Files
Maestro_V2_UI/maestro Empty and error states.html
T

385 lines
328 KiB
HTML
Raw Normal View History

2026-10-19 13:25:16 -04:00
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>Bundled Page</title>
<style>
* { margin: 0; padding: 0; box-sizing: border-box; }
body { background: #2C2C30; display: flex; align-items: center; justify-content: center; min-height: 100vh; font-family: -apple-system, BlinkMacSystemFont, sans-serif; }
#__bundler_loading { position: fixed; bottom: 20px; right: 20px; font: 13px/1.4 -apple-system, BlinkMacSystemFont, sans-serif; color: #666; background: #fff; padding: 8px 14px; border-radius: 8px; box-shadow: 0 1px 4px rgba(0,0,0,0.12); z-index: 10000; }
#__bundler_thumbnail { position: fixed; inset: 0; width: 100%; height: 100%; display: flex; align-items: center; justify-content: center; background: #2C2C30; z-index: 9999; }
#__bundler_thumbnail svg { width: 100%; height: 100%; object-fit: contain; }
#__bundler_placeholder { color: #999; font-size: 14px; }
</style>
<noscript>
<style>#__bundler_loading { display: none; }</style>
<div style="position:fixed;bottom:12px;left:12px;font:13px/1.4 -apple-system,BlinkMacSystemFont,sans-serif;color:#999;background:rgba(255,255,255,0.9);padding:6px 12px;border-radius:6px;box-shadow:0 1px 4px rgba(0,0,0,0.08);z-index:10000;">
This page requires JavaScript to display.
</div>
</noscript>
</head>
<body>
<div id="__bundler_thumbnail"><svg viewBox="0 0 28 22" xmlns="http://www.w3.org/2000/svg" fill="none"><path d="M3.5 19 V8 L11.5 15 L23.5 3 V19" stroke="#8F7AE0" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path><g fill="#8F7AE0"><circle cx="3.5" cy="19" r="1.6"></circle><circle cx="3.5" cy="8" r="1.6"></circle><circle cx="11.5" cy="15" r="1.6"></circle><circle cx="23.5" cy="3" r="1.6"></circle><circle cx="23.5" cy="19" r="1.6"></circle></g></svg></div>
<div id="__bundler_loading">Unpacking...</div>
<script>
document.addEventListener('DOMContentLoaded', async function() {
const loading = document.getElementById('__bundler_loading');
function setStatus(msg) { if (loading) loading.textContent = msg; }
const FONT_MIME = /^(font[/]|application[/](x-)?font-|application[/]vnd\.ms-fontobject)/i;
const MIME_TOKEN = /^[\w.+-]+[/][\w.+-]+$/;
function toBase64(bytes) {
let bin = '';
for (let i = 0; i < bytes.length; i += 0x8000) {
bin += String.fromCharCode.apply(null, bytes.subarray(i, i + 0x8000));
}
return btoa(bin);
}
// Error sink persists across replaceWith since it's on window, not the DOM.
window.addEventListener('error', function(e) {
// Failed resource loads (CSP-blocked links, scripts, images) fire plain
// events at the element — warn only; real JS errors carry message/error.
if (!e.message && !e.error && e.target && e.target !== window) {
console.warn('[bundle] resource failed to load:',
e.target.tagName, String(e.target.src || e.target.href || ''));
return;
}
var p = document.body || document.documentElement;
var d = document.getElementById('__bundler_err') || p.appendChild(document.createElement('div'));
d.id = '__bundler_err';
d.style.cssText = 'position:fixed;bottom:12px;left:12px;right:12px;font:12px/1.4 ui-monospace,monospace;background:#2a1215;color:#ff8a80;padding:10px 14px;border-radius:8px;border:1px solid #5c2b2e;z-index:99999;white-space:pre-wrap;max-height:40vh;overflow:auto';
d.textContent = (d.textContent ? d.textContent + String.fromCharCode(10) : '') +
'[bundle] ' + (e.message || e.type) +
(e.filename ? ' (' + e.filename.slice(0, 60) + ':' + e.lineno + ')' : '');
}, true);
try {
const manifestEl = document.querySelector('script[type="__bundler/manifest"]');
const templateEl = document.querySelector('script[type="__bundler/template"]');
if (!manifestEl || !templateEl) {
setStatus('Error: missing bundle data');
console.error('[bundler] Missing script tags — manifestEl:', !!manifestEl, 'templateEl:', !!templateEl);
return;
}
const manifest = JSON.parse(manifestEl.textContent);
let template = JSON.parse(templateEl.textContent);
// Nested page bundles (iframe targets). Each ships ONCE, in the ROOT
// document's manifest; frame srcs carry an about:blank#<uuid> marker
// instead of a substitutable uuid. Every document mints the blobs for
// its OWN frames — from local text at the root, or text obtained from
// its DIRECT parent over the relay protocol below — so each frame
// navigation stays same-origin with its initiator and a deduped page
// loads at any depth on any host, including a file:// download's
// opaque origins (where a blob minted by one document cannot be
// navigated to by another).
