gesso-framework 0.5.1 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # gesso-framework
 
+## 0.6.0
+
+### Minor Changes
+
+- bf21b17: A `Dialog` dims the page behind it, as a browser draws `<dialog>::backdrop`. Palettes have a new `scrim` token, a colour with alpha: the light page's ink at 40% in `lightColors`, black at 60% in `darkColors`, and left alone by high contrast. A custom palette written out in full needs one. Overlay entries take `scrim`, on by default for a `modal` entry and off for every other, so a menu or a list of suggestions never dims the page; the scrim takes its theme from the entry's `environment` and fades in at a dialog's pace, or appears at once under reduced motion. `Dialog` takes `scrim={false}` to leave the page undimmed; its backdrop still keeps the page from presses.
+- 684b59a: A `Dialog` that can't be dismissed now keeps the page from presses, as one that can does: every dialog has a backdrop over the whole page, positioned panels with a `zIndex` included, and `dismissible` decides only whether a press or a wheel on it closes the dialog. Before, a dialog with `dismissible={false}` had no backdrop, so a press beside it reached a button in the page under the modal. Overlay entries take a new `modal` option for the same backdrop.
+- b085707: `ShellService.redirect(url)` sends the page to a url, leaving the app: what a full-page sign-in or sign-out needs, which a component in a worker could not do. Relative urls resolve against the page, only `http:`, `https:` or the page's own scheme are followed (a `javascript:`, `data:` or `blob:` url is refused with a warning), and `createApp({ onRedirect })` lets a host such as a desktop window decide what a redirect means. It differs from the router's `navigate`, which moves within the app.
+
+### Patch Changes
+
+- e9f86a2: An anchored overlay (a tooltip, a menu, a popover) now opens beside where its anchor is drawn when an ancestor of the anchor has a `transform`. A card on a panned and zoomed canvas used to get its tooltip where the card would be at zoom 1 with no pan, often nowhere near it; the anchor is now carried through every ancestor's translate, scale and rotation, as well as the scroll offsets it already followed, and an overlay that lives under a transform of its own is placed in that space. The accessibility mirror puts its elements over the same drawn boxes, so a screen reader's outline and touch exploration find the card where it is. A node's own transform still takes no part, so a turning spinner neither shakes its tooltip nor moves its element. `LayoutEngine.screenBox(node)` answers the question for anything else that needs it.
+- b0233fa: A channel's `view` lists its declared keys: `Object.keys`, `in` and a spread now see them. With only a `get` trap, walking a view found nothing, and an app that snapshotted one by its keys got an empty object.
+- 013e064: `color` cascades, as the property reference always said it did: text that names no colour takes the `color` of the nearest ancestor that set one, unless a nearer `textStyle` brings its own. A theme token travels as a name and is resolved where the text is painted, so `<box theme={darkTheme} color="text">` draws its plain text in the dark palette's `text`, and a card inside it that provides another theme draws in that theme's. Until now a node's own `color` reached nothing below it, and plain text under a dark root drew in the default style's near-black on the dark background. Text that already names a colour or a role is unchanged; text that names neither, under a container that sets a `color`, now takes that colour. Changing a cascaded colour repaints the subtree without laying it out again. `UiEnvironmentKeys.color` is the new key the colour travels on, and an overlay carries it from where it was declared.
+- 820aee8: Everything that measures a node against the canvas now takes the `transform` of every ancestor into account, as painting and hit testing always have. Under a panned and zoomed parent (cards on a map inside a "camera" box) several things used to work from where the node would be drawn at zoom 1 with no pan:
+
+  - A press from the accessibility mirror or an automation tool, and Enter or Space on a focused button, now click the centre the node is drawn at rather than a point that could be off the node entirely.
+  - A modifier's `layoutBox()` and the box `onLayout` reports are the drawn box, so a slider, split pane or colour picker on a zoomed card turns a press into the right value, and `onLayout` hears when a pan above the node moves it on screen. Its size is the drawn size, so a fraction of it stays a fraction; `flowBox()` keeps the laid-out size, and the motion pivot, `breakpoint`, `sizeContainer` and `publishInset` now read that, so a zoom neither shifts a pivot nor crosses a breakpoint. The new `measureFlow` modifier is `measure` for the laid-out box; a virtual list's reveal and a `DataTable`'s sticky header use it, so they scroll by the right amount under a zoom.
+  - The caret rectangle handed to the shell, which positions the hidden text field and the IME candidate window, follows the caret where it is drawn.
+  - A press beside the fields of an editing group, a drag across them, and a text selection dragged past the end of a line find the field or line nearest the pointer on screen.
+  - The mirror's box for a focused node that is scrolled out of view, and the layout inspector's highlight and heatmap, are drawn over the node where it is.
+
+  `LayoutEngine.screenBox(node, part?)` takes an optional rectangle in the node's own coordinates and answers where that part of it is drawn. `EditingHost` and `SelectionHost` take an optional `screenBox`; a host without one behaves as before. With no transform above a node, every answer is the same as before.
+
+- cc9e62b: The router writes `match` before `url`, so a subscriber to `url` that reads `match` sees the match for the url it was handed, not the previous one.
+- Updated dependencies [bf21b17]
+- Updated dependencies [3b20918]
+- Updated dependencies [e9f86a2]
+- Updated dependencies [013e064]
+- Updated dependencies [a81d551]
+- Updated dependencies [820aee8]
+- Updated dependencies [684d68a]
+  - gesso-core@0.6.0
+
 ## 0.5.1
 
 ### Patch Changes

package/dist/{index-Sff7qPGU.d.ts → index-DidpPgDT.d.ts}

@@ -1184,6 +1184,26 @@ interface OverlayEntry {
    * stays open and follows its anchor through scrolling.
    */
   readonly dismissOnOutsidePress?: boolean;
+  /**
+   * Put the backdrop underneath even when a press outside doesn't close
+   * the entry, as a modal does: everything beneath it, positioned
+   * panels with a zIndex included, is drawn under the backdrop and takes
+   * no press or wheel through it, as the page under a browser's modal
+   * `<dialog>` is inert. Without it, an entry that doesn't close on an
+   * outside press has no backdrop, and a press beside it reaches the
+   * page.
+   */
+  readonly modal?: boolean;
+  /**
+   * Dim the page under the backdrop with the theme's `scrim` colour, as
+   * a browser draws `<dialog>::backdrop`. It fades in as the entry
+   * opens, or appears at once under reduced motion.
+   *
+   * On by default for a modal entry, and only there: a menu or a list
+   * of suggestions closes on a press outside it without saying the page
+   * can't be used. False keeps a modal's backdrop clear.
+   */
+  readonly scrim?: boolean;
   /** Order among open entries; later entries paint on top by default. */
   readonly zIndex?: number;
   /**
@@ -1229,7 +1249,10 @@ declare class OverlayService {
  * positioned box the layout engine places — beside its anchor, by its
  * edge offsets, or centred in the viewport — and, when the entry asks
  * for it, a full-size
- * backdrop beneath it that closes the entry on pointer down or wheel.
+ * backdrop beneath it that takes every press and wheel outside the
+ * entry, and closes the entry on them when it is dismissible. A modal
+ * entry's backdrop is dimmed with the theme's `scrim` unless it asks
+ * for none.
  * Entries without a backdrop stay open and follow their anchor when
  * the content underneath scrolls.
