@wildo-ai/presets-components 1.1.3 → 1.1.5

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer-worker.js

@@ -0,0 +1,75 @@
+/**
+ * The PDF.js worker SEAM (issue #962) — how a host decides where the viewer's Web Worker comes from.
+ *
+ * `pdf-viewer.tsx` parses on a Web Worker and installs ONE port for the whole module
+ * (`GlobalWorkerOptions.workerPort`). By default that port is built by the Vite path in
+ * `pdf-viewer-worker.vite.ts`, which is what the generated application runs. Two consumers this
+ * framework also produces cannot use that default:
+ *
+ *  - a NON-VITE bundler (the Docusaurus technical documentation is webpack) does not understand the
+ *    `?worker` asset suffix, so it must supply the worker itself;
+ *  - an application whose ASSETS ARE SERVED FROM ANOTHER ORIGIN (the opt-in CDN publish) gets a
+ *    cross-origin worker URL, which `new Worker(url)` refuses outright.
+ *
+ * Both register a factory here BEFORE the viewer's chunk loads (any time before the first document
+ * renders — the port is installed lazily on first use). The factory takes precedence over the Vite
+ * default, and the default's module is then never imported, which is what keeps the `?worker` import
+ * out of a non-Vite bundler's graph.
+ *
+ * This module is deliberately LIGHT: no `pdfjs-dist`, no worker, nothing heavy. It lives outside the
+ * lazy boundary so a host can call it from its bootstrap.
+ *
+ * ## The cross-origin case, and its CSP consequence
+ *
+ * A browser only constructs a Worker from a SAME-ORIGIN script URL. When the bundle (and so the worker
+ * file) is served from a CDN, the answer is a same-origin `blob:` shim whose single statement is
+ * `import "<cdn worker url>"` — `createSameOriginModuleWorker` builds exactly that, and
+ * `createModuleWorkerForUrl` picks it only when the URL's origin differs from the page's. The shim needs
+ * the policy to admit it: `worker-src` (falling back through `child-src` to `script-src`) must include
+ * `blob:`, and `script-src` must already admit the CDN origin for the import inside the shim to load —
+ * which a CDN publish's policy does, since every script comes from there. The `SAAS_APP` CSP baseline
+ * sets no `worker-src`; a CDN deployment adds `worker-src 'self' blob:` (the documentation product's
+ * baseline already carries that pair for its own reasons).
+ *
+ * Under Vite the worker URL is obtained with the `?worker&url` suffix on `pdfjs-dist/build/pdf.worker.min.mjs`,
+ * which names the BUILT worker file; under webpack, `new URL('pdfjs-dist/build/pdf.worker.min.mjs', import.meta.url)`
+ * resolves through the bundler (it is Vite that does not resolve a bare specifier there — recorded in
+ * `pdf-viewer-worker.vite.ts`).
+ */
+let configuredFactory = null;
+/**
+ * Register how the PDF viewer's worker is built, replacing the Vite default. Pass `null` to return
+ * to the default. Must run before the first document renders: the port is installed once, on first
+ * use, and a factory registered after that is not consulted (the viewer says so in its log).
+ */
+export function configurePdfViewerWorker(factory) {
+    configuredFactory = factory;
+}
+/** The registered factory, or `null` when the Vite default applies. */
+export function resolveConfiguredPdfViewerWorkerFactory() {
+    return configuredFactory;
+}
+/**
+ * A same-origin MODULE worker for a worker script served from another origin: a `blob:` script whose
+ * only statement imports the real one. The blob URL is kept for the page's lifetime — a module
+ * worker fetches its script asynchronously, and revoking the URL before that fetch completes would
+ * hand the worker a dead URL (which reads as "the worker never answered", the same silent shape as
+ * a classic-vs-module mismatch).
+ */
+export function createSameOriginModuleWorker(workerScriptUrl) {
+    const shim = new Blob([`import ${JSON.stringify(workerScriptUrl)};\n`], { type: 'text/javascript' });
+    return new Worker(URL.createObjectURL(shim), { type: 'module' });
+}
+/**
+ * A module worker for `workerScriptUrl`: constructed directly when the script is same-origin with the
+ * page, through the `blob:` shim when it is not. `pageOrigin` defaults to the page's own; a host that
+ * knows better (a test, a non-browser runtime) passes it.
+ */
+export function createModuleWorkerForUrl(workerScriptUrl, pageOrigin = globalThis.location?.origin ?? null) {
+    const resolved = new URL(workerScriptUrl, pageOrigin ?? undefined);
+    if (pageOrigin !== null && resolved.origin !== pageOrigin) {
+        return createSameOriginModuleWorker(resolved.href);
+    }
+    return new Worker(resolved, { type: 'module' });
+}
+//# sourceMappingURL=pdf-viewer-worker.js.map

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf-viewer-worker.js","sourceRoot":"","sources":["../../../../../../src/components/data-display/pdf-viewer/pdf-viewer-worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAKH,IAAI,iBAAiB,GAAkC,IAAI,CAAA;AAE3D;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAsC;IAC7E,iBAAiB,GAAG,OAAO,CAAA;AAC7B,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,uCAAuC;IACrD,OAAO,iBAAiB,CAAA;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAAC,eAAuB;IAClE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACpG,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,eAAuB,EAAE,aAA4B,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI;IAC/H,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,SAAS,CAAC,CAAA;IAClE,IAAI,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1D,OAAO,4BAA4B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;AACjD,CAAC","sourcesContent":["/**\n * The PDF.js worker SEAM (issue #962) — how a host decides where the viewer's Web Worker comes from.\n *\n * `pdf-viewer.tsx` parses on a Web Worker and installs ONE port for the whole module\n * (`GlobalWorkerOptions.workerPort`). By default that port is built by the Vite path in\n * `pdf-viewer-worker.vite.ts`, which is what the generated application runs. Two consumers this\n * framework also produces cannot use that default:\n *\n *  - a NON-VITE bundler (the Docusaurus technical documentation is webpack) does not understand the\n *    `?worker` asset suffix, so it must supply the worker itself;\n *  - an application whose ASSETS ARE SERVED FROM ANOTHER ORIGIN (the opt-in CDN publish) gets a\n *    cross-origin worker URL, which `new Worker(url)` refuses outright.\n *\n * Both register a factory here BEFORE the viewer's chunk loads (any time before the first document\n * renders — the port is installed lazily on first use). The factory takes precedence over the Vite\n * default, and the default's module is then never imported, which is what keeps the `?worker` import\n * out of a non-Vite bundler's graph.\n *\n * This module is deliberately LIGHT: no `pdfjs-dist`, no worker, nothing heavy. It lives outside the\n * lazy boundary so a host can call it from its bootstrap.\n *\n * ## The cross-origin case, and its CSP consequence\n *\n * A browser only constructs a Worker from a SAME-ORIGIN script URL. When the bundle (and so the worker\n * file) is served from a CDN, the answer is a same-origin `blob:` shim whose single statement is\n * `import \"<cdn worker url>\"` — `createSameOriginModuleWorker` builds exactly that, and\n * `createModuleWorkerForUrl` picks it only when the URL's origin differs from the page's. The shim needs\n * the policy to admit it: `worker-src` (falling back through `child-src` to `script-src`) must include\n * `blob:`, and `script-src` must already admit the CDN origin for the import inside the shim to load —\n * which a CDN publish's policy does, since every script comes from there. The `SAAS_APP` CSP baseline\n * sets no `worker-src`; a CDN deployment adds `worker-src 'self' blob:` (the documentation product's\n * baseline already carries that pair for its own reasons).\n *\n * Under Vite the worker URL is obtained with the `?worker&url` suffix on `pdfjs-dist/build/pdf.worker.min.mjs`,\n * which names the BUILT worker file; under webpack, `new URL('pdfjs-dist/build/pdf.worker.min.mjs', import.meta.url)`\n * resolves through the bundler (it is Vite that does not resolve a bare specifier there — recorded in\n * `pdf-viewer-worker.vite.ts`).\n */\n\n/** Builds the Worker that PDF.js will parse on. Called at most once per page lifetime. */\nexport type PdfViewerWorkerFactory = () => Worker\n\nlet configuredFactory: PdfViewerWorkerFactory | null = null\n\n/**\n * Register how the PDF viewer's worker is built, replacing the Vite default. Pass `null` to return\n * to the default. Must run before the first document renders: the port is installed once, on first\n * use, and a factory registered after that is not consulted (the viewer says so in its log).\n */\nexport function configurePdfViewerWorker(factory: PdfViewerWorkerFactory | null): void {\n  configuredFactory = factory\n}\n\n/** The registered factory, or `null` when the Vite default applies. */\nexport function resolveConfiguredPdfViewerWorkerFactory(): PdfViewerWorkerFactory | null {\n  return configuredFactory\n}\n\n/**\n * A same-origin MODULE worker for a worker script served from another origin: a `blob:` script whose\n * only statement imports the real one. The blob URL is kept for the page's lifetime — a module\n * worker fetches its script asynchronously, and revoking the URL before that fetch completes would\n * hand the worker a dead URL (which reads as \"the worker never answered\", the same silent shape as\n * a classic-vs-module mismatch).\n */\nexport function createSameOriginModuleWorker(workerScriptUrl: string): Worker {\n  const shim = new Blob([`import ${JSON.stringify(workerScriptUrl)};\\n`], { type: 'text/javascript' })\n  return new Worker(URL.createObjectURL(shim), { type: 'module' })\n}\n\n/**\n * A module worker for `workerScriptUrl`: constructed directly when the script is same-origin with the\n * page, through the `blob:` shim when it is not. `pageOrigin` defaults to the page's own; a host that\n * knows better (a test, a non-browser runtime) passes it.\n */\nexport function createModuleWorkerForUrl(workerScriptUrl: string, pageOrigin: string | null = globalThis.location?.origin ?? null): Worker {\n  const resolved = new URL(workerScriptUrl, pageOrigin ?? undefined)\n  if (pageOrigin !== null && resolved.origin !== pageOrigin) {\n    return createSameOriginModuleWorker(resolved.href)\n  }\n  return new Worker(resolved, { type: 'module' })\n}\n"]}