const pageOrderEl = document.querySelector('script[type="__bundler/page_order"]');
const pageOrder = pageOrderEl ? JSON.parse(pageOrderEl.textContent) : [];
const pageSet = new Set(pageOrder);
const pageTexts = {};
// ── Nested-page text protocol (parent-chain relay) ──
// Page bundles ship once, in the ROOT document's manifest. Every
// document mints the blobs for its OWN frames, obtaining page text
// through a strict parent-chain relay: a document only ever SENDS to
// its direct parent (which, for every document the publisher's own
// runtime minted, is another publisher document) and only ACCEPTS
// text from that direct parent; requests from below are honored only
// for the document's own child frames, and the ROOT never sends
// upward at all. That last rule is load-bearing: the artifact host's
// frame-ancestors allows claude.ai (and friends) to frame an
// artifact, so window.top can be a FOREIGN document — a top-addressed
// protocol would hand page uuids to that ancestor and accept forged
// "page text" from it, minting attacker HTML as an artifact-origin
// blob document. The chain never touches the ancestor: requests stop
// at the root, replies are origin-addressed per hop (never '*' when
// an origin exists), and both directions are origin-gated (on https
// a foreign sender's origin can never equal this document's; in
// opaque contexts — file:// — everything serializes as 'null', where
// an embedded EXTERNAL frame still fails the gate by carrying its
// own real origin, and a sandboxed child of such a frame is excluded
// by the own-child-frames check plus uuid unguessability). Shape is
// deny-by-default: one request form, one reply form, no error
// replies.
// window.origin is the SERIALIZED SECURITY origin ('null' in opaque
// contexts such as a sandboxed preview iframe) — location.origin is
// computed from the URL and stays 'https://…' even when the document
// is sandboxed, which would misgate every opaque chain.
const OWN_TARGET = /^https?:[/][/]/.test(window.origin || '')
? window.origin
: '*';
function trustedOrigin(e) {
if (e.origin === window.origin) return true; // https chains; opaque==opaque
// file:// trees: Chrome serializes the file document's origin as
// 'file://' while the blob: documents it mints serialize as 'null',
// so the two legitimate shapes can never string-match — accept the
// pair in both directions. https origins never serialize as either,
// and sender identity (own child frame / direct parent) is checked
// separately.
return (
(e.origin === 'null' &&
(window.origin === 'file://' ||
window.location.protocol === 'file:')) ||
(/^file:/.test(e.origin) && window.origin === 'null')
);
}
// Non-empty only in the root document (nested bundles ship an empty
// island), so it doubles as the root marker: the root answers from
// local text and treats a miss as authoritative — never relaying to
// its (possibly foreign) parent.
const isPageRoot = pageOrder.length > 0;
const blobUrls = {};
const resourceBlobs = {};
const UUID_SHAPE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
const pendingFrames = {}; // uuid -> [{el, frag}] awaiting text for own frames
const pendingRelays = {}; // uuid -> [childWindow] awaiting text to pass down
function mountPage(el, frag, text) {
const pageBlob = new Blob([text], { type: 'text/html' });
const u = URL.createObjectURL(pageBlob);
resourceBlobs[u] = pageBlob;
el.src = u + frag;
}
function deliverPage(uuid, text) {
const frames = pendingFrames[uuid];
delete pendingFrames[uuid];
if (frames) for (const f of frames) mountPage(f.el, f.frag, text);
const relays = pendingRelays[uuid];
delete pendingRelays[uuid];
if (relays) {
for (const cw of relays) {
try { cw.postMessage({ __bundler_page: uuid, __bundler_text: text }, OWN_TARGET); } catch (err) { /* gone */ }
}
}
}
function ownFrameWindows() {
const out = [];
for (const f of Array.from(document.querySelectorAll('iframe'))) {
try { if (f.contentWindow) out.push(f.contentWindow); } catch (err) { /* detached */ }
}
return out;
}
window.addEventListener('message', function (e) {
const d = e.data;
if (!d || typeof d !== 'object' || !e.source) return;
// Origin gate first; the structural checks below (own-child-frames
// for requests, direct-parent + solicited-uuid for replies, the
// root's never-relay rule) are what hold in fully opaque chains
// where origin strings can't discriminate — a sandboxed root's
// FOREIGN wrapper still fails all three even though both serialize
// as real-vs-'null' rather than matching.
if (!trustedOrigin(e)) return;
if (typeof d.__bundler_need === 'string' && UUID_SHAPE.test(d.__bundler_need)) {
// Requests are honored only for this document's own child frames.
