,CACjB,OAAO,EAAI,QAAW,UAAU,EAAU,CAAE,OAAQ,EAAI,OAAQ,KAAM,CAAW,CAAC,CACxF,CACF,EAEA,SAAS,EAAU,EAA2B,CAC5C,IAAK,IAAM,KAAY,EAAW,EAAS,CAAG,CAChD,CAEA,SAAS,EAAc,EAA2B,CAGhD,GAFI,CAAC,GAAU,EAAM,SAAW,EAAO,eAEnC,CAAC,EAAY,EAAM,IAAI,EAAG,OAK9B,IAAM,EAAa,EAAM,KAAK,WAE1B,OAAO,GAAe,UAAY,IAAe,GAKjD,OAAO,OAAO,EAAa,EAAM,KAAK,IAAI,GAC5C,EAAY,EAAM,KAAK,KAAK,CAAE,EAAM,IAAI,CAE5C,CAEA,SAAS,GAAkC,CASzC,OARI,IAEJ,EAAS,SAAS,cAAc,QAAQ,EACxC,EAAO,aAAa,UAAW,eAAe,EAC9C,EAAO,aAAa,iBAAkB,aAAa,EACnD,EAAU,YAAY,CAAM,EAC5B,OAAO,iBAAiB,UAAW,CAAa,EAEzC,EACT,CAEA,SAAS,GAAgB,CACnB,IAEJ,EAAW,GACX,EAAuB,EACvB,EAAG,MAAM,EACT,EAAa,EAEb,AAGE,KAFA,OAAO,oBAAoB,UAAW,CAAa,EACnD,EAAO,OAAO,EACL,MAGX,EAAU,MAAM,EAClB,CAEA,SAAS,EAAU,EAAqD,CAStE,OARI,GACF,EAAA,KAAK,qEAAqE,MAE7D,CAAC,IAGhB,EAAU,IAAI,CAAO,MAER,CACX,EAAU,OAAO,CAAO,CAC1B,EACF,CAEA,SAAS,EAAO,EAAc,EAAyD,CACrF,GAAI,EAGF,OAFA,EAAA,KAAK,wCAAwC,EAEtC,QAAQ,QAAQ,EAGzB,GAAI,GAAe,QAAQ,QAAS,OAAO,QAAQ,QAAQ,EAEtD,EAAK,KAAK,GACb,EAAA,KAAK,kCAAkC,EAIzC,EAAuB,EAEvB,IAAM,EAAa,EAAE,EAKf,EAAM,EAAc,EAJP,OAAO,KAAK,CAAW,CAAC,CAAC,OAAS,EAAI,CAAE,GAAG,EAAS,YAAa,CAAE,GAAG,CAAY,CAAE,EAAI,CAIjE,CAAC,CAAC,QAC1C,SACA,8CAA8C,EAAW,YAC3D,EAEA,EAAa,CAAC,CAAC,OAAS,EAExB,IAAM,EAAI,IAAI,SAAe,EAAS,IAAW,CAC/C,EAAwB,CAAE,SAAQ,SAAQ,CAC5C,CAAC,EAiBD,MAbA,GAAiB,eAAiB,CAC5B,IACF,EAAsB,OACpB,IAAI,EAAA,oBACF,8EAA8E,EAAiB,kHAEjG,CACF,EACA,EAAwB,KACxB,EAAiB,KAErB,EAAG,CAAgB,EAEZ,CACT,CAEA,SAAS,EAAM,EAAoB,CACjC,GAAI,EAAU,CACZ,EAAA,KAAK,uCAAuC,EAE5C,MACF,CAEA,GAAI,CAAC,GAAe,CAAC,GAAQ,cAAe,CAC1C,EAAA,KACE,4HACF,EAEA,MACF,CAGA,EAAO,cAAc,YAAY,CAAE,OAAM,KAAM,CAAe,EAAG,GAAG,CACtE,CAEA,SAAS,EAAS,EAAa,EAAsB,CACnD,GAAI,EAAU,CACZ,EAAA,KAAK,0CAA0C,EAE/C,MACF,CAEA,GAAI,CAAC,GAAQ,cAAe,CAC1B,EAAA,KAAK,kEAAkE,EAEvE,MACF,CAEK,GACH,EAAA,KACE,2IACF,EAIF,EAAO,cAAc,YAAY,CAAE,MAAK,KAAM,EAAkB,OAAM,EAAG,GAAG,CAC9E,CAEA,SAAS,EAAY,EAAuC,CAC1D,GAAI,EAAU,CACZ,EAAA,KAAK,6CAA6C,EAElD,MACF,CAEA,GAAI,CAAC,GAAQ,cAAe,CAC1B,EAAA,KAAK,qEAAqE,EAE1E,MACF,CAEK,GACH,EAAA,KACE,8GACF,EAIF,EAAO,cAAc,YAAY,CAAE,SAAQ,KAAM,CAAqB,EAAG,GAAG,CAC9E,CAEA,SAAS,EAAY,EAAY,EAAmB,CAC9C,IAEJ,EAAA,YAAc,CACN,KAAM,GACV,EAAA,KACE,gBAAgB,EAAG,WAAW,EAAG,wIAEnC,CAEJ,CAAC,EAED,EAAY,GAAM,EAEd,GAAe,GAAQ,eAEzB,EAAO,cAAc,YAAY,CAAE,MAAK,KAAI,KAAM,CAAgB,EAAG,GAAG,EAE5E,CAEA,MAAO,CACL,IAAI,gBAAiB,CACnB,OAAO,EAAG,MACZ,EACA,UACA,IAAI,UAAW,CACb,OAAO,CACT,EACA,YACA,QACA,QACA,SACA,WACA,cACA,CAAC,OAAO,UAAW,CACjB,EAAQ,CACV,EACA,aACF,CACF"}
+{"version":3,"file":"_sandbox.cjs","names":[],"sources":["../src/_sandbox.ts"],"sourcesContent":["import type { SandboxHandle, SandboxMessage, SandboxOptions, Unsubscribe } from './types.js';\n\nimport { devOnly, warn } from './_dev';\nimport { SandboxTimeoutError } from './errors.js';\n\n// Re-export types so that _sandbox.ts still exposes them via its original named exports.\n// index.ts now imports types from ./types.js directly — these re-exports are kept only\n// to avoid breaking any direct imports of _sandbox.js in tests.\nexport type {\n  SandboxBridge,\n  SandboxHandle,\n  SandboxMessage,\n  SandboxOptions,\n  SandboxStateUpdateDetail,\n  Unsubscribe,\n} from './types.js';\n\n// ---------------------------------------------------------------------------\n// Protocol constants\n//\n// String values for the postMessage type field crossing the host↔sandbox\n// boundary. Inlined here (not a shared module) because the bridge script is\n// a plain-JS string that cannot import TypeScript modules.\n// ---------------------------------------------------------------------------\n\nconst MSG_READY = 'ready';\nconst MSG_STATE_UPDATE = 'state-update';\nconst MSG_STATE_UPDATE_ALL = 'state-update-all';\nconst MSG_STYLE_PATCH = 'style-patch';\nconst MSG_HTML_PATCH = 'html-patch';\nconst MSG_ERROR = 'error';\nconst MSG_CUSTOM = 'custom';\nconst MSG_RESIZE = 'resize';\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction isMsgObject(data: unknown): data is Record<string, unknown> & { type: string } {\n  return typeof data === 'object' && data !== null && typeof (data as { type?: unknown }).type === 'string';\n}\n\nfunction extractOrigin(url: string): string | null {\n  try {\n    const o = new URL(url).origin;\n\n    return o !== 'null' ? o : null;\n  } catch {\n    return null;\n  }\n}\n\n// Prevent CSS breakout: the HTML spec treats <style> as a raw-text element —\n// it ends at the first `</style` token and the sequence cannot be escaped in\n// HTML. The correct fix is to escape `<` in CSS using its CSS unicode escape\n// `\\3C ` (trailing space terminates the escape sequence). This produces valid\n// CSS that the browser parses correctly, but breaks the HTML tokenizer's\n// `</style` match. The backslash itself is safe because CSS ignores unknown\n// escape sequences.\nfunction escapeCss(css: string): string {\n  return css.replace(/<\\/style/gi, '\\\\3C /style');\n}\n\n// Escape a string for safe interpolation into an HTML double-quoted attribute\n// value (e.g. lang=\"…\", id=\"…\", nonce=\"…\"). Encodes the four characters that\n// can break out of an attribute or inject new attributes.\nfunction escapeAttr(value: string): string {\n  return value.replace(/&/g, '&amp;').replace(/\"/g, '&quot;').replace(/</g, '&lt;').replace(/>/g, '&gt;');\n}\n\n// Escape a string for safe interpolation into HTML text content (e.g. <title>).\n// Encodes & and < to prevent tag/entity injection; > is included for symmetry.\nfunction escapeText(value: string): string {\n  return value.