react-cheminfo 0.52.0 → 0.53.0

package/lib/router/core/pageAddress.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Where a page reads its own address and writes it back. Normally that is the
+ * browser's `location` and `history`; a page opened from a sealed link holds
+ * its address in memory instead, so the app navigates as usual while the
+ * address bar keeps showing the link that was handed out.
+ */
+/** The part of `window.location` a page reads its address from. */
+export interface PageLocation {
+    /** The path of the address. */
+    readonly pathname: string;
+    /** The query string, with its leading `?` or empty. */
+    readonly search: string;
+    /** The fragment, with its leading `#` or empty. */
+    readonly hash: string;
+}
+/** The part of `window.history` a page writes its address through. */
+export interface PageHistory {
+    /** The state of the current entry. */
+    readonly state: unknown;
+    /**
+     * Add an entry.
+     * @param data - The state of the new entry.
+     * @param unused - Ignored by browsers.
+     * @param url - The new address, absolute or relative to the current one.
+     */
+    pushState(data: unknown, unused: string, url: string): void;
+    /**
+     * Rewrite the current entry without adding one.
+     * @param data - The state to keep.
+     * @param unused - Ignored by browsers.
+     * @param url - The new address, absolute or relative to the current one.
+     */
+    replaceState(data: unknown, unused: string, url: string): void;
+}
+/**
+ * The address the page reads: the held one when there is one, else the
+ * browser's.
+ * @returns It, or `undefined` where there is no browser.
+ */
+export declare function pageLocation(): PageLocation | undefined;
+/**
+ * The history the page writes its address through: the held address when
+ * there is one, else the browser's.
+ * @returns It, or `undefined` where there is no browser.
+ */
+export declare function pageHistory(): PageHistory | undefined;
+/**
+ * Hold the page's address in memory from now on. Every read through
+ * {@link pageLocation} and every write through {@link pageHistory} uses it, and
+ * the browser's address bar is never written again.
+ * @param address - The address the page opens on: path, query and fragment.
+ */
+export declare function holdPageAddress(address: string): void;
+/**
+ * Whether the page's address is held in memory.
+ * @returns True after {@link holdPageAddress}.
+ */
+export declare function isPageAddressHeld(): boolean;
+/** Go back to reading and writing the browser's own address. */
+export declare function releasePageAddress(): void;
+//# sourceMappingURL=pageAddress.d.ts.map

package/lib/router/core/pageAddress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pageAddress.d.ts","sourceRoot":"","sources":["../../../src/router/core/pageAddress.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,sEAAsE;AACtE,MAAM,WAAW,WAAW;IAC1B,sCAAsC;IACtC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5D;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAChE;AAOD;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,YAAY,GAAG,SAAS,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,WAAW,GAAG,SAAS,CAErD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAErD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,gEAAgE;AAChE,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/lib/router/core/pageAddress.js

@@ -0,0 +1,69 @@
+/**
+ * Where a page reads its own address and writes it back. Normally that is the
+ * browser's `location` and `history`; a page opened from a sealed link holds
+ * its address in memory instead, so the app navigates as usual while the
+ * address bar keeps showing the link that was handed out.
+ */
+// Only parses addresses relative to the held one; never fetched or shown.
+const HELD_ORIGIN = 'https://held.invalid';
+let held;
+/**
+ * The address the page reads: the held one when there is one, else the
+ * browser's.
+ * @returns It, or `undefined` where there is no browser.
+ */
+export function pageLocation() {
+    return held ?? globalThis.location;
+}
+/**
+ * The history the page writes its address through: the held address when
+ * there is one, else the browser's.
+ * @returns It, or `undefined` where there is no browser.
+ */
+export function pageHistory() {
+    return held ?? globalThis.history;
+}
+/**
+ * Hold the page's address in memory from now on. Every read through
+ * {@link pageLocation} and every write through {@link pageHistory} uses it, and
+ * the browser's address bar is never written again.
+ * @param address - The address the page opens on: path, query and fragment.
+ */
+export function holdPageAddress(address) {
+    held = new HeldAddress(address);
+}
+/**
+ * Whether the page's address is held in memory.
+ * @returns True after {@link holdPageAddress}.
+ */
+export function isPageAddressHeld() {
+    return held !== undefined;
+}
+/** Go back to reading and writing the browser's own address. */
+export function releasePageAddress() {
+    held = undefined;
+}
+class HeldAddress {
+    pathname = '/';
+    search = '';
+    hash = '';
+    state = null;
+    constructor(address) {
+        this.go(null, address);
+    }
+    pushState(data, unused, url) {
+        this.go(data, url);
+    }
+    replaceState(data, unused, url) {
+        this.go(data, url);
+    }
+    go(data, url) {
+        const base = `${HELD_ORIGIN}${this.pathname}${this.search}${this.hash}`;
+        const next = new URL(url, base);
+        this.pathname = next.pathname;
+        this.search = next.search;
+        this.hash = next.hash;
+        this.state = data;
+    }
+}
+//# sourceMappingURL=pageAddress.js.map

