vitral 0.1.0 → 0.3.0

package/dist/dedupe-S7BHQMOZ.js

@@ -0,0 +1,82 @@
+// src/core/semver.ts
+function satisfies(version, range) {
+  if (range === "*") return true;
+  const [, op = "", want = ""] = /^(\^|~|>=|=)?(.*)$/.exec(range.trim());
+  if (!op || op === "=" || version.includes("-")) return version === want;
+  const [v, w] = [version, want].map((s) => (s + ".0.0").split(".", 3).map(Number));
+  for (let i = 0; i < 3; i++) if (v[i] !== w[i]) {
+    if (!(v[i] > w[i])) return false;
+    break;
+  }
+  if (op === ">=") return true;
+  const fixed = Math.min(want.split(".").length, op === "~" ? 2 : w[0] ? 1 : w[1] ? 2 : 3);
+  return v.slice(0, fixed).join(".") === w.slice(0, fixed).join(".");
+}
+
+// src/core/dedupe.ts
+var KEY = "vitral:dedupe:";
+var remembered = (k) => {
+  try {
+    return localStorage.getItem(KEY + k);
+  } catch {
+    return null;
+  }
+};
+var remember = (k, url) => {
+  try {
+    localStorage.setItem(KEY + k, url);
+  } catch {
+  }
+};
+function shared(p) {
+  if (!p.dedupe) {
+    const offers = /* @__PURE__ */ new Map();
+    const waiting = /* @__PURE__ */ new Map();
+    const drop = (list, o) => list.includes(o) && list.splice(list.indexOf(o), 1);
+    const start = (name, list, o) => {
+      if (!o.p) {
+        ;
+        (o.p = o.load()).catch(() => drop(list, o));
+        if (o.url) o.p.then(() => remember(`${name}@${o.version}`, o.url), () => {
+        });
+      }
+      return o.p;
+    };
+    p.dedupe = (name, range, offer2) => {
+      const own = offer2;
+      const list = offers.get(name) ?? [];
+      offers.set(name, list);
+      if (own?.url) waiting.get(name + own.url)?.(own);
+      let hit = list.find((o) => satisfies(o.version, range));
+      if (!hit && own) {
+        hit = list[list.push(own) - 1];
+        const want = own.url && remembered(`${name}@${own.version}`);
+        if (want && want !== own.url) {
+          own.p = new Promise((resolve) => {
+            waiting.set(name + want, resolve);
+            setTimeout(resolve, 300, own);
+          }).then((o) => {
+            waiting.delete(name + want);
+            if (o === own) own.p = void 0;
+            return start(name, list, o);
+          });
+          own.p.catch(() => drop(list, own));
+        }
+      }
+      return hit && start(name, list, hit);
+    };
+  }
+  return p.dedupe;
+}
+function offer(p, groups) {
+  for (const name in groups) {
+    const { version, modules } = groups[name];
+    shared(p)(name, version, { version, load: async () => modules });
+    p.configure({ offered: { ...p.settings().offered, [name]: version } });
+  }
+}
+export {
+  offer,
+  satisfies,
+  shared
+};

package/dist/devtools.d.ts

@@ -0,0 +1,12 @@
+/** Overrides salvos neste navegador: `{ nome: url }`. */
+declare function getOverrides(): Record<string, string>;
+/** Salva (ou remove, com `null`) o override de um remote. Vale a partir do próximo carregamento. */
+declare function setOverride(name: string, url: string | null): void;
+interface DevtoolsOptions {
+    /** Recarrega a página depois de mudar um override. Padrão: true. */
+    reload?: boolean;
+}
+/** Mostra o painel no canto da página. Devolve uma função que o remove. */
+declare function devtools(options?: DevtoolsOptions): () => void;
+
+export { type DevtoolsOptions, devtools, getOverrides, setOverride };