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');\n}\n\n// ---------------------------------------------------------------------------\n// CSP builder\n// ---------------------------------------------------------------------------\n\n// Characters illegal inside CSP source-list tokens (origins and nonces alike) that\n// would allow directive injection or HTML attribute breakout. Specifically:\n//   ';'  — CSP directive separator (would inject a new directive)\n//   '\"' / \"'\" — breaks out of the HTML content=\"...\" / nonce=\"...\" attribute\n//   '\\n' / '\\r' — CSP header line folding / response-splitting\nconst CSP_UNSAFE_CHARS = /['\";\\n\\r]/g;\n\n// Origins must be scheme+host(+port) form; none of CSP_UNSAFE_CHARS belong there.\nfunction sanitizeCspOrigin(origin: string): string {\n  return origin.replace(CSP_UNSAFE_CHARS, '');\n}\n\n// Sanitize a nonce for CSP-token embedding — CSP nonces must be base64\n// characters only; stripping quotes/semicolons/newlines prevents early token\n// termination inside 'nonce-{value}'. buildCsp() and buildDocument() MUST both\n// derive their nonce from this exact function: the CSP header's nonce token and\n// the bridge <script nonce=\"...\"> attribute have to match byte-for-byte, or the\n// browser silently rejects the script — breaking the bridge (and CSP nonce\n// matching is stricter than HTML-attribute escaping, so applying escapeAttr()\n// to the raw, unsanitized nonce for the attribute while sanitizing separately\n// for the CSP token can produce two different strings).\nfunction sanitizeNonce(nonce: string): string {\n  return nonce.replace(CSP_UNSAFE_CHARS, '');\n}\n\n/**\n * Builds a strict Content-Security-Policy string for sandboxed iframe documents.\n *\n * Accepts SandboxOptions directly — origins from `scripts` URLs are extracted and\n * merged with `allowedScriptOrigins` automatically.\n */\nexport function buildCsp(options: SandboxOptions = {}): string {\n  const safeNonce = options.nonce ? sanitizeNonce(options.nonce) : null;\n\n  const scriptOrigins = [\n    \"'unsafe-inline'\",\n    ...(safeNonce ? [`'nonce-${safeNonce}'`] : []),\n    ...(options.allowedScriptOrigins ?? []).map(sanitizeCspOrigin),\n    ...(options.scripts ?? []).map(extractOrigin).filter((o): o is string => o !== null),\n  ].join(' ');\n\n  const styleOrigins = [\"'unsafe-inline'\", ...(options.allowedStyleOrigins ?? []).map(sanitizeCspOrigin)].join(' ');\n  const imgOrigins = ['data:', ...(options.allowedImageOrigins ?? []).map(sanitizeCspOrigin)].join(' ');\n  const fontOrigins = (options.allowedFontOrigins ?? []).map(sanitizeCspOrigin).join(' ') || \"'none'\";\n\n  return [\n    \"default-src 'none'\",\n    `script-src ${scriptOrigins}`,\n    `style-src ${styleOrigins}`,\n    `img-src ${imgOrigins}`,\n    `font-src ${fontOrigins}`,\n    \"connect-src 'none'\",\n    \"form-action 'none'\",\n    \"base-uri 'none'\",\n  ].join('; ');\n}\n\n// ---------------------------------------------------------------------------\n// Document builder\n// ---------------------------------------------------------------------------\n\n// Bridge script embedded in every sandbox document.\n//\n// Plain JS — cannot import TypeScript modules. Message type strings must\n// match the MSG_* constants above.\n//\n// Auto-resize: ResizeObserver on document.body emits 'resize' messages\n// automatically — consumers don't need to wire ResizeObserver in their\n// sandbox content. The observer is set up AFTER the 'ready' postMessage so\n// that the first resize callback (which fires synchronously on observe()) does\n// not arrive at the host before bridgeReady is set.\n//\n// style-patch is scoped to <style> elements (tagName guard) to prevent\n// accidental content injection into non-style elements with a matching id.\nconst BRIDGE_SCRIPT = `\nif ('ontouchstart' in window) document.addEventListener('touchstart', function() {}, { passive: true });\nwindow.addEventListener('message', function(e) {\n  var msg = e.data;\n  if (msg && msg.type === 'state-update') {\n    document.dispatchEvent(new CustomEvent('sandbox:state-update', { detail: { key: msg.key, value: msg.value } }));\n  }\n  if (msg && msg.type === 'state-update-all' && msg.record && typeof msg.record === 'object') {\n    var keys = Object.keys(msg.record);\n    for (var i = 0; i < keys.length; i++) {\n      var k = keys[i];\n      document.dispatchEvent(new CustomEvent('sandbox:state-update', { detail: { key: k, value: msg.record[k] } }));\n    }\n  }\n  if (msg && msg.type === 'style-patch' && msg.id && typeof msg.css === 'string') {\n    var el = document.getElementById(msg.id);\n    if (el && el.tagName === 'STYLE') el.textContent = msg.css;\n  }\n  if (msg && msg.type === 'html-patch' && typeof msg.html === 'string') {\n    document.body.innerHTML = msg.html;\n  }\n});\n// post() tags every outgoing message with window.__sandboxGeneration (set by render(),\n// see below) and always targets '*' — srcdoc iframes have origin 'null' so no specific\n// origin can be addressed. The host uses the generation tag to ignore messages from a\n// document a newer render() has already superseded.\nfunction post(msg) {\n  msg.generation = window.__sandboxGeneration;\n  parent.postMessage(msg, '*');\n}\nwindow.onerror = function(message, _src, _line, _col, err) {\n  post({ type: 'error', message: String(message), stack: err && err.stack });\n  return true;\n};\nwindow.addEventListener('unhandledrejection', function(e) {\n  var reason = e.reason;\n  post({ type: 'error', message: String(reason), stack: reason && reason.stack });\n});\nwindow.