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer-worker.vite.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The VITE default for the PDF.js worker (issue #962) — the only module in the viewer that carries a
+ * bundler-specific import, kept alone so a host on another bundler never has to compile it.
+ *
+ * `pdf-viewer.tsx` reaches this file through `import(/* webpackIgnore: true *\/ …)` and ONLY when no
+ * factory was registered through `configurePdfViewerWorker`. webpack honours that magic comment by
+ * leaving the import as a native `import()` it does not follow, so the `?worker` specifier below never
+ * enters a webpack graph; Vite ignores the comment and bundles this module as usual.
+ *
+ * ⚠️ TWO earlier attempts at a bundler-neutral default failed at RENDER time, not build time — which
+ * is why they survived typecheck and the lazy-boundary guard. Both are recorded so the next author does
+ * not walk back into them:
+ *
+ *  1. `new URL('pdfjs-dist/build/pdf.worker.min.mjs', import.meta.url)` — Vite's `new URL()` handling
+ *     resolves only RELATIVE paths against the module URL; a bare package specifier is not
+ *     bundler-resolved, so the browser requested a path that does not exist and pdf.js reported
+ *     `Setting up fake worker failed`.
+ *  2. `?url` + `GlobalWorkerOptions.workerSrc` — the URL resolved and the file was served (200), but
+ *     pdf.js instantiates a `workerSrc` string as a CLASSIC worker while pdf.js 6 ships the worker as an
+ *     ES module. The worker never completed its handshake, so `getDocument()` hung forever with no
+ *     error to show.
+ *
+ * `?worker` hands us a bundler-generated constructor that already carries the right worker type
+ * (module in dev, the built format in production), which removes the classic-vs-module question
+ * entirely. Vite emits the worker as its own fingerprinted file served from the SAME ORIGIN as the
+ * bundle — never a CDN, which would both leak document bytes' provenance and need a `worker-src`
+ * exception. A deployment that serves its bundle from another origin registers a factory instead
+ * (`createModuleWorkerForUrl` in `pdf-viewer-worker.ts`, fed the `?worker&url` URL).
+ */
+/** The Vite-built PDF.js worker, as the generated application constructs it. */
+export declare function createViteDefaultPdfViewerWorker(): Worker;
+//# sourceMappingURL=pdf-viewer-worker.vite.d.ts.map

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer-worker.vite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf-viewer-worker.vite.d.ts","sourceRoot":"","sources":["../../../../../../src/components/data-display/pdf-viewer/pdf-viewer-worker.vite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,gFAAgF;AAChF,wBAAgB,gCAAgC,IAAI,MAAM,CAEzD"}

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer-worker.vite.js

@@ -0,0 +1,36 @@
+/**
+ * The VITE default for the PDF.js worker (issue #962) — the only module in the viewer that carries a
+ * bundler-specific import, kept alone so a host on another bundler never has to compile it.
+ *
+ * `pdf-viewer.tsx` reaches this file through `import(/* webpackIgnore: true *\/ …)` and ONLY when no
+ * factory was registered through `configurePdfViewerWorker`. webpack honours that magic comment by
+ * leaving the import as a native `import()` it does not follow, so the `?worker` specifier below never
+ * enters a webpack graph; Vite ignores the comment and bundles this module as usual.
+ *
+ * ⚠️ TWO earlier attempts at a bundler-neutral default failed at RENDER time, not build time — which
+ * is why they survived typecheck and the lazy-boundary guard. Both are recorded so the next author does
+ * not walk back into them:
+ *
+ *  1. `new URL('pdfjs-dist/build/pdf.worker.min.mjs', import.meta.url)` — Vite's `new URL()` handling
+ *     resolves only RELATIVE paths against the module URL; a bare package specifier is not
+ *     bundler-resolved, so the browser requested a path that does not exist and pdf.js reported
+ *     `Setting up fake worker failed`.
+ *  2. `?url` + `GlobalWorkerOptions.workerSrc` — the URL resolved and the file was served (200), but
+ *     pdf.js instantiates a `workerSrc` string as a CLASSIC worker while pdf.js 6 ships the worker as an
+ *     ES module. The worker never completed its handshake, so `getDocument()` hung forever with no
+ *     error to show.
+ *
+ * `?worker` hands us a bundler-generated constructor that already carries the right worker type
+ * (module in dev, the built format in production), which removes the classic-vs-module question
+ * entirely. Vite emits the worker as its own fingerprinted file served from the SAME ORIGIN as the
+ * bundle — never a CDN, which would both leak document bytes' provenance and need a `worker-src`
+ * exception. A deployment that serves its bundle from another origin registers a factory instead
+ * (`createModuleWorkerForUrl` in `pdf-viewer-worker.ts`, fed the `?worker&url` URL).
+ */
+// @ts-expect-error -- `?worker` is a Vite asset-import suffix with no TS declaration.
+import PdfJsWorker from 'pdfjs-dist/build/pdf.worker.min.mjs?worker';
+/** The Vite-built PDF.js worker, as the generated application constructs it. */
+export function createViteDefaultPdfViewerWorker() {
+    return new PdfJsWorker();
+}
+//# sourceMappingURL=pdf-viewer-worker.vite.js.map

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer-worker.vite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf-viewer-worker.vite.js","sourceRoot":"","sources":["../../../../../../src/components/data-display/pdf-viewer/pdf-viewer-worker.vite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,sFAAsF;AACtF,OAAO,WAAW,MAAM,4CAA4C,CAAA;AAEpE,gFAAgF;AAChF,MAAM,UAAU,gCAAgC;IAC9C,OAAO,IAAI,WAAW,EAAY,CAAA;AACpC,CAAC","sourcesContent":["/**\n * The VITE default for the PDF.js worker (issue #962) — the only module in the viewer that carries a\n * bundler-specific import, kept alone so a host on another bundler never has to compile it.\n *\n * `pdf-viewer.tsx` reaches this file through `import(/* webpackIgnore: true *\\/ …)` and ONLY when no\n * factory was registered through `configurePdfViewerWorker`. webpack honours that magic comment by\n * leaving the import as a native `import()` it does not follow, so the `?worker` specifier below never\n * enters a webpack graph; Vite ignores the comment and bundles this module as usual.\n *\n * ⚠️ TWO earlier attempts at a bundler-neutral default failed at RENDER time, not build time — which\n * is why they survived typecheck and the lazy-boundary guard. Both are recorded so the next author does\n * not walk back into them:\n *\n *  1. `new URL('pdfjs-dist/build/pdf.worker.min.mjs', import.meta.url)` — Vite's `new URL()` handling\n *     resolves only RELATIVE paths against the module URL; a bare package specifier is not\n *     bundler-resolved, so the browser requested a path that does not exist and pdf.js reported\n *     `Setting up fake worker failed`.\n *  2. `?url` + `GlobalWorkerOptions.workerSrc` — the URL resolved and the file was served (200), but\n *     pdf.js instantiates a `workerSrc` string as a CLASSIC worker while pdf.js 6 ships the worker as an\n *     ES module. The worker never completed its handshake, so `getDocument()` hung forever with no\n *     error to show.\n *\n * `?worker` hands us a bundler-generated constructor that already carries the right worker type\n * (module in dev, the built format in production), which removes the classic-vs-module question\n * entirely. Vite emits the worker as its own fingerprinted file served from the SAME ORIGIN as the\n * bundle — never a CDN, which would both leak document bytes' provenance and need a `worker-src`\n * exception. A deployment that serves its bundle from another origin registers a factory instead\n * (`createModuleWorkerForUrl` in `pdf-viewer-worker.ts`, fed the `?worker&url` URL).\n */\n\n// @ts-expect-error -- `?worker` is a Vite asset-import suffix with no TS declaration.\nimport PdfJsWorker from 'pdfjs-dist/build/pdf.worker.min.mjs?worker'\n\n/** The Vite-built PDF.js worker, as the generated application constructs it. */\nexport function createViteDefaultPdfViewerWorker(): Worker {\n  return new PdfJsWorker() as Worker\n}\n"]}