package/dist/devtools.js

@@ -0,0 +1,86 @@
+import {
+  OVERRIDES_KEY,
+  manifestUrl,
+  overridesEnabled,
+  storedOverrides
+} from "./chunk-DXORSF4X.js";
+import "./chunk-GNPFWISJ.js";
+
+// src/devtools.ts
+function getOverrides() {
+  return storedOverrides();
+}
+function setOverride(name, url) {
+  const all = storedOverrides();
+  if (url) all[name] = manifestUrl(url);
+  else delete all[name];
+  if (Object.keys(all).length) localStorage.setItem(OVERRIDES_KEY, JSON.stringify(all));
+  else localStorage.removeItem(OVERRIDES_KEY);
+}
+var STYLE = `
+:host { position: fixed; right: 12px; bottom: 12px; z-index: 2147483647; font: 13px/1.4 system-ui, sans-serif; color: #111 }
+button { font: inherit; cursor: pointer }
+.toggle { border: 1px solid #888; border-radius: 6px; background: #fff; padding: 4px 10px }
+.panel { margin-bottom: 8px; padding: 10px; width: 320px; background: #fff; border: 1px solid #888; border-radius: 8px; box-shadow: 0 4px 16px #0003 }
+ul { list-style: none; margin: 0 0 8px; padding: 0 }
+li { display: flex; gap: 6px; align-items: center; margin-bottom: 4px; word-break: break-all }
+form { display: grid; gap: 4px }
+input { font: inherit; padding: 3px 6px }
+.aviso { color: #a40000; margin: 0 0 8px }
+`;
+function devtools(options = {}) {
+  const host = document.createElement("div");
+  host.setAttribute("data-vitral-devtools", "");
+  const root = host.attachShadow({ mode: "open" });
+  const style = document.createElement("style");
+  style.textContent = STYLE;
+  const panel = document.createElement("div");
+  panel.className = "panel";
+  panel.hidden = true;
+  const toggle = document.createElement("button");
+  toggle.className = "toggle";
+  toggle.type = "button";
+  toggle.textContent = "vitral";
+  toggle.onclick = () => panel.hidden = !panel.hidden;
+  root.append(style, panel, toggle);
+  const changed = () => options.reload === false ? draw() : location.reload();
+  function draw() {
+    panel.replaceChildren();
+    if (!overridesEnabled()) {
+      const p = document.createElement("p");
+      p.className = "aviso";
+      p.textContent = "Overrides desligados: use configure({ devOverrides: true }) ou rode em localhost.";
+      panel.append(p);
+    }
+    const list = document.createElement("ul");
+    for (const [name2, url2] of Object.entries(storedOverrides())) {
+      const item = document.createElement("li");
+      const remove = document.createElement("button");
+      remove.type = "button";
+      remove.textContent = "remover";
+      remove.setAttribute("aria-label", `remover override de ${name2}`);
+      remove.onclick = () => (setOverride(name2, null), changed());
+      item.append(`${name2} \u2192 ${url2}`, remove);
+      list.append(item);
+    }
+    const form = document.createElement("form");
+    const name = Object.assign(document.createElement("input"), { placeholder: "nome (ex.: carrinho)", required: true, name: "name" });
+    const url = Object.assign(document.createElement("input"), { placeholder: "http://localhost:5174", required: true, name: "url" });
+    const save = Object.assign(document.createElement("button"), { type: "submit", textContent: "Salvar" });
+    form.append(name, url, save);
+    form.onsubmit = (e) => {
+      e.preventDefault();
+      setOverride(name.value.trim(), url.value.trim());
+      changed();
+    };
+    panel.append(list, form);
+  }
+  draw();
+  document.body.append(host);
+  return () => host.remove();
+}
+export {
+  devtools,
+  getOverrides,
+  setOverride
+};

package/dist/element.d.ts

@@ -1,4 +1,38 @@
-import { Props, SlotStatus, RemoteModule } from './index.js';
+import { P as Props, S as Shared, a as RemoteModule } from './types-Czvm-siZ.js';
+import { S as SlotStatus } from './slot-DqXTwGbs.js';
+import './errors-kjBv6IH_.js';
+
+/**
+ * Host universal: `<vitral-remote>` funciona em qualquer lugar que renderize
+ * HTML (JS/TS puro, Angular, Svelte, Solid, Lit, Astro, Qwik, jQuery, server
+ * templates…).
+ *
+ *   import { defineVitralElement } from 'vitral/element'
+ *   defineVitralElement()
+ *
+ *   <vitral-remote name="carrinho" props='{"userId": 42}' isolate="shadow"
+ *     inherit-styles="/assets/base.css">
+ *     <p slot="fallback">Carregando…</p>
+ *     <p slot="error">Indisponível</p>
+ *   </vitral-remote>
+ *
+ *   <vitral-remote src="https://cdn.exemplo.com/carrinho/vitral.json"></vitral-remote>
+ *
+ * Sem os slots, mostra um carregando acessível e um erro com "Tentar de novo".
+ *
+ *   el.props = { userId: 43 }          // atualiza sem remontar
+ *   el.addEventListener('vitral-error', (e) => e.detail.error)
+ *   el.addEventListener('vitral-ready', (e) => e.detail.timings) // { manifest, js, css, mount } em ms
+ *   el.retry()
+ *
+ * Atributos de performance: `loading="lazy|idle"` (monta perto de aparecer ou
+ * com o navegador ocioso; reserve o espaço com `min-height`),
+ * `prefetch="hover|visible|idle"` (baixa antes de montar), `priority="high"`
+ * e `keep-alive` (ou `keep-alive="3"`: máximo de remotes guardados).
+ *
+ * Também exporta `elementRemote()` para publicar um Web Component (Lit,
+ * Stencil, vanilla) como remote.
+ */
 
