libaribhtml5 0.1.0 → 0.1.1

package/dist/types/broadcast-document.d.ts

@@ -6,6 +6,14 @@ export type BroadcastDocumentOptions = {
     /** Inline bootstrap inserted at the start of head, including its script tag. */
     bootstrap?: string;
 };
+/**
+ * Bootstrap a receiver-managed document before broadcaster deferred scripts run.
+ *
+ * A restored iframe can be parsed before the parent application's module has
+ * installed its host callback.  Keep the receiver identity query usable during
+ * that short window and retry the full installation once the parent is ready.
+ */
+export declare function createRuntimeBootstrap(scopePath?: string): string;
 export declare function rewriteBroadcastObjectMarkup(source: string): string;
 export declare function prefixBroadcastRootAttributes(source: string, basePath?: string, scopePath?: string): string;
 export declare function prepareBroadcastStylesheet(source: string, options?: BroadcastDocumentOptions): string;

package/docs/broadcast-resources-and-fonts.md

@@ -124,20 +124,24 @@ and therefore follow the Worker route. A font explicitly retained through
 
 `src/runtime/fonts/arib-symbols.svg` is the auditable SVG Font source for the
 television-symbol block `U+1F19B..U+1F1AC`, including `U+1F19E SQUARED FOUR K`
-(`🆞`). They are a minimal subset of the OFL-licensed Noto Sans Symbols font
-used by the reference receiver. See `src/runtime/fonts/NOTICE.md` and
-`src/runtime/fonts/OFL.txt`; no commercial font outline is included.
+(`🆞`). `arib-enclosed-cjk.svg` covers the defined enclosed CJK television
+symbols in `U+1F200..U+1F251`, including `🈑` and `🈔`. They are minimal
+subsets of the OFL-licensed Noto Sans Symbols and Noto Sans CJK JP fonts. See
+`src/runtime/fonts/NOTICE.md` and `src/runtime/fonts/OFL.txt`; no commercial
+font outline is included.
 
 Modern browsers no longer reliably render SVG Fonts, so the same script emits
-`arib-symbols.woff` for runtime use. The runtime registers the sparse font only
-for its 18 code points under `ARIB Symbols` and the ARIB generic family names
-`丸ゴシック`, `太丸ゴシック`, and `角ゴシック`. Ordinary Japanese glyphs continue
-through the page's next fallback font. Dynamic DRCS and broadcaster-delivered
-SVG/WOFF fonts stay separate from this static receiver font.
+the corresponding WOFF files for runtime use. The runtime registers the sparse
+fonts only for those code points under `ARIB Symbols` and the ARIB generic
+family names `丸ゴシック`, `太丸ゴシック`, and `角ゴシック`. Ordinary Japanese
+glyphs continue through the page's next fallback font. Dynamic DRCS and
+broadcaster-delivered SVG/WOFF fonts stay separate from these static receiver
+fonts.
 
 Regenerate both assets with:
 
 ```sh
 nix-shell -p python313Packages.fonttools --run \
-  'python scripts/build-arib-symbol-font.py /path/to/NotoSansSymbols.ttf'
+  'python scripts/build-arib-symbol-font.py /path/to/NotoSansSymbols.ttf \
+    --cjk-source /path/to/NotoSansCJK-VF.otf.ttc'
 ```

package/docs/media-plane-integration.md

@@ -22,10 +22,17 @@ caption ページを正しく表示するなら、1 番目または 2 番目が
   <div id="normal-player">
     <video id="video" autoplay muted playsinline></video>
   </div>
-  <iframe id="broadcast" sandbox="allow-scripts allow-same-origin"></iframe>
+  <iframe id="broadcast"></iframe>
 </div>
 ```
 
+この iframe は受信機が管理する同一 origin のコンテンツです。
+`sandbox="allow-scripts allow-same-origin"` は指定しないでください。同一 origin の
+script は sandbox 属性を除去できるため、ブラウザも security boundary にならないと
+警告します。一方で `allow-same-origin` を外すと、host から受信機 API を導入できません。
+受信機が信頼しないアプリケーションには、この in-process runtime ではなく別 origin の
+integration が必要です。
+
 `DomObjectMediaPlaneAdapter` に既存の video と、データ放送を終了した時に video を戻す
 通常プレーヤー container を渡します。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "libaribhtml5",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Browser runtime and receiver host for ARIB HTML5 data broadcasting",
   "keywords": [
     "arib",