  *
@@ -1641,6 +1664,9 @@ type ShellRequest = {
 } | {
   type: 'openUrl';
   url: string;
+} | {
+  type: 'redirect';
+  url: string;
 } | {
   type: 'fullscreen';
   enter: boolean;
@@ -1923,6 +1949,33 @@ declare class ShellService {
   settleClipboard(id: number, copied: boolean): void;
   /** Opens a URL in the user's browser, in a new tab or window. */
   openUrl(url: string): void;
+  /**
+   * Replaces the page with `url`, leaving the application.
+   *
+   * Not the router's `navigate`, which moves between screens *inside*
+   * the app and keeps it running: this unloads the page, and whatever
+   * the app held in memory goes with it. It is for the places a page
+   * has to be handed to somebody else's server and wait to be sent
+   * back — an OAuth sign-in that goes to `/api/auth/login`, is
+   * redirected to an identity provider and returns with a session, or
+   * a sign-out at `/api/auth/logout` that clears a cookie only the
+   * server can clear. It is also where a sign-in falls back to when
+   * `openPopup` reports the popup blocked.
+   *
+   * A request rather than a call because `window.location` belongs to
+   * the main thread and a render worker cannot reach it. A relative
+   * url resolves against the page, so `/api/auth/login` means the
+   * app's own server. The shell refuses anything that is not http,
+   * https or the page's own scheme — a `javascript:` url, above all,
+   * which would run in the page rather than go anywhere — so a url
+   * built from data cannot be turned into script.
+   *
+   * Nothing comes back, and there is nothing to wait for: if the
+   * redirect happens, the code that would have read the answer is
+   * gone. Leaving the page is not cancellable from here either, so a
+   * component with unsaved work should settle it before asking.
+   */
+  redirect(url: string): void;
   /**
    * Whether the application's surface is filling the screen.
    *
@@ -1958,8 +2011,8 @@ declare class ShellService {
    * The answer is a promise, the one place in the framework where a
    * shell request has a reply, because there is nothing useful an
    * application can do with a popup it cannot see the fate of. A sign-in
-   * flow that is blocked falls back to a full-page redirect, and it can
-   * only choose that if it is told.
+   * flow that is blocked falls back to a full-page redirect — `redirect`,
+   * below — and it can only choose that if it is told.
    *
    * Two browser rules shape the contract and both were measured in
    * Chrome before this existed:
@@ -4062,7 +4115,9 @@ declare class GessoRuntime {
    * goes down from the root carrying the scroll and sticky offsets that
    * `visibleBox` adds up per node, and passes over any subtree whose
    * bounds (the hit tester's, see `subtreeBoundsFor`) are off screen.
-   * A node it passes over is one this skipped before anyway.
+   * A node it passes over is one this skipped before anyway. Below a
+   * `transform` the walk asks `screenBox` instead, which carries the
+   * box through it.
    */
   private collectSemanticsBoxes;
   /**
@@ -4814,6 +4869,16 @@ type RuntimeToShellMessage = {
 {
   type: 'openUrl';
   url: string;
+} |
+/**
+ * Replace the page with a url, leaving the app (ShellService.redirect).
+ * `url` is as the component gave it, relative or not; the shell
+ * resolves it against the page and refuses a scheme that is not
+ * http, https or the page's own.
+ */
+{
+  type: 'redirect';
+  url: string;
 } | {
   type: 'fullscreen';
   enter: boolean;
@@ -5365,6 +5430,23 @@ interface WorkerAppOptions {
    * reach. `gesso-electrobun`'s bridge is what goes here.
    */
   onOpenUrl?: (url: string) => void;
+  /**
+   * Replaces the page with a url the application asked for
+   * (`ShellService.redirect`), in place of `window.location.assign`.
+   *
+   * A page wants `location.assign`, which is the default, and it is
+   * usually right in a desktop window too: the webview navigates, the
+   * way a page would, and comes back when the server redirects it back.
+   * A host that has to do something else — reload the bundled app
+   * rather than leave it, or send a sign-in to the person's browser and
+   * wait for a deep link — handles it here.
+   *
+   * Called with the url resolved against the page, and only once the
+   * shell has admitted it: a `javascript:` url, or any scheme that is
+   * not http, https or the page's own, is refused before this is
+   * consulted, so a handler need not check again.
+   */
+  onRedirect?: (url: string) => void;
   /**
    * Offer the application's channels to an AI agent in the browser,
    * through WebMCP (default false). Each channel's view and commands
@@ -8212,4 +8294,4 @@ declare class RenderWorkerApp {
 }
 //#endregion
 export { StorageAdapter as $, UiOwnerReport as $n, Resource as $r, FontFaceDeclaration as $t, Presence as A, AudioState as An, Channel as Ar, ActionCause as At, PersistedOptions as B, ShellFileType as Bn, bind as Br, UiTreeSnapshot as Bt, FocusService as C, formatUrl as Cn, pickKeys as Cr, AppLogicEndpoint as Ct, FindService as D, AudioRequest as Dn, findUnplainPath as Dr, ShellHistoryMode as Dt, TextService as E, AudioMetadata as En, createChannelRegistry as Er, ShellHistory as Et, AudioSinkOptions as F, UiDuration as Fn, ControlledOptions as Fr, DevtoolsEvent as Ft, IndexedDbStorage as G, ShellStorageResult as Gn, EachKey as Gr, FrameMetrics as Gt, persisted as H, ShellRequest as Hn, ShowProps as Hr, RuntimeErrorSource as Ht, AudioSinkOutput as I, UiEasingChoice as In, ControlledValue as Ir, DevtoolsRequest as It, OpfsFileHandle as J, observeColorScheme as Jn, debounced as Jr, GessoRuntimeOptions as Jt, IndexedDbStorageOptions as K, ColorScheme as Kn, EachProps as Kr, FramePhaseTimings as Kt, MediaSessionLike as L, ShellFile as Ln, controlled as Lr, FrameEntry as Lt, RouterOutlet as M, AnimateOptions as Mn, Inject as Mr, ChannelErrorEntry as Mt, AudioElementLike as N, AnimationService as Nn, Input as Nr, CommandEntry as Nt, observeMediaQuery as O, AudioSample as On, requirePlainData as Or, ShellHistoryOptions as Ot, AudioSink as P, SpringOptions as Pn, Output as Pr, ConsoleEntry as Pt, MemoryStorage as Q, UiNodeReport as Qn, mutate as Qr, UiFramePhase as Qt, audioClock as R, ShellFileRequest as Rn, ThemeTokenCell as Rr, PatchEntry as Rt, writeClipboard as S, buildPath as Sn, pick as Sr, createApp as St, EditingService as T, AudioAction as Tn, ChannelRegistryHandle as Tr, WorkerAppOptions as Tt, ShellStorage as U, ShellService as Un, show as