 declare const Base: typeof HTMLElement;
 declare class VitralRemoteElement extends Base {
@@ -21,10 +55,34 @@ declare function defineVitralElement(tag?: string): void;
  *   export default elementRemote('meu-widget')
  */
 declare function elementRemote<P extends Props = Props>(tag: string, setup?: () => void): RemoteModule<P>;
+/** O que o `SharedController` precisa do elemento (o `ReactiveControllerHost` do Lit). */
+interface SharedControllerHost {
+    addController(controller: {
+        hostConnected?(): void;
+        hostDisconnected?(): void;
+    }): void;
+    requestUpdate(): void;
+}
+/**
+ * Controller do Lit para uma chave compartilhada (`provide`/`shared`). Assina
+ * enquanto o elemento está conectado e pede um novo render quando o valor
+ * (ou o resultado do seletor) muda.
+ *
+ *   usuario = new SharedController(this, 'usuario')
+ *   render() { return html`${this.usuario.value?.nome}` }
+ */
+declare class SharedController<T = unknown, S = T | undefined> {
+    #private;
+    /** Valor atual (ou o resultado do seletor). */
+    value: S;
+    constructor(host: SharedControllerHost, key: keyof Shared | (string & {}), select?: (value: T | undefined) => S);
+    hostConnected(): void;
+    hostDisconnected(): void;
+}
 declare global {
     interface HTMLElementTagNameMap {
         'vitral-remote': VitralRemoteElement;
     }
 }
 
-export { VitralRemoteElement, defineVitralElement, elementRemote };
+export { SharedController, type SharedControllerHost, VitralRemoteElement, defineVitralElement, elementRemote };

package/dist/element.js

@@ -1,10 +1,18 @@
 import {
+  SharedController,
   VitralRemoteElement,
   defineVitralElement,
   elementRemote
-} from "./chunk-IZK6ITIJ.js";
-import "./chunk-TTL52BF2.js";
+} from "./chunk-3YXI3G34.js";
+import "./chunk-IHTUM6LT.js";
+import "./chunk-I3VSKSAZ.js";
+import "./chunk-TD4S3IHA.js";
+import "./chunk-ZAC6QQI6.js";
+import "./chunk-GNHCZRQP.js";
+import "./chunk-AKNNHQ2H.js";
+import "./chunk-GNPFWISJ.js";
 export {
+  SharedController,
   VitralRemoteElement,
   defineVitralElement,
   elementRemote

package/dist/errors-kjBv6IH_.d.ts

@@ -0,0 +1,17 @@
+type RemoteErrorCode = 'NOT_REGISTERED' | 'NOT_EXPOSED' | 'ORIGIN_BLOCKED' | 'TIMEOUT' | 'INTEGRITY' | 'INVALID_MODULE' | 'LOAD_FAILED' | 'MOUNT_FAILED' | 'RENDER_FAILED' | 'SHARED_READONLY' | 'CONTRACT_MISMATCH';
+declare class RemoteError extends Error {
+    code: RemoteErrorCode;
+    remote: string;
+    cause?: unknown | undefined;
+    /** Link da página deste erro na documentação. */
+    docs: string;
+    /** URL do JS do remote (ou a registrada, se o erro veio antes do manifesto). */
+    entry?: string;
+    /** Versão do remote, do campo `version` do `vitral.json`. */
+    version?: string;
+    /** `location.pathname` no momento do erro. */
+    route?: string;
+    constructor(code: RemoteErrorCode, remote: string, message: string, cause?: unknown | undefined);
+}
+
+export { RemoteError as R, type RemoteErrorCode as a };