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer.d.ts

@@ -26,13 +26,51 @@
  *
  * ## Worker
  *
- * PDF.js parses on a Web Worker. The URL is resolved through `import.meta.url` so
- * every bundler (the app's Vite, the site's Astro, the docs' Docusaurus) emits and
- * fingerprints it as an asset rather than fetching from a CDN — a CDN worker would
- * both leak document bytes' provenance and require a `worker-src` exception the CSP
- * pipeline should not have to make. The app's CSP must allow `worker-src 'self' blob:`.
+ * PDF.js parses on a Web Worker. ONE port for the whole module, installed lazily on the
+ * first render (`ensurePdfViewerWorkerPort`) and assigned to `GlobalWorkerOptions.workerPort`:
+ * the pdf.js worker multiplexes documents by id, so several viewers mounted at once (a
+ * THUMBNAIL in a list plus an overlay, say) share it safely, and the shared port avoids
+ * spawning a worker per rendered thumbnail. A per-instance `PDFWorker` was tried first
+ * out of a concurrency worry that does not apply.
+ *
+ * WHERE the worker comes from is the host's decision (issue #962, `pdf-viewer-worker.ts`):
+ * a factory registered through `configurePdfViewerWorker` wins; otherwise the Vite default
+ * in `pdf-viewer-worker.vite.ts` is imported — and only then, so a non-Vite bundler that
+ * registered a factory never compiles the `?worker` import. The default is a same-origin
+ * file URL, so the `SAAS_APP` CSP baseline needs nothing beyond `script-src 'self'`; the
+ * cross-origin (CDN publish) case and its `worker-src blob:` note live with the seam.
+ *
+ * ## Text
+ *
+ * The viewer is label-agnostic: every string it shows or announces arrives resolved in
+ * `labels` from its host, which owns the component's i18n catalog. A failure is shown
+ * as the host's labelled message and the cause is logged — a raw pdf.js exception
+ * message is developer text, not something to put in front of a reader.
  */
 import * as React from "react";
+/**
+ * Install the module-wide worker port once, from the host's factory when one is registered and from
+ * the Vite default otherwise (issue #962). Idempotent and memoised: every render awaits the same
+ * installation, and a factory registered AFTER it is not consulted. The Vite module is reached
+ * through a dynamic import that webpack is told not to follow (`webpackIgnore`), which is what keeps
+ * its `?worker` specifier out of a non-Vite graph; a host on such a bundler that registered no
+ * factory gets a rejected installation here — surfaced as the viewer's labelled failure with the
+ * cause in the log, never a hang.
+ */
+export declare function ensurePdfViewerWorkerPort(): Promise<void>;
+/**
+ * Every string the viewer shows or announces, RESOLVED by the host. Functions where
+ * the text carries a number, so the host's i18n interpolation — not this module —
+ * decides word order.
+ */
+export interface PdfViewerLabels {
+    /** Accessible name of one rendered page image. */
+    page(pageNumber: number): string;
+    /** Notice under a document longer than the render cap. */
+    pagesTruncated(shown: number, total: number): string;
+    /** Alert shown when the document cannot be rendered. */
+    renderFailed: string;
+}
 export interface PdfViewerProps {
     /** Bytes of the PDF. Fetched by the host over the authenticated serve route. */
     data: ArrayBuffer;
@@ -43,7 +81,9 @@ export interface PdfViewerProps {
     className?: string;
     /** Accessible name for the rendered document region. */
     ariaLabel?: string;
+    /** Resolved text. Required: the viewer invents no words of its own. */
+    labels: PdfViewerLabels;
 }
-export declare function PdfViewer({ data, firstPageOnly, targetWidth, className, ariaLabel, }: PdfViewerProps): React.JSX.Element;
+export declare function PdfViewer({ data, firstPageOnly, targetWidth, className, ariaLabel, labels, }: PdfViewerProps): React.JSX.Element;
 export default PdfViewer;
 //# sourceMappingURL=pdf-viewer.d.ts.map

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pdf-viewer.d.ts","sourceRoot":"","sources":["../../../../../src/components/data-display/pdf-viewer/pdf-viewer.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AA0C9B,MAAM,WAAW,cAAc;IAC7B,gFAAgF;IAChF,IAAI,EAAE,WAAW,CAAA;IACjB,2DAA2D;IAC3D,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,wBAAgB,SAAS,CAAC,EACxB,IAAI,EACJ,aAAqB,EACrB,WAAW,EACX,SAAS,EACT,SAAS,GACV,EAAE,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAwGpC;AAED,eAAe,SAAS,CAAA"}
+{"version":3,"file":"pdf-viewer.d.ts","sourceRoot":"","sources":["../../../../../../src/components/data-display/pdf-viewer/pdf-viewer.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAS9B;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAezD;AAOD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAA;IAChC,0DAA0D;IAC1D,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;IACpD,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,gFAAgF;IAChF,IAAI,EAAE,WAAW,CAAA;IACjB,2DAA2D;IAC3D,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,uEAAuE;IACvE,MAAM,EAAE,eAAe,CAAA;CACxB;AAED,wBAAgB,SAAS,CAAC,EACxB,IAAI,EACJ,aAAqB,EACrB,WAAW,EACX,SAAS,EACT,SAAS,EACT,MAAM,GACP,EAAE,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAoHpC;AAED,eAAe,SAAS,CAAA"}