Ur, RuntimeToShellMessage as Ut, PersistedState as V, ShellRecentFile as Vn, Show as Vr, treeText as Vt, ShellStorageOptions as W, ShellStorageOp as Wn, Each as Wr, ShellToRuntimeMessage as Wt, OpfsStorageOptions as X, NodePathTarget as Xn, MutateOptions as Xr, RuntimeInput as Xt, OpfsStorage as Y, BoundStream as Yn, throttled as Yr, RendererChoice as Yt, OpfsWritable as Z, UiEnvironmentReport as Zn, Mutation as Zr, UI_FRAME_PHASES as Zt, EditingMirrorTarget as _, derive as _i, RouteOptions as _n, createComponent as _r, GessoAppOptions as _t, UiRole as a, select as ai, MediaOptions as an, formatAge as ar, storageReadValue as at, EditingProxy as b, to as bn, isComponentElement as br, WebMcpChoice as bt, UiSemanticsPatch as c, FanOut as ci, RouteMatch as cn, formatStream as cr, UndoableOptions as ct, markNow as d, ComputedCell as di, RouterService as dn, ComponentHost as dr, UndoStackOptions as dt, ResourceOptions as ei, FontFaceLike as en, UiPropOrigin as er, StorageOutcome as et, measureSpan as f, ComputedOptions as fi, RouteState as fn, OverlayLayer as fr, UndoTransaction as ft, renderRoot as g, Equality as gi, RouteGuard as gn, OverlayService as gr, GessoApp as gt, RenderWorkerApp as h, DeriveOptions as hi, RouteDefinition as hn, OverlayRect as hr, shellStorageDenied as ht, UI_SEMANTIC_STATES as i, SelectOptions as ii, FontService as in, describeStream as ir, storageReadFailure as it, PresenceProps as j, AudioStatus as jn, Define as jr, ActionEntry as jt, observeReducedMotion as k, AudioService as kn, ChannelRegistry as kr, createShellHistory as kt, UiSemanticsRecord$1 as l, FanOutOptions as li, RouterHistorySink as ln, printPropValue as lr, undoable as lt, setPerformanceMarks$1 as m, computed as mi, RouteContext as mn, OverlayPlacement as mr, performShellStorage as mt, MARK_PREFIX as n, ResourceStatus as ni, FontFamilyStatus as nn, UiSemanticsReport as nr, classifyStorageError as nt, UiSemanticState as o, FanCell as oi, MediaService as on, formatNodePath as or, UndoShortcutOptions as ot, performanceMarksEnabled as p, ReadSource as pi, OutletProps as pn, OverlayEntry as pr, ShellLocalStore as pt, OpfsDirectory as q, ColorSchemePreference as qn, each as qr, GessoRuntime as qt, UI_ROLES as r, resource as ri, FontHost as rn, UiStreamReport as rr, storageErrorMessage as rt, UiSemanticsMap$1 as s, FanKey as si, RouteAnswer as sn, formatNodeReport as sr, registerUndoShortcuts as st, EditingState$1 as t, ResourceState as ti, FontFamilyDeclaration as tn, UiPropReport as tr, StorageRead as tt, markInstant as u, fanOut as ui, RouterRoutes as un, ComponentHostResolver as ur, UndoStack as ut, SemanticsMirror as v, ServiceRegistry as vi, RouteTarget as vn, ComponentElement as vr, createSyncApp as vt, ScrollService as w, parseUrl as wn, ChannelRegistration as wr, WorkerApp as wt, EditingProxySink as x, RouteParams as xn, structurallyEqual as xr, CreateAppOptions as xt, SemanticsMirrorSink as y, route as yn, FrameworkChild as yr, GessoAppBuilder as yt, FrameService as z, ShellFileResult as zn, themeTokenCell as zr, UiTreeNode as zt };
-//# sourceMappingURL=index-Sff7qPGU.d.ts.map
+//# sourceMappingURL=index-DidpPgDT.d.ts.map

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { _ as channel, a as isChannelHostMessage, c as applyPatch, d as ChannelSpec, f as ChannelToken, g as ViewOf, h as CommandsOf, i as isChannelClientMessage, l as applyPatches, m as CommandMap, n as ChannelHostMessage, o as Patch, p as Command, r as ChannelPort, s as PatchPath, t as ChannelClientMessage, u as diffProjection, v as defineChannel, y as viewKeys } from "./ChannelProtocol-ByNoHujM.js";
 import { A as portHandle, C as MessageEndpoint, D as isHubMessage, E as WorkerHandle, F as JsonSchema, I as channelSchema, L as describeChannel, M as workerHandle, N as ChannelSchema, O as isPortErrorMessage, P as CommandSchema, S as APPLICATION_WORKER, T as PortHost, _ as serve, b as ProvidedChannel, g as ServedChannel, j as servePorts, k as isPortHandshake, v as serveChannels, w as PortHandshake, x as provide, y as ChannelSource } from "./ui-U39HjNFA.js";
 import { C as internalState, S as InternalState, _ as ReadableCell, a as ComponentType, b as isOutputTarget, c as isClassComponent, d as bounds, f as EmitArgs, g as OutputTarget, h as OutputCell, i as ComponentProps, l as ChannelReplica, m as InputCell, o as FunctionComponent, p as EmitValue, r as ComponentContext, s as Inputs, t as ClassComponent, u as BoundsCell, v as input, w as Component, x as output, y as into } from "./FunctionComponent-fYMdePtH.js";
-import { $ as StorageAdapter, $n as UiOwnerReport, $r as Resource, $t as FontFaceDeclaration, A as Presence, An as AudioState, Ar as Channel, At as ActionCause, B as PersistedOptions, Bn as ShellFileType, Br as bind, Bt as UiTreeSnapshot, C as FocusService, Cn as formatUrl, Cr as pickKeys, Ct as AppLogicEndpoint, D as FindService, Dn as AudioRequest, Dr as findUnplainPath, Dt as ShellHistoryMode, E as TextService, En as AudioMetadata, Er as createChannelRegistry, Et as ShellHistory, F as AudioSinkOptions, Fn as UiDuration, Fr as ControlledOptions, Ft as DevtoolsEvent, G as IndexedDbStorage, Gn as ShellStorageResult, Gr as EachKey, Gt as FrameMetrics, H as persisted, Hn as ShellRequest, Hr as ShowProps, Ht as RuntimeErrorSource, I as AudioSinkOutput, In as UiEasingChoice, Ir as ControlledValue, It as DevtoolsRequest, J as OpfsFileHandle, Jn as observeColorScheme, Jr as debounced, Jt as GessoRuntimeOptions, K as IndexedDbStorageOptions, Kn as ColorScheme, Kr as EachProps, Kt as FramePhaseTimings, L as MediaSessionLike, Ln as ShellFile, Lr as controlled, Lt as FrameEntry, M as RouterOutlet, Mn as AnimateOptions, Mr as Inject, Mt as ChannelErrorEntry, N as AudioElementLike, Nn as AnimationService, Nr as Input, Nt as CommandEntry, O as observeMediaQuery, On as AudioSample, Or as requirePlainData, Ot as ShellHistoryOptions, P as AudioSink, Pn as SpringOptions, Pr as Output, Pt as ConsoleEntry, Q as MemoryStorage, Qn as UiNodeReport, Qr as mutate, Qt as UiFramePhase, R as audioClock, Rn as ShellFileRequest, Rr as ThemeTokenCell, Rt as PatchEntry, S as writeClipboard, Sn as buildPath, Sr as pick, St as createApp, T as EditingService, Tn as AudioAction, Tr as ChannelRegistryHandle, Tt as WorkerAppOptions, U as ShellStorage, Un as ShellService, Ur as show, Ut as RuntimeToShellMessage, V as PersistedState, Vn as ShellRecentFile, Vr as Show, Vt as treeText, W as ShellStorageOptions, Wn as ShellStorageOp, Wr as Each, Wt as ShellToRuntimeMessage, X as OpfsStorageOptions, Xn as NodePathTarget, Xr