__sandbox__ = {\n  emit: function(event, detail) {\n    post({ type: 'custom', event: event, detail: detail });\n  },\n  onState: function(key, handler) {\n    function listener(e) {\n      if (e.detail && e.detail.key === key) handler(e.detail.value);\n    }\n    document.addEventListener('sandbox:state-update', listener);\n    return function() {\n      document.removeEventListener('sandbox:state-update', listener);\n    };\n  }\n};\npost({ type: 'ready' });\nif (typeof ResizeObserver !== 'undefined') {\n  new ResizeObserver(function(entries) {\n    var entry = entries[0];\n    if (!entry) return;\n    var h = entry.borderBoxSize && entry.borderBoxSize[0]\n      ? entry.borderBoxSize[0].blockSize\n      : entry.contentRect.height;\n    post({ type: 'resize', height: h });\n  }).observe(document.body);\n}\n`.trim();\n\n/**\n * Builds a complete, standalone sandbox HTML document.\n *\n * `namedStyles` entries are rendered as `<style id=\"key\">` elements in the\n * document `<head>`. External scripts carry `crossorigin=\"anonymous\"` so the\n * bridge's error handler receives full error details for cross-origin scripts.\n * The bridge script auto-emits `resize` messages via `ResizeObserver`.\n */\nexport function buildDocument(html: string, options: SandboxOptions = {}): string {\n  // escapeAttr is applied to the whole CSP string when embedding it in content=\"...\"\n  // because buildCsp() does not know the embedding context. Any user-supplied origin\n  // values that survived sanitizeCspOrigin() but still contain & or < (very unusual)\n  // would otherwise break the HTML attribute.\n  const csp = escapeAttr(buildCsp(options));\n  const named = options.namedStyles ?? {};\n  const lang = escapeAttr(options.lang ?? 'en');\n  const title = escapeText(options.title ?? '');\n\n  const styleTags = Object.entries(named)\n    .map(([id, css]) => `<style id=\"${escapeAttr(id)}\">${escapeCss(css)}</style>`)\n    .join('\\n');\n\n  const scriptTags = (options.scripts ?? [])\n    .map((src) => `<script crossorigin=\"anonymous\" src=\"${escapeAttr(src)}\"></script>`)\n    .join('\\n');\n\n  // Must sanitize with the exact same sanitizeNonce() used by buildCsp() — see its\n  // comment. escapeAttr() alone is not enough: it HTML-encodes but does not strip,\n  // so a raw nonce containing e.g. ';' would attribute-escape differently than the\n  // CSP token strips it, producing a mismatched nonce and a silently broken bridge.\n  const nonceAttr = options.nonce ? ` nonce=\"${escapeAttr(sanitizeNonce(options.nonce))}\"` : '';\n\n  return `<!doctype html>\n<html lang=\"${lang}\">\n<head>\n<meta http-equiv=\"Content-Security-Policy\" content=\"${csp}\">\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>${title}</title>\n${styleTags}\n</head>\n<body>\n${scriptTags}\n${html}\n<script${nonceAttr}>\n${BRIDGE_SCRIPT}\n</script>\n</body>\n</html>`;\n}\n\n// ---------------------------------------------------------------------------\n// Sandbox factory\n// ---------------------------------------------------------------------------\n\n// Dev-only timeout: if the bridge never fires 'ready' after a render(), warn\n// so the developer knows the bridge script is missing or broken.\nconst READY_TIMEOUT_MS = 5000;\n\nexport function createSandbox(container: HTMLElement, options: SandboxOptions = {}): SandboxHandle {\n  // Iframe is created lazily on the first render() call — no DOM work until\n  // there is content to show.\n  let iframe: HTMLIFrameElement | null = null;\n  const listeners = new Set<(msg: SandboxMessage) => void>();\n  let disposed = false;\n  const ac = new AbortController();\n\n  // Mutable namedStyles baseline — updateStyle() patches this so re-renders\n  // automatically use the latest CSS without the caller re-passing options.\n  const namedStyles: Record<string, string> = { ...(options.namedStyles ?? {}) };\n\n  // bridgeReady: true once the bridge inside the current document has fired MSG_READY.\n  // Reset to false on each render() so setState/updateStyle guards work correctly.\n  let bridgeReady = false;\n\n  // Monotonic counter embedded into each srcdoc as window.__sandboxGeneration (see\n  // render()). iframe.contentWindow's identity is stable across srcdoc navigations in\n  // real browsers, so event.source alone cannot distinguish a superseded document's\n  // messages from the current one — the generation tag closes that gap.\n  let renderGeneration = 0;\n\n  // First-render gate — resolves on first ready signal or on dispose().\n  // Always resolves (never rejects) so callers can safely fire-and-forget it.\n  // Check sandbox.disposed afterward to distinguish a dispose-resolution.\n  let resolveReady!: () => void;\n  const ready = new Promise<void>((resolve) => {\n    resolveReady = resolve;\n  });\n\n  // Per-render settlers — replaced on each render(), resolved on the next 'ready'\n  // message or when superseded/disposed (not an error — the document navigated away\n  // or the sandbox was torn down intentionally), rejected only by the ready-timeout.\n  let currentRenderSettlers: { reject: (err: unknown) => void; resolve: () => void } | null = null;\n  let readyTimeoutId: ReturnType<typeof setTimeout> | null = null;\n\n  function clearReadyTimeout(): void {\n    if (readyTimeoutId !== null) {\n      clearTimeout(readyTimeoutId);\n      readyTimeoutId = null;\n    }\n  }\n\n  // Supersede the in-flight render: resolve (not reject) its promise, clear the\n  // timeout, and reset bridgeReady. All three must change together — keep them here.\n  function supersedePendingRender(): void {\n    clearReadyTimeout();\n    currentRenderSettlers?.resolve();\n    currentRenderSettlers = null;\n    bridgeReady = false;\n  }\n\n  // Dispatch table for incoming sandbox→host messages.