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer.js

@@ -28,54 +28,71 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  *
  * ## Worker
  *
- * PDF.js parses on a Web Worker. The URL is resolved through `import.meta.url` so
- * every bundler (the app's Vite, the site's Astro, the docs' Docusaurus) emits and
- * fingerprints it as an asset rather than fetching from a CDN — a CDN worker would
- * both leak document bytes' provenance and require a `worker-src` exception the CSP
- * pipeline should not have to make. The app's CSP must allow `worker-src 'self' blob:`.
+ * PDF.js parses on a Web Worker. ONE port for the whole module, installed lazily on the
+ * first render (`ensurePdfViewerWorkerPort`) and assigned to `GlobalWorkerOptions.workerPort`:
+ * the pdf.js worker multiplexes documents by id, so several viewers mounted at once (a
+ * THUMBNAIL in a list plus an overlay, say) share it safely, and the shared port avoids
+ * spawning a worker per rendered thumbnail. A per-instance `PDFWorker` was tried first
+ * out of a concurrency worry that does not apply.
+ *
+ * WHERE the worker comes from is the host's decision (issue #962, `pdf-viewer-worker.ts`):
+ * a factory registered through `configurePdfViewerWorker` wins; otherwise the Vite default
+ * in `pdf-viewer-worker.vite.ts` is imported — and only then, so a non-Vite bundler that
+ * registered a factory never compiles the `?worker` import. The default is a same-origin
+ * file URL, so the `SAAS_APP` CSP baseline needs nothing beyond `script-src 'self'`; the
+ * cross-origin (CDN publish) case and its `worker-src blob:` note live with the seam.
+ *
+ * ## Text
+ *
+ * The viewer is label-agnostic: every string it shows or announces arrives resolved in
+ * `labels` from its host, which owns the component's i18n catalog. A failure is shown
+ * as the host's labelled message and the cause is logged — a raw pdf.js exception
+ * message is developer text, not something to put in front of a reader.
  */
 import * as React from "react";
-import { cn, Text, Skeleton } from "@wildo-ai/saas-frontend-lib";
+import { cn, Text, Skeleton, LoggerFrontendService } from "@wildo-ai/saas-frontend-lib";
 import * as pdfjs from "pdfjs-dist";
-// Same-origin, bundler-emitted worker (see the header note on CSP).
-//
-// ⚠️ TWO earlier attempts failed at RENDER time, not build time — which is why they
-// survived typecheck and the lazy-boundary guard. Both are recorded so the next
-// author does not walk back into them:
-//
-//  1. `new URL('pdfjs-dist/build/pdf.worker.min.mjs', import.meta.url)` — `new URL()`
-//     resolves only RELATIVE paths against the module URL; a bare package specifier
-//     is not bundler-resolved, so the browser requested a path that does not exist
-//     and pdf.js reported `Setting up fake worker failed`.
-//  2. `?url` + `GlobalWorkerOptions.workerSrc` — the URL resolved and the file was
-//     served (200), but pdf.js instantiates a `workerSrc` string as a CLASSIC worker
-//     while pdf.js 6 ships the worker as an ES module. The worker never completed its
-//     handshake, so `getDocument()` hung forever with no error to show.
-//
-// `?worker` hands us a bundler-generated constructor that already carries the right
-// worker type, which removes the classic-vs-module question entirely. It is a Vite
-// asset-import suffix: Vite is what the generated application uses, and the
-// alternatives are worse (a relative path into `node_modules` breaks under any
-// hoisting layout; a CDN URL leaks document provenance and needs a `worker-src`
-// exception the CSP pipeline should not have to make). A non-Vite consumer must
-// supply its own worker — tracked as portability work, not papered over here.
-//
-// ONE port for the whole module, assigned to `GlobalWorkerOptions.workerPort`. A
-// per-instance `PDFWorker` was tried first out of a concurrency worry that does not
-// apply: the pdf.js worker multiplexes documents by id, so several viewers mounted at
-// once (a THUMBNAIL in a list plus an overlay, say) share it safely — and the shared
-// port also avoids spawning a worker per rendered thumbnail. The worker is created
-// when this module loads, which is already behind the lazy boundary.
-// @ts-expect-error -- `?worker` is a Vite asset-import suffix with no TS declaration.
-import PdfJsWorker from 'pdfjs-dist/build/pdf.worker.min.mjs?worker';
-pdfjs.GlobalWorkerOptions.workerPort = new PdfJsWorker();
+import { resolveConfiguredPdfViewerWorkerFactory } from "./pdf-viewer-worker.js";
+import { describeCaughtError } from '@wildo-ai/saas-models';
+let workerPortInstallation = null;
+/**
+ * Install the module-wide worker port once, from the host's factory when one is registered and from
+ * the Vite default otherwise (issue #962). Idempotent and memoised: every render awaits the same
+ * installation, and a factory registered AFTER it is not consulted. The Vite module is reached
+ * through a dynamic import that webpack is told not to follow (`webpackIgnore`), which is what keeps
+ * its `?worker` specifier out of a non-Vite graph; a host on such a bundler that registered no
+ * factory gets a rejected installation here — surfaced as the viewer's labelled failure with the
+ * cause in the log, never a hang.
+ */
+export function ensurePdfViewerWorkerPort() {
+    if (workerPortInstallation === null) {
+        workerPortInstallation = (async () => {
+            const configured = resolveConfiguredPdfViewerWorkerFactory();
+            const worker = configured
+                ? configured()
+                : (await import(/* webpackIgnore: true */ './pdf-viewer-worker.vite')).createViteDefaultPdfViewerWorker();
+            pdfjs.GlobalWorkerOptions.workerPort = worker;
+        })().catch((cause) => {
+            // A failed installation must not poison every later render: the next one asks again.
+            workerPortInstallation = null;
+            throw cause;
+        });
+    }
+    return workerPortInstallation;
+}
 /** Hard cap on rasterised pages — a bound, not a product limit. */
 const MAX_RENDERED_PAGES = 50;
-export function PdfViewer({ data, firstPageOnly = false, targetWidth, className, ariaLabel, }) {
+const logger = LoggerFrontendService.getLogger();
+export function PdfViewer({ data, firstPageOnly = false, targetWidth, className, ariaLabel, labels, }) {
     const containerRef = React.useRef(null);
     const [pageCount, setPageCount] = React.useState(null);
-    const [error, setError] = React.useState(null);
+    const [renderFailed, setRenderFailed] = React.useState(false);
     const [rendering, setRendering] = React.useState(true);
+    // Read through a ref inside the render effect: `labels.page` is a function the host
+    // may recreate every render, and re-rasterising a whole document because a label
+    // closure changed identity would be a visible flicker for no reason.
+    const pageLabelRef = React.useRef(labels.page);
+    pageLabelRef.current = labels.page;
     React.useEffect(() => {
         let cancelled = false;
         let document_ = null;
@@ -88,10 +105,13 @@ export function PdfViewer({ data, firstPageOnly = false, targetWidth, className,
         // Hand it a copy; the host keeps its own.
         const ownedData = data.slice(0);
         setRendering(true);
-        setError(null);
+        setRenderFailed(false);
         container.replaceChildren();
         void (async () => {
             try {
+                await ensurePdfViewerWorkerPort();
+                if (cancelled)
+                    return;
                 loadingTask = pdfjs.getDocument({ data: ownedData });
                 document_ = await loadingTask.promise;
                 if (cancelled)
@@ -122,7 +142,7 @@ export function PdfViewer({ data, firstPageOnly = false, targetWidth, className,
                     canvas.style.height = `${Math.floor(viewport.height / dpr)}px`;
                     canvas.className = 'mx-auto max-w-full rounded-md border border-border shadow-xs';
                     canvas.setAttribute('role', 'img');
-                    canvas.setAttribute('aria-label', `Page ${pageNumber}`);
+                    canvas.setAttribute('aria-label', pageLabelRef.current(pageNumber));
                     // ATTACH BEFORE RENDERING. Rendering into a detached canvas and appending
                     // afterwards left `page.render()` unsettled indefinitely (observed live:
                     // "rendering page 1" with no completion). Attaching first also makes pages
@@ -138,8 +158,12 @@ export function PdfViewer({ data, firstPageOnly = false, targetWidth, className,
                 }
             }
             catch (cause) {
-                if (!cancelled)
-                    setError(cause instanceof Error ? cause.message : String(cause));
+                if (!cancelled) {
+                    logger.warn('[PdfViewer] document could not be rendered', {
+                        error: describeCaughtError(cause),
+                    });
+                    setRenderFailed(true);
+                }
             }
             finally {
                 if (!cancelled)
@@ -156,10 +180,10 @@ export function PdfViewer({ data, firstPageOnly = false, targetWidth, className,
             void document_?.cleanup();
         };
     }, [data, firstPageOnly, targetWidth]);
-    return (_jsxs("div", { className: cn('w-full', className), "aria-label": ariaLabel, "aria-busy": rendering || undefined, children: [rendering && _jsx(Skeleton, { className: "h-64 w-full", "aria-hidden": "true" }), error && (_jsx(Text, { className: "text-sm text-destructive", role: "alert", children: error })), _jsx("div", { ref: containerRef, className: "flex flex-col gap-item" }), !firstPageOnly && pageCount !== null && pageCount > MAX_RENDERED_PAGES && (
+    return (_jsxs("div", { className: cn('w-full', className), "aria-label": ariaLabel, "aria-busy": rendering || undefined, children: [rendering && _jsx(Skeleton, { className: "h-64 w-full", "aria-hidden": "true" }), renderFailed && (_jsx(Text, { className: "text-sm text-destructive", role: "alert", children: labels.renderFailed })), _jsx("div", { ref: containerRef, className: "flex flex-col gap-item" }), !firstPageOnly && pageCount !== null && pageCount > MAX_RENDERED_PAGES && (
             // Say what was NOT rendered rather than silently truncating — a document that
             // looks complete but is not is worse than an explicit bound.
-            _jsx(Text, { className: "mt-item text-xs text-muted-foreground", children: `Showing the first ${MAX_RENDERED_PAGES} of ${pageCount} pages.` }))] }));
+            _jsx(Text, { className: "mt-item text-xs text-muted-foreground", children: labels.pagesTruncated(MAX_RENDERED_PAGES, pageCount) }))] }));
 }
 export default PdfViewer;
 //# sourceMappingURL=pdf-viewer.js.map

