Interface GuardPipeline

Readonlyconfig

Readonlyprofile$

drainAll

• drainAll(windowId: string): void

  Forward what the budget and visibility now allow.

  Parameters

  • windowId: string

  Returns void

forget

• forget(windowId: string): void

  Drop every queue and counter for a window.

  Parameters

  • windowId: string

  Returns void

getVisibility

• getVisibility(windowId: string): WindowVisibility

  Parameters

  • windowId: string

  Returns WindowVisibility

handleWindowMessage

• handleWindowMessage(
      event: MessageEvent,
      resolveWindow: (event: MessageEvent) => WindowResolution | null,
      forward: (event: MessageEvent) => void,
  ): PipelineDisposition

  Admit, hold or drop one window-level message. Messages from unregistered windows are forwarded so the bridge can report them as unrouted.

  Parameters

  • event: MessageEvent
  • resolveWindow: (event: MessageEvent) => WindowResolution | null
  • forward: (event: MessageEvent) => void

  Returns PipelineDisposition

isQuarantined

• isQuarantined(windowId: string): boolean

  Parameters

  • windowId: string

  Returns boolean

observe

• observe(windowId: string, napplet: string, message: unknown): GuardDisposition

  Judge one envelope that arrived over a bound port. kehto calls this synchronously just before it dispatches the envelope to the runtime, so nothing can be held or delayed here; the caller refuses instead. A defer or reject answer means the envelope must not be handled: createKernl refuses it for that one dispatch with refuseCurrentDispatch. That covers bursts above the per-second rate, the focus-aware firewall, size caps, and every non-control envelope from a window that is not visible (reason hidden:<class>), which the applet can retry once it is visible. Control envelopes are never refused. A quarantine triggers onQuarantine, and when that revokes the binding kehto no longer finds the window's session and drops the envelope.

  Parameters

  • windowId: string
  • napplet: string
  • message: unknown

  Returns GuardDisposition

release

• release(windowId: string): void

  Lift quarantine after the user chose to.

  Parameters

  • windowId: string

  Returns void

setProfile

• setProfile(profile: GuardProfile): void

  Rebuild every layer for a profile. Held messages are dropped; counters restart.

  Parameters

  • profile: GuardProfile

  Returns void

setVisibility

• setVisibility(windowId: string, visibility: WindowVisibility): void

  Parameters

  • windowId: string
  • visibility: WindowVisibility

  Returns void