effect-browser 0.2.0-beta.9 → 0.3.0-beta.11

package/dist/Bootstrap-B9UUXsvF.d.mts

@@ -1,183 +0,0 @@
-import { BrowserError, InitializationError } from "./Errors.mjs";
-import { Cause, Effect, Schema } from "effect";
-declare namespace BindingRegistration_d_exports {
-  export { FailureMode, Origin$1 as Origin, Registration, invoke, make, schema, snapshot };
-}
-declare const Invoke: unique symbol;
-declare const Origin$1: Schema.NonEmptyString;
-declare const FailureMode: Schema.Literals<readonly ["reject-call", "fail-session"]>;
-declare const metadataSchema: Schema.Struct<{
-  readonly name: Schema.NonEmptyString;
-  readonly origins: Schema.$Array<Schema.NonEmptyString>;
-  readonly maxConcurrent: Schema.Int;
-  readonly maxInputBytes: Schema.Int;
-  readonly maxOutputBytes: Schema.Int;
-  readonly timeoutMillis: Schema.Int;
-  readonly failureMode: Schema.Literals<readonly ["reject-call", "fail-session"]>;
-}>;
-type Metadata = typeof metadataSchema.Type;
-interface Registration<E, R> extends Metadata {
-  readonly [Invoke]: (text: string, check: Effect.Effect<void, InitializationError>) => Effect.Effect<string, E | InitializationError, R>;
-}
-/** Retain an issued live capability at schema boundaries; a copied shape is not authority. */
-declare const schema: Schema.declare<Registration<unknown, unknown>, Registration<unknown, unknown>>;
-/** Pack heterogeneous codecs and handlers while their concrete input/output types are known. */
-declare const make: <I, IEncoded, O, OEncoded, E, R>(options: BindingOptions<I, IEncoded, O, OEncoded, E, R>) => Registration<E, R>;
-/** Authentication is identity-based even when a caller copies every enumerable field/symbol. */
-declare const snapshot: <E, R>(registration: Registration<E, R>) => Effect.Effect<Registration<E, R>, BrowserError, never>;
-declare const invoke: <E, R>(registration: Registration<E, R>, text: string, check: Effect.Effect<void, InitializationError>) => Effect.Effect<string, E | InitializationError, R>;
-declare namespace Bootstrap_d_exports {
-  export { BindingDiagnostics, BindingFailure, BindingFailureMode, BindingOptions, BindingRegistration, BindingStatistics, InitScript, Origin, Permission, PermissionGrant, Plan, PlanError, PlanRequirements, Readiness, ReadinessOutcome, binding, combine, empty, init, permissions };
-}
-/**
- * Exact scheme-and-host origin, as a document reports it. Patterns are deliberately absent:
- * a registration that cannot say exactly where it applies does not belong in a plan.
- */
-declare const Origin: Schema.NonEmptyString;
-type Origin = typeof Origin.Type;
-/**
- * The reviewed subset of native permission capabilities. Each name is checked against a real
- * browser in native acceptance; an unsupported capability is refused before it is exposed.
- */
-declare const Permission: Schema.Literals<readonly ["accelerometer", "background-sync", "camera", "clipboard-read", "clipboard-write", "geolocation", "gyroscope", "magnetometer", "microphone", "midi", "notifications", "payment-handler", "storage-access"]>;
-type Permission = typeof Permission.Type;
-declare const PermissionGrant: Schema.Struct<{
-  readonly origin: Schema.NonEmptyString;
-  readonly permissions: Schema.$Array<Schema.Literals<readonly ["accelerometer", "background-sync", "camera", "clipboard-read", "clipboard-write", "geolocation", "gyroscope", "magnetometer", "microphone", "midi", "notifications", "payment-handler", "storage-access"]>>;
-}>;
-type PermissionGrant = typeof PermissionGrant.Type;
-/**
- * Registration is not readiness. A script may start asynchronous work, but it cannot pause the
- * website's own scripts, so a document is ready only when its expression resolves to exactly
- * `true`. A document that was already running when the bundle was registered never ran it:
- * `RequireFreshNavigation` reports that instead of pretending otherwise, and an explicit
- * reload of possibly uncertain work stays a caller's decision.
- */
-declare const Readiness: Schema.Struct<{
-  readonly expression: Schema.NonEmptyString;
-  readonly timeoutMillis: Schema.Int;
-  readonly existingDocuments: Schema.Literals<readonly ["RequireFreshNavigation", "AcceptAlreadyRunning"]>;
-}>;
-type Readiness = typeof Readiness.Type;
-/** Trusted host configuration. Script content is never model output or page input. */
-declare const InitScript: Schema.Struct<{
-  readonly id: Schema.NonEmptyString;
-  readonly content: Schema.NonEmptyString;
-  /** When present, the step runs only on these documents and readiness skips the rest. */
-  readonly origins: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
-  readonly readiness: Schema.optionalKey<Schema.Struct<{
-    readonly expression: Schema.NonEmptyString;
-    readonly timeoutMillis: Schema.Int;
-    readonly existingDocuments: Schema.Literals<readonly ["RequireFreshNavigation", "AcceptAlreadyRunning"]>;
-  }>>;
-}>;
-type InitScript = typeof InitScript.Type;
-/** A callback failure can reject one page invocation or permanently fence the session. */
-declare const BindingFailureMode: Schema.Literals<readonly ["reject-call", "fail-session"]>;
-type BindingFailureMode = typeof BindingFailureMode.Type;
-/**
- * A registration issued by `binding`. Its private executable closure carries the real consumer
- * E/R; copying the metadata or fabricating an object does not grant callback authority.