package/lib/router/core/pageAddress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pageAddress.js","sourceRoot":"","sources":["../../../src/router/core/pageAddress.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgCH,0EAA0E;AAC1E,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAE3C,IAAI,IAA6B,CAAC;AAElC;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,KAAK,SAAS,CAAC;AAC5B,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB;IAChC,IAAI,GAAG,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,WAAW;IACf,QAAQ,GAAG,GAAG,CAAC;IACf,MAAM,GAAG,EAAE,CAAC;IACZ,IAAI,GAAG,EAAE,CAAC;IACV,KAAK,GAAY,IAAI,CAAC;IAEtB,YAAY,OAAe;QACzB,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,SAAS,CAAC,IAAa,EAAE,MAAc,EAAE,GAAW;QAClD,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,YAAY,CAAC,IAAa,EAAE,MAAc,EAAE,GAAW;QACrD,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrB,CAAC;IAEO,EAAE,CAAC,IAAa,EAAE,GAAW;QACnC,MAAM,IAAI,GAAG,GAAG,WAAW,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;CACF"}

package/lib/share/core/index.d.ts

@@ -11,6 +11,10 @@ export type { PreferenceHistory, PreferenceLocation, SyncPreferencesOptions, Url
 export { applyPreferencesFromSearch, syncPreferencesWithUrl, writePreferencesToSearch, } from './preferences.ts';
 export type { SharePreset } from './presets.ts';
 export { applySharePreset, findSharePreset } from './presets.ts';
+export type { SealProblem, UnsealResult } from './seal.ts';
+export { SEAL_PARAM, sealQuery, sealShareUrl, sealedToken, unsealQuery, } from './seal.ts';
+export type { SealedAddress } from './sealedAddress.ts';
+export { canOpenSealedAddresses, openSealedAddress } from './sealedAddress.ts';
 export type { EmbedCodeOptions, ShareUrlOptions } from './url.ts';
 export { buildEmbedCode, buildShareUrl } from './url.ts';
 export type { HideablePart, ShareParamCodecs, ShareParamValues, ShareVocabulary, } from './vocabulary.ts';

package/lib/share/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/share/core/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,EACb,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACjE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzD,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/share/core/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,EACb,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACjE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzD,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,iBAAiB,CAAC"}

package/lib/share/core/index.js

@@ -5,5 +5,7 @@ export { SHARE_REGIONS_MESSAGE, SHARE_REGIONS_REQUEST, isShareRegionsRequest, re
 export { booleanParam, enumParam, integerParam, numberParam, stringParam, } from "./params.js";
 export { applyPreferencesFromSearch, syncPreferencesWithUrl, writePreferencesToSearch, } from "./preferences.js";
 export { applySharePreset, findSharePreset } from "./presets.js";
+export { SEAL_PARAM, sealQuery, sealShareUrl, sealedToken, unsealQuery, } from "./seal.js";
+export { canOpenSealedAddresses, openSealedAddress } from "./sealedAddress.js";
 export { buildEmbedCode, buildShareUrl } from "./url.js";
 //# sourceMappingURL=index.js.map

package/lib/share/core/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/share/core/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAQtB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,aAAa,CAAC;AAQrB,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/share/core/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAQtB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,aAAa,CAAC;AAQrB,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEjE,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE/E,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC"}