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer.js.map

@@ -1 +1 @@
-{"version":3,"file":"pdf-viewer.js","sourceRoot":"","sources":["../../../../../../src/components/data-display/pdf-viewer/pdf-viewer.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAGnC,oEAAoE;AACpE,EAAE;AACF,oFAAoF;AACpF,gFAAgF;AAChF,uCAAuC;AACvC,EAAE;AACF,sFAAsF;AACtF,oFAAoF;AACpF,mFAAmF;AACnF,2DAA2D;AAC3D,mFAAmF;AACnF,qFAAqF;AACrF,sFAAsF;AACtF,wEAAwE;AACxE,EAAE;AACF,oFAAoF;AACpF,mFAAmF;AACnF,4EAA4E;AAC5E,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,EAAE;AACF,iFAAiF;AACjF,oFAAoF;AACpF,sFAAsF;AACtF,qFAAqF;AACrF,mFAAmF;AACnF,qEAAqE;AACrE,sFAAsF;AACtF,OAAO,WAAW,MAAM,4CAA4C,CAAA;AAEpE,KAAK,CAAC,mBAAmB,CAAC,UAAU,GAAG,IAAI,WAAW,EAAE,CAAA;AAExD,mEAAmE;AACnE,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAc7B,MAAM,UAAU,SAAS,CAAC,EACxB,IAAI,EACJ,aAAa,GAAG,KAAK,EACrB,WAAW,EACX,SAAS,EACT,SAAS,GACM;IACf,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAwB,IAAI,CAAC,CAAA;IAC9D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAgB,IAAI,CAAC,CAAA;IACrE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAC7D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAEtD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,IAAI,SAAS,GAA4B,IAAI,CAAA;QAC7C,IAAI,WAAW,GAAgD,IAAI,CAAA;QACnE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAA;QACtC,IAAI,CAAC,SAAS;YAAE,OAAM;QAEtB,6EAA6E;QAC7E,2EAA2E;QAC3E,0CAA0C;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAE/B,YAAY,CAAC,IAAI,CAAC,CAAA;QAClB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,SAAS,CAAC,eAAe,EAAE,CAAA;QAE3B,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;gBACpD,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,CAAA;gBACrC,IAAI,SAAS;oBAAE,OAAM;gBACrB,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;gBAEhC,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAA;gBACrF,MAAM,GAAG,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBAE9E,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,IAAI,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC;oBAC9D,IAAI,SAAS;wBAAE,OAAM;oBACrB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;oBAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;oBAC/C,4EAA4E;oBAC5E,4EAA4E;oBAC5E,yEAAyE;oBACzE,0EAA0E;oBAC1E,0EAA0E;oBAC1E,MAAM,aAAa,GAAG,WAAW,IAAI,SAAS,CAAC,WAAW,CAAA;oBAC1D,MAAM,KAAK,GAAG,aAAa,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAA;oBACjF,MAAM,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;oBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,GAAG,EAAE,CAAC,CAAA;oBAEzD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;oBACtD,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;oBACzC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;oBAC3C,wEAAwE;oBACxE,kDAAkD;oBAClD,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,GAAG,CAAC,IAAI,CAAA;oBAC5D,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAA;oBAC9D,MAAM,CAAC,SAAS,GAAG,8DAA8D,CAAA;oBACjF,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;oBAClC,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,QAAQ,UAAU,EAAE,CAAC,CAAA;oBAEvD,0EAA0E;oBAC1E,yEAAyE;oBACzE,2EAA2E;oBAC3E,0DAA0D;oBAC1D,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;oBAE7B,6EAA6E;oBAC7E,4EAA4E;oBAC5E,4EAA4E;oBAC5E,qDAAqD;oBACrD,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAA;oBAC/C,IAAI,SAAS;wBAAE,OAAM;gBACvB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS;oBAAE,QAAQ,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;YAClF,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,SAAS;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YACrC,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QAEJ,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAA;YAChB,+EAA+E;YAC/E,4EAA4E;YAC5E,6EAA6E;YAC7E,8EAA8E;YAC9E,qEAAqE;YACrE,KAAK,SAAS,EAAE,OAAO,EAAE,CAAA;QAC3B,CAAC,CAAA;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;IAEtC,OAAO,CACL,eAAK,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,gBAAc,SAAS,eAAa,SAAS,IAAI,SAAS,aAC9F,SAAS,IAAI,KAAC,QAAQ,IAAC,SAAS,EAAC,aAAa,iBAAa,MAAM,GAAG,EACpE,KAAK,IAAI,CACR,KAAC,IAAI,IAAC,SAAS,EAAC,0BAA0B,EAAC,IAAI,EAAC,OAAO,YAAE,KAAK,GAAQ,CACvE,EACD,cAAK,GAAG,EAAE,YAAY,EAAE,SAAS,EAAC,wBAAwB,GAAG,EAC5D,CAAC,aAAa,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,GAAG,kBAAkB,IAAI;YACzE,8EAA8E;YAC9E,6DAA6D;YAC7D,KAAC,IAAI,IAAC,SAAS,EAAC,uCAAuC,YACpD,qBAAqB,kBAAkB,OAAO,SAAS,SAAS,GAC5D,CACR,IACG,CACP,CAAA;AACH,CAAC;AAED,eAAe,SAAS,CAAA","sourcesContent":["\"use client\"\n\n/**\n * PdfViewer — the PDF.js rendering core.\n *\n * ⚠ HEAVY MODULE — LAZY-BOUNDARY DISCIPLINE ⚠\n * This module (and everything only it depends on: `pdfjs-dist` and its worker) must\n * stay behind the dynamic-import boundary owned by `pdf-viewer.lazy.tsx`. NEVER\n * static-import this file from anywhere except that wrapper (tests may). A module\n * that is both statically and dynamically imported is MERGED into the static\n * importer's chunk by Rollup, with no warning — that is how the ECharts boundary\n * silently rotted. `pnpm check:lazy-boundaries` enforces this.\n *\n * ## Why PDF.js rather than the browser's viewer\n *\n * The previous document display embedded an `<iframe>` on the file URL, which hands\n * the page to the browser's built-in viewer: unstyleable (it ignores the design\n * system entirely), unmeasurable, and blocked outright by a strict `frame-src` CSP.\n * PDF.js renders into our own canvas, so the surrounding chrome is ours.\n *\n * ## Rendering model\n *\n * Pages rasterise to `<canvas>` at device pixel ratio, sequentially, into a plain\n * scroll container. Deliberately NOT virtualised in this first increment: a bounded\n * `maxPages` cap keeps a pathological 900-page document from freezing the tab, and\n * virtualisation can be added behind the same contract when a real document demands\n * it. `THUMBNAIL` presentation renders page 1 only — the cheapest useful signal.\n *\n * ## Worker\n *\n * PDF.js parses on a Web Worker. The URL is resolved through `import.meta.url` so\n * every bundler (the app's Vite, the site's Astro, the docs' Docusaurus) emits and\n * fingerprints it as an asset rather than fetching from a CDN — a CDN worker would\n * both leak document bytes' provenance and require a `worker-src` exception the CSP\n * pipeline should not have to make. The app's CSP must allow `worker-src 'self' blob:`.\n */\n\nimport * as React from \"react\"\nimport { cn, Text, Skeleton } from \"@wildo-ai/saas-frontend-lib\"\nimport * as pdfjs from \"pdfjs-dist\"\nimport type { PDFDocumentProxy } from \"pdfjs-dist\"\n\n// Same-origin, bundler-emitted worker (see the header note on CSP).\n//\n// ⚠️ TWO earlier attempts failed at RENDER time, not build time — which is why they\n// survived typecheck and the lazy-boundary guard. Both are recorded so the next\n// author does not walk back into them:\n//\n//  1. `new URL('pdfjs-dist/build/pdf.worker.min.mjs', import.meta.url)` — `new URL()`\n//     resolves only RELATIVE paths against the module URL; a bare package specifier\n//     is not bundler-resolved, so the browser requested a path that does not exist\n//     and pdf.js reported `Setting up fake worker failed`.\n//  2. `?url` + `GlobalWorkerOptions.workerSrc` — the URL resolved and the file was\n//     served (200), but pdf.js instantiates a `workerSrc` string as a CLASSIC worker\n//     while pdf.js 6 ships the worker as an ES module. The worker never completed its\n//     handshake, so `getDocument()` hung forever with no error to show.\n//\n// `?worker` hands us a bundler-generated constructor that already carries the right\n// worker type, which removes the classic-vs-module question entirely. It is a Vite\n// asset-import suffix: Vite is what the generated application uses, and the\n// alternatives are worse (a relative path into `node_modules` breaks under any\n// hoisting layout; a CDN URL leaks document provenance and needs a `worker-src`\n// exception the CSP pipeline should not have to make). A non-Vite consumer must\n// supply its own worker — tracked as portability work, not papered over here.\n//\n// ONE port for the whole module, assigned to `GlobalWorkerOptions.workerPort`. A\n// per-instance `PDFWorker` was tried first out of a concurrency worry that does not\n// apply: the pdf.js worker multiplexes documents by id, so several viewers mounted at\n// once (a THUMBNAIL in a list plus an overlay, say) share it safely — and the shared\n// port also avoids spawning a worker per rendered thumbnail. The worker is created\n// when this module loads, which is already behind the lazy boundary.\n// @ts-expect-error -- `?worker` is a Vite asset-import suffix with no TS declaration.\nimport PdfJsWorker from 'pdfjs-dist/build/pdf.worker.min.mjs?worker'\n\npdfjs.GlobalWorkerOptions.workerPort = new PdfJsWorker()\n\n/** Hard cap on rasterised pages — a bound, not a product limit. */\nconst MAX_RENDERED_PAGES = 50\n\nexport interface PdfViewerProps {\n  /** Bytes of the PDF. Fetched by the host over the authenticated serve route. */\n  data: ArrayBuffer\n  /** Render only the first page (THUMBNAIL presentation). */\n  firstPageOnly?: boolean\n  /** Target CSS width in px for a rendered page. Height follows the page aspect. */\n  targetWidth?: number\n  className?: string\n  /** Accessible name for the rendered document region. */\n  ariaLabel?: string\n}\n\nexport function PdfViewer({\n  data,\n  firstPageOnly = false,\n  targetWidth,\n  className,\n  ariaLabel,\n}: PdfViewerProps): React.JSX.Element {\n  const containerRef = React.useRef<HTMLDivElement | null>(null)\n  const [pageCount, setPageCount] = React.useState<number | null>(null)\n  const [error, setError] = React.useState<string | null>(null)\n  const [rendering, setRendering] = React.useState(true)\n\n  React.useEffect(() => {\n    let cancelled = false\n    let document_: PDFDocumentProxy | null = null\n    let loadingTask: ReturnType<typeof pdfjs.getDocument> | null = null\n    const container = containerRef.current\n    if (!container) return\n\n    // pdf.js TRANSFERS the buffer it is given, which would detach a caller-owned\n    // ArrayBuffer and make a re-render (or a second consumer) read zero bytes.\n    // Hand it a copy; the host keeps its own.\n    const ownedData = data.slice(0)\n\n    setRendering(true)\n    setError(null)\n    container.replaceChildren()\n\n    void (async () => {\n      try {\n        loadingTask = pdfjs.getDocument({ data: ownedData })\n        document_ = await loadingTask.promise\n        if (cancelled) return\n        setPageCount(document_.numPages)\n\n        const lastPage = firstPageOnly ? 