- */
-type BindingRegistration<E = never, R = never> = Registration<E, R>;
-/**
- * Environment-free boundary codecs keep page data validation separate from consumer services.
- * The handler's E/R remain visible on the Plan and are supplied only by the trusted host.
- */
-interface BindingOptions<I, IEncoded, O, OEncoded, E, R> {
-  readonly name: string;
-  readonly origins: ReadonlyArray<Origin>;
-  readonly input: Schema.ConstraintCodec<I, IEncoded, never, never>;
-  readonly output: Schema.ConstraintCodec<O, OEncoded, never, never>;
-  /** Defaults to one concurrent invocation. Explicit values still pass the bounded schema. */
-  readonly maxConcurrent?: number;
-  /** Defaults to 64 KiB. */
-  readonly maxInputBytes?: number;
-  /** Defaults to 64 KiB. */
-  readonly maxOutputBytes?: number;
-  /** Defaults to 10 seconds for the complete invocation. */
-  readonly timeoutMillis?: number;
-  /** Defaults to rejecting this invocation without terminating the session. */
-  readonly failureMode?: BindingFailureMode;
-  readonly handle: (input: I) => Effect.Effect<O, E, R>;
-}
-/**
- * One ordered bundle plus its host capabilities. Callback registrations preserve E/R through
- * their executable closures; static script/permission plans remain serializable values.
- */
-interface Plan<E = unknown, R = unknown> {
-  readonly scripts: ReadonlyArray<InitScript>;
-  readonly permissions: ReadonlyArray<PermissionGrant>;
-  readonly bindings?: ReadonlyArray<BindingRegistration<E, R>>;
-}
-/** Host-only typed evidence. Causes are never logged or returned to page callers. */
-interface BindingFailure<E> {
-  readonly name: string;
-  readonly mode: BindingFailureMode;
-  readonly cause: Cause.Cause<E | InitializationError>;
-}
-interface BindingStatistics {
-  readonly name: string;
-  readonly inFlight: number;
-  readonly pendingNative: number;
-  /** Finished/interrupted invocations whose native work or disposal has not settled. */
-  readonly retired: number;
-  readonly accepted: number;
-  readonly succeeded: number;
-  readonly rejected: number;
-}
-/** Copied snapshot: at most sixteen bindings and the latest thirty-two failure records. */
-interface BindingDiagnostics<E> {
-  readonly faulted: boolean;
-  readonly bindings: ReadonlyArray<BindingStatistics>;
-  readonly failures: ReadonlyArray<BindingFailure<E>>;
-  readonly droppedFailures: number;
-}
-/**
- * Static plans remain serializable. Live binding plans retain issued registrations by identity;
- * this schema neither executes their callbacks nor turns copied metadata into authority. Typed
- * acquisition validates a separate snapshot so consumer E/R is not erased by a generic decoder.
- */
-declare const Plan: Schema.Struct<{
-  readonly scripts: Schema.$Array<Schema.Struct<{
-    readonly id: Schema.NonEmptyString;
-    readonly content: Schema.NonEmptyString;
-    /** When present, the step runs only on these documents and readiness skips the rest. */
-    readonly origins: Schema.optionalKey<Schema.$Array<Schema.NonEmptyString>>;
-    readonly readiness: Schema.optionalKey<Schema.Struct<{
-      readonly expression: Schema.NonEmptyString;
-      readonly timeoutMillis: Schema.Int;
-      readonly existingDocuments: Schema.Literals<readonly ["RequireFreshNavigation", "AcceptAlreadyRunning"]>;
-    }>>;
-  }>>;
-  readonly permissions: Schema.$Array<Schema.Struct<{
-    readonly origin: Schema.NonEmptyString;
-    readonly permissions: Schema.$Array<Schema.Literals<readonly ["accelerometer", "background-sync", "camera", "clipboard-read", "clipboard-write", "geolocation", "gyroscope", "magnetometer", "microphone", "midi", "notifications", "payment-handler", "storage-access"]>>;
-  }>>;
-  readonly bindings: Schema.optionalKey<Schema.$Array<Schema.declare<Registration<unknown, unknown>, Registration<unknown, unknown>>>>;
-}>;
-type AnyPlan = Plan<unknown, unknown>;
-type PlanError<P extends AnyPlan> = P extends Plan<infer E, infer _R> ? E : never;
-type PlanRequirements<P extends AnyPlan> = P extends Plan<infer _E, infer R> ? R : never;
-declare const empty: Plan<never, never>;
-declare const init: (script: InitScript) => Plan<never, never>;
-declare const permissions: (grant: PermissionGrant) => Plan<never, never>;
-/**
- * Register a page-callable host callback without running it or capturing an ambient runtime.
- * Native installation later owns origin/document checks, bounded admission and disposal.