as MutateOptions, Xt as RuntimeInput, Y as OpfsStorage, Yn as BoundStream, Yr as throttled, Yt as RendererChoice, Z as OpfsWritable, Zn as UiEnvironmentReport, Zr as Mutation, Zt as UI_FRAME_PHASES, _ as EditingMirrorTarget, _i as derive, _n as RouteOptions, _r as createComponent, _t as GessoAppOptions, a as UiRole, ai as select, an as MediaOptions, ar as formatAge, at as storageReadValue, b as EditingProxy, bn as to, br as isComponentElement, bt as WebMcpChoice, c as UiSemanticsPatch, ci as FanOut, cn as RouteMatch, cr as formatStream, ct as UndoableOptions, d as markNow, di as ComputedCell, dn as RouterService, dr as ComponentHost, dt as UndoStackOptions, ei as ResourceOptions, en as FontFaceLike, er as UiPropOrigin, et as StorageOutcome, f as measureSpan, fi as ComputedOptions, fn as RouteState, fr as OverlayLayer, ft as UndoTransaction, g as renderRoot, gi as Equality, gn as RouteGuard, gr as OverlayService, gt as GessoApp, h as RenderWorkerApp, hi as DeriveOptions, hn as RouteDefinition, hr as OverlayRect, ht as shellStorageDenied, i as UI_SEMANTIC_STATES, ii as SelectOptions, in as FontService, ir as describeStream, it as storageReadFailure, j as PresenceProps, jn as AudioStatus, jr as Define, jt as ActionEntry, k as observeReducedMotion, kn as AudioService, kr as ChannelRegistry, kt as createShellHistory, l as UiSemanticsRecord, li as FanOutOptions, ln as RouterHistorySink, lr as printPropValue, lt as undoable, m as setPerformanceMarks, mi as computed, mn as RouteContext, mr as OverlayPlacement, mt as performShellStorage, n as MARK_PREFIX, ni as ResourceStatus, nn as FontFamilyStatus, nr as UiSemanticsReport, nt as classifyStorageError, o as UiSemanticState, oi as FanCell, on as MediaService, or as formatNodePath, ot as UndoShortcutOptions, p as performanceMarksEnabled, pi as ReadSource, pn as OutletProps, pr as OverlayEntry, pt as ShellLocalStore, q as OpfsDirectory, qn as ColorSchemePreference, qr as each, qt as GessoRuntime, r as UI_ROLES, ri as resource, rn as FontHost, rr as UiStreamReport, rt as storageErrorMessage, s as UiSemanticsMap, si as FanKey, sn as RouteAnswer, sr as formatNodeReport, st as registerUndoShortcuts, t as EditingState, ti as ResourceState, tn as FontFamilyDeclaration, tr as UiPropReport, tt as StorageRead, u as markInstant, ui as fanOut, un as RouterRoutes, ur as ComponentHostResolver, ut as UndoStack, v as SemanticsMirror, vi as ServiceRegistry, vn as RouteTarget, vr as ComponentElement, vt as createSyncApp, w as ScrollService, wn as parseUrl, wr as ChannelRegistration, wt as WorkerApp, x as EditingProxySink, xn as RouteParams, xr as structurallyEqual, xt as CreateAppOptions, y as SemanticsMirrorSink, yn as route, yr as FrameworkChild, yt as GessoAppBuilder, z as FrameService, zn as ShellFileResult, zr as themeTokenCell, zt as UiTreeNode } from "./index-Sff7qPGU.js";
+import { $ as StorageAdapter, $n as UiOwnerReport, $r as Resource, $t as FontFaceDeclaration, A as Presence, An as AudioState, Ar as Channel, At as ActionCause, B as PersistedOptions, Bn as ShellFileType, Br as bind, Bt as UiTreeSnapshot, C as FocusService, Cn as formatUrl, Cr as pickKeys, Ct as AppLogicEndpoint, D as FindService, Dn as AudioRequest, Dr as findUnplainPath, Dt as ShellHistoryMode, E as TextService, En as AudioMetadata, Er as createChannelRegistry, Et as ShellHistory, F as AudioSinkOptions, Fn as UiDuration, Fr as ControlledOptions, Ft as DevtoolsEvent, G as IndexedDbStorage, Gn as ShellStorageResult, Gr as EachKey, Gt as FrameMetrics, H as persisted, Hn as ShellRequest, Hr as ShowProps, Ht as RuntimeErrorSource, I as AudioSinkOutput, In as UiEasingChoice, Ir as ControlledValue, It as DevtoolsRequest, J as OpfsFileHandle, Jn as observeColorScheme, Jr as debounced, Jt as GessoRuntimeOptions, K as IndexedDbStorageOptions, Kn as ColorScheme, Kr as EachProps, Kt as FramePhaseTimings, L as MediaSessionLike, Ln as ShellFile, Lr as controlled, Lt as FrameEntry, M as RouterOutlet, Mn as AnimateOptions, Mr as Inject, Mt as ChannelErrorEntry, N as AudioElementLike, Nn as AnimationService, Nr as Input, Nt as CommandEntry, O as observeMediaQuery, On as AudioSample, Or as requirePlainData, Ot as ShellHistoryOptions, P as AudioSink, Pn as SpringOptions, Pr as Output, Pt as ConsoleEntry, Q as MemoryStorage, Qn as UiNodeReport, Qr as mutate, Qt as UiFramePhase, R as audioClock, Rn as ShellFileRequest, Rr as ThemeTokenCell, Rt as PatchEntry, S as writeClipboard, Sn as buildPath, Sr as pick, St as createApp, T as EditingService, Tn as AudioAction, Tr as ChannelRegistryHandle, Tt as WorkerAppOptions, U as ShellStorage, Un as ShellService, Ur as show, Ut as RuntimeToShellMessage, V as PersistedState, Vn as ShellRecentFile, Vr as Show, Vt as treeText, W as ShellStorageOptions, Wn as ShellStorageOp, Wr as Each, Wt as ShellToRuntimeMessage, X as OpfsStorageOptions, Xn as NodePathTarget, Xr as MutateOptions, Xt as RuntimeInput, Y as OpfsStorage, Yn as BoundStream, Yr as throttled, Yt as RendererChoice, Z as OpfsWritable, Zn as UiEnvironmentReport, Zr as Mutation, Zt as UI_FRAME_PHASES, _ as EditingMirrorTarget, _i as derive, _n as RouteOptions, _r as createComponent, _t as GessoAppOptions, a as UiRole, ai as select, an as MediaOptions, ar as formatAge, at as storageReadValue, b as EditingProxy, bn as to, br as isComponentElement, bt as WebMcpChoice, c as UiSemanticsPatch, ci as FanOut, cn as RouteMatch, cr as formatStream, ct as UndoableOptions, d as markNow, di as ComputedCell, dn as RouterService, dr as ComponentHost, dt as UndoStackOptions, ei as ResourceOptions, en as FontFaceLike, er as UiPropOrigin, et as StorageOutcome, f as measureSpan, fi as ComputedOptions, fn as RouteState, fr as OverlayLayer, ft as UndoTransaction, g as renderRoot, gi as Equality, gn as RouteGuard, gr as OverlayService, gt as GessoApp, h as RenderWorkerApp, hi as DeriveOptions, hn as RouteDefinition, hr as OverlayRect, ht as shellStorageDenied, i as UI_SEMANTIC_STATES, ii as SelectOptions, in as FontService, ir as describeStream, it as storageReadFailure, j as PresenceProps, jn as AudioStatus, jr as Define, jt as ActionEntry, k as observeReducedMotion, kn as AudioService, kr as ChannelRegistry, kt as createShellHistory, l as UiSemanticsRecord, li as FanOutOptions, ln as RouterHistorySink, lr as printPropValue, lt as undoable, m as setPerformanceMarks, mi as computed, mn as RouteContext, mr as OverlayPlacement, mt as performShellStorage, n as MARK_PREFIX, ni as ResourceStatus, nn as FontFamilyStatus, nr as UiSemanticsReport, nt as classifyStorageError, o as