\n  // Adding a new message type means adding one entry here — no separate allowlist.\n  // Each handler constructs a typed SandboxMessage rather than casting, so the\n  // compiler verifies the shape and malformed payloads are silently dropped.\n  const msgHandlers: Record<string, (msg: Record<string, unknown>) => void> = {\n    [MSG_CUSTOM]: (msg) => {\n      if (typeof msg.event === 'string') {\n        broadcast({ detail: msg.detail, event: msg.event, type: MSG_CUSTOM });\n      }\n    },\n    [MSG_ERROR]: (msg) => {\n      if (typeof msg.message === 'string') {\n        broadcast({\n          message: msg.message,\n          ...(typeof msg.stack === 'string' ? { stack: msg.stack } : {}),\n          type: MSG_ERROR,\n        });\n      }\n    },\n    [MSG_READY]: () => {\n      // supersedePendingRender clears the timeout and resolves the render promise.\n      // bridgeReady is re-set to true immediately after because the bridge IS ready.\n      supersedePendingRender();\n      resolveReady();\n      bridgeReady = true;\n    },\n    [MSG_RESIZE]: (msg) => {\n      if (typeof msg.height === 'number') broadcast({ height: msg.height, type: MSG_RESIZE });\n    },\n  };\n\n  function broadcast(msg: SandboxMessage): void {\n    for (const listener of listeners) listener(msg);\n  }\n\n  function handleMessage(event: MessageEvent): void {\n    if (!iframe || event.source !== iframe.contentWindow) return;\n\n    if (!isMsgObject(event.data)) return;\n\n    // Reject messages tagged with a superseded generation — a document torn down by a\n    // newer render() may still have a message in flight. Messages with no generation\n    // (or a non-number one, e.g. from testing helpers) are trusted and pass through.\n    const generation = event.data.generation;\n\n    if (typeof generation === 'number' && generation !== renderGeneration) return;\n\n    // Guard against prototype-inherited properties on msgHandlers (e.g. '__proto__',\n    // '__defineGetter__') — these are not functions and calling them via ?.() throws.\n    // Object.hasOwn ensures only keys explicitly defined in the dispatch table are invoked.\n    if (Object.hasOwn(msgHandlers, event.data.type)) {\n      msgHandlers[event.data.type]!(event.data);\n    }\n  }\n\n  function ensureIframe(): HTMLIFrameElement {\n    if (iframe) return iframe;\n\n    iframe = document.createElement('iframe');\n    iframe.setAttribute('sandbox', 'allow-scripts');\n    iframe.setAttribute('referrerpolicy', 'no-referrer');\n    container.appendChild(iframe);\n    window.addEventListener('message', handleMessage);\n\n    return iframe;\n  }\n\n  function dispose(): void {\n    if (disposed) return;\n\n    disposed = true;\n    supersedePendingRender();\n    ac.abort();\n    resolveReady();\n\n    if (iframe) {\n      window.removeEventListener('message', handleMessage);\n      iframe.remove();\n      iframe = null;\n    }\n\n    listeners.clear();\n  }\n\n  function onMessage(handler: (msg: SandboxMessage) => void): Unsubscribe {\n    if (disposed) {\n      warn('onMessage() called on a disposed sandbox — handler will never fire.');\n\n      return () => {};\n    }\n\n    listeners.add(handler);\n\n    return () => {\n      listeners.delete(handler);\n    };\n  }\n\n  function render(html: string, renderOptions?: { signal?: AbortSignal }): Promise<void> {\n    if (disposed) {\n      warn('render() called on a disposed sandbox.');\n\n      return Promise.resolve();\n    }\n\n    if (renderOptions?.signal?.aborted) return Promise.resolve();\n\n    if (!html.trim()) {\n      warn('render() called with empty HTML.');\n    }\n\n    // Supersede any in-flight render — its document navigated away.\n    supersedePendingRender();\n\n    const generation = ++renderGeneration;\n    const docOptions = Object.keys(namedStyles).length > 0 ? { ...options, namedStyles: { ...namedStyles } } : options;\n\n    // Inject the generation marker into <head> — it always appears before any user\n    // content in the template, so this replace can never hit HTML inside `html`.\n    const doc = buildDocument(html, docOptions).replace(\n      '<head>',\n      `<head>\\n<script>window.__sandboxGeneration=${generation};</script>`,\n    );\n\n    ensureIframe().srcdoc = doc;\n\n    const p = new Promise<void>((resolve, reject) => {\n      currentRenderSettlers = { reject, resolve };\n    });\n\n    // If the bridge never fires 'ready', reject with SandboxTimeoutError so the\n    // document-missing-bridge-script failure is catchable rather than hanging forever.\n    readyTimeoutId = setTimeout(() => {\n      if (currentRenderSettlers) {\n        currentRenderSettlers.reject(\n          new SandboxTimeoutError(\n            `render() did not receive a 'ready' signal from the sandbox document within ${READY_TIMEOUT_MS}ms. ` +\n              'The document is likely missing the bridge script — use buildDocument() to generate documents that include it.',\n          ),\n        );\n        currentRenderSettlers = null;\n        readyTimeoutId = null;\n      }\n    }, READY_TIMEOUT_MS);\n\n    return p;\n  }\n\n  function patch(html: string): void {\n    if (disposed) {\n      warn('patch() called on a disposed sandbox.');\n\n      return;\n    }\n\n    if (!bridgeReady || !iframe?.contentWindow) {\n      warn(\n        'patch() called before render() has resolved — bridge is not yet initialized. Await the Promise returned by render() first.',\n      );\n\n      return;\n    }\n\n    // srcdoc iframes have origin 'null' — '*' is required because no specific origin can be targeted.