- */
-declare const binding: <I, IEncoded, O, OEncoded, E, R>(options: BindingOptions<I, IEncoded, O, OEncoded, E, R>) => Plan<E, R>;
-/** Combination is ordered and preserves every callback's consumer E/R union. */
-declare function combine<const Plans extends ReadonlyArray<AnyPlan>>(...plans: Plans): Plan<PlanError<Plans[number]>, PlanRequirements<Plans[number]>>;
-/** What the current document is, not a promise about any other document. */
-type ReadinessOutcome = {
-  readonly _tag: "Ready";
-} | {
-  readonly _tag: "NotApplicable";
-} | {
-  readonly _tag: "RequiresNavigation";
-};
-//#endregion
-export { binding as _, BindingRegistration as a, init as b, InitScript as c, PermissionGrant as d, Plan as f, ReadinessOutcome as g, Readiness as h, BindingOptions as i, Origin as l, PlanRequirements as m, BindingFailure as n, BindingStatistics as o, PlanError as p, BindingFailureMode as r, Bootstrap_d_exports as s, BindingDiagnostics as t, Permission as u, combine as v, permissions as x, empty as y };
-export {};
-//# sourceMappingURL=Bootstrap-B9UUXsvF.d.mts.map

package/dist/Bootstrap-CeQOWBy6.mjs

@@ -1,189 +0,0 @@
-import { BrowserError, InitializationError, Reasons } from "./Errors.mjs";
-import { Identifier } from "./BrowserData.mjs";
-import { Effect, Result, Schema } from "effect";
-//#region src/internal/browser/BindingRegistration.ts
-const Invoke = Symbol("BrowserBindingRegistration");
-const issued = /* @__PURE__ */ new WeakSet();
-const Origin$1 = Schema.NonEmptyString.check(Schema.isMaxLength(2048), Schema.makeFilter((value) => {
-	try {
-		const url = new URL(value);
-		return ["http:", "https:"].includes(url.protocol) && url.origin === value && !url.username && !url.password;
-	} catch {
-		return false;
-	}
-}, { title: "an exact http(s) origin" }));
-const FailureMode = Schema.Literals(["reject-call", "fail-session"]);
-const metadataSchema = Schema.Struct({
-	name: Identifier,
-	origins: Schema.Array(Origin$1).check(Schema.isMaxLength(16), Schema.isUnique(), Schema.makeFilter((origins) => origins.length > 0, { title: "at least one allowed origin" })),
-	maxConcurrent: Schema.Int.check(Schema.isBetween({
-		minimum: 1,
-		maximum: 64
-	})),
-	maxInputBytes: Schema.Int.check(Schema.isBetween({
-		minimum: 1,
-		maximum: 1048576
-	})),
-	maxOutputBytes: Schema.Int.check(Schema.isBetween({
-		minimum: 1,
-		maximum: 4194304
-	})),
-	timeoutMillis: Schema.Int.check(Schema.isBetween({
-		minimum: 1,
-		maximum: 12e4
-	})),
-	failureMode: FailureMode
-});
-/** Retain an issued live capability at schema boundaries; a copied shape is not authority. */
-const schema = Schema.declare((value) => typeof value === "object" && value !== null && issued.has(value), { title: "an issued browser binding registration" });
-const issue = (metadata, invoke) => {
-	const registration = Object.freeze({
-		...metadata,
-		origins: Object.freeze([...metadata.origins]),
-		[Invoke]: invoke
-	});
-	issued.add(registration);
-	return registration;
-};
-/** Pack heterogeneous codecs and handlers while their concrete input/output types are known. */
-const make = (options) => {
-	const { maxConcurrent = 1, maxInputBytes = 65536, maxOutputBytes = 65536, timeoutMillis = 1e4, failureMode = "reject-call" } = options;
-	const decoded = Schema.decodeResult(metadataSchema)({
-		...options,
-		maxConcurrent,
-		maxInputBytes,
-		maxOutputBytes,
-		timeoutMillis,
-		failureMode
-	});
-	if (Result.isFailure(decoded)) throw decoded.failure;
-	const metadata = decoded.success;
-	const { input, output, handle } = options;
-	if (!Schema.isSchema(input) || !Schema.isSchema(output) || typeof handle !== "function") throw new TypeError("Invalid binding registration");
-	const fail = (reason) => InitializationError.make({
-		operation: "callback",
-		step: metadata.name,
-		reason
-	});
-	return issue(metadata, Effect.fnUntraced(function* (text, check) {
-		if (new TextEncoder().encode(text).length > metadata.maxInputBytes) return yield* fail("input");
-		const decoded = yield* Schema.decodeEffect(Schema.fromJsonString(input))(text).pipe(Effect.catchCause(() => Effect.fail(fail("input"))));
-		yield* check;
-		const value = yield* Effect.suspend(() => handle(decoded));
-		const encoded = yield* Schema.encodeEffect(output)(value).pipe(Effect.catchCause(() => Effect.fail(fail("output"))));
-		const json = yield* Schema.decodeUnknownEffect(Schema.Json)(encoded).pipe(Effect.catchCause(() => Effect.fail(fail("output"))));
-		const result = yield* Schema.encodeEffect(Schema.fromJsonString(Schema.Json))(json).pipe(Effect.catchCause(() => Effect.fail(fail("output"))));
-		if (new TextEncoder().encode(result).length > metadata.maxOutputBytes) return yield* fail("output");
-		return result;
-	}));
-};
-/** Authentication is identity-based even when a caller copies every enumerable field/symbol. */
-const snapshot = Effect.fnUntraced(function* (registration) {
-	const invalid = () => BrowserError.make({
-		operation: "configure",
-		reason: Reasons.Configuration.make({}),
-		outcome: "undispatched"
-	});
-	if (!issued.has(registration)) return yield* invalid();
-	const metadata = yield* Schema.decodeEffect(metadataSchema)(registration).pipe(Effect.mapError(invalid));
-	return issue(metadata, registration[Invoke]);
-});
-const invoke = (registration, text, check) => registration[Invoke](text, check);
-//#endregion
-//#region src/Bootstrap.ts
-/**
-* Exact scheme-and-host origin, as a document reports it. Patterns are deliberately absent:
-* a registration that cannot say exactly where it applies does not belong in a plan.
-*/
-const Origin = Origin$1;
-/**
-* The reviewed subset of native permission capabilities. Each name is checked against a real
-* browser in native acceptance; an unsupported capability is refused before it is exposed.