package/dist/events-D5gs7rff.d.ts

@@ -0,0 +1,6 @@
+import { E as EventBus } from './types-Czvm-siZ.js';
+
+/** Barramento global. É o mesmo objeto que os remotes recebem em `ctx.events`. */
+declare const events: EventBus;
+
+export { events as e };

package/dist/expose-JUOUN5N5.js

@@ -0,0 +1,15 @@
+import {
+  resolveModule,
+  resolveTarget,
+  splitName
+} from "./chunk-SDB5AZEI.js";
+import "./chunk-TD4S3IHA.js";
+import "./chunk-ZAC6QQI6.js";
+import "./chunk-GNHCZRQP.js";
+import "./chunk-AKNNHQ2H.js";
+import "./chunk-GNPFWISJ.js";
+export {
+  resolveModule,
+  resolveTarget,
+  splitName
+};

package/dist/host-slot-Cz6EiGsB.d.ts

@@ -0,0 +1,6 @@
+/** Quando montar: já (`eager`, padrão), perto de aparecer na tela (`lazy`) ou com o navegador ocioso (`idle`). */
+type Loading = 'eager' | 'lazy' | 'idle';
+/** Quando baixar antes de montar: no hover ou foco (`hover`), perto de aparecer (`visible`) ou com o navegador ocioso (`idle`). */
+type Prefetch = 'hover' | 'visible' | 'idle';
+
+export type { Loading as L, Prefetch as P };

package/dist/iframe.d.ts

@@ -0,0 +1,28 @@
+/** Script inline do iframe. Libere o hash dele no CSP (`script-src 'sha256-…'`). */
+declare const FRAME_SCRIPT = "(function (w, load) {\n  var parent = w.parent, doc = w.document, handlers = {}, last = {}, channel = {}, mounted = null, stage = 'LOAD_FAILED'\n  function post(type, data) { parent.postMessage({ vitral: 1, type: type, data: data }, '*') }\n  function call(fn, arg) { try { fn(arg) } catch (e) { w.console.error(e) } }\n  var events = {\n    emit: function (type, payload) { post('emit', { type: type, payload: payload }) },\n    on: function (type, fn) {\n      if (!handlers[type]) { handlers[type] = []; post('on', { type: type }) }\n      handlers[type].push(fn)\n      return function () { handlers[type] = handlers[type].filter(function (h) { return h !== fn }) }\n    },\n    last: function (type) { return last[type] }\n  }\n  function start(d) {\n    var root = doc.createElement('div')\n    root.setAttribute('data-vitral-root', d.name)\n    if (d.scope) root.setAttribute('data-vitral-scope', d.scope)\n    doc.body.appendChild(root)\n    // Ponto de extens\u00E3o: uma ponte nova registra handlers em channel[tipo] e\n    // acrescenta campos aqui (a Fase 2 acrescenta ctx.shared).\n    var ctx = {\n      name: d.name, baseUrl: d.baseUrl, events: events, shadowRoot: null, portalContainer: doc.body, protocol: 1,\n      reportError: function (e) { post('report', { message: String((e && e.message) || e) }) },\n      navigate: function (url, o) { post('navigate', { url: String(url), replace: !!