UiSemanticState, oi as FanCell, on as MediaService, or as formatNodePath, ot as UndoShortcutOptions, p as performanceMarksEnabled, pi as ReadSource, pn as OutletProps, pr as OverlayEntry, pt as ShellLocalStore, q as OpfsDirectory, qn as ColorSchemePreference, qr as each, qt as GessoRuntime, r as UI_ROLES, ri as resource, rn as FontHost, rr as UiStreamReport, rt as storageErrorMessage, s as UiSemanticsMap, si as FanKey, sn as RouteAnswer, sr as formatNodeReport, st as registerUndoShortcuts, t as EditingState, ti as ResourceState, tn as FontFamilyDeclaration, tr as UiPropReport, tt as StorageRead, u as markInstant, ui as fanOut, un as RouterRoutes, ur as ComponentHostResolver, ut as UndoStack, v as SemanticsMirror, vi as ServiceRegistry, vn as RouteTarget, vr as ComponentElement, vt as createSyncApp, w as ScrollService, wn as parseUrl, wr as ChannelRegistration, wt as WorkerApp, x as EditingProxySink, xn as RouteParams, xr as structurallyEqual, xt as CreateAppOptions, y as SemanticsMirrorSink, yn as route, yr as FrameworkChild, yt as GessoAppBuilder, z as FrameService, zn as ShellFileResult, zr as themeTokenCell, zt as UiTreeNode } from "./index-DidpPgDT.js";
 export { APPLICATION_WORKER, type ActionCause, type ActionEntry, type AnimateOptions, AnimationService, type AppLogicEndpoint, type AudioAction, type AudioElementLike, type AudioMetadata, type AudioRequest, type AudioSample, AudioService, AudioSink, type AudioSinkOptions, type AudioSinkOutput, type AudioState, type AudioStatus, type BoundStream, BoundsCell, Channel, type ChannelClientMessage, type ChannelErrorEntry, type ChannelHostMessage, type ChannelPort, type ChannelRegistration, ChannelRegistry, type ChannelRegistryHandle, ChannelReplica, type ChannelSchema, type ChannelSource, type ChannelSpec, type ChannelToken, type ClassComponent, type ColorScheme, type ColorSchemePreference, type Command, type CommandEntry, type CommandMap, type CommandSchema, type CommandsOf, Component, type ComponentContext, type ComponentElement, ComponentHost, ComponentHostResolver, type ComponentProps, type ComponentType, ComputedCell, type ComputedOptions, type ConsoleEntry, type ControlledOptions, type ControlledValue, type CreateAppOptions, Define, type DeriveOptions, type DevtoolsEvent, type DevtoolsRequest, Each, type EachKey, type EachProps, type EditingMirrorTarget, EditingProxy, type EditingProxySink, EditingService, type EditingState, type EmitArgs, type EmitValue, type Equality, FanCell, type FanKey, FanOut, type FanOutOptions, FindService, FocusService, type FontFaceDeclaration, type FontFaceLike, type FontFamilyDeclaration, type FontFamilyStatus, type FontHost, FontService, type FrameEntry, type FrameMetrics, type FramePhaseTimings, FrameService, type FrameworkChild, type FunctionComponent, GessoApp, GessoAppBuilder, type GessoAppOptions, GessoRuntime, type GessoRuntimeOptions, IndexedDbStorage, type IndexedDbStorageOptions, Inject, Input, InputCell, type Inputs, InternalState, type JsonSchema, MARK_PREFIX, type MediaOptions, MediaService, type MediaSessionLike, MemoryStorage, type MessageEndpoint, type MutateOptions, type Mutation, type NodePathTarget, type OpfsDirectory, type OpfsFileHandle, OpfsStorage, type OpfsStorageOptions, type OpfsWritable, type OutletProps, Output, type OutputCell, type OutputTarget, type OverlayEntry, OverlayLayer, type OverlayPlacement, type OverlayRect, OverlayService, type Patch, type PatchEntry, type PatchPath, type PersistedOptions, PersistedState, type PortHandshake, type PortHost, Presence, type PresenceProps, ProvidedChannel, type ReadSource, type ReadableCell, RenderWorkerApp, type RendererChoice, Resource, type ResourceOptions, type ResourceState, type ResourceStatus, type RouteAnswer, type RouteContext, type RouteDefinition, type RouteGuard, type RouteMatch, type RouteOptions, type RouteParams, RouteState, type RouteTarget, type RouterHistorySink, RouterOutlet, type RouterRoutes, RouterService, type RuntimeErrorSource, type RuntimeInput, type RuntimeToShellMessage, ScrollService, type SelectOptions, SemanticsMirror, type SemanticsMirrorSink, type ServedChannel, ServiceRegistry, type ShellFile, type ShellFileRequest, type ShellFileResult, type ShellFileType, type ShellHistory, type ShellHistoryMode, type ShellHistoryOptions, type ShellLocalStore, type ShellRecentFile, type ShellRequest, ShellService, ShellStorage, type ShellStorageOp, type ShellStorageOptions, type ShellStorageResult, type ShellToRuntimeMessage, Show, type ShowProps, type SpringOptions, type StorageAdapter, type StorageOutcome, type StorageRead, TextService, ThemeTokenCell, UI_FRAME_PHASES, UI_ROLES, UI_SEMANTIC_STATES, type UiDuration, type UiEasingChoice, type UiEnvironmentReport, type UiFramePhase, type UiNodeReport, type UiOwnerReport, type UiPropOrigin, type UiPropReport, type UiRole, type UiSemanticState, type UiSemanticsMap, type UiSemanticsPatch, type UiSemanticsRecord, type UiSemanticsReport, type UiStreamReport, type UiTreeNode, type UiTreeSnapshot, type UndoShortcutOptions, UndoStack, type UndoStackOptions, type UndoTransaction, type UndoableOptions, type ViewOf, type WebMcpChoice, WorkerApp, type WorkerAppOptions, type WorkerHandle, applyPatch, applyPatches, audioClock, bind, bounds, buildPath, channel, channelSchema, classifyStorageError, computed, controlled, createApp, createChannelRegistry, createComponent, createShellHistory, createSyncApp, debounced, defineChannel, derive, describeChannel, describeStream, diffProjection, each, fanOut, findUnplainPath, formatAge, formatNodePath, formatNodeReport, formatStream, formatUrl, input, internalState, into, isChannelClientMessage, isChannelHostMessage, isClassComponent, isComponentElement, isHubMessage, isOutputTarget, isPortErrorMessage, isPortHandshake, markInstant, markNow, measureSpan, mutate, observeColorScheme, observeMediaQuery, observeReducedMotion, output, parseUrl, performShellStorage, performanceMarksEnabled, persisted, pick, pickKeys, portHandle, printPropValue, provide, registerUndoShortcuts, renderRoot, requirePlainData, resource, route, select, serve, serveChannels, servePorts, setPerformanceMarks, shellStorageDenied, show, storageErrorMessage, storageReadFailure, storageReadValue, structurallyEqual, themeTokenCell, throttled, to, treeText, undoable, viewKeys, workerHandle, writeClipboard };

package/dist/index.js

@@ -3,7 +3,7 @@ import { a as Each, i as show, n as getComponentMetadata, o as each, r as Show,
 import { c as channelSchema, l as describeChannel, t as AGENT_PORT } from "./remote-xxij8zXe.js";