-*/
-const Permission = Schema.Literals([
-	"accelerometer",
-	"background-sync",
-	"camera",
-	"clipboard-read",
-	"clipboard-write",
-	"geolocation",
-	"gyroscope",
-	"magnetometer",
-	"microphone",
-	"midi",
-	"notifications",
-	"payment-handler",
-	"storage-access"
-]);
-const PermissionGrant = Schema.Struct({
-	origin: Origin,
-	permissions: Schema.Array(Permission).check(Schema.isMaxLength(16), Schema.isUnique())
-});
-/**
-* Registration is not readiness. A script may start asynchronous work, but it cannot pause the
-* website's own scripts, so a document is ready only when its expression resolves to exactly
-* `true`. A document that was already running when the bundle was registered never ran it:
-* `RequireFreshNavigation` reports that instead of pretending otherwise, and an explicit
-* reload of possibly uncertain work stays a caller's decision.
-*/
-const Readiness = Schema.Struct({
-	expression: Schema.NonEmptyString.check(Schema.isMaxLength(4096)),
-	timeoutMillis: Schema.Int.check(Schema.isBetween({
-		minimum: 1,
-		maximum: 12e4
-	})),
-	existingDocuments: Schema.Literals(["RequireFreshNavigation", "AcceptAlreadyRunning"])
-});
-/** Trusted host configuration. Script content is never model output or page input. */
-const InitScript = Schema.Struct({
-	id: Identifier,
-	content: Schema.NonEmptyString.check(Schema.isMaxLength(65536)),
-	/** When present, the step runs only on these documents and readiness skips the rest. */
-	origins: Schema.optionalKey(Schema.Array(Origin).check(Schema.isMaxLength(16), Schema.isUnique())),
-	readiness: Schema.optionalKey(Readiness)
-});
-/** A callback failure can reject one page invocation or permanently fence the session. */
-const BindingFailureMode = FailureMode;
-/**
-* Static plans remain serializable. Live binding plans retain issued registrations by identity;
-* this schema neither executes their callbacks nor turns copied metadata into authority. Typed
-* acquisition validates a separate snapshot so consumer E/R is not erased by a generic decoder.
-*/
-const Plan = Schema.Struct({
-	scripts: Schema.Array(InitScript).check(Schema.isMaxLength(16)),
-	permissions: Schema.Array(PermissionGrant).check(Schema.isMaxLength(16)),
-	bindings: Schema.optionalKey(Schema.Array(schema).check(Schema.isMaxLength(16)))
-});
-const empty = {
-	scripts: [],
-	permissions: []
-};
-const init = (script) => ({
-	scripts: [script],
-	permissions: []
-});
-const permissions = (grant) => ({
-	scripts: [],
-	permissions: [grant]
-});
-/**
-* Register a page-callable host callback without running it or capturing an ambient runtime.
-* Native installation later owns origin/document checks, bounded admission and disposal.
-*/
-const binding = (options) => ({
-	scripts: [],
-	permissions: [],
-	bindings: [make(options)]
-});
-function combine(...plans) {
-	const bindings = plans.flatMap((plan) => plan.bindings === void 0 ? [] : [...plan.bindings]);
-	return {
-		scripts: plans.flatMap((plan) => [...plan.scripts]),
-		permissions: plans.flatMap((plan) => [...plan.permissions]),
-		...bindings.length === 0 ? {} : { bindings }
-	};
-}
-//#endregion
-export { PermissionGrant as a, binding as c, init as d, permissions as f, Permission as i, combine as l, snapshot as m, InitScript as n, Plan as o, invoke as p, Origin as r, Readiness as s, BindingFailureMode as t, empty as u };
-
-//# sourceMappingURL=Bootstrap-CeQOWBy6.mjs.map

package/dist/Bootstrap-CeQOWBy6.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"Bootstrap-CeQOWBy6.mjs","names":["Origin","Registration.Origin","Registration.FailureMode","Registration.schema","Registration.make"],"sources":["../src/internal/browser/BindingRegistration.ts","../src/Bootstrap.ts"],"sourcesContent":["import { Effect, Result, Schema } from \"effect\";\n\nimport type * as Bootstrap from \"../../Bootstrap.ts\";\nimport { Identifier } from \"../../BrowserData.ts\";\nimport { BrowserError, InitializationError, Reasons } from \"../../Errors.ts\";\n\nconst Invoke = Symbol(\"BrowserBindingRegistration\");\nconst issued = new WeakSet<object>();\n\nexport const Origin = Schema.NonEmptyString.check(\n  Schema.isMaxLength(2048),\n  Schema.makeFilter(\n    (value) => {\n      try {\n        const url = new URL(value);\n\n        return (\n          [\"http:\", \"https:\"].includes(url.protocol) &&\n          url.origin === value &&\n          !url.username &&\n          !url.password\n        );\n      } catch {\n        return false;\n      }\n    },\n    { title: \"an exact http(s) origin\" },\n  ),\n);\n\nexport const FailureMode = Schema.Literals([\"reject-call\", \"fail-session\"]);\n\nconst