(o && o.replace) }) }\n    }\n    Promise.all(d.css.map(function (href) {\n      return new Promise(function (done) {\n        var link = doc.createElement('link')\n        link.rel = 'stylesheet'; link.href = href; link.crossOrigin = 'anonymous'\n        link.onload = link.onerror = done\n        doc.head.appendChild(link)\n      })\n    })).then(function () {\n      return load(d.code ? w.URL.createObjectURL(new w.Blob([d.code], { type: 'text/javascript' })) : d.url)\n    }).then(function (ns) {\n      if (!d.key) return ns\n      var table = ns.exposes, part = table && table[d.key]\n      if (!part) { stage = 'NOT_EXPOSED'; throw new Error(d.name + ' n\u00E3o exp\u00F5e ' + d.key) }\n      return typeof part === 'function' ? part() : part\n    }).then(function (ns) {\n      var mod = (ns && ns.default) || ns\n      if (!mod || typeof mod.mount !== 'function') { stage = 'INVALID_MODULE'; throw new Error('o m\u00F3dulo n\u00E3o exporta mount()') }\n      stage = 'MOUNT_FAILED'\n      return mod.mount(root, d.props, ctx)\n    }).then(function (handle) {\n      mounted = handle\n      post('mounted')\n      var size = function () { post('size', { height: Math.ceil(doc.body.getBoundingClientRect().height) }) }\n      size()\n      if (w.ResizeObserver) new w.ResizeObserver(size).observe(doc.body)\n    }, function (e) {\n      post('error', { code: stage, message: String((e && e.message) || e) })\n    })\n  }\n  w.addEventListener('message', function (e) {\n    var m = e.data\n    if (e.source !== parent || !m || m.vitral !== 1) return\n    var d = m.data\n    if (m.type === 'mount') start(d)\n    else if (m.type === 'update') { if (mounted && mounted.update) mounted.update(d) }\n    else if (m.type === 'unmount') { if (mounted) mounted.unmount(); mounted = null }\n    else if (m.type === 'last') last[d.type] = d.payload\n    else if (m.type === 'event') {\n      last[d.type] = d.payload\n      ;(handlers[d.type] || []).slice().forEach(function (h) { call(h, d.payload) })\n    } else (channel[m.type] || []).forEach(function (h) { call(h, d) })\n  })\n  post('ready')\n})(window, function (u) { return import(u) })";
+
+/** Canal com um iframe montado, para pontes novas (ex.: estado compartilhado). */
+interface FramePort {
+    /** Manda `data` (serializável) para o iframe com o tipo `type`. */
+    post(type: string, data?: unknown): void;
+    /** Recebe as mensagens do iframe com o tipo `type`. */
+    on(type: string, handler: (data: unknown) => void): () => void;
+}
+/** Chamada a cada iframe montado. Devolve a limpeza. */
+type FrameBridge = (port: FramePort, info: {
+    name: string;
+}) => void | (() => void);
+interface IframeOptions {
+    /**
+     * Valor do atributo `sandbox`. Padrão `'allow-scripts'`. Acrescente o que o
+     * remote precisa (`'allow-scripts allow-forms allow-popups'`). Com
+     * `allow-same-origin` o iframe ganha a origem da página e deixa de isolar.
+     */
+    sandbox?: string;
+    /** Pontes extras, além de props e eventos. */
+    bridges?: FrameBridge[];
+}
+/** Liga `isolate="iframe"` em todos os componentes de host e em `mountRemote`. */
+declare function enableIframe(options?: IframeOptions): void;
+
+export { FRAME_SCRIPT, type FrameBridge, type FramePort, type IframeOptions, enableIframe };