\n    iframe.contentWindow.postMessage({ html, type: MSG_HTML_PATCH }, '*');\n  }\n\n  function setState(key: string, value: unknown): void {\n    if (disposed) {\n      warn('setState() called on a disposed sandbox.');\n\n      return;\n    }\n\n    if (!iframe?.contentWindow) {\n      warn('setState() called before render() — sandbox has no document yet.');\n\n      return;\n    }\n\n    if (!bridgeReady) {\n      warn(\n        'setState() called before ready — state update may be lost if bridge is not yet initialized. Await the Promise returned by render() first.',\n      );\n    }\n\n    // srcdoc iframes have origin 'null' — '*' is required because no specific origin can be targeted.\n    iframe.contentWindow.postMessage({ key, type: MSG_STATE_UPDATE, value }, '*');\n  }\n\n  function setStateAll(record: Record<string, unknown>): void {\n    if (disposed) {\n      warn('setStateAll() called on a disposed sandbox.');\n\n      return;\n    }\n\n    if (!iframe?.contentWindow) {\n      warn('setStateAll() called before render() — sandbox has no document yet.');\n\n      return;\n    }\n\n    if (!bridgeReady) {\n      warn(\n        'setStateAll() called before ready — state updates may be lost. Await the Promise returned by render() first.',\n      );\n    }\n\n    // srcdoc iframes have origin 'null' — '*' is required because no specific origin can be targeted.\n    iframe.contentWindow.postMessage({ record, type: MSG_STATE_UPDATE_ALL }, '*');\n  }\n\n  function updateStyle(id: string, css: string): void {\n    if (disposed) return;\n\n    devOnly(() => {\n      if (!(id in namedStyles)) {\n        warn(\n          `updateStyle('${id}', …) — '${id}' is not a known namedStyles key. ` +\n            'The live patch will have no effect. Pass the id as a key in namedStyles when calling createSandbox().',\n        );\n      }\n    });\n\n    namedStyles[id] = css;\n\n    if (bridgeReady && iframe?.contentWindow) {\n      // srcdoc iframes have origin 'null' — '*' is required because no specific origin can be targeted.\n      iframe.contentWindow.postMessage({ css, id, type: MSG_STYLE_PATCH }, '*');\n    }\n  }\n\n  return {\n    get disposalSignal() {\n      return ac.signal;\n    },\n    dispose,\n    get disposed() {\n      return disposed;\n    },\n    onMessage,\n    patch,\n    ready,\n    render,\n    setState,\n    setStateAll,\n    [Symbol.dispose]() {\n      dispose();\n    },\n    updateStyle,\n  };\n}\n"],"mappings":"sDAyBA,IAAM,EAAY,QACZ,EAAmB,eACnB,EAAuB,mBACvB,EAAkB,cAClB,EAAiB,aACjB,EAAY,QACZ,EAAa,SACb,EAAa,SAMnB,SAAS,EAAY,EAAmE,CACtF,OAAO,OAAO,GAAS,YAAY,GAAiB,OAAQ,EAA4B,MAAS,QACnG,CAEA,SAAS,EAAc,EAA4B,CACjD,GAAI,CACF,IAAM,EAAI,IAAI,IAAI,CAAG,CAAC,CAAC,OAEvB,OAAO,IAAM,OAAa,KAAJ,CACxB,MAAQ,CACN,OAAO,IACT,CACF,CASA,SAAS,EAAU,EAAqB,CACtC,OAAO,EAAI,QAAQ,aAAc,aAAa,CAChD,CAKA,SAAS,EAAW,EAAuB,CACzC,OAAO,EAAM,QAAQ,KAAM,OAAO,CAAC,CAAC,QAAQ,KAAM,QAAQ,CAAC,CAAC,QAAQ,KAAM,MAAM,CAAC,CAAC,QAAQ,KAAM,MAAM,CACxG,CAIA,SAAS,EAAW,EAAuB,CACzC,OAAO,EAAM,QAAQ,KAAM,OAAO,CAAC,CAAC,QAAQ,KAAM,MAAM,CAAC,CAAC,QAAQ,KAAM,MAAM,CAChF,CAWA,IAAM,EAAmB,aAGzB,SAAS,EAAkB,EAAwB,CACjD,OAAO,EAAO,QAAQ,EAAkB,EAAE,CAC5C,CAWA,SAAS,EAAc,EAAuB,CAC5C,OAAO,EAAM,QAAQ,EAAkB,EAAE,CAC3C,CAQA,SAAgB,EAAS,EAA0B,CAAC,EAAW,CAC7D,IAAM,EAAY,EAAQ,MAAQ,EAAc,EAAQ,KAAK,EAAI,KAE3D,EAAgB,CACpB,kBACA,GAAI,EAAY,CAAC,UAAU,EAAU,EAAE,EAAI,CAAC,EAC5C,IAAI,EAAQ,sBAAwB,CAAC,EAAA,CAAG,IAAI,CAAiB,EAC7D,IAAI,EAAQ,SAAW,CAAC,EAAA,CAAG,IAAI,CAAa,CAAC,CAAC,OAAQ,GAAmB,IAAM,IAAI,CACrF,CAAC,CAAC,KAAK,GAAG,EAEJ,EAAe,CAAC,kBAAmB,IAAI,EAAQ,qBAAuB,CAAC,EAAA,CAAG,IAAI,CAAiB,CAAC,CAAC,CAAC,KAAK,GAAG,EAC1G,EAAa,CAAC,QAAS,IAAI,EAAQ,qBAAuB,CAAC,EAAA,CAAG,IAAI,CAAiB,CAAC,CAAC,CAAC,KAAK,GAAG,EAC9F,GAAe,EAAQ,oBAAsB,CAAC,EAAA,CAAG,IAAI,CAAiB,CAAC,CAAC,KAAK,GAAG,GAAK,SAE3F,MAAO,CACL,qBACA,cAAc,IACd,aAAa,IACb,WAAW,IACX,YAAY,IACZ,qBACA,qBACA,iBACF,CAAC,CAAC,KAAK,IAAI,CACb,CAmBA,IAAM,EAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEtB,SAAgB,EAAc,EAAc,EAA0B,CAAC,EAAW,CAKhF,IAAM,EAAM,EAAW,EAAS,CAAO,CAAC,EAClC,EAAQ,EAAQ,aAAe,CAAC,EAkBtC,MAAO;cAjBM,EAAW,EAAQ,MAAQ,IAkB5B,EAAK;;sDAEmC,EAAI;;;SAnB1C,EAAW,EAAQ,OAAS,EAsBnC,EAAM;EApBK,OAAO,QAAQ,CAAK,CAAC,CACpC,KAAK,CAAC,EAAI,KAAS,cAAc,EAAW,CAAE,EAAE,IAAI,EAAU,CAAG,EAAE,SAAS,CAAC,CAC7E,KAAK;CAmBR,EAAU;;;GAjBU,EAAQ,SAAW,CAAC,EAAA,CACrC,IAAK,GAAQ,wCAAwC,EAAW,CAAG,EAAE,aAAY,CAAC,CAClF,KAAK;CAkBR,EAAW;EACX,EAAK;SAba,EAAQ,MAAQ,WAAW,EAAW,EAAc,EAAQ,KAAK,CAAC,EAAE,GAAK,GAc1E;EACjB,EAAc;;;QAIhB,CAQA,IAAM,EAAmB,IAEzB,SAAgB,EAAc,EAAwB,EAA0B,CAAC,EAAkB,CAGjG,IAAI,EAAmC,KACjC,EAAY,IAAI,IAClB,EAAW,GACT,EAAK,IAAI,gBAIT,EAAsC,CAAE,GAAI,EAAQ,aAAe,CAAC,CAAG,EAIzE,EAAc,GAMd,EAAmB,EAKnB,EACE,EAAQ,IAAI,QAAe,GAAY,CAC3C,EAAe,CACjB,CAAC,EAKG,EAAwF,KACxF,EAAuD,KAE3D,SAAS,GAA0B,CAC7B,IAAmB,OACrB,aAAa,CAAc,EAC3B,EAAiB,KAErB,CAIA,SAAS,GAA+B,CACtC,EAAkB,EAClB,GAAuB,QAAQ,EAC/B,EAAwB,KACxB,EAAc,EAChB,CAMA,IAAM,EAAsE,EACzE,GAAc,GAAQ,CACjB,OAAO,EAAI,OAAU,UACvB,EAAU,CAAE,OAAQ,EAAI,OAAQ,MAAO,EAAI,MAAO,KAAM,CAAW,CAAC,CAExE,GACC,GAAa,GAAQ,CAChB,OAAO,EAAI,SAAY,UACzB,EAAU,CACR,QAAS,EAAI,QACb,GAAI,OAAO,EAAI,OAAU,SAAW,CAAE,MAAO,EAAI,KAAM,EAAI,CAAC,EAC5D,KAAM,CACR,CAAC,CAEL,GACC,OAAkB,CAGjB,EAAuB,EACvB,EAAa,EACb,EAAc,EAChB,GACC,GAAc,GAAQ,CACjB,OAAO,EAAI,QAAW,UAAU,EAAU,CAAE,OAAQ,EAAI,OAAQ,KAAM,CAAW,CAAC,CACxF,CACF,EAEA,SAAS,EAAU,EAA2B,CAC5C,IAAK,IAAM,KAAY,EAAW,EAAS,CAAG,CAChD,CAEA,SAAS,EAAc,EAA2B,CAGhD,GAFI,CAAC,GAAU,EAAM,SAAW,EAAO,eAEnC,CAAC,EAAY,EAAM,IAAI,EAAG,OAK9B,IAAM,EAAa,EAAM,KAAK,YAE1B,OAAO,GAAe,UAAY,IAAe,IAKjD,OAAO,OAAO,EAAa,EAAM,KAAK,IAAI,GAC5C,EAAY,EAAM,KAAK,KAAK,CAAE,EAAM,IAAI,CAE5C,CAEA,SAAS,GAAkC,CASzC,OARI,IAEJ,EAAS,SAAS,cAAc,QAAQ,EACxC,EAAO,aAAa,UAAW,eAAe,EAC9C,EAAO,aAAa,iBAAkB,aAAa,EACnD,EAAU,YAAY,CAAM,EAC5B,OAAO,iBAAiB,UAAW,CAAa,EAEzC,EACT,CAEA,SAAS,GAAgB,CACnB,IAEJ,EAAW,GACX,EAAuB,EACvB,EAAG,MAAM,EACT,EAAa,EAEb,AAGE,KAFA,OAAO,oBAAoB,UAAW,CAAa,EACnD,EAAO,OAAO,EACL,MAGX,EAAU,MAAM,EAClB,CAEA,SAAS,EAAU,EAAqD,CAStE,OARI,MAGW,CAAC,GAGhB,EAAU,IAAI,CAAO,MAER,CACX,EAAU,OAAO,CAAO,CAC1B,EACF,CAEA,SAAS,EAAO,EAAc,EAAyD,CAOrF,GANI,GAMA,GAAe,QAAQ,QAAS,OAAO,QAAQ,QAAQ,EAEtD,EAAK,KAAK,EAKf,EAAuB,EAEvB,IAAM,EAAa,EAAE,EAKf,EAAM,EAAc,EAJP,OAAO,KAAK,CAAW,CAAC,CAAC,OAAS,EAAI,CAAE,GAAG,EAAS,YAAa,CAAE,GAAG,CAAY,CAAE,EAAI,CAIjE,CAAC,CAAC,QAC1C,SACA,8CAA8C,EAAW,YAC3D,EAEA,EAAa,CAAC,CAAC,OAAS,EAExB,IAAM,EAAI,IAAI,SAAe,EAAS,IAAW,CAC/C,EAAwB,CAAE,SAAQ,SAAQ,CAC5C,CAAC,EAiBD,MAbA,GAAiB,eAAiB,CAC5B,IACF,EAAsB,OACpB,IAAI,EAAA,oBACF,8EAA8E,EAAiB,kHAEjG,CACF,EACA,EAAwB,KACxB,EAAiB,KAErB,EAAG,CAAgB,EAEZ,CACT,CAEA,SAAS,EAAM,EAAoB,CAC7B,GAMA,CAAC,GAAe,CAAC,GAAQ,eAS7B,EAAO,cAAc,YAAY,CAAE,OAAM,KAAM,CAAe,EAAG,GAAG,CACtE,CAEA,SAAS,EAAS,EAAa,EAAsB,CAC/C,GAMC,GAAQ,eAab,EAAO,cAAc,YAAY,CAAE,MAAK,KAAM,EAAkB,OAAM,EAAG,GAAG,CAC9E,CAEA,SAAS,EAAY,EAAuC,CACtD,GAMC,GAAQ,eAab,EAAO,cAAc,YAAY,CAAE,SAAQ,KAAM,CAAqB,EAAG,GAAG,CAC9E,CAEA,SAAS,EAAY,EAAY,EAAmB,CAC9C,IAWJ,EAAY,GAAM,EAEd,GAAe,GAAQ,eAEzB,EAAO,cAAc,YAAY,CAAE,MAAK,KAAI,KAAM,CAAgB,EAAG,GAAG,EAE5E,CAEA,MAAO,CACL,IAAI,gBAAiB,CACnB,OAAO,EAAG,MACZ,EACA,UACA,IAAI,UAAW,CACb,OAAO,CACT,EACA,YACA,QACA,QACA,SACA,WACA,cACA,CAAC,OAAO,UAAW,CACjB,EAAQ,CACV,EACA,aACF,CACF"}

package/dist/_sandbox.js

@@ -1,11 +1,11 @@
-import { devOnly as e, warn as t } from "./_dev.js";
-import { SandboxTimeoutError as n } from "./errors.js";
+import "./_dev.js";
+import { SandboxTimeoutError as e } from "./errors.js";
 //#region src/_sandbox.ts
-var r = "ready", i = "state-update", a = "state-update-all", o = "style-patch", s = "html-patch", c = "error", l = "custom", u = "resize";
-function d(e) {
+var t = "ready", n = "state-update", r = "state-update-all", i = "style-patch", a = "html-patch", o = "error", s = "custom", c = "resize";
+function l(e) {
 	return typeof e == "object" && !!e && typeof e.type == "string";
 }
-function f(e) {
+function u(e) {
 	try {
 		let t = new URL(e).origin;
 		return t === "null" ? null : t;
@@ -13,29 +13,29 @@ function f(e) {
 		return null;
 	}
 }
-function p(e) {
+function d(e) {
 	return e.replace(/<\/style/gi, "\\3C /style");
 }
-function m(e) {
+function f(e) {
 	return e.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
-function h(e) {
+function p(e) {
 	return e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
-var g = /['";\n\r]/g;
-function _(e) {
-	return e.replace(g, "");
+var m = /['";\n\r]/g;
+function h(e) {
+	return e.replace(m, "");
 }
-function v(e) {
-	return e.replace(g, "");
+function g(e) {
+	return e.replace(m, "");
 }
-function y(e = {}) {
-	let t = e.nonce ? v(e.nonce) : null, n = [
+function _(e = {}) {
+	let t = e.nonce ? g(e.nonce) : null, n = [
 		"'unsafe-inline'",
 		...t ? [`'nonce-${t}'`] : [],
-		...(e.allowedScriptOrigins ?? []).map(_),
-		...(e.scripts ?? []).map(f).filter((e) => e !== null)
-	].join(" "), r = ["'unsafe-inline'", ...(e.allowedStyleOrigins ?? []).map(_)].join(" "), i = ["data:", ...(e.allowedImageOrigins ?? []).map(_)].join(" "), a = (e.allowedFontOrigins ?? []).map(_).join(" ") || "'none'";
+		...(e.allowedScriptOrigins ?? []).map(h),
+		...(e.scripts ?? []).map(u).filter((e) => e !== null)
+	].join(" "), r = ["'unsafe-inline'", ...(e.allowedStyleOrigins ?? []).map(h)].join(" "), i = ["data:", ...(e.allowedImageOrigins ?? []).map(h)].join(" "), a = (e.allowedFontOrigins ?? []).map(h).join(" ") || "'none'";
 	return [
 		"default-src 'none'",
 		`script-src ${n}`,
@@ -47,174 +47,147 @@ function y(e = {}) {
 		"base-uri 'none'"
 	].join("; ");
 }
-var b = "if ('ontouchstart' in window) document.addEventListener('touchstart', function() {}, { passive: true });\nwindow.addEventListener('message', function(e) {\n  var msg = e.data;\n  if (msg && msg.type === 'state-update') {\n    document.dispatchEvent(new CustomEvent('sandbox:state-update', { detail: { key: msg.key, value: msg.value } }));\n  }\n  if (msg && msg.type === 'state-update-all' && msg.record && typeof msg.record === 'object') {\n    var keys = Object.keys(msg.record);\n    for (var i = 0; i < keys.length; i++) {\n      var k = keys[i];\n      document.dispatchEvent(new CustomEvent('sandbox:state-update', { detail: { key: k, value: msg.record[k] } }));\n    }\n  }\n  if (msg && msg.type === 'style-patch' && msg.id && typeof msg.css === 'string') {\n    var el = document.getElementById(msg.id);\n    if (el && el.tagName === 'STYLE') el.textContent = msg.css;\n  }\n  if (msg && msg.type === 'html-patch' && typeof msg.html === 'string') {\n    document.body.innerHTML = msg.html;\n  }\n});\n// post() tags every outgoing message with window.__sandboxGeneration (set by render(),\n// see below) and always targets '*' — srcdoc iframes have origin 'null' so no specific\n// origin can be addressed. The host uses the generation tag to ignore messages from a\n// document a newer render() has already superseded.\nfunction post(msg) {\n  msg.generation = window.__sandboxGeneration;\n  parent.postMessage(msg, '*');\n}\nwindow.onerror = function(message, _src, _line, _col, err) {\n  post({ type: 'error', message: String(message), stack: err && err.stack });\n  return true;\n};\nwindow.addEventListener('unhandledrejection', function(e) {\n  var reason = e.reason;\n  post({ type: 'error', message: String(reason), stack: reason && reason.stack });\n});\nwindow.__sandbox__ = {\n  emit: function(event, detail) {\n    post({ type: 'custom', event: event, detail: detail });\n  },\n  onState: function(key, handler) {\n    function listener(e) {\n      if (e.detail && e.detail.key === key) handler(e.detail.value);\n    }\n    document.addEventListener('sandbox:state-update', listener);\n    return function() {\n      document.removeEventListener('sandbox:state-update', listener);\n    };\n  }\n};\npost({ type: 'ready' });\nif (typeof ResizeObserver !== 'undefined') {\n  new ResizeObserver(function(entries) {\n    var entry = entries[0];\n    if (!entry) return;\n    var h = entry.borderBoxSize && entry.borderBoxSize[0]\n      ? entry.borderBoxSize[0].blockSize\n      : entry.contentRect.height;\n    post({ type: 'resize', height: h });\n  }).observe(document.body);\n}";