metadataSchema = Schema.Struct({\n  name: Identifier,\n  origins: Schema.Array(Origin).check(\n    Schema.isMaxLength(16),\n    Schema.isUnique(),\n    Schema.makeFilter((origins) => origins.length > 0, { title: \"at least one allowed origin\" }),\n  ),\n  maxConcurrent: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 64 })),\n  maxInputBytes: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 1024 * 1024 })),\n  maxOutputBytes: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 4 * 1024 * 1024 })),\n  timeoutMillis: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 120_000 })),\n  failureMode: FailureMode,\n});\n\ntype Metadata = typeof metadataSchema.Type;\n\nexport interface Registration<E, R> extends Metadata {\n  readonly [Invoke]: (\n    text: string,\n    check: Effect.Effect<void, InitializationError>,\n  ) => Effect.Effect<string, E | InitializationError, R>;\n}\n\n/** Retain an issued live capability at schema boundaries; a copied shape is not authority. */\nexport const schema = Schema.declare<Registration<unknown, unknown>>(\n  (value): value is Registration<unknown, unknown> =>\n    typeof value === \"object\" && value !== null && issued.has(value),\n  { title: \"an issued browser binding registration\" },\n);\n\nconst issue = <E, R>(\n  metadata: Metadata,\n  invoke: Registration<E, R>[typeof Invoke],\n): Registration<E, R> => {\n  const registration = Object.freeze({\n    ...metadata,\n    origins: Object.freeze([...metadata.origins]),\n    [Invoke]: invoke,\n  });\n\n  issued.add(registration);\n\n  return registration;\n};\n\n/** Pack heterogeneous codecs and handlers while their concrete input/output types are known. */\nexport const make = <I, IEncoded, O, OEncoded, E, R>(\n  options: Bootstrap.BindingOptions<I, IEncoded, O, OEncoded, E, R>,\n): Registration<E, R> => {\n  const {\n    maxConcurrent = 1,\n    maxInputBytes = 65536,\n    maxOutputBytes = 65536,\n    timeoutMillis = 10000,\n    failureMode = \"reject-call\",\n  } = options;\n\n  const decoded = Schema.decodeResult(metadataSchema)({\n    ...options,\n    maxConcurrent,\n    maxInputBytes,\n    maxOutputBytes,\n    timeoutMillis,\n    failureMode,\n  });\n\n  if (Result.isFailure(decoded)) throw decoded.failure;\n  const metadata = decoded.success;\n\n  const { input, output, handle } = options;\n\n  if (!Schema.isSchema(input) || !Schema.isSchema(output) || typeof handle !== \"function\") {\n    throw new TypeError(\"Invalid binding registration\");\n  }\n\n  const fail = (reason: \"input\" | \"output\") =>\n    InitializationError.make({ operation: \"callback\", step: metadata.name, reason });\n\n  return issue(\n    metadata,\n    Effect.fnUntraced(function* (text, check) {\n      if (new TextEncoder().encode(text).length > metadata.maxInputBytes)\n        return yield* fail(\"input\");\n\n      const decoded = yield* Schema.decodeEffect(Schema.fromJsonString(input))(text).pipe(\n        Effect.catchCause(() => Effect.fail(fail(\"input\"))),\n      );\n\n      yield* check;\n      const value = yield* Effect.suspend(() => handle(decoded));\n\n      const encoded = yield* Schema.encodeEffect(output)(value).pipe(\n        Effect.catchCause(() => Effect.fail(fail(\"output\"))),\n      );\n\n      const json = yield* Schema.decodeUnknownEffect(Schema.Json)(encoded).pipe(\n        Effect.catchCause(() => Effect.fail(fail(\"output\"))),\n      );\n\n      const result = yield* Schema.encodeEffect(Schema.fromJsonString(Schema.Json))(json).pipe(\n        Effect.catchCause(() => Effect.fail(fail(\"output\"))),\n      );\n\n      if (new TextEncoder().encode(result).length > metadata.maxOutputBytes)\n        return yield* fail(\"output\");\n\n      return result;\n    }),\n  );\n};\n\n/** Authentication is identity-based even when a caller copies every enumerable field/symbol. */\nexport const snapshot = Effect.fnUntraced(function* <E, R>(\n  registration: Registration<E, R>,\n): Effect.fn.Return<Registration<E, R>, BrowserError> {\n  const invalid = () =>\n    BrowserError.make({\n      operation: \"configure\",\n      reason: Reasons.Configuration.make({}),\n      outcome: \"undispatched\",\n    });\n\n  if (!issued.has(registration)) return yield* invalid();\n\n  const metadata = yield* Schema.decodeEffect(metadataSchema)(registration).pipe(\n    Effect.mapError(invalid),\n  );\n\n  return issue(metadata, registration[Invoke]);\n});\n\nexport const invoke = <E, R>(\n  registration: Registration<E, R>,\n  text: string,\n  check: Effect.Effect<void, InitializationError>,\n): Effect.Effect<string, E | InitializationError, R> => registration[Invoke](text, check);\n","import { type Cause, type Effect, Schema } from \"effect\";\n\nimport { Identifier } from \"./BrowserData.ts\";\nimport type { InitializationError } from \"./Errors.ts\";\nimport * as Registration from \"./internal/browser/BindingRegistration.ts\";\n\n/**\n * Exact scheme-and-host origin, as a document reports it. Patterns are deliberately absent:\n * a registration that cannot say exactly where it applies does not belong in a plan.