package/lib/share/core/preferences.d.ts

@@ -48,12 +48,12 @@ export interface SyncPreferencesOptions {
     subscribe: (listener: () => void) => () => void;
     /**
      * The address to read and keep up to date.
-     * @default globalThis.location
+     * @default pageLocation()
      */
     location?: PreferenceLocation;
     /**
      * The history to rewrite.
-     * @default globalThis.history
+     * @default pageHistory()
      */
     history?: PreferenceHistory;
 }

package/lib/share/core/preferences.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preferences.d.ts","sourceRoot":"","sources":["../../../src/share/core/preferences.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAInD;;;GAGG;AACH,MAAM,WAAW,aAAa,CAAC,KAAK;IAClC,wFAAwF;IACxF,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B;;;OAGG;IACH,GAAG,IAAI,KAAK,CAAC;IACb;;;OAGG;IACH,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACzB;AAED,yEAAyE;AACzE,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE9E,4DAA4D;AAC5D,MAAM,WAAW,kBAAkB;IACjC,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,oEAAoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAChE;AAED,oDAAoD;AACpD,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,WAAW,EAAE,cAAc,CAAC;IAC5B,sGAAsG;IACtG,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;OAGG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,cAAc,GAC1B,MAAM,EAAE,CAWV;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,cAAc,GAC1B,MAAM,CAuBR;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,sBAAsB,GAC9B,MAAM,IAAI,CA4BZ"}
+{"version":3,"file":"preferences.d.ts","sourceRoot":"","sources":["../../../src/share/core/preferences.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAInD;;;GAGG;AACH,MAAM,WAAW,aAAa,CAAC,KAAK;IAClC,wFAAwF;IACxF,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B;;;OAGG;IACH,GAAG,IAAI,KAAK,CAAC;IACb;;;OAGG;IACH,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACzB;AAED,yEAAyE;AACzE,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE9E,4DAA4D;AAC5D,MAAM,WAAW,kBAAkB;IACjC,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,oEAAoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAChE;AAED,oDAAoD;AACpD,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,WAAW,EAAE,cAAc,CAAC;IAC5B,sGAAsG;IACtG,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;OAGG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,cAAc,GAC1B,MAAM,EAAE,CAWV;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,cAAc,GAC1B,MAAM,CAuBR;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,sBAAsB,GAC9B,MAAM,IAAI,CA0BZ"}

package/lib/share/core/preferences.js

@@ -1,3 +1,4 @@
+import { pageHistory, pageLocation } from "../../router/core/pageAddress.js";
 import { EMBED_PARAM, HIDE_PARAM } from "./config.js";
 import { firstValues, parseQuery, serializeQuery } from "./query.js";
 /**
@@ -85,11 +86,15 @@ export function writePreferencesToSearch(search, preferences) {
  * @returns A function that stops rewriting the address.
  */
 export function syncPreferencesWithUrl(options) {
-    const { preferences, subscribe, location = globalThis.location, history = globalThis.history, } = options;
+    const { preferences, subscribe } = options;
+    const location = options.location ?? pageLocation();
+    const history = options.history ?? pageHistory();
     assertPreferenceNames(preferences);
+    if (location === undefined || history === undefined)
+        return () => undefined;
     applyPreferencesFromSearch(location.search, preferences);
     let active = true;
-    function write() {
+    const write = () => {
         if (!active)
             return;
         const current = location.search;
@@ -98,7 +103,7 @@ export function syncPreferencesWithUrl(options) {
             return;
         const query = next === '' ? '' : `?${next}`;
         history.replaceState(history.state, '', `${location.pathname}${query}${location.hash}`);
-    }
+    };
     const unsubscribe = subscribe(write);
     write();
     return () => {