-function x(e, t = {}) {
-	let n = m(y(t)), r = t.namedStyles ?? {};
+var v = "if ('ontouchstart' in window) document.addEventListener('touchstart', function() {}, { passive: true });\nwindow.addEventListener('message', function(e) {\n  var msg = e.data;\n  if (msg && msg.type === 'state-update') {\n    document.dispatchEvent(new CustomEvent('sandbox:state-update', { detail: { key: msg.key, value: msg.value } }));\n  }\n  if (msg && msg.type === 'state-update-all' && msg.record && typeof msg.record === 'object') {\n    var keys = Object.keys(msg.record);\n    for (var i = 0; i < keys.length; i++) {\n      var k = keys[i];\n      document.dispatchEvent(new CustomEvent('sandbox:state-update', { detail: { key: k, value: msg.record[k] } }));\n    }\n  }\n  if (msg && msg.type === 'style-patch' && msg.id && typeof msg.css === 'string') {\n    var el = document.getElementById(msg.id);\n    if (el && el.tagName === 'STYLE') el.textContent = msg.css;\n  }\n  if (msg && msg.type === 'html-patch' && typeof msg.html === 'string') {\n    document.body.innerHTML = msg.html;\n  }\n});\n// post() tags every outgoing message with window.__sandboxGeneration (set by render(),\n// see below) and always targets '*' — srcdoc iframes have origin 'null' so no specific\n// origin can be addressed. The host uses the generation tag to ignore messages from a\n// document a newer render() has already superseded.\nfunction post(msg) {\n  msg.generation = window.__sandboxGeneration;\n  parent.postMessage(msg, '*');\n}\nwindow.onerror = function(message, _src, _line, _col, err) {\n  post({ type: 'error', message: String(message), stack: err && err.stack });\n  return true;\n};\nwindow.addEventListener('unhandledrejection', function(e) {\n  var reason = e.reason;\n  post({ type: 'error', message: String(reason), stack: reason && reason.stack });\n});\nwindow.__sandbox__ = {\n  emit: function(event, detail) {\n    post({ type: 'custom', event: event, detail: detail });\n  },\n  onState: function(key, handler) {\n    function listener(e) {\n      if (e.detail && e.detail.key === key) handler(e.detail.value);\n    }\n    document.addEventListener('sandbox:state-update', listener);\n    return function() {\n      document.removeEventListener('sandbox:state-update', listener);\n    };\n  }\n};\npost({ type: 'ready' });\nif (typeof ResizeObserver !== 'undefined') {\n  new ResizeObserver(function(entries) {\n    var entry = entries[0];\n    if (!entry) return;\n    var h = entry.borderBoxSize && entry.borderBoxSize[0]\n      ? entry.borderBoxSize[0].blockSize\n      : entry.contentRect.height;\n    post({ type: 'resize', height: h });\n  }).observe(document.body);\n}";
+function y(e, t = {}) {
+	let n = f(_(t)), r = t.namedStyles ?? {};
 	return `<!doctype html>
-<html lang="${m(t.lang ?? "en")}">
+<html lang="${f(t.lang ?? "en")}">
 <head>
 <meta http-equiv="Content-Security-Policy" content="${n}">
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<title>${h(t.title ?? "")}</title>
-${Object.entries(r).map(([e, t]) => `<style id="${m(e)}">${p(t)}</style>`).join("\n")}
+<title>${p(t.title ?? "")}</title>
+${Object.entries(r).map(([e, t]) => `<style id="${f(e)}">${d(t)}</style>`).join("\n")}
 </head>
 <body>
-${(t.scripts ?? []).map((e) => `<script crossorigin="anonymous" src="${m(e)}"><\/script>`).join("\n")}
+${(t.scripts ?? []).map((e) => `<script crossorigin="anonymous" src="${f(e)}"><\/script>`).join("\n")}
 ${e}
-<script${t.nonce ? ` nonce="${m(v(t.nonce))}"` : ""}>
-${b}
+<script${t.nonce ? ` nonce="${f(g(t.nonce))}"` : ""}>
+${v}
 <\/script>
 </body>
 </html>`;
 }
-var S = 5e3;
-function C(f, p = {}) {
-	let m = null, h = /* @__PURE__ */ new Set(), g = !1, _ = new AbortController(), v = { ...p.namedStyles ?? {} }, y = !1, b = 0, C, w = new Promise((e) => {
-		C = e;
-	}), T = null, E = null;
-	function D() {
-		E !== null && (clearTimeout(E), E = null);
+var b = 5e3;
+function x(u, d = {}) {
+	let f = null, p = /* @__PURE__ */ new Set(), m = !1, h = new AbortController(), g = { ...d.namedStyles ?? {} }, _ = !1, v = 0, x, S = new Promise((e) => {
+		x = e;
+	}), C = null, w = null;
+	function T() {
+		w !== null && (clearTimeout(w), w = null);
 	}
-	function O() {
-		D(), T?.resolve(), T = null, y = !1;
+	function E() {
+		T(), C?.resolve(), C = null, _ = !1;
 	}
-	let k = {
-		[l]: (e) => {
-			typeof e.event == "string" && A({
+	let D = {
+		[s]: (e) => {
+			typeof e.event == "string" && O({
 				detail: e.detail,
 				event: e.event,
-				type: l
+				type: s
 			});
 		},
-		[c]: (e) => {
-			typeof e.message == "string" && A({
+		[o]: (e) => {
+			typeof e.message == "string" && O({
 				message: e.message,
 				...typeof e.stack == "string" ? { stack: e.stack } : {},
-				type: c
+				type: o
 			});
 		},
-		[r]: () => {
-			O(), C(), y = !0;
+		[t]: () => {
+			E(), x(), _ = !0;
 		},
-		[u]: (e) => {
-			typeof e.height == "number" && A({
+		[c]: (e) => {
+			typeof e.height == "number" && O({