\n */\nexport const Origin = Registration.Origin;\n\nexport type Origin = typeof Origin.Type;\n\n/**\n * The reviewed subset of native permission capabilities. Each name is checked against a real\n * browser in native acceptance; an unsupported capability is refused before it is exposed.\n */\nexport const Permission = Schema.Literals([\n  \"accelerometer\",\n  \"background-sync\",\n  \"camera\",\n  \"clipboard-read\",\n  \"clipboard-write\",\n  \"geolocation\",\n  \"gyroscope\",\n  \"magnetometer\",\n  \"microphone\",\n  \"midi\",\n  \"notifications\",\n  \"payment-handler\",\n  \"storage-access\",\n]);\n\nexport type Permission = typeof Permission.Type;\n\nexport const PermissionGrant = Schema.Struct({\n  origin: Origin,\n  permissions: Schema.Array(Permission).check(Schema.isMaxLength(16), Schema.isUnique()),\n});\n\nexport type PermissionGrant = typeof PermissionGrant.Type;\n\n/**\n * Registration is not readiness. A script may start asynchronous work, but it cannot pause the\n * website's own scripts, so a document is ready only when its expression resolves to exactly\n * `true`. A document that was already running when the bundle was registered never ran it:\n * `RequireFreshNavigation` reports that instead of pretending otherwise, and an explicit\n * reload of possibly uncertain work stays a caller's decision.\n */\nexport const Readiness = Schema.Struct({\n  expression: Schema.NonEmptyString.check(Schema.isMaxLength(4096)),\n  timeoutMillis: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 120_000 })),\n  existingDocuments: Schema.Literals([\"RequireFreshNavigation\", \"AcceptAlreadyRunning\"]),\n});\n\nexport type Readiness = typeof Readiness.Type;\n\n/** Trusted host configuration. Script content is never model output or page input. */\nexport const InitScript = Schema.Struct({\n  id: Identifier,\n  content: Schema.NonEmptyString.check(Schema.isMaxLength(64 * 1024)),\n  /** When present, the step runs only on these documents and readiness skips the rest. */\n  origins: Schema.optionalKey(\n    Schema.Array(Origin).check(Schema.isMaxLength(16), Schema.isUnique()),\n  ),\n  readiness: Schema.optionalKey(Readiness),\n});\n\nexport type InitScript = typeof InitScript.Type;\n\n/** A callback failure can reject one page invocation or permanently fence the session. */\nexport const BindingFailureMode = Registration.FailureMode;\n\nexport type BindingFailureMode = typeof BindingFailureMode.Type;\n\n/**\n * A registration issued by `binding`. Its private executable closure carries the real consumer\n * E/R; copying the metadata or fabricating an object does not grant callback authority.\n */\nexport type BindingRegistration<E = never, R = never> = Registration.Registration<E, R>;\n\n/**\n * Environment-free boundary codecs keep page data validation separate from consumer services.\n * The handler's E/R remain visible on the Plan and are supplied only by the trusted host.\n */\nexport interface BindingOptions<I, IEncoded, O, OEncoded, E, R> {\n  readonly name: string;\n  readonly origins: ReadonlyArray<Origin>;\n  readonly input: Schema.ConstraintCodec<I, IEncoded, never, never>;\n  readonly output: Schema.ConstraintCodec<O, OEncoded, never, never>;\n  /** Defaults to one concurrent invocation. Explicit values still pass the bounded schema. */\n  readonly maxConcurrent?: number;\n  /** Defaults to 64 KiB. */\n  readonly maxInputBytes?: number;\n  /** Defaults to 64 KiB. */\n  readonly maxOutputBytes?: number;\n  /** Defaults to 10 seconds for the complete invocation. */\n  readonly timeoutMillis?: number;\n  /** Defaults to rejecting this invocation without terminating the session. */\n  readonly failureMode?: BindingFailureMode;\n  readonly handle: (input: I) => Effect.Effect<O, E, R>;\n}\n\n/**\n * One ordered bundle plus its host capabilities. Callback registrations preserve E/R through\n * their executable closures; static script/permission plans remain serializable values.