 import { n as serveApplicationAgent } from "./app-BvlIO1G9.js";
 import { BehaviorSubject, EMPTY, Observable, Subject, Subscription, distinctUntilChanged, map } from "rxjs";
-import { AnimationDriver, Box, Canvas2DRenderer, CanvasPlatformSurface, CanvasTextMeasurer, Constraints, DefaultImageResolver, DefaultVideoResolver, DirtyFlags, EnvironmentNotifier, FocusNotifier, IconRasterizer, LayoutEngine, LayoutInspector, LayoutNotifier, MARK_PREFIX, Stack, TEXT_RUN_ID_SEPARATOR, UI_ROLES, UI_SEMANTIC_STATES, UiAnimationFrameClock, UiEditingController, UiEnvironmentKeys, UiEventType, UiFindController, UiFocusManager, UiGestureRecognizer, UiGraph, UiGraphBuilder, UiHitTester, UiHostFrameClock, UiInputDispatcher, UiInsetRegistry, UiKeyboardController, UiNodeType, UiPlatformAdapter, UiPointerController, UiPointerEvent, UiScheduler, UiSelectionController, UiSharedElements, UiSpring, UiTimerFrameClock, UiTouchScroller, UiVirtualSheet, UiVirtualWindow, UiWheelController, VIRTUAL_INDEX_PROP, VIRTUAL_LEAD_PROP, VIRTUAL_SHEET_PROP, VIRTUAL_WINDOW_PROP, WebGPURenderer, buildSemanticsSubtree, buildSemanticsTree, bumpFontStack, capturePointer, createCanvasSurface, createTween, createWebGPUSurface, defaultMotion, defineModifier, describeOverrides, diffSemantics, dragSessionFor, dropIndexShifts, easings, formatExplanation, insetsEqual, isComponentLikeElement, isObservable, isWebGPUAvailable, linear, linkOf, markInstant, markNow, measure, measureSpan, motion, noInsets, observeViewportInsets, percent, performanceMarksEnabled, pointerDeviceOf, prepareInputSurface, propertyEffects, recordsEqual, registerFontStack, resolveCursor, rewalkSemantics, scrollRange, scrollbarThumb, semanticsInertAbove, semanticsMemory, setPerformanceMarks, setPerformanceMarks as setPerformanceMarks$1, textRunOfRecordId, themeTokens, touchActionFor, wheelDeltaYOf } from "gesso-core";
+import { AnimationDriver, Box, Canvas2DRenderer, CanvasPlatformSurface, CanvasTextMeasurer, Constraints, DefaultImageResolver, DefaultVideoResolver, DirtyFlags, EnvironmentNotifier, FocusNotifier, IconRasterizer, LayoutEngine, LayoutInspector, LayoutNotifier, MARK_PREFIX, Stack, TEXT_RUN_ID_SEPARATOR, UI_ROLES, UI_SEMANTIC_STATES, UiAnimationFrameClock, UiEditingController, UiEnvironmentKeys, UiEventType, UiFindController, UiFocusManager, UiGestureRecognizer, UiGraph, UiGraphBuilder, UiHitTester, UiHostFrameClock, UiInputDispatcher, UiInsetRegistry, UiKeyboardController, UiNodeType, UiPlatformAdapter, UiPointerController, UiPointerEvent, UiScheduler, UiSelectionController, UiSharedElements, UiSpring, UiTimerFrameClock, UiTouchScroller, UiVirtualSheet, UiVirtualWindow, UiWheelController, VIRTUAL_INDEX_PROP, VIRTUAL_LEAD_PROP, VIRTUAL_SHEET_PROP, VIRTUAL_WINDOW_PROP, WebGPURenderer, buildSemanticsSubtree, buildSemanticsTree, bumpFontStack, capturePointer, createCanvasSurface, createTween, createWebGPUSurface, defaultMotion, defineModifier, describeOverrides, diffSemantics, dragSessionFor, dropIndexShifts, easings, fade, formatExplanation, insetsEqual, isComponentLikeElement, isObservable, isWebGPUAvailable, linear, linkOf, markInstant, markNow, measure, measureSpan, motion, noInsets, observeViewportInsets, percent, performanceMarksEnabled, pointerDeviceOf, prepareInputSurface, propertyEffects, recordsEqual, registerFontStack, resolveCursor, rewalkSemantics, scrollRange, scrollbarThumb, semanticsInertAbove, semanticsMemory, setPerformanceMarks, setPerformanceMarks as setPerformanceMarks$1, textRunOfRecordId, themeTokens, touchActionFor, wheelDeltaYOf } from "gesso-core";
 //#region src/Component.ts
 /**
 * Base class for all Gesso framework components.
@@ -587,15 +587,28 @@ var ChannelReplica = class {
 	get send() {
 		return this.commandProxy;
 	}
-	viewProxy = new Proxy({}, { get: (_target, property) => {
-		if (typeof property !== "string") return;
-		const cell = this.cells.get(property);
-		if (cell === void 0) {
-			const names = [...this.cells.keys()].sort().join(", ");
-			throw new Error(`'${property}' is not a view key on channel '${this.token.name}'. Declared keys: ${names.length > 0 ? names : "(none)"}.`);
+	viewProxy = new Proxy({}, {
+		get: (_target, property) => {
+			if (typeof property !== "string") return;
+			const cell = this.cells.get(property);
+			if (cell === void 0) {
+				const names = [...this.cells.keys()].sort().join(", ");
+				throw new Error(`'${property}' is not a view key on channel '${this.token.name}'. Declared keys: ${names.length > 0 ? names : "(none)"}.`);
+			}
+			return cell;
+		},
+		has: (_target, property) => typeof property === "string" && this.cells.has(property),
+		ownKeys: () => [...this.cells.keys()],
+		getOwnPropertyDescriptor: (_target, property) => {
+			const cell = typeof property === "string" ? this.cells.get(property) : void 0;
+			return cell === void 0 ? void 0 : {
+				value: cell,
+				enumerable: true,
+				configurable: true,
+				writable: false
+			};
 		}
-		return cell;
-	} });
+	});
 	createCommandProxy() {
 		return new Proxy({}, { get: (_target, property) => {
 			if (typeof property !== "string") return;
@@ -841,14 +854,22 @@ let OverlayLayer = class OverlayLayer extends Component {
 	renderEntries(entries) {
 		const elements = [];
 		for (const entry of entries) {
-			if (entry.dismissOnOutsidePress) elements.push(Box({
-				key: `${entry.id}\0backdrop`,
-				position: "absolute",
-				inset: 0,
-				zIndex: entry.zIndex,
-				onPointerDown: () => this.overlays.close(entry.id),
-				onWheel: () => this.overlays.close(entry.id)
-			}));
+			if (entry.dismissOnOutsidePress === true || entry.modal === true) {
+				const dismiss = entry.dismissOnOutsidePress === true;
+				const environment = entry.environment ?? entry.anchor ?? null;
+				elements.push(Box({
+					key: `${entry.id}\0backdrop`,
+					position: "absolute",
+					inset: 0,
+					zIndex: entry.zIndex,
+					...inheritedFrom(environment),
+					modifiers: followEnvironment(environment),
+					...dismiss ? {
+						onPointerDown: () => this.overlays.close(entry.id),
+						onWheel: () => this.overlays.close(entry.id)
+					} : {}
+				}, ...entry.scrim ?? entry.modal === true ? [scrim()] : []));
+			}
 			elements.push(Box({
 				key: entry.id,
 				position: "absolute",
@@ -873,6 +894,28 @@ let OverlayLayer = class OverlayLayer extends Component {
 __decorate([Inject(OverlayService)], OverlayLayer.prototype, "overlays", void 0);
 OverlayLayer = __decorate([Define("gesso-overlay-layer")], OverlayLayer);
 /**
+* The dim over the page, inside the backdrop rather than on it.