1 : Math.min(document_.numPages, MAX_RENDERED_PAGES)\n        const dpr = typeof window !== 'undefined' ? (window.devicePixelRatio || 1) : 1\n\n        for (let pageNumber = 1; pageNumber <= lastPage; pageNumber++) {\n          if (cancelled) return\n          const page = await document_.getPage(pageNumber)\n          const unscaled = page.getViewport({ scale: 1 })\n          // `??` would NOT rescue a ZERO width: `0 ?? fallback` is 0, and a container\n          // that has not been laid out yet measures exactly 0 — which yields scale 0,\n          // a 0x0 canvas, and a `page.render()` that never settles (observed live:\n          // \"rendering page 1\" logged with no completion and a permanent skeleton).\n          // Fall back on the page's own width whenever the measurement is unusable.\n          const measuredWidth = targetWidth ?? container.clientWidth\n          const width = measuredWidth && measuredWidth > 0 ? measuredWidth : unscaled.width\n          const scale = width / unscaled.width\n          const viewport = page.getViewport({ scale: scale * dpr })\n\n          const canvas = window.document.createElement('canvas')\n          canvas.width = Math.floor(viewport.width)\n          canvas.height = Math.floor(viewport.height)\n          // CSS size stays in layout px; the canvas is oversampled by DPR so text\n          // is crisp on retina without the layout changing.\n          canvas.style.width = `${Math.floor(viewport.width / dpr)}px`\n          canvas.style.height = `${Math.floor(viewport.height / dpr)}px`\n          canvas.className = 'mx-auto max-w-full rounded-md border border-border shadow-xs'\n          canvas.setAttribute('role', 'img')\n          canvas.setAttribute('aria-label', `Page ${pageNumber}`)\n\n          // ATTACH BEFORE RENDERING. Rendering into a detached canvas and appending\n          // afterwards left `page.render()` unsettled indefinitely (observed live:\n          // \"rendering page 1\" with no completion). Attaching first also makes pages\n          // appear progressively instead of all at once at the end.\n          container.appendChild(canvas)\n\n          // pdf.js 6 takes the CANVAS, not a 2D context: `canvasContext` is the legacy\n          // parameter and its own typings state that using it requires `canvas` to be\n          // explicitly null. Passing both (the first attempt here) is not a supported\n          // combination and left the render promise unsettled.\n          await page.render({ canvas, viewport }).promise\n          if (cancelled) return\n        }\n      } catch (cause) {\n        if (!cancelled) setError(cause instanceof Error ? cause.message : String(cause))\n      } finally {\n        if (!cancelled) setRendering(false)\n      }\n    })()\n\n    return () => {\n      cancelled = true\n      // Do NOT call `loadingTask.destroy()`: with an externally-supplied worker port\n      // that also destroys the SHARED worker, and React StrictMode's double-mount\n      // then hits `PDFWorker.create - the worker is being destroyed` on the second\n      // pass (observed live). Releasing the document's own worker-side resources is\n      // what this component actually owns; the port outlives it by design.\n      void document_?.cleanup()\n    }\n  }, [data, firstPageOnly, targetWidth])\n\n  return (\n    <div className={cn('w-full', className)} aria-label={ariaLabel} aria-busy={rendering || undefined}>\n      {rendering && <Skeleton className=\"h-64 w-full\" aria-hidden=\"true\" />}\n      {error && (\n        <Text className=\"text-sm text-destructive\" role=\"alert\">{error}</Text>\n      )}\n      <div ref={containerRef} className=\"flex flex-col gap-item\" />\n      {!firstPageOnly && pageCount !== null && pageCount > MAX_RENDERED_PAGES && (\n        // Say what was NOT rendered rather than silently truncating — a document that\n        // looks complete but is not is worse than an explicit bound.\n        <Text className=\"mt-item text-xs text-muted-foreground\">\n          {`Showing the first ${MAX_RENDERED_PAGES} of ${pageCount} pages.`}\n        </Text>\n      )}\n    </div>\n  )\n}\n\nexport default PdfViewer\n"]}
+{"version":3,"file":"pdf-viewer.js","sourceRoot":"","sources":["../../../../../../src/components/data-display/pdf-viewer/pdf-viewer.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACvF,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAEnC,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA;AAE7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,IAAI,sBAAsB,GAAyB,IAAI,CAAA;AAEvD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB;IACvC,IAAI,sBAAsB,KAAK,IAAI,EAAE,CAAC;QACpC,sBAAsB,GAAG,CAAC,KAAK,IAAI,EAAE;YACnC,MAAM,UAAU,GAAG,uCAAuC,EAAE,CAAA;YAC5D,MAAM,MAAM,GAAG,UAAU;gBACvB,CAAC,CAAC,UAAU,EAAE;gBACd,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,yBAAyB,CAAC,0BAA0B,CAAC,CAAC,CAAC,gCAAgC,EAAE,CAAA;YAC3G,KAAK,CAAC,mBAAmB,CAAC,UAAU,GAAG,MAAM,CAAA;QAC/C,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC5B,qFAAqF;YACrF,sBAAsB,GAAG,IAAI,CAAA;YAC7B,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAA;AAC/B,CAAC;AAED,mEAAmE;AACnE,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAE7B,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAA;AA8BhD,MAAM,UAAU,SAAS,CAAC,EACxB,IAAI,EACJ,aAAa,GAAG,KAAK,EACrB,WAAW,EACX,SAAS,EACT,SAAS,EACT,MAAM,GACS;IACf,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAwB,IAAI,CAAC,CAAA;IAC9D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAgB,IAAI,CAAC,CAAA;IACrE,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACtD,oFAAoF;IACpF,iFAAiF;IACjF,qEAAqE;IACrE,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC9C,YAAY,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAA;IAElC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,IAAI,SAAS,GAA4B,IAAI,CAAA;QAC7C,IAAI,WAAW,GAAgD,IAAI,CAAA;QACnE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAA;QACtC,IAAI,CAAC,SAAS;YAAE,OAAM;QAEtB,6EAA6E;QAC7E,2EAA2E;QAC3E,0CAA0C;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAE/B,YAAY,CAAC,IAAI,CAAC,CAAA;QAClB,eAAe,CAAC,KAAK,CAAC,CAAA;QACtB,SAAS,CAAC,eAAe,EAAE,CAAA;QAE3B,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,yBAAyB,EAAE,CAAA;gBACjC,IAAI,SAAS;oBAAE,OAAM;gBACrB,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;gBACpD,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,CAAA;gBACrC,IAAI,SAAS;oBAAE,OAAM;gBACrB,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;gBAEhC,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAA;gBACrF,MAAM,GAAG,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBAE9E,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,IAAI,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC;oBAC9D,IAAI,SAAS;wBAAE,OAAM;oBACrB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;oBAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;oBAC/C,4EAA4E;oBAC5E,4EAA4E;oBAC5E,yEAAyE;oBACzE,0EAA0E;oBAC1E,0EAA0E;oBAC1E,MAAM,aAAa,GAAG,WAAW,IAAI,SAAS,CAAC,WAAW,CAAA;oBAC1D,MAAM,KAAK,GAAG,aAAa,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAA;oBACjF,MAAM,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;oBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,GAAG,EAAE,CAAC,CAAA;oBAEzD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;oBACtD,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;oBACzC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;oBAC3C,wEAAwE;oBACxE,kDAAkD;oBAClD,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,GAAG,CAAC,IAAI,CAAA;oBAC5D,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAA;oBAC9D,MAAM,CAAC,SAAS,GAAG,8DAA8D,CAAA;oBACjF,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;oBAClC,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;oBAEnE,0EAA0E;oBAC1E,yEAAyE;oBACzE,2EAA2E;oBAC3E,0DAA0D;oBAC1D,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;oBAE7B,6EAA6E;oBAC7E,4EAA4E;oBAC5E,4EAA4E;oBAC5E,qDAAqD;oBACrD,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAA;oBAC/C,IAAI,SAAS;wBAAE,OAAM;gBACvB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;wBACxD,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;qBAClC,CAAC,CAAA;oBACF,eAAe,CAAC,IAAI,CAAC,CAAA;gBACvB,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,SAAS;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YACrC,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QAEJ,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAA;YAChB,+EAA+E;YAC/E,4EAA4E;YAC5E,6EAA6E;YAC7E,8EAA8E;YAC9E,qEAAqE;YACrE,KAAK,SAAS,EAAE,OAAO,EAAE,CAAA;QAC3B,CAAC,CAAA;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;IAEtC,OAAO,CACL,eAAK,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,gBAAc,SAAS,eAAa,SAAS,IAAI,SAAS,aAC9F,SAAS,IAAI,KAAC,QAAQ,IAAC,SAAS,EAAC,aAAa,iBAAa,MAAM,GAAG,EACpE,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,0BAA0B,EAAC,IAAI,EAAC,OAAO,YAAE,MAAM,CAAC,YAAY,GAAQ,CACrF,EACD,cAAK,GAAG,EAAE,YAAY,EAAE,SAAS,EAAC,wBAAwB,GAAG,EAC5D,CAAC,aAAa,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,GAAG,kBAAkB,IAAI;YACzE,8EAA8E;YAC9E,6DAA6D;YAC7D,KAAC,IAAI,IAAC,SAAS,EAAC,uCAAuC,YACpD,MAAM,CAAC,cAAc,CAAC,kBAAkB,EAAE,SAAS,CAAC,GAChD,CACR,IACG,CACP,CAAA;AACH,CAAC;AAED,eAAe,SAAS,CAAA","sourcesContent":["\"use client\"\n\n/**\n * PdfViewer — the PDF.js rendering core.\n *\n * ⚠ HEAVY MODULE — LAZY-BOUNDARY DISCIPLINE ⚠\n * This module (and everything only it depends on: `pdfjs-dist` and its worker) must\n * stay behind the dynamic-import boundary owned by `pdf-viewer.lazy.tsx`. NEVER\n * static-import this file from anywhere except that wrapper (tests may). A module\n * that is both statically and dynamically imported is MERGED into the static\n * importer's chunk by Rollup, with no warning — that is how the ECharts boundary\n * silently rotted. `pnpm check:lazy-boundaries` enforces this.\n *\n * ## Why PDF.js rather than the browser's viewer\n *\n * The previous document display embedded an `<iframe>` on the file URL, which hands\n * the page to the browser's built-in viewer: unstyleable (it ignores the design\n * system entirely), unmeasurable, and blocked outright by a strict `frame-src` CSP.\n * PDF.js renders into our own canvas, so the surrounding chrome is ours.\n *\n * ## Rendering model\n *\n * Pages rasterise to `<canvas>` at device pixel ratio, sequentially, into a plain\n * scroll container. Deliberately NOT virtualised in this first increment: a bounded\n * `maxPages` cap keeps a pathological 900-page document from freezing the tab, and\n * virtualisation can be added behind the same contract when a real document demands\n * it. `THUMBNAIL` presentation renders page 1 only — the cheapest useful signal.