package/dist/iframe.js

@@ -0,0 +1,239 @@
+import {
+  splitName
+} from "./chunk-SDB5AZEI.js";
+import {
+  verifyIntegrity
+} from "./chunk-AH7KNMBW.js";
+import {
+  events,
+  navigate,
+  setFrameMounter,
+  track
+} from "./chunk-I3VSKSAZ.js";
+import {
+  resolveEntry
+} from "./chunk-TD4S3IHA.js";
+import "./chunk-ZAC6QQI6.js";
+import {
+  fetchBytes,
+  withRetry,
+  withTimeout
+} from "./chunk-GNHCZRQP.js";
+import {
+  RemoteError,
+  report
+} from "./chunk-AKNNHQ2H.js";
+import {
+  protocol
+} from "./chunk-GNPFWISJ.js";
+
+// src/iframe-frame.ts
+var FRAME_RUNTIME = `function (w, load) {
+  var parent = w.parent, doc = w.document, handlers = {}, last = {}, channel = {}, mounted = null, stage = 'LOAD_FAILED'
+  function post(type, data) { parent.postMessage({ vitral: 1, type: type, data: data }, '*') }
+  function call(fn, arg) { try { fn(arg) } catch (e) { w.console.error(e) } }
+  var events = {
+    emit: function (type, payload) { post('emit', { type: type, payload: payload }) },
+    on: function (type, fn) {
+      if (!handlers[type]) { handlers[type] = []; post('on', { type: type }) }
+      handlers[type].push(fn)
+      return function () { handlers[type] = handlers[type].filter(function (h) { return h !== fn }) }
+    },
+    last: function (type) { return last[type] }
+  }
+  function start(d) {
+    var root = doc.createElement('div')
+    root.setAttribute('data-vitral-root', d.name)
+    if (d.scope) root.setAttribute('data-vitral-scope', d.scope)
+    doc.body.appendChild(root)
+    // Ponto de extens\xE3o: uma ponte nova registra handlers em channel[tipo] e
+    // acrescenta campos aqui (a Fase 2 acrescenta ctx.shared).
+    var ctx = {
+      name: d.name, baseUrl: d.baseUrl, events: events, shadowRoot: null, portalContainer: doc.body, protocol: 1,
+      reportError: function (e) { post('report', { message: String((e && e.message) || e) }) },
+      navigate: function (url, o) { post('navigate', { url: String(url), replace: !!(o && o.replace) }) }
+    }
+    Promise.all(d.css.map(function (href) {
+      return new Promise(function (done) {
+        var link = doc.createElement('link')
+        link.rel = 'stylesheet'; link.href = href; link.crossOrigin = 'anonymous'
+        link.onload = link.onerror = done
+        doc.head.appendChild(link)
+      })
+    })).then(function () {
+      return load(d.code ? w.URL.createObjectURL(new w.Blob([d.code], { type: 'text/javascript' })) : d.url)
+    }).then(function (ns) {
+      if (!d.key) return ns
+      var table = ns.exposes, part = table && table[d.key]
+      if (!part) { stage = 'NOT_EXPOSED'; throw new Error(d.name + ' n\xE3o exp\xF5e ' + d.key) }
+      return typeof part === 'function' ? part() : part
+    }).then(function (ns) {
+      var mod = (ns && ns.default) || ns
+      if (!mod || typeof mod.mount !== 'function') { stage = 'INVALID_MODULE'; throw new Error('o m\xF3dulo n\xE3o exporta mount()') }
+      stage = 'MOUNT_FAILED'
+      return mod.mount(root, d.props, ctx)
+    }).then(function (handle) {
+      mounted = handle
+      post('mounted')
+      var size = function () { post('size', { height: Math.ceil(doc.body.getBoundingClientRect().height) }) }
+      size()
+      if (w.ResizeObserver) new w.ResizeObserver(size).observe(doc.body)
+    }, function (e) {
+      post('error', { code: stage, message: String((e && e.message) || e) })
+    })
+  }
+  w.addEventListener('message', function (e) {
+    var m = e.data
+    if (e.source !== parent || !m || m.vitral !== 1) return
+    var d = m.data
+    if (m.type === 'mount') start(d)
+    else if (m.type === 'update') { if (mounted && mounted.update) mounted.update(d) }
+    else if (m.type === 'unmount') { if (mounted) mounted.unmount(); mounted = null }
+    else if (m.type === 'last') last[d.type] = d.payload
+    else if (m.type === 'event') {
+      last[d.type] = d.payload
+      ;(handlers[d.type] || []).slice().forEach(function (h) { call(h, d.payload) })
+    } else (channel[m.type] || []).forEach(function (h) { call(h, d) })
+  })
+  post('ready')
+}`;
+var FRAME_SCRIPT = `(${FRAME_RUNTIME})(window, function (u) { return import(u) })`;
+var FRAME_HTML = `<!doctype html><html><head><meta charset="utf-8"><style>html,body{margin:0}body{display:flow-root}</style></head><body><script>${FRAME_SCRIPT}</script></body></html>`;
+
+// src/iframe.ts
+var CODES = ["LOAD_FAILED", "NOT_EXPOSED", "INVALID_MODULE", "MOUNT_FAILED"];
+function enableIframe(options = {}) {
+  const sandbox = options.sandbox ?? "allow-scripts";
+  if (/\ballow-same-origin\b/.test(sandbox) && /\ballow-scripts\b/.test(sandbox)) {
+    console.warn("[vitral] sandbox com allow-scripts e allow-same-origin n\xE3o isola o remote da p\xE1gina.");
+  }