package/lib/share/core/preferences.js.map

@@ -1 +1 @@
-{"version":3,"file":"preferences.js","sourceRoot":"","sources":["../../../src/share/core/preferences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGtD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAiErE;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,WAA2B;IAE3B,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAc,EACd,WAA2B;IAE3B,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA+B;IAE/B,MAAM,EACJ,WAAW,EACX,SAAS,EACT,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAC9B,OAAO,GAAG,UAAU,CAAC,OAAO,GAC7B,GAAG,OAAO,CAAC;IACZ,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,0BAA0B,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,KAAK;QACZ,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC;QAChC,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC5D,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC;YAAE,OAAO;QACrC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5C,OAAO,CAAC,YAAY,CAClB,OAAO,CAAC,KAAK,EACb,EAAE,EACF,GAAG,QAAQ,CAAC,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,KAAK,EAAE,CAAC;IACR,OAAO,GAAG,EAAE;QACV,MAAM,GAAG,KAAK,CAAC;QACf,WAAW,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1D,SAAS,qBAAqB,CAAC,WAA2B;IACxD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,4CAA4C,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,IAAY;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"preferences.js","sourceRoot":"","sources":["../../../src/share/core/preferences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAE7E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGtD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAiErE;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,WAA2B;IAE3B,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAc,EACd,WAA2B;IAE3B,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA+B;IAE/B,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;IACjD,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;IAC5E,0BAA0B,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC;QAChC,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC5D,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC;YAAE,OAAO;QACrC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5C,OAAO,CAAC,YAAY,CAClB,OAAO,CAAC,KAAK,EACb,EAAE,EACF,GAAG,QAAQ,CAAC,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAC/C,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,KAAK,EAAE,CAAC;IACR,OAAO,GAAG,EAAE;QACV,MAAM,GAAG,KAAK,CAAC;QACf,WAAW,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1D,SAAS,qBAAqB,CAAC,WAA2B;IACxD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,4CAA4C,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,IAAY;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/lib/share/core/seal.d.ts

@@ -0,0 +1,42 @@
+/** The query parameter a sealed link carries, and the only one it carries. */
+export declare const SEAL_PARAM = "s";
+/** Why a sealed link could not be opened. */
+export type SealProblem = 'malformed' | 'tampered' | 'unsupported';
+/** What opening a sealed link gave. */
+export type UnsealResult = {
+    ok: true;
+    query: string;
+} | {
+    ok: false;
+    problem: SealProblem;
+};
+/**
+ * Seal a query string: compressed when that makes it shorter, then encrypted
+ * under a tag computed from it, so the token can be neither read nor edited
+ * without the key, and the same query always gives the same token.
+ * @param query - The query string the page is to read, without its leading `?`.
+ * @returns The token, `e1.` followed by base64url.
+ */
+export declare function sealQuery(query: string): Promise<string>;
+/**
+ * Open a token written by {@link sealQuery}. Never throws: a token that was
+ * edited, cut, or minted by a newer key is answered with the reason.
+ * @param token - The value of the `s` parameter.
+ * @returns The query string it carries, or why it cannot be opened.
+ */
+export declare function unsealQuery(token: string): Promise<UnsealResult>;
+/**
+ * The sealed token a query string carries.
+ * @param search - The query string, with or without its leading `?`.
+ * @returns The value of `s`, or `null` when the address is not sealed.
+ */
+export declare function sealedToken(search: string): string | null;
+/**
+ * Turn a share link into its sealed form: the same page, with everything its
+ * query string said moved into one `s` token. A sealed page is always
+ * embedded, so the token says `embed=1` whatever the link said.
+ * @param url - The absolute share link.
+ * @returns The sealed link.
+ */
+export declare function sealShareUrl(url: string): Promise<string>;
+//# sourceMappingURL=seal.d.ts.map

package/lib/share/core/seal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.d.ts","sourceRoot":"","sources":["../../../src/share/core/seal.ts"],"names":[],"mappings":"AAGA,8EAA8E;AAC9E,eAAO,MAAM,UAAU,MAAM,CAAC;AAE9B,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;AAEnE,uCAAuC;AACvC,MAAM,MAAM,YAAY,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AA0BpE;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB9D;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAkCtE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEzD;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS/D"}