if (ownFrameWindows().indexOf(e.source) < 0) return;
const uuid = d.__bundler_need;
const text = pageTexts[uuid];
if (typeof text === 'string') {
try { e.source.postMessage({ __bundler_page: uuid, __bundler_text: text }, OWN_TARGET); } catch (err) { /* gone */ }
return;
}
if (isPageRoot || window.parent === window) return; // authoritative miss
const waiting = pendingRelays[uuid];
if (waiting) {
if (waiting.indexOf(e.source) < 0) waiting.push(e.source);
return;
}
// Never-answered uuids would otherwise accumulate forever under a
// request spray; past the cap (far above any real page count) new
// relays are dropped rather than remembered.
if (Object.keys(pendingRelays).length >= 128) return;
pendingRelays[uuid] = [e.source];
window.parent.postMessage({ __bundler_need: uuid }, OWN_TARGET);
} else if (
typeof d.__bundler_page === 'string' &&
UUID_SHAPE.test(d.__bundler_page) &&
typeof d.__bundler_text === 'string'
) {
// The shape test is load-bearing beyond tidiness: the solicited
// check below uses the in operator, which matches prototype keys
// ('__proto__', 'constructor') — an unshaped key would reach
// deliverPage and throw, painting the error banner.
// Text is accepted only from the direct parent — the document
// that minted this one.
if (e.source !== window.parent || window.parent === window) return;
if (!(d.__bundler_page in pendingFrames) && !(d.__bundler_page in pendingRelays)) return;
deliverPage(d.__bundler_page, d.__bundler_text);
}
});
const uuids = Object.keys(manifest);
setStatus('Unpacking ' + uuids.length + ' assets...');
await Promise.all(uuids.map(async (uuid) => {
const entry = manifest[uuid];
try {
const binaryStr = atob(entry.data);
const bytes = new Uint8Array(binaryStr.length);
for (let i = 0; i < binaryStr.length; i++) bytes[i] = binaryStr.charCodeAt(i);
let finalBytes = bytes;
if (entry.compressed) {
if (typeof DecompressionStream !== 'undefined') {
const ds = new DecompressionStream('gzip');
const writer = ds.writable.getWriter();
const reader = ds.readable.getReader();
writer.write(bytes);
writer.close();
const chunks = [];
let totalLen = 0;
while (true) {
const { done, value } = await reader.read();
if (done) break;
chunks.push(value);
totalLen += value.length;
}
finalBytes = new Uint8Array(totalLen);
let offset = 0;
for (const chunk of chunks) { finalBytes.set(chunk, offset); offset += chunk.length; }
} else {
console.warn('DecompressionStream not available, asset ' + uuid + ' may not render');
}
}
if (pageSet.has(uuid)) {
pageTexts[uuid] = new TextDecoder().decode(finalBytes);
return;
}
if (FONT_MIME.test(entry.mime) && MIME_TOKEN.test(entry.mime)) {
// Strict artifact hosts allow font-src data: but not blob:.
blobUrls[uuid] = 'data:' + entry.mime + ';base64,' +
(entry.compressed ? toBase64(finalBytes) : entry.data);
} else {
const blob = new Blob([finalBytes], { type: entry.mime });
blobUrls[uuid] = URL.createObjectURL(blob);
resourceBlobs[blobUrls[uuid]] = blob;
}
} catch (err) {
console.error('Failed to decode asset ' + uuid + ':', err);
const blob = new Blob([], { type: entry.mime });
blobUrls[uuid] = URL.createObjectURL(blob);
resourceBlobs[blobUrls[uuid]] = blob;
}
}));
const extResEl = document.querySelector('script[type="__bundler/ext_resources"]');
const extResources = extResEl ? JSON.parse(extResEl.textContent) : [];
const resourceMap = {};
for (const entry of extResources) {
if (blobUrls[entry.uuid]) resourceMap[entry.id] = blobUrls[entry.uuid];
}
// Artifact-host CSP (connect-src 'self') refuses fetch() of blob: URLs —
// consumers read these Blobs directly. Survives the swap like the error sink.
window.__resourceBlobs = resourceBlobs;
setStatus('Rendering...');
// Page uuids have no blob here — they ride inside about:blank#<uuid>
// frame markers the pass below resolves after the swap.
for (const uuid of uuids) {
if (pageSet.has(uuid)) continue;
template = template.split(uuid).join(blobUrls[uuid]);
}
// Strip integrity + crossorigin — blob URLs from a file:// document inherit
// a null origin, so crossorigin forces a CORS fetch that SRI then rejects.