+  setFrameMounter((target, name, props, mountOptions) => mountFrame(target, name, props, mountOptions, sandbox, options.bridges ?? []));
+}
+async function mountFrame(target, name, props, options, sandbox, bridges) {
+  const p = protocol();
+  const { timeout, retries } = p.settings();
+  const [remote, key] = splitName(name);
+  const entry = p.entry(remote);
+  if (!entry) throw new RemoteError("NOT_REGISTERED", name, "remote n\xE3o registrado. Use configure({ remotes }).");
+  if (!entry.url) throw new RemoteError("MOUNT_FAILED", name, "remote local (module) n\xE3o roda em iframe: registre a URL dele");
+  const { integrity, ...resolved } = await resolveEntry(remote, entry);
+  const code = integrity ? await withRetry(retries, async () => {
+    const bytes = await fetchBytes(resolved.entry, timeout, name);
+    await verifyIntegrity(name, bytes, integrity);
+    return bytes;
+  }) : void 0;
+  const baseUrl = /^https?:/.test(resolved.entry) ? new URL(".", resolved.entry).href : resolved.entry;
+  const frame = document.createElement("iframe");
+  frame.setAttribute("sandbox", sandbox);
+  frame.setAttribute("data-vitral-root", name);
+  frame.title = name;
+  frame.style.cssText = "display:block;width:100%;height:0;border:0";
+  frame.srcdoc = FRAME_HTML;
+  let warned = false;
+  const post = (type, data) => {
+    const win = frame.contentWindow;
+    if (!win) return;
+    try {
+      win.postMessage({ vitral: 1, type, data }, "*");
+    } catch {
+      if (!warned) console.warn(`[vitral] ${name}: props e eventos no modo iframe precisam ser serializ\xE1veis; o que n\xE3o \xE9 foi descartado.`);
+      warned = true;
+      win.postMessage({ vitral: 1, type, data: JSON.parse(JSON.stringify(data ?? null)) }, "*");
+    }
+  };
+  const subs = /* @__PURE__ */ new Map();
+  const channel = /* @__PURE__ */ new Map();
+  const port = {
+    post,
+    on(type, handler) {
+      if (!channel.has(type)) channel.set(type, /* @__PURE__ */ new Set());
+      channel.get(type).add(handler);
+      return () => channel.get(type)?.delete(handler);
+    }
+  };
+  let settle = null;
+  const ready = new Promise((ok, fail) => settle = { ok, fail });
+  const onMessage = (e) => {
+    const m = e.data;
+    if (e.source !== frame.contentWindow || !m || m.vitral !== 1) return;
+    const d = m.data;
+    switch (m.type) {
+      case "ready":
+        if (settle) post("mount", { name, key, code, url: resolved.entry, css: resolved.css, scope: resolved.scope, baseUrl, props });
+        break;
+      case "mounted":
+        settle?.ok();
+        settle = null;
+        break;
+      case "error":
+        settle?.fail(new RemoteError(CODES.includes(d?.code) ? d.code : "MOUNT_FAILED", name, String(d?.message)));
+        settle = null;
+        break;
+      case "size":
+        frame.style.height = `${Math.max(0, Number(d?.height) || 0)}px`;
+        break;
+      case "emit":
+        events.emit(String(d?.type), d?.payload);
+        break;
+      case "on": {
+        const type = String(d?.type);
+        if (subs.has(type)) break;
+        subs.set(type, events.on(type, (payload) => post("event", { type, payload })));
+        const value = events.last(type);
+        if (value !== void 0) post("last", { type, payload: value });
+        break;
+      }
+      case "navigate": {
+        const url = new URL(String(d?.url), location.href);
+        if (url.origin === location.origin) navigate(url.href, { replace: !!d?.replace });
+        else console.warn(`[vitral] ${name}: navega\xE7\xE3o para outra origem bloqueada (${url.origin})`);
+        break;
+      }
+      case "report": {
+        const err = report(new RemoteError("RENDER_FAILED", name, String(d?.message)), resolved);
+        if (options.onError) options.onError(err);
+        else console.error(err);
+        break;
+      }
+      default:
+        for (const h of [...channel.get(m.type) ?? []]) h(d);
+    }
+  };
+  const disposers = [];
+  const cleanup = () => {
+    removeEventListener("message", onMessage);
+    for (const off of subs.values()) off();
+    for (const off of disposers) off();
+    subs.clear();
+    frame.remove();
+  };
+  addEventListener("message", onMessage);
+  for (const bridge of bridges) {
+    const off = bridge(port, { name });
+    if (off) disposers.push(off);
+  }
+  target.appendChild(frame);
+  try {
+    await withTimeout(timeout, name, ready);
+  } catch (e) {
+    cleanup();
+    throw e;
+  }
+  disposers.push(track(name, resolved));
+  let alive = true;
+  return {
+    update(next) {
+      if (alive) post("update", next);
+    },
+    unmount() {
+      if (!alive) return;
+      alive = false;
+      post("unmount");
+      cleanup();
+    }
+  };
+}
+export {
+  FRAME_SCRIPT,
+  enableIframe
+};