\n *\n * ## Worker\n *\n * PDF.js parses on a Web Worker. ONE port for the whole module, installed lazily on the\n * first render (`ensurePdfViewerWorkerPort`) and assigned to `GlobalWorkerOptions.workerPort`:\n * the pdf.js worker multiplexes documents by id, so several viewers mounted at once (a\n * THUMBNAIL in a list plus an overlay, say) share it safely, and the shared port avoids\n * spawning a worker per rendered thumbnail. A per-instance `PDFWorker` was tried first\n * out of a concurrency worry that does not apply.\n *\n * WHERE the worker comes from is the host's decision (issue #962, `pdf-viewer-worker.ts`):\n * a factory registered through `configurePdfViewerWorker` wins; otherwise the Vite default\n * in `pdf-viewer-worker.vite.ts` is imported — and only then, so a non-Vite bundler that\n * registered a factory never compiles the `?worker` import. The default is a same-origin\n * file URL, so the `SAAS_APP` CSP baseline needs nothing beyond `script-src 'self'`; the\n * cross-origin (CDN publish) case and its `worker-src blob:` note live with the seam.\n *\n * ## Text\n *\n * The viewer is label-agnostic: every string it shows or announces arrives resolved in\n * `labels` from its host, which owns the component's i18n catalog. A failure is shown\n * as the host's labelled message and the cause is logged — a raw pdf.js exception\n * message is developer text, not something to put in front of a reader.\n */\n\nimport * as React from \"react\"\nimport { cn, Text, Skeleton, LoggerFrontendService } from \"@wildo-ai/saas-frontend-lib\"\nimport * as pdfjs from \"pdfjs-dist\"\nimport type { PDFDocumentProxy } from \"pdfjs-dist\"\nimport { resolveConfiguredPdfViewerWorkerFactory } from \"./pdf-viewer-worker\"\n\nimport { describeCaughtError } from '@wildo-ai/saas-models';\nlet workerPortInstallation: Promise<void> | null = null\n\n/**\n * Install the module-wide worker port once, from the host's factory when one is registered and from\n * the Vite default otherwise (issue #962). Idempotent and memoised: every render awaits the same\n * installation, and a factory registered AFTER it is not consulted. The Vite module is reached\n * through a dynamic import that webpack is told not to follow (`webpackIgnore`), which is what keeps\n * its `?worker` specifier out of a non-Vite graph; a host on such a bundler that registered no\n * factory gets a rejected installation here — surfaced as the viewer's labelled failure with the\n * cause in the log, never a hang.\n */\nexport function ensurePdfViewerWorkerPort(): Promise<void> {\n  if (workerPortInstallation === null) {\n    workerPortInstallation = (async () => {\n      const configured = resolveConfiguredPdfViewerWorkerFactory()\n      const worker = configured\n        ? configured()\n        : (await import(/* webpackIgnore: true */ './pdf-viewer-worker.vite')).createViteDefaultPdfViewerWorker()\n      pdfjs.GlobalWorkerOptions.workerPort = worker\n    })().catch((cause: unknown) => {\n      // A failed installation must not poison every later render: the next one asks again.\n      workerPortInstallation = null\n      throw cause\n    })\n  }\n  return workerPortInstallation\n}\n\n/** Hard cap on rasterised pages — a bound, not a product limit. */\nconst MAX_RENDERED_PAGES = 50\n\nconst logger = LoggerFrontendService.getLogger()\n\n/**\n * Every string the viewer shows or announces, RESOLVED by the host. Functions where\n * the text carries a number, so the host's i18n interpolation — not this module —\n * decides word order.\n */\nexport interface PdfViewerLabels {\n  /** Accessible name of one rendered page image. */\n  page(pageNumber: number): string\n  /** Notice under a document longer than the render cap. */\n  pagesTruncated(shown: number, total: number): string\n  /** Alert shown when the document cannot be rendered. */\n  renderFailed: string\n}\n\nexport interface PdfViewerProps {\n  /** Bytes of the PDF. Fetched by the host over the authenticated serve route. */\n  data: ArrayBuffer\n  /** Render only the first page (THUMBNAIL presentation). */\n  firstPageOnly?: boolean\n  /** Target CSS width in px for a rendered page. Height follows the page aspect. */\n  targetWidth?: number\n  className?: string\n  /** Accessible name for the rendered document region. */\n  ariaLabel?: string\n  /** Resolved text. Required: the viewer invents no words of its own. */\n  labels: PdfViewerLabels\n}\n\nexport function PdfViewer({\n  data,\n  firstPageOnly = false,\n  targetWidth,\n  className,\n  ariaLabel,\n  labels,\n}: PdfViewerProps): React.JSX.Element {\n  const containerRef = React.useRef<HTMLDivElement | null>(null)\n  const [pageCount, setPageCount] = React.useState<number | null>(null)\n  const [renderFailed, setRenderFailed] = React.useState(false)\n  const [rendering, setRendering] = React.useState(true)\n  // Read through a ref inside the render effect: `labels.page` is a function the host\n  // may recreate every render, and re-rasterising a whole document because a label\n  // closure changed identity would be a visible flicker for no reason.\n  const pageLabelRef = React.useRef(labels.page)\n  pageLabelRef.current = labels.page\n\n  React.useEffect(() => {\n    let cancelled = false\n    let document_: PDFDocumentProxy | null = null\n    let loadingTask: ReturnType<typeof pdfjs.getDocument> | null = null\n    const container = containerRef.current\n    if (!container) return\n\n    // pdf.js TRANSFERS the buffer it is given, which would detach a caller-owned\n    // ArrayBuffer and make a re-render (or a second consumer) read zero bytes.\n    // Hand it a copy; the host keeps its own.\n    const ownedData = data.slice(0)\n\n    setRendering(true)\n    setRenderFailed(false)\n    container.replaceChildren()\n\n    void (async () => {\n      try {\n        await ensurePdfViewerWorkerPort()\n        if (cancelled) return\n        loadingTask = pdfjs.getDocument({ data: ownedData })\n        document_ = await loadingTask.promise\n        if (cancelled) return\n        setPageCount(document_.numPages)\n\n        const lastPage = firstPageOnly ? 1 : Math.min(document_.numPages, MAX_RENDERED_PAGES)\n        const dpr = typeof window !== 'undefined' ? (window.devicePixelRatio || 1) : 1\n\n        for (let pageNumber = 1; pageNumber <= lastPage; pageNumber++) {\n          if (cancelled) return\n          const page = await document_.getPage(pageNumber)\n          const unscaled = page.getViewport({ scale: 1 })\n          // `??` would NOT rescue a ZERO width: `0 ?? fallback` is 0, and a container\n          // that has not been laid out yet measures exactly 0 — which yields scale 0,\n          // a 0x0 canvas, and a `page.render()` that never settles (observed live:\n          // \"rendering page 1\" logged with no completion and a permanent skeleton).\n          // Fall back on the page's own width whenever the measurement is unusable.\n          const measuredWidth = targetWidth ?? container.clientWidth\n          const width = measuredWidth && measuredWidth > 0 ? measuredWidth : unscaled.width\n          const scale = width / unscaled.width\n          const viewport = page.getViewport({ scale: scale * dpr })\n\n          const canvas = window.document.createElement('canvas')\n          canvas.width = Math.floor(viewport.width)\n          canvas.height = Math.floor(viewport.height)\n          // CSS size stays in layout px; the canvas is oversampled by DPR so text\n          // is crisp on retina without the layout changing.\n          canvas.style.width = `${Math.floor(viewport.width / dpr)}px`\n          canvas.style.height = `${Math.floor(viewport.height / dpr)}px`\n          canvas.className = 'mx-auto max-w-full rounded-md border border-border shadow-xs'\n          canvas.setAttribute('role', 'img')\n          canvas.setAttribute('aria-label', pageLabelRef.current(pageNumber))\n\n          // ATTACH BEFORE RENDERING. Rendering into a detached canvas and appending\n          // afterwards left `page.render()` unsettled indefinitely (observed live:\n          // \"rendering page 1\" with no completion). Attaching first also makes pages\n          // appear progressively instead of all at once at the end.\n          container.appendChild(canvas)\n\n          // pdf.js 6 takes the CANVAS, not a 2D context: `canvasContext` is the legacy\n          // parameter and its own typings state that using it requires `canvas` to be\n          // explicitly null. Passing both (the first attempt here) is not a supported\n          // combination and left the render promise unsettled.\n          await page.render({ canvas, viewport }).promise\n          if (cancelled) return\n        }\n      } catch (cause) {\n        if (!cancelled) {\n          logger.warn('[PdfViewer] document could not be rendered', {\n            error: describeCaughtError(cause),\n          })\n          setRenderFailed(true)\n        }\n      } finally {\n        if (!cancelled) setRendering(false)\n      }\n    })()\n\n    return () => {\n      cancelled = true\n      // Do NOT call `loadingTask.destroy()`: with an externally-supplied worker port\n      // that also destroys the SHARED worker, and React StrictMode's double-mount\n      // then hits `PDFWorker.create - the worker is being destroyed` on the second\n      // pass (observed live). Releasing the document's own worker-side resources is\n      // what this component actually owns; the port outlives it by design.\n      void document_?.cleanup()\n    }\n  }, [data, firstPageOnly, targetWidth])\n\n  return (\n    <div className={cn('w-full', className)} aria-label={ariaLabel} aria-busy={rendering || undefined}>\n      {rendering && <Skeleton className=\"h-64 w-full\" aria-hidden=\"true\" />}\n      {renderFailed && (\n        <Text className=\"text-sm text-destructive\" role=\"alert\">{labels.renderFailed}</Text>\n      )}\n      <div ref={containerRef} className=\"flex flex-col gap-item\" />\n      {!firstPageOnly && pageCount !== null && pageCount > MAX_RENDERED_PAGES && (\n        // Say what was NOT rendered rather than silently truncating — a document that\n        // looks complete but is not is worse than an explicit bound.\n        <Text className=\"mt-item text-xs text-muted-foreground\">\n          {labels.pagesTruncated(MAX_RENDERED_PAGES, pageCount)}\n        </Text>\n      )}\n    </div>\n  )\n}\n\nexport default PdfViewer\n"]}