+*
+* A node at opacity 0 takes no presses, so a backdrop fading in would
+* let a press through to the page on the frame it opens. The fade is
+* this child's; the backdrop under it is solid to input from the start,
+* and the child takes none of its own. It comes in at the pace a
+* `Dialog` does, and under reduced motion it is simply there.
+*/
+function scrim() {
+	return Box({
+		position: "absolute",
+		inset: 0,
+		hitTestable: false,
+		backgroundColor: "scrim",
+		modifiers: [motion({
+			initial: fade,
+			duration: "slow",
+			easing: "decelerate"
+		})]
+	});
+}
+/**
 * `center` as the layout engine takes it.
 *
 * Both edges of the axis are pinned, which stretches the entry's box
@@ -915,6 +958,7 @@ function inheritedFrom(node) {
 	return {
 		theme: environment.get(UiEnvironmentKeys.theme),
 		textStyle: environment.get(UiEnvironmentKeys.textStyle),
+		color: environment.get(UiEnvironmentKeys.color),
 		contentColor: environment.get(UiEnvironmentKeys.contentColor)
 	};
 }
@@ -933,6 +977,7 @@ const followEnvironmentKind = defineModifier({
 		host.onEnvironment(() => {
 			host.set("theme", host.environment(UiEnvironmentKeys.theme, from));
 			host.set("textStyle", host.environment(UiEnvironmentKeys.textStyle, from));
+			host.set("color", host.environment(UiEnvironmentKeys.color, from));
 			host.set("contentColor", host.environment(UiEnvironmentKeys.contentColor, from));
 		}, from);
 	}
@@ -1904,6 +1949,38 @@ var ShellService = class {
 		});
 	}
 	/**
+	* Replaces the page with `url`, leaving the application.
+	*
+	* Not the router's `navigate`, which moves between screens *inside*
+	* the app and keeps it running: this unloads the page, and whatever
+	* the app held in memory goes with it. It is for the places a page
+	* has to be handed to somebody else's server and wait to be sent
+	* back — an OAuth sign-in that goes to `/api/auth/login`, is
+	* redirected to an identity provider and returns with a session, or
+	* a sign-out at `/api/auth/logout` that clears a cookie only the
+	* server can clear. It is also where a sign-in falls back to when
+	* `openPopup` reports the popup blocked.
+	*
+	* A request rather than a call because `window.location` belongs to
+	* the main thread and a render worker cannot reach it. A relative
+	* url resolves against the page, so `/api/auth/login` means the
+	* app's own server. The shell refuses anything that is not http,
+	* https or the page's own scheme — a `javascript:` url, above all,
+	* which would run in the page rather than go anywhere — so a url
+	* built from data cannot be turned into script.
+	*
+	* Nothing comes back, and there is nothing to wait for: if the
+	* redirect happens, the code that would have read the answer is
+	* gone. Leaving the page is not cancellable from here either, so a
+	* component with unsaved work should settle it before asking.
+	*/
+	redirect(url) {
+		this.handler?.({
+			type: "redirect",
+			url
+		});
+	}
+	/**
 	* Whether the application's surface is filling the screen.
 	*
 	* Read rather than assumed: the person can leave fullscreen with
@@ -1945,8 +2022,8 @@ var ShellService = class {
 	* The answer is a promise, the one place in the framework where a
 	* shell request has a reply, because there is nothing useful an
 	* application can do with a popup it cannot see the fate of. A sign-in
-	* flow that is blocked falls back to a full-page redirect, and it can
-	* only choose that if it is told.
+	* flow that is blocked falls back to a full-page redirect — `redirect`,
+	* below — and it can only choose that if it is told.
 	*
 	* Two browser rules shape the contract and both were measured in
 	* Chrome before this existed:
@@ -2483,6 +2560,89 @@ function browserFilesHost(view) {
 	};
 }
 //#endregion
+//#region src/app/shellRedirect.ts
+/**
+* The shell's half of `ShellService.redirect`: the page is replaced
+* with a url a component asked for.
+*
+* Both hosts answer the request — `WorkerApp` when it arrives as a
+* message, `GessoApp` when the runtime hands it over on the same
+* thread — and both go through here, so the one rule that matters is
+* written once.
+*
+* That rule is the scheme. `location.assign('javascript:…')` does not
+* go anywhere; it runs the script in the page, with everything the
+* page can reach. A component builds the url it redirects to, often
+* from data — a `returnTo` from the address bar, a link from the
+* server — and a shell that assigned whatever it was given would make
+* every such url a way to run script. So a url is resolved against
+* the page first, the way the browser would resolve it, and only an
+* http or https result, or one in the page's own scheme, is followed.
+* The page's own scheme is there for a page that is not served over
+* http at all — an Electrobun window loads from `views://` — where a
+* relative url resolves to that scheme and is no less the app's own.
+*/
+/** Schemes a redirect may always go to, whatever the page was served from. */
+const WEB_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:"]);
+/**
+* Schemes refused even when the page itself has one of them.
+*
+* A page served from `data:` or `blob:` is unusual but real — a
+* preview, a sandboxed frame — and "the page's own scheme" must not
+* then admit a `data:` url built from data, which is script by
+* another name.
+*/
+const REFUSED_SCHEMES = /* @__PURE__ */ new Set([
+	"javascript:",
+	"data:",
+	"blob:",
+	"about:"
+]);
+/**
+* The absolute url `url` names, resolved against `base` (the page's
+* address), or null when it is not one a redirect may follow.
+*
+* Null as well for a url that does not parse, or a base that does
+* not: a redirect nobody can resolve is refused rather than guessed.
+*/
+function redirectTarget(url, base) {
+	let page;
+	let target;
+	try {
+		page = new URL(base);
+		target = new URL(url, page);
+	} catch {
+		return null;
+	}
+	if (WEB_SCHEMES.has(target.protocol)) return target.href;
+	if (target.protocol === page.protocol && !REFUSED_SCHEMES.has(target.protocol)) return target.href;
+	return null;
+}
+/**
+* Follows a redirect, or refuses it, and says which.
+*
+* The url is checked before the handler is called as well as before
+* the default: a desktop host's `onRedirect` navigates a webview, and
+* a `javascript:` url is no safer there. The handler is given the
+* resolved, absolute url, so it never has to know what page the
+* request came from.