 				height: e.height,
-				type: u
+				type: c
 			});
 		}
 	};
-	function A(e) {
-		for (let t of h) t(e);
+	function O(e) {
+		for (let t of p) t(e);
 	}
-	function j(e) {
-		if (!m || e.source !== m.contentWindow || !d(e.data)) return;
+	function k(e) {
+		if (!f || e.source !== f.contentWindow || !l(e.data)) return;
 		let t = e.data.generation;
-		typeof t == "number" && t !== b || Object.hasOwn(k, e.data.type) && k[e.data.type](e.data);
+		(typeof t != "number" || t === v) && Object.hasOwn(D, e.data.type) && D[e.data.type](e.data);
 	}
-	function M() {
-		return m || (m = document.createElement("iframe"), m.setAttribute("sandbox", "allow-scripts"), m.setAttribute("referrerpolicy", "no-referrer"), f.appendChild(m), window.addEventListener("message", j), m);
+	function A() {
+		return f || (f = document.createElement("iframe"), f.setAttribute("sandbox", "allow-scripts"), f.setAttribute("referrerpolicy", "no-referrer"), u.appendChild(f), window.addEventListener("message", k), f);
 	}
-	function N() {
-		g || (g = !0, O(), _.abort(), C(), m &&= (window.removeEventListener("message", j), m.remove(), null), h.clear());
+	function j() {
+		m || (m = !0, E(), h.abort(), x(), f &&= (window.removeEventListener("message", k), f.remove(), null), p.clear());
 	}
-	function P(e) {
-		return g ? (t("onMessage() called on a disposed sandbox — handler will never fire."), () => {}) : (h.add(e), () => {
-			h.delete(e);
+	function M(e) {
+		return m ? () => {} : (p.add(e), () => {
+			p.delete(e);
 		});
 	}
-	function F(e, r) {
-		if (g) return t("render() called on a disposed sandbox."), Promise.resolve();
-		if (r?.signal?.aborted) return Promise.resolve();
-		e.trim() || t("render() called with empty HTML."), O();
-		let i = ++b, a = x(e, Object.keys(v).length > 0 ? {
-			...p,
-			namedStyles: { ...v }
-		} : p).replace("<head>", `<head>\n<script>window.__sandboxGeneration=${i};<\/script>`);
-		M().srcdoc = a;
-		let o = new Promise((e, t) => {
-			T = {
+	function N(t, n) {
+		if (m || n?.signal?.aborted) return Promise.resolve();
+		t.trim(), E();
+		let r = ++v, i = y(t, Object.keys(g).length > 0 ? {
+			...d,
+			namedStyles: { ...g }
+		} : d).replace("<head>", `<head>\n<script>window.__sandboxGeneration=${r};<\/script>`);
+		A().srcdoc = i;
+		let a = new Promise((e, t) => {
+			C = {
 				reject: t,
 				resolve: e
 			};
 		});
-		return E = setTimeout(() => {
-			T && (T.reject(new n(`render() did not receive a 'ready' signal from the sandbox document within ${S}ms. The document is likely missing the bridge script — use buildDocument() to generate documents that include it.`)), T = null, E = null);
-		}, S), o;
+		return w = setTimeout(() => {
+			C && (C.reject(new e(`render() did not receive a 'ready' signal from the sandbox document within ${b}ms. The document is likely missing the bridge script — use buildDocument() to generate documents that include it.`)), C = null, w = null);
+		}, b), a;
 	}
-	function I(e) {
-		if (g) {
-			t("patch() called on a disposed sandbox.");
-			return;
-		}
-		if (!y || !m?.contentWindow) {
-			t("patch() called before render() has resolved — bridge is not yet initialized. Await the Promise returned by render() first.");
-			return;
-		}
-		m.contentWindow.postMessage({
+	function P(e) {
+		m || !_ || !f?.contentWindow || f.contentWindow.postMessage({
 			html: e,
-			type: s
+			type: a
 		}, "*");
 	}
-	function L(e, n) {
-		if (g) {
-			t("setState() called on a disposed sandbox.");
-			return;
-		}
-		if (!m?.contentWindow) {
-			t("setState() called before render() — sandbox has no document yet.");
-			return;
-		}
-		y || t("setState() called before ready — state update may be lost if bridge is not yet initialized. Await the Promise returned by render() first."), m.contentWindow.postMessage({
+	function F(e, t) {
+		m || f?.contentWindow && f.contentWindow.postMessage({
 			key: e,
-			type: i,
-			value: n
+			type: n,
+			value: t
 		}, "*");
 	}
-	function R(e) {
-		if (g) {
-			t("setStateAll() called on a disposed sandbox.");
-			return;
-		}
-		if (!m?.contentWindow) {
-			t("setStateAll() called before render() — sandbox has no document yet.");
-			return;
-		}
-		y || t("setStateAll() called before ready — state updates may be lost. Await the Promise returned by render() first."), m.contentWindow.postMessage({
+	function I(e) {
+		m || f?.contentWindow && f.contentWindow.postMessage({
 			record: e,
-			type: a
+			type: r
 		}, "*");
 	}
-	function z(n, r) {
-		g || (e(() => {
-			n in v || t(`updateStyle('${n}', …) — '${n}' is not a known namedStyles key. The live patch will have no effect. Pass the id as a key in namedStyles when calling createSandbox().`);
-		}), v[n] = r, y && m?.contentWindow && m.contentWindow.postMessage({
-			css: r,
-			id: n,
-			type: o
+	function L(e, t) {
+		m || (g[e] = t, _ && f?.contentWindow && f.contentWindow.postMessage({
+			css: t,
+			id: e,
+			type: i
 		}, "*"));
 	}
 	return {
 		get disposalSignal() {
-			return _.signal;
+			return h.signal;
 		},
-		dispose: N,
+		dispose: j,
 		get disposed() {
-			return g;
+			return m;
 		},
-		onMessage: P,
-		patch: I,
-		ready: w,
-		render: F,
-		setState: L,
-		setStateAll: R,
+		onMessage: M,
+		patch: P,
+		ready: S,
+		render: N,
+		setState: F,
+		setStateAll: I,
 		[Symbol.dispose]() {
-			N();
+			j();
 		},
-		updateStyle: z
+		updateStyle: L
 	};
 }
 //#endregion
-export { y as buildCsp, x as buildDocument, C as createSandbox };
+export { _ as buildCsp, y as buildDocument, x as createSandbox };
 
 //# sourceMappingURL=_sandbox.js.map