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer.lazy.d.ts

@@ -9,6 +9,16 @@
  */
 import * as React from "react";
 import type { PdfViewerProps } from "./pdf-viewer";
-export declare function PdfViewerLazy(props: PdfViewerProps): React.JSX.Element;
-export type { PdfViewerProps } from "./pdf-viewer";
+export interface PdfViewerLazyProps extends PdfViewerProps {
+    /**
+     * The PDF.js chunk could not be loaded (or the viewer threw while rendering). A lazy door throws
+     * during render when its chunk fails to download, and Suspense does not catch that — so the door
+     * catches it and hands the decision to the host, which knows what to show instead (the document
+     * display falls back to its downloadable file card). Nothing is rendered in the viewer's place
+     * until the host reacts.
+     */
+    onUnavailable?: (error: Error) => void;
+}
+export declare function PdfViewerLazy({ onUnavailable, ...props }: PdfViewerLazyProps): React.JSX.Element;
+export type { PdfViewerLabels, PdfViewerProps } from "./pdf-viewer";
 //# sourceMappingURL=pdf-viewer.lazy.d.ts.map

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer.lazy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pdf-viewer.lazy.d.ts","sourceRoot":"","sources":["../../../../../src/components/data-display/pdf-viewer/pdf-viewer.lazy.tsx"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAE9B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAIlD,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAMtE;AAED,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"pdf-viewer.lazy.d.ts","sourceRoot":"","sources":["../../../../../../src/components/data-display/pdf-viewer/pdf-viewer.lazy.tsx"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAE9B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAKlD,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CACvC;AAED,wBAAgB,aAAa,CAAC,EAAE,aAAa,EAAE,GAAG,KAAK,EAAE,EAAE,kBAAkB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAQhG;AAED,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA"}

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer.lazy.js

@@ -11,8 +11,9 @@ import { jsx as _jsx } from "react/jsx-runtime";
  */
 import * as React from "react";
 import { Skeleton } from "@wildo-ai/saas-frontend-lib";
+import { LazyDoorErrorBoundary } from "@wildo-ai/saas-frontend-lib";
 const LazyPdfViewerInner = React.lazy(() => import("./pdf-viewer.js"));
-export function PdfViewerLazy(props) {
-    return (_jsx(React.Suspense, { fallback: _jsx(Skeleton, { className: "h-64 w-full", "aria-hidden": "true" }), children: _jsx(LazyPdfViewerInner, { ...props }) }));
+export function PdfViewerLazy({ onUnavailable, ...props }) {
+    return (_jsx(LazyDoorErrorBoundary, { doorName: "PdfViewerLazy", fallback: null, onError: onUnavailable, children: _jsx(React.Suspense, { fallback: _jsx(Skeleton, { className: "h-64 w-full", "aria-hidden": "true" }), children: _jsx(LazyPdfViewerInner, { ...props }) }) }));
 }
 //# sourceMappingURL=pdf-viewer.lazy.js.map

package/dist/esm/components/data-display/pdf-viewer/pdf-viewer.lazy.js.map

@@ -1 +1 @@
-{"version":3,"file":"pdf-viewer.lazy.js","sourceRoot":"","sources":["../../../../../../src/components/data-display/pdf-viewer/pdf-viewer.lazy.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;GAQG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAGtD,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAA;AAEnE,MAAM,UAAU,aAAa,CAAC,KAAqB;IACjD,OAAO,CACL,KAAC,KAAK,CAAC,QAAQ,IAAC,QAAQ,EAAE,KAAC,QAAQ,IAAC,SAAS,EAAC,aAAa,iBAAa,MAAM,GAAG,YAC/E,KAAC,kBAAkB,OAAK,KAAK,GAAI,GAClB,CAClB,CAAA;AACH,CAAC","sourcesContent":["\"use client\"\n\n/**\n * PdfViewerLazy — the ONLY public door onto the PDF.js rendering core.\n *\n * Lazy-boundary wrapper (`*.lazy.tsx` convention, ChartView.lazy precedent): owns the\n * `React.lazy(() => import(...))` split point and the layout-reserving Suspense\n * fallback, and re-exports the props type via `import type` so consumers get typing\n * with no runtime edge onto the heavy module. Everything except this wrapper (and\n * tests) must import the viewer from HERE — enforced by `pnpm check:lazy-boundaries`.\n */\n\nimport * as React from \"react\"\nimport { Skeleton } from \"@wildo-ai/saas-frontend-lib\"\nimport type { PdfViewerProps } from \"./pdf-viewer\"\n\nconst LazyPdfViewerInner = React.lazy(() => import(\"./pdf-viewer\"))\n\nexport function PdfViewerLazy(props: PdfViewerProps): React.JSX.Element {\n  return (\n    <React.Suspense fallback={<Skeleton className=\"h-64 w-full\" aria-hidden=\"true\" />}>\n      <LazyPdfViewerInner {...props} />\n    </React.Suspense>\n  )\n}\n\nexport type { PdfViewerProps } from \"./pdf-viewer\"\n"]}
+{"version":3,"file":"pdf-viewer.lazy.js","sourceRoot":"","sources":["../../../../../../src/components/data-display/pdf-viewer/pdf-viewer.lazy.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;GAQG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAEnE,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAA;AAanE,MAAM,UAAU,aAAa,CAAC,EAAE,aAAa,EAAE,GAAG,KAAK,EAAsB;IAC3E,OAAO,CACL,KAAC,qBAAqB,IAAC,QAAQ,EAAC,eAAe,EAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,YACpF,KAAC,KAAK,CAAC,QAAQ,IAAC,QAAQ,EAAE,KAAC,QAAQ,IAAC,SAAS,EAAC,aAAa,iBAAa,MAAM,GAAG,YAC/E,KAAC,kBAAkB,OAAK,KAAK,GAAI,GAClB,GACK,CACzB,CAAA;AACH,CAAC","sourcesContent":["\"use client\"\n\n/**\n * PdfViewerLazy — the ONLY public door onto the PDF.js rendering core.\n *\n * Lazy-boundary wrapper (`*.lazy.tsx` convention, ChartView.lazy precedent): owns the\n * `React.lazy(() => import(...))` split point and the layout-reserving Suspense\n * fallback, and re-exports the props type via `import type` so consumers get typing\n * with no runtime edge onto the heavy module. Everything except this wrapper (and\n * tests) must import the viewer from HERE — enforced by `pnpm check:lazy-boundaries`.\n */\n\nimport * as React from \"react\"\nimport { Skeleton } from \"@wildo-ai/saas-frontend-lib\"\nimport type { PdfViewerProps } from \"./pdf-viewer\"\nimport { LazyDoorErrorBoundary } from \"@wildo-ai/saas-frontend-lib\"\n\nconst LazyPdfViewerInner = React.lazy(() => import(\"./pdf-viewer\"))\n\nexport interface PdfViewerLazyProps extends PdfViewerProps {\n  /**\n   * The PDF.js chunk could not be loaded (or the viewer threw while rendering). A lazy door throws\n   * during render when its chunk fails to download, and Suspense does not catch that — so the door\n   * catches it and hands the decision to the host, which knows what to show instead (the document\n   * display falls back to its downloadable file card). Nothing is rendered in the viewer's place\n   * until the host reacts.\n   */\n  onUnavailable?: (error: Error) => void\n}\n\nexport function PdfViewerLazy({ onUnavailable, ...props }: PdfViewerLazyProps): React.JSX.Element {\n  return (\n    <LazyDoorErrorBoundary doorName=\"PdfViewerLazy\" fallback={null} onError={onUnavailable}>\n      <React.Suspense fallback={<Skeleton className=\"h-64 w-full\" aria-hidden=\"true\" />}>\n        <LazyPdfViewerInner {...props} />\n      </React.Suspense>\n    </LazyDoorErrorBoundary>\n  )\n}\n\nexport type { PdfViewerLabels, PdfViewerProps } from \"./pdf-viewer\"\n"]}

package/dist/esm/components/data-display/timeline.d.ts

@@ -0,0 +1,3 @@
+import type { TimelineCompound } from "@wildo-ai/saas-frontend-lib";
+export declare const Timeline: TimelineCompound;
+//# sourceMappingURL=timeline.d.ts.map

package/dist/esm/components/data-display/timeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline.d.ts","sourceRoot":"","sources":["../../../../../src/components/data-display/timeline.tsx"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAGV,gBAAgB,EAKjB,MAAM,6BAA6B,CAAA;AAiKpC,eAAO,MAAM,QAAQ,kBAMnB,CAAA"}