package/lib/share/core/seal.js

@@ -0,0 +1,185 @@
+import { EMBED_PARAM } from "./config.js";
+import { firstValues, parseQuery, serializeQuery } from "./query.js";
+/** The query parameter a sealed link carries, and the only one it carries. */
+export const SEAL_PARAM = 's';
+// The key is in every page that opens a sealed link, so it is not a secret: the
+// seal keeps a class from reading or editing a link, not someone who digs the
+// key out of the bundle. The version prefix of a token picks its key, so a new
+// key ships under a new version and every older link keeps opening.
+const KEYRING = {
+    e1: 'MOCyEX25cEtWf2QJ6Ux_2lFxN_4oCwjtqyOkOC4tCXA',
+};
+const CURRENT_VERSION = 'e1';
+// The tag is an HMAC of the message, and also the counter the message is
+// encrypted under: the synthetic-IV construction. One 8-byte value both refuses
+// an edited link and makes sealing deterministic, so the same query always
+// gives the same link.
+const TAG_LENGTH = 8;
+const COUNTER_BITS = 64;
+const COMPRESSED = 1;
+const keys = new Map();
+/**
+ * Seal a query string: compressed when that makes it shorter, then encrypted
+ * under a tag computed from it, so the token can be neither read nor edited
+ * without the key, and the same query always gives the same token.
+ * @param query - The query string the page is to read, without its leading `?`.
+ * @returns The token, `e1.` followed by base64url.
+ */
+export async function sealQuery(query) {
+    const plain = new TextEncoder().encode(query);
+    const packed = await transform(plain, new CompressionStream('deflate-raw'));
+    const compressed = packed.length < plain.length;
+    const body = compressed ? packed : plain;
+    const message = new Uint8Array(1 + body.length);
+    message[0] = compressed ? COMPRESSED : 0;
+    message.set(body, 1);
+    const { cipher, mac } = await keysOf(CURRENT_VERSION);
+    const tag = await tagOf(mac, CURRENT_VERSION, message);
+    const encrypted = await crypto.subtle.encrypt(ctr(tag), cipher, message);
+    const sealed = new Uint8Array(TAG_LENGTH + encrypted.byteLength);
+    sealed.set(tag);
+    sealed.set(new Uint8Array(encrypted), TAG_LENGTH);
+    return `${CURRENT_VERSION}.${toBase64Url(sealed)}`;
+}
+/**
+ * Open a token written by {@link sealQuery}. Never throws: a token that was
+ * edited, cut, or minted by a newer key is answered with the reason.
+ * @param token - The value of the `s` parameter.
+ * @returns The query string it carries, or why it cannot be opened.
+ */
+export async function unsealQuery(token) {
+    const dot = token.indexOf('.');
+    if (dot === -1)
+        return { ok: false, problem: 'malformed' };
+    const version = token.slice(0, dot);
+    if (!Object.hasOwn(KEYRING, version)) {
+        return { ok: false, problem: 'unsupported' };
+    }
+    const sealed = fromBase64Url(token.slice(dot + 1));
+    if (sealed === null || sealed.length <= TAG_LENGTH) {
+        return { ok: false, problem: 'malformed' };
+    }
+    const { cipher, mac } = await keysOf(version);
+    const tag = sealed.subarray(0, TAG_LENGTH);
+    const message = new Uint8Array(await crypto.subtle.decrypt(ctr(tag), cipher, sealed.subarray(TAG_LENGTH)));
+    if (!sameBytes(tag, await tagOf(mac, version, message))) {
+        return { ok: false, problem: 'tampered' };
+    }
+    const flags = message[0] ?? 0;
+    if (flags > COMPRESSED)
+        return { ok: false, problem: 'unsupported' };
+    const body = message.subarray(1);
+    try {
+        const plain = flags === COMPRESSED
+            ? await transform(body, new DecompressionStream('deflate-raw'))
+            : body;
+        const query = new TextDecoder('utf-8', { fatal: true }).decode(plain);
+        return { ok: true, query };
+    }
+    catch {
+        return { ok: false, problem: 'malformed' };
+    }
+}
+/**
+ * The sealed token a query string carries.
+ * @param search - The query string, with or without its leading `?`.
+ * @returns The value of `s`, or `null` when the address is not sealed.
+ */
+export function sealedToken(search) {
+    return firstValues(parseQuery(search)).get(SEAL_PARAM) ?? null;
+}
+/**
+ * Turn a share link into its sealed form: the same page, with everything its
+ * query string said moved into one `s` token. A sealed page is always
+ * embedded, so the token says `embed=1` whatever the link said.
+ * @param url - The absolute share link.
+ * @returns The sealed link.
+ */
+export async function sealShareUrl(url) {
+    const address = new URL(url);
+    const entries = parseQuery(address.search).filter(([key]) => key !== EMBED_PARAM && key !== SEAL_PARAM);
+    entries.push([EMBED_PARAM, '1']);
+    const token = await sealQuery(serializeQuery(entries));
+    address.search = `?${SEAL_PARAM}=${token}`;
+    return address.href;
+}
+function keysOf(version) {
+    let pair = keys.get(version);
+    if (pair === undefined) {
+        pair = deriveKeys(version);
+        keys.set(version, pair);
+    }
+    return pair;
+}
+// One key per purpose, both derived from the version's key, since a key is
+// never used for two algorithms.
+async function deriveKeys(version) {
+    const raw = fromBase64Url(KEYRING[version] ?? '') ?? new Uint8Array();
+    const base = await crypto.subtle.importKey('raw', raw, 'HKDF', false, [
+        'deriveKey',
+    ]);
+    function derive(purpose, algorithm, usages) {
+        const info = new TextEncoder().encode(`cheminfo seal ${version} ${purpose}`);
+        return crypto.subtle.deriveKey({ name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(), info }, base, algorithm, false, usages);
+    }
+    const [cipher, mac] = await Promise.all([
+        derive('cipher', { name: 'AES-CTR', length: 256 }, ['encrypt', 'decrypt']),
+        derive('mac', { name: 'HMAC', hash: 'SHA-256', length: 256 }, ['sign']),
+    ]);
+    return { cipher, mac };
+}
+// The version is signed with the message, so a token cannot be moved under
+// another version's key.
+async function tagOf(mac, version, message) {
+    const prefix = new TextEncoder().encode(`${version}.`);
+    const signed = new Uint8Array(prefix.length + message.length);
+    signed.set(prefix);
+    signed.set(message, prefix.length);
+    const digest = await crypto.subtle.sign('HMAC', mac, signed);
+    return new Uint8Array(digest, 0, TAG_LENGTH);
+}
+function ctr(tag) {
+    const counter = new Uint8Array(16);
+    counter.set(tag);
+    return { name: 'AES-CTR', counter, length: COUNTER_BITS };
+}
+function sameBytes(left, right) {
+    if (left.length !== right.length)
+        return false;
+    let difference = 0;
+    for (let index = 0; index < left.length; index++) {
+        difference |= (left[index] ?? 0) ^ (right[index] ?? 0);
+    }
+    return difference === 0;
+}
+async function transform(bytes, stream) {
+    const source = new ReadableStream({
+        start(controller) {
+            controller.enqueue(bytes);
+            controller.close();
+        },
+    });
+    const output = await new Response(source.pipeThrough(stream)).arrayBuffer();
+    return new Uint8Array(output);
+}
+function toBase64Url(bytes) {
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCodePoint(byte);
+    return btoa(binary)
+        .replaceAll('+', '-')
+        .replaceAll('/', '_')
+        .replace(/[=]+$/, '');
+}
+function fromBase64Url(text) {
+    if (!/^[\w-]*$/.test(text) || text.length % 4 === 1)
+        return null;
+    const base64 = text.replaceAll('-', '+').replaceAll('_', '/');
+    const binary = atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, '='));
+    const bytes = new Uint8Array(binary.length);
+    for (let index = 0; index < binary.length; index++) {
+        bytes[index] = binary.codePointAt(index) ?? 0;
+    }
+    return bytes;
+}
+//# sourceMappingURL=seal.js.map