\n */\nexport interface Plan<E = unknown, R = unknown> {\n  readonly scripts: ReadonlyArray<InitScript>;\n  readonly permissions: ReadonlyArray<PermissionGrant>;\n  readonly bindings?: ReadonlyArray<BindingRegistration<E, R>>;\n}\n\n/** Host-only typed evidence. Causes are never logged or returned to page callers. */\nexport interface BindingFailure<E> {\n  readonly name: string;\n  readonly mode: BindingFailureMode;\n  readonly cause: Cause.Cause<E | InitializationError>;\n}\n\nexport interface BindingStatistics {\n  readonly name: string;\n  readonly inFlight: number;\n  readonly pendingNative: number;\n  /** Finished/interrupted invocations whose native work or disposal has not settled. */\n  readonly retired: number;\n  readonly accepted: number;\n  readonly succeeded: number;\n  readonly rejected: number;\n}\n\n/** Copied snapshot: at most sixteen bindings and the latest thirty-two failure records. */\nexport interface BindingDiagnostics<E> {\n  readonly faulted: boolean;\n  readonly bindings: ReadonlyArray<BindingStatistics>;\n  readonly failures: ReadonlyArray<BindingFailure<E>>;\n  readonly droppedFailures: number;\n}\n\n/**\n * Static plans remain serializable. Live binding plans retain issued registrations by identity;\n * this schema neither executes their callbacks nor turns copied metadata into authority. Typed\n * acquisition validates a separate snapshot so consumer E/R is not erased by a generic decoder.\n */\nexport const Plan = Schema.Struct({\n  scripts: Schema.Array(InitScript).check(Schema.isMaxLength(16)),\n  permissions: Schema.Array(PermissionGrant).check(Schema.isMaxLength(16)),\n  bindings: Schema.optionalKey(Schema.Array(Registration.schema).check(Schema.isMaxLength(16))),\n});\n\ntype AnyPlan = Plan<unknown, unknown>;\n\nexport type PlanError<P extends AnyPlan> = P extends Plan<infer E, infer _R> ? E : never;\nexport type PlanRequirements<P extends AnyPlan> = P extends Plan<infer _E, infer R> ? R : never;\n\nexport const empty: Plan<never, never> = { scripts: [], permissions: [] };\n\nexport const init = (script: InitScript): Plan<never, never> => ({\n  scripts: [script],\n  permissions: [],\n});\n\nexport const permissions = (grant: PermissionGrant): Plan<never, never> => ({\n  scripts: [],\n  permissions: [grant],\n});\n\n/**\n * Register a page-callable host callback without running it or capturing an ambient runtime.\n * Native installation later owns origin/document checks, bounded admission and disposal.\n */\nexport const binding = <I, IEncoded, O, OEncoded, E, R>(\n  options: BindingOptions<I, IEncoded, O, OEncoded, E, R>,\n): Plan<E, R> => ({\n  scripts: [],\n  permissions: [],\n  bindings: [Registration.make(options)],\n});\n\n/** Combination is ordered and preserves every callback's consumer E/R union. */\nexport function combine<const Plans extends ReadonlyArray<AnyPlan>>(\n  ...plans: Plans\n): Plan<PlanError<Plans[number]>, PlanRequirements<Plans[number]>>;\n\nexport function combine(...plans: ReadonlyArray<AnyPlan>): AnyPlan {\n  const bindings = plans.flatMap((plan) => (plan.bindings === undefined ? [] : [...plan.bindings]));\n\n  return {\n    scripts: plans.flatMap((plan) => [...plan.scripts]),\n    permissions: plans.flatMap((plan) => [...plan.permissions]),\n    ...(bindings.length === 0 ? {} : { bindings }),\n  };\n}\n\n/** What the current document is, not a promise about any other document. */\nexport type ReadinessOutcome =\n  | { readonly _tag: \"Ready\" }\n  | { readonly _tag: \"NotApplicable\" }\n  | { readonly _tag: \"RequiresNavigation\" };\n"],"mappings":";;;;AAMA,MAAM,SAAS,OAAO,4BAA4B;AAClD,MAAM,yBAAS,IAAI,QAAgB;AAEnC,MAAaA,WAAS,OAAO,eAAe,MAC1C,OAAO,YAAY,IAAI,GACvB,OAAO,YACJ,UAAU;CACT,IAAI;EACF,MAAM,MAAM,IAAI,IAAI,KAAK;EAEzB,OACE,CAAC,SAAS,QAAQ,CAAC,CAAC,SAAS,IAAI,QAAQ,KACzC,IAAI,WAAW,SACf,CAAC,IAAI,YACL,CAAC,IAAI;CAET,QAAQ;EACN,OAAO;CACT;AACF,GACA,EAAE,OAAO,0BAA0B,CACrC,CACF;AAEA,MAAa,cAAc,OAAO,SAAS,CAAC,eAAe,cAAc,CAAC;AAE1E,MAAM,iBAAiB,OAAO,OAAO;CACnC,MAAM;CACN,SAAS,OAAO,MAAMA,QAAM,CAAC,CAAC,MAC5B,OAAO,YAAY,EAAE,GACrB,OAAO,SAAS,GAChB,OAAO,YAAY,YAAY,QAAQ,SAAS,GAAG,EAAE,OAAO,8BAA8B,CAAC,CAC7F;CACA,eAAe,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAG,CAAC,CAAC;CAC7E,eAAe,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAY,CAAC,CAAC;CACtF,gBAAgB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAgB,CAAC,CAAC;CAC3F,eAAe,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAQ,CAAC,CAAC;CAClF,aAAa;AACf,CAAC;;AAYD,MAAa,SAAS,OAAO,SAC1B,UACC,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,IAAI,KAAK,GACjE,EAAE,OAAO,yCAAyC,CACpD;AAEA,MAAM,SACJ,UACA,WACuB;CACvB,MAAM,eAAe,OAAO,OAAO;EACjC,GAAG;EACH,SAAS,OAAO,OAAO,CAAC,GAAG,SAAS,OAAO,CAAC;GAC3C,SAAS;CACZ,CAAC;CAED,OAAO,IAAI,YAAY;CAEvB,OAAO;AACT;;AAGA,MAAa,QACX,YACuB;CACvB,MAAM,EACJ,gBAAgB,GAChB,gBAAgB,OAChB,iBAAiB,OACjB,gBAAgB,KAChB,cAAc,kBACZ;CAEJ,MAAM,UAAU,OAAO,aAAa,cAAc,CAAC,CAAC;EAClD,GAAG;EACH;EACA;EACA;EACA;EACA;CACF,CAAC;CAED,IAAI,OAAO,UAAU,OAAO,GAAG,MAAM,QAAQ;CAC7C,MAAM,WAAW,QAAQ;CAEzB,MAAM,EAAE,OAAO,QAAQ,WAAW;CAElC,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,CAAC,OAAO,SAAS,MAAM,KAAK,OAAO,WAAW,YAC3E,MAAM,IAAI,UAAU,8BAA8B;CAGpD,MAAM,QAAQ,WACZ,oBAAoB,KAAK;EAAE,WAAW;EAAY,MAAM,SAAS;EAAM;CAAO,CAAC;CAEjF,OAAO,MACL,UACA,OAAO,WAAW,WAAW,MAAM,OAAO;EACxC,IAAI,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,SAAS,eACnD,OAAO,OAAO,KAAK,OAAO;EAE5B,MAAM,UAAU,OAAO,OAAO,aAAa,OAAO,eAAe,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAC7E,OAAO,iBAAiB,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,CACpD;EAEA,OAAO;EACP,MAAM,QAAQ,OAAO,OAAO,cAAc,OAAO,OAAO,CAAC;EAEzD,MAAM,UAAU,OAAO,OAAO,aAAa,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KACxD,OAAO,iBAAiB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CACrD;EAEA,MAAM,OAAO,OAAO,OAAO,oBAAoB,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KACnE,OAAO,iBAAiB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CACrD;EAEA,MAAM,SAAS,OAAO,OAAO,aAAa,OAAO,eAAe,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAClF,OAAO,iBAAiB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CACrD;EAEA,IAAI,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,SAAS,SAAS,gBACrD,OAAO,OAAO,KAAK,QAAQ;EAE7B,OAAO;CACT,CAAC,CACH;AACF;;AAGA,MAAa,WAAW,OAAO,WAAW,WACxC,cACoD;CACpD,MAAM,gBACJ,aAAa,KAAK;EAChB,WAAW;EACX,QAAQ,QAAQ,cAAc,KAAK,CAAC,CAAC;EACrC,SAAS;CACX,CAAC;CAEH,IAAI,CAAC,OAAO,IAAI,YAAY,GAAG,OAAO,OAAO,QAAQ;CAErD,MAAM,WAAW,OAAO,OAAO,aAAa,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC,KACxE,OAAO,SAAS,OAAO,CACzB;CAEA,OAAO,MAAM,UAAU,aAAa,OAAO;AAC7C,CAAC;AAED,MAAa,UACX,cACA,MACA,UACsD,aAAa,OAAO,CAAC,MAAM,KAAK;;;;;;;AC7JxF,MAAa,SAASC;;;;;AAQtB,MAAa,aAAa,OAAO,SAAS;CACxC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAID,MAAa,kBAAkB,OAAO,OAAO;CAC3C,QAAQ;CACR,aAAa,OAAO,MAAM,UAAU,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,GAAG,OAAO,SAAS,CAAC;AACvF,CAAC;;;;;;;;AAWD,MAAa,YAAY,OAAO,OAAO;CACrC,YAAY,OAAO,eAAe,MAAM,OAAO,YAAY,IAAI,CAAC;CAChE,eAAe,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAQ,CAAC,CAAC;CAClF,mBAAmB,OAAO,SAAS,CAAC,0BAA0B,sBAAsB,CAAC;AACvF,CAAC;;AAKD,MAAa,aAAa,OAAO,OAAO;CACtC,IAAI;CACJ,SAAS,OAAO,eAAe,MAAM,OAAO,YAAY,KAAS,CAAC;;CAElE,SAAS,OAAO,YACd,OAAO,MAAM,MAAM,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,GAAG,OAAO,SAAS,CAAC,CACtE;CACA,WAAW,OAAO,YAAY,SAAS;AACzC,CAAC;;AAKD,MAAa,qBAAqBC;;;;;;AAyElC,MAAa,OAAO,OAAO,OAAO;CAChC,SAAS,OAAO,MAAM,UAAU,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CAC9D,aAAa,OAAO,MAAM,eAAe,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CACvE,UAAU,OAAO,YAAY,OAAO,MAAMC,MAAmB,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC,CAAC;AAC9F,CAAC;AAOD,MAAa,QAA4B;CAAE,SAAS,CAAC;CAAG,aAAa,CAAC;AAAE;AAExE,MAAa,QAAQ,YAA4C;CAC/D,SAAS,CAAC,MAAM;CAChB,aAAa,CAAC;AAChB;AAEA,MAAa,eAAe,WAAgD;CAC1E,SAAS,CAAC;CACV,aAAa,CAAC,KAAK;AACrB;;;;;AAMA,MAAa,WACX,aACgB;CAChB,SAAS,CAAC;CACV,aAAa,CAAC;CACd,UAAU,CAACC,KAAkB,OAAO,CAAC;AACvC;AAOA,SAAgB,QAAQ,GAAG,OAAwC;CACjE,MAAM,WAAW,MAAM,SAAS,SAAU,KAAK,aAAa,KAAA,IAAY,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAE;CAEhG,OAAO;EACL,SAAS,MAAM,SAAS,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC;EAClD,aAAa,MAAM,SAAS,SAAS,CAAC,GAAG,KAAK,WAAW,CAAC;EAC1D,GAAI,SAAS,WAAW,IAAI,CAAC,IAAI,EAAE,SAAS;CAC9C;AACF"}

package/dist/Bootstrap.d.mts

@@ -1,3 +0,0 @@
-import { _ as binding, a as BindingRegistration, b as init, c as InitScript, d as PermissionGrant, f as Plan, g as ReadinessOutcome, h as Readiness, i as BindingOptions, l as Origin, m as PlanRequirements, n as BindingFailure, o as BindingStatistics, p as PlanError, r as BindingFailureMode, t as BindingDiagnostics, u as Permission, v as combine, x as permissions, y as empty } from "./Bootstrap-B9UUXsvF.mjs";
-export { BindingDiagnostics, BindingFailure, BindingFailureMode, BindingOptions, BindingRegistration, BindingStatistics, InitScript, Origin, Permission, PermissionGrant, Plan, PlanError, PlanRequirements, Readiness, ReadinessOutcome, binding, combine, empty, init, permissions };
-export {};

package/dist/Bootstrap.mjs

@@ -1,2 +0,0 @@
-import { a as PermissionGrant, c as binding, d as init, f as permissions, i as Permission, l as combine, n as InitScript, o as Plan, r as Origin, s as Readiness, t as BindingFailureMode, u as empty } from "./Bootstrap-CeQOWBy6.mjs";
-export { BindingFailureMode, InitScript, Origin, Permission, PermissionGrant, Plan, Readiness, binding, combine, empty, init, permissions };