+*
+* A refusal is a warning on the console and nothing else. There is no
+* one to report it to — the request carries no answer — and throwing
+* on the main thread would take down a message handler over a url
+* that was simply ignored.
+*/
+function redirectWith(handler, url, location) {
+	const target = redirectTarget(url, location.href);
+	if (target === null) {
+		console.warn(`[gesso] ShellService.redirect refused ${JSON.stringify(url)}: only an http, https or relative url can replace the page.`);
+		return false;
+	}
+	if (handler !== void 0) handler(target);
+	else location.assign(target);
+	return true;
+}
+//#endregion
 //#region src/app/EditingProxy.ts
 /** Composition-owned input types: the composition events carry these. */
 const COMPOSITION_INPUT_TYPES = /* @__PURE__ */ new Set([
@@ -4388,6 +4548,10 @@ var WorkerApp = class {
 			openUrlWith(this.options.onOpenUrl, message.url);
 			return;
 		}
+		if (message.type === "redirect") {
+			redirectWith(this.options.onRedirect, message.url, window.location);
+			return;
+		}
 		if (message.type === "fullscreen") {
 			if (this.canvas !== void 0) setElementFullscreen(this.canvas, message.enter);
 			return;
@@ -5580,8 +5744,8 @@ var RouterService = class {
 		const settled = match?.url ?? normalize$1(url);
 		if (options.replace === true) this.history?.replace(settled);
 		else if (options.push) this.history?.push(settled);
-		this.url.value = settled;
 		this.match.value = match;
+		this.url.value = settled;
 	}
 	/** First declared route whose pattern describes this url wins. */
 	resolve(url) {
@@ -7023,7 +7187,7 @@ var GessoRuntime = class {
 				onChange: (node, listener) => this.environmentNotifier.add(node, listener)
 			},
 			layout: {
-				box: (node) => this.engine.recordFor(node) === void 0 ? null : this.engine.visibleBox(node),
+				box: (node) => this.engine.recordFor(node) === void 0 ? null : this.engine.screenBox(node),
 				flowBox: (node) => this.engine.recordFor(node) === void 0 ? null : this.engine.worldBox(node),
 				scroll: (node) => {
 					const record = this.engine.recordFor(node);
@@ -8101,6 +8265,7 @@ var GessoRuntime = class {
 		const editing = new UiEditingController({
 			recordFor: (node) => this.engine.recordFor(node),
 			visibleBox: (node) => this.engine.visibleBox(node),
+			screenBox: (node, part) => this.engine.screenBox(node, part),
 			toLocal: (node, x, y) => hitTester.toLocal(node, x, y),
 			measurer: this.textMeasurer,
 			markDirty: (node, flags) => this.graph.markDirty(node, flags),
@@ -8110,6 +8275,7 @@ var GessoRuntime = class {
 		const selection = new UiSelectionController({
 			recordFor: (node) => this.engine.recordFor(node),
 			visibleBox: (node) => this.engine.visibleBox(node),
+			screenBox: (node) => this.engine.screenBox(node),
 			measurer: this.textMeasurer,
 			markDirty: (node, flags) => this.graph.markDirty(node, flags),
 			root: () => this.layoutRoot(),
@@ -8158,7 +8324,7 @@ var GessoRuntime = class {
 				selection,
 				find,
 				activation: { clickAt: (node) => {
-					const box = this.engine.visibleBox(node);
+					const box = this.engine.screenBox(node);
 					return {
 						x: box.x + box.width / 2,
 						y: box.y + box.height / 2
@@ -8300,7 +8466,7 @@ var GessoRuntime = class {
 			return;
 		}
 		this.focusManager.focus(node);
-		const box = this.engine.visibleBox(node);
+		const box = this.engine.screenBox(node);
 		this.dispatcher.dispatch(new UiPointerEvent(UiEventType.Click, box.x + box.width / 2, box.y + box.height / 2, 1), node);
 	}
 	/**
@@ -8673,7 +8839,9 @@ var GessoRuntime = class {
 	* goes down from the root carrying the scroll and sticky offsets that
 	* `visibleBox` adds up per node, and passes over any subtree whose
 	* bounds (the hit tester's, see `subtreeBoundsFor`) are off screen.
-	* A node it passes over is one this skipped before anyway.
+	* A node it passes over is one this skipped before anyway. Below a
+	* `transform` the walk asks `screenBox` instead, which carries the
+	* box through it.
 	*/
 	collectSemanticsBoxes() {
 		const changed = [];
@@ -8694,14 +8862,25 @@ var GessoRuntime = class {
 			const stack = [[
 				root,
 				0,
-				0
+				0,
+				false
 			]];
 			while (stack.length > 0) {
-				const [node, dx, dy] = stack.pop();
+				const [node, dx, dy, inherited] = stack.pop();
 				const rec = this.engine.recordFor(node);
 				let childX = dx;
 				let childY = dy;
-				if (rec !== void 0) {
+				const own = node.properties.get("transform");
+				const transformed = inherited || typeof own === "object" && own !== null;
+				if (rec !== void 0 && inherited) {
+					if (this.semantics.has(node.id)) {
+						const box = this.engine.screenBox(node);
+						if (node === focused) {
+							focusedSeen = true;
+							offer(node.id, box);
+						} else if (this.onScreen(box)) offer(node.id, box);
+					}
+				} else if (rec !== void 0) {
 					const x = dx + rec.stickyOffsetX;
 					const y = dy + rec.stickyOffsetY;
 					if (!rec.boundsUnbounded && node !== focused && !this.onScreen({
@@ -8728,12 +8907,13 @@ var GessoRuntime = class {
 				for (let child = node.lastChild; child !== null; child = child.previousSibling) stack.push([
 					child,
 					childX,
-					childY
+					childY,
+					transformed
 				]);
 			}
 		}
 		if (focused !== null && focused !== void 0 && !focusedSeen && this.semantics.has(focused.id)) {
-			if (this.engine.recordFor(focused) !== void 0) offer(focused.id, this.engine.visibleBox(focused));
+			if (this.engine.recordFor(focused) !== void 0) offer(focused.id, this.engine.screenBox(focused));
 		}
 		if (this.semanticsBoxes.size > this.semantics.size) {
 			for (const id of this.semanticsBoxes.keys()) if (!this.semantics.has(id)) this.semanticsBoxes.delete(id);
@@ -8999,7 +9179,7 @@ var GessoRuntime = class {
 		const read = (node) => {
 			const record = this.engine.recordFor(node);
 			return {
-				box: this.engine.visibleBox(node),
+				box: this.engine.screenBox(node),
 				scrollX: record?.scrollX ?? 0,
 				scrollY: record?.scrollY ?? 0
 			};
@@ -9845,6 +10025,10 @@ var GessoApp = class {
 			this.runtime.settlePopup(request.id, opened);
 			return;
 		}
+		if (request.type === "redirect") {
+			if (view !== null) redirectWith(void 0, request.url, view.location);
+			return;
+		}
 		view?.open(request.url, "_blank", "noopener,noreferrer");
 	}
 	observeResize() {
@@ -11153,6 +11337,10 @@ var RenderWorkerApp = class {
 				type: "openUrl",
 				url: request.url
 			});
+			else if (request.type === "redirect") this.host.postMessage({
+				type: "redirect",
+				url: request.url
+			});
 			else if (request.type === "fullscreen") this.host.postMessage({
 				type: "fullscreen",
 				enter: request.enter