package/lib/share/core/seal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.js","sourceRoot":"","sources":["../../../src/share/core/seal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAErE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC;AAS9B,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,oEAAoE;AACpE,MAAM,OAAO,GAAqC;IAChD,EAAE,EAAE,6CAA6C;CAClD,CAAC;AACF,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,yEAAyE;AACzE,gFAAgF;AAChF,2EAA2E;AAC3E,uBAAuB;AACvB,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,UAAU,GAAG,CAAC,CAAC;AAOrB,MAAM,IAAI,GAAG,IAAI,GAAG,EAA6B,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAErB,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IAClD,OAAO,GAAG,eAAe,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAa;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,UAAU,CAC5B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAC3E,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,GAAG,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GACT,KAAK,KAAK,UAAU;YAClB,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC,aAAa,CAAC,CAAC;YAC/D,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;AACjE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC/C,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,UAAU,CACrD,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,OAAO,CAAC,MAAM,GAAG,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;IAC3C,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CAAC,OAAe;IAC7B,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,iCAAiC;AACjC,KAAK,UAAU,UAAU,CAAC,OAAe;IACvC,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE;QACpE,WAAW;KACZ,CAAC,CAAC;IACH,SAAS,MAAM,CACb,OAAe,EACf,SAA6C,EAC7C,MAAkB;QAElB,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACnC,iBAAiB,OAAO,IAAI,OAAO,EAAE,CACtC,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,EAC/D,IAAI,EACJ,SAAS,EACT,KAAK,EACL,MAAM,CACP,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;KACxE,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACzB,CAAC;AAED,2EAA2E;AAC3E,yBAAyB;AACzB,KAAK,UAAU,KAAK,CAClB,GAAc,EACd,OAAe,EACf,OAAgC;IAEhC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,GAAG,CAAC,GAA4B;IACvC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,KAAiB;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,UAAU,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,KAA8B,EAC9B,MAA+C;IAE/C,MAAM,MAAM,GAAG,IAAI,cAAc,CAA0B;QACzD,KAAK,CAAC,UAAU;YACd,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5E,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,MAAM,CAAC;SAChB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;SACpB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/lib/share/core/sealedAddress.d.ts

@@ -0,0 +1,31 @@
+import type { PageLocation } from '../../router/core/pageAddress.ts';
+import type { SealProblem } from './seal.ts';
+/** How the page was opened. */
+export type SealedAddress = {
+    status: 'plain';
+} | {
+    status: 'sealed';
+} | {
+    status: 'refused';
+    problem: SealProblem;
+};
+/**
+ * Open the page's address before anything reads it. A plain address is left
+ * as it is. A sealed one is unsealed and held in memory, so the page reads
+ * what the token carries through `pageLocation` while the address bar keeps
+ * showing the link that was handed out, whatever the page does next.
+ *
+ * Call it once at startup, and import every module that reads the address
+ * only once it has resolved. Calling it is also what lets the share dialog
+ * offer to protect a link: a site that never opens a sealed address must not
+ * hand one out.
+ * @param location - The address the page was opened at.
+ * @returns How the page was opened; on `refused` nothing is held.
+ */
+export declare function openSealedAddress(location?: PageLocation | undefined): Promise<SealedAddress>;
+/**
+ * Whether this page opens sealed links, so may hand them out.
+ * @returns True once {@link openSealedAddress} has been called.
+ */
+export declare function canOpenSealedAddresses(): boolean;
+//# sourceMappingURL=sealedAddress.d.ts.map

package/lib/share/core/sealedAddress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealedAddress.d.ts","sourceRoot":"","sources":["../../../src/share/core/sealedAddress.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAGrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,+BAA+B;AAC/B,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAIhD;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,GAAE,YAAY,GAAG,SAA+B,GACvD,OAAO,CAAC,aAAa,CAAC,CAUxB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD"}

package/lib/share/core/sealedAddress.js

@@ -0,0 +1,38 @@
+import { holdPageAddress } from "../../router/core/pageAddress.js";
+import { sealedToken, unsealQuery } from "./seal.js";
+let opensSealedAddresses = false;
+/**
+ * Open the page's address before anything reads it. A plain address is left
+ * as it is. A sealed one is unsealed and held in memory, so the page reads
+ * what the token carries through `pageLocation` while the address bar keeps
+ * showing the link that was handed out, whatever the page does next.
+ *
+ * Call it once at startup, and import every module that reads the address
+ * only once it has resolved. Calling it is also what lets the share dialog
+ * offer to protect a link: a site that never opens a sealed address must not
+ * hand one out.
+ * @param location - The address the page was opened at.
+ * @returns How the page was opened; on `refused` nothing is held.
+ */
+export async function openSealedAddress(location = globalThis.location) {
+    opensSealedAddresses = true;
+    if (location === undefined)
+        return { status: 'plain' };
+    const token = sealedToken(location.search);
+    if (token === null)
+        return { status: 'plain' };
+    const result = await unsealQuery(token);
+    if (!result.ok)
+        return { status: 'refused', problem: result.problem };
+    const query = result.query === '' ? '' : `?${result.query}`;
+    holdPageAddress(`${location.pathname}${query}${location.hash}`);
+    return { status: 'sealed' };
+}
+/**
+ * Whether this page opens sealed links, so may hand them out.
+ * @returns True once {@link openSealedAddress} has been called.
+ */
+export function canOpenSealedAddresses() {
+    return opensSealedAddresses;
+}
+//# sourceMappingURL=sealedAddress.js.map

package/lib/share/core/sealedAddress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealedAddress.js","sourceRoot":"","sources":["../../../src/share/core/sealedAddress.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAGnE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAQrD,IAAI,oBAAoB,GAAG,KAAK,CAAC;AAEjC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAqC,UAAU,CAAC,QAAQ;IAExD,oBAAoB,GAAG,IAAI,CAAC;IAC5B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACtE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5D,eAAe,CAAC,GAAG,QAAQ,CAAC,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,oBAAoB,CAAC;AAC9B,CAAC"}

package/lib/share/ui/SealedLinkRefused.d.ts

@@ -0,0 +1,17 @@
+import type { ReactElement } from 'react';
+export interface SealedLinkRefusedProps {
+    /**
+     * Where the tool opens without the link.
+     * @default the path the link was opened at
+     */
+    href?: string;
+}
+/**
+ * What a page shows instead of itself when its sealed link cannot be opened —
+ * edited, cut, or minted by a newer key — so it never opens something the link
+ * did not say, and never a blank page.
+ * @param props - Where the tool opens without the link.
+ * @returns The whole page.
+ */
+export declare function SealedLinkRefused(props: SealedLinkRefusedProps): ReactElement;
+//# sourceMappingURL=SealedLinkRefused.d.ts.map

package/lib/share/ui/SealedLinkRefused.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SealedLinkRefused.d.ts","sourceRoot":"","sources":["../../../src/share/ui/SealedLinkRefused.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,OAAO,CAAC;AAYzD,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,YAAY,CAc7E"}

package/lib/share/ui/SealedLinkRefused.js

@@ -0,0 +1,23 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { AnchorButton, NonIdealState } from '@blueprintjs/core';
+import { useChromeT } from "../../i18n/ui/useT.js";
+// A grid, because the card's own `height: 100%` keeps a flex row from
+// stretching it, and it would sit at the top of the page.
+const PAGE_STYLE = {
+    display: 'grid',
+    minHeight: '100vh',
+    placeItems: 'center',
+};
+/**
+ * What a page shows instead of itself when its sealed link cannot be opened —
+ * edited, cut, or minted by a newer key — so it never opens something the link
+ * did not say, and never a blank page.
+ * @param props - Where the tool opens without the link.
+ * @returns The whole page.
+ */
+export function SealedLinkRefused(props) {
+    const { href = globalThis.location?.pathname ?? '/' } = props;
+    const t = useChromeT();
+    return (_jsx("div", { style: PAGE_STYLE, children: _jsx(NonIdealState, { icon: "lock", title: t('seal.refusedTitle'), description: t('seal.refusedBody'), action: _jsx(AnchorButton, { href: href, text: t('seal.openWithout') }) }) }));
+}
+//# sourceMappingURL=SealedLinkRefused.js.map

package/lib/share/ui/SealedLinkRefused.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SealedLinkRefused.js","sourceRoot":"","sources":["../../../src/share/ui/SealedLinkRefused.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGhE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,sEAAsE;AACtE,0DAA0D;AAC1D,MAAM,UAAU,GAAkB;IAChC,OAAO,EAAE,MAAM;IACf,SAAS,EAAE,OAAO;IAClB,UAAU,EAAE,QAAQ;CACrB,CAAC;AAUF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA6B;IAC7D,MAAM,EAAE,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IAEvB,OAAO,CACL,cAAK,KAAK,EAAE,UAAU,YACpB,KAAC,aAAa,IACZ,IAAI,EAAC,MAAM,EACX,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAC7B,WAAW,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAClC,MAAM,EAAE,KAAC,YAAY,IAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAI,GACjE,GACE,CACP,CAAC;AACJ,CAAC"}