// The manifest bytes are ours; SRI protects against CDN compromise, not this.
template = template.replace(/\s+integrity="[^"]*"/gi, '').replace(/\s+crossorigin="[^"]*"/gi, '');
const resourceScript = '<script>window.__resources = ' +
JSON.stringify(resourceMap).replace(/<\//g, '<\\/') +
';</' + 'script>';
// Inject after <head> so the DOCTYPE stays first; prepending the script
// would push the parser into quirks mode. DOMParser always emits a <head>
// (synthesizing one if the source HTML omitted it) but may carry
// attributes through, so match the full opening tag. slice() rather than
// replace() keeps us clear of $-pattern substitution in resourceScript.
const headOpen = template.match(/<head[^>]*>/i);
if (headOpen) {
const i = headOpen.index + headOpen[0].length;
template = template.slice(0, i) + resourceScript + template.slice(i);
}
// Parse the template and swap the root element. Scripts inserted via
// DOMParser/replaceWith are inert per spec — re-create each with
// createElement so they execute, awaiting onload for src scripts to
// preserve ordering (React before ReactDOM before Babel before text/babel).
const doc = new DOMParser().parseFromString(template, 'text/html');
document.documentElement.replaceWith(doc.documentElement);
// Resolve page-frame markers: mint this document's own blob for each
// framed page — from local text when this is the root, otherwise by
// asking the direct parent over the relay protocol above. An
// unanswered request leaves the frame on about:blank, the same
// degraded state as a refused embed.
{
const MARKER = /^about:blank#([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(#.*)?$/;
const needed = [];
for (const el of Array.from(document.querySelectorAll('iframe'))) {
const m = MARKER.exec(el.getAttribute('src') || '');
if (!m) continue;
const text = pageTexts[m[1]];
if (typeof text === 'string') {
mountPage(el, m[2] || '', text);
} else if (window.parent !== window && !isPageRoot) {
const had = pendingFrames[m[1]];
(pendingFrames[m[1]] = had || []).push({ el: el, frag: m[2] || '' });
if (!had) needed.push(m[1]);
}
}
for (const uuid of needed) {
window.parent.postMessage({ __bundler_need: uuid }, OWN_TARGET);
}
}
const dead = Array.from(document.scripts);
for (const old of dead) {
const s = document.createElement('script');
for (const a of old.attributes) s.setAttribute(a.name, a.value);
s.textContent = old.textContent;
// text/babel scripts with a src: read and inline. transformScriptTags
// does XHR against the src, but blob:null/ from a file:// origin is
// silently dropped. Inlining makes it a plain inline babel script,
// which transformScriptTags handles unconditionally.
if ((s.type === 'text/babel' || s.type === 'text/jsx') && s.src) {
const pre = resourceBlobs[s.src.split('#')[0]];
s.textContent = pre ? await pre.text() : await (await fetch(s.src)).text();
s.removeAttribute('src');
}
const p = s.src ? new Promise(function(r) { s.onload = s.onerror = r; }) : null;
old.replaceWith(s);
if (p) await p;
}
// Babel standalone auto-transforms type=text/babel on DOMContentLoaded,
// which fired before we swapped the document. Trigger manually if present.
if (window.Babel && typeof window.Babel.transformScriptTags === 'function') {
window.Babel.transformScriptTags();
}
} catch (err) {
setStatus('Error unpacking: ' + err.message);
console.error('Bundle unpack error:', err);
}
});
</script>
<script type="__bundler/manifest">
2026-10-19 13:31:34 -04:00
{"89776dec-304f-48d5-9c28-f33ca258a439":{"mime":"image/svg+xml","compressed":true,"data":"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"},"98e30dad-a20a-47fd-8113-82cfb1698a0a":{"mime":"text/javascript","compressed":true,"data":"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
2026-10-19 13:25:16 -04:00
</script>
<script type="__bundler/ext_resources">
2026-10-19 13:31:34 -04:00
[{"id":"mark","uuid":"89776dec-304f-48d5-9c28-f33ca258a439"},{"id":"https://unpkg.com/react@18.3.1/umd/react.production.min.js","uuid":"9e47fb8e-74a9-46cc-9012-da285fe15c5d"},{"id":"https://unpkg.com/react-dom@18.3.1/umd/react-dom.production.min.js","uuid":"4b03e761-7bef-4f7b-a027-34c79a28c696"}]
2026-10-19 13:25:16 -04:00
</script>
<script type="__bundler/page_order">
[]
</script>
<script type="__bundler/template">
2026-10-19 13:31:34 -04:00
"<!DOCTYPE html>\n<html><head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<script src=\"98e30dad-a20a-47fd-8113-82cfb1698a0a\"><\u002Fscript>\n\n\n<\u002Fhead>\n<body>\n<x-dc>\n<helmet>\n<meta name=\"design_doc_mode\" content=\"canvas\">\n<style>/* maestro v2 — Machine layout on the original maestro palette (grey bench + violet).\n Values from web/src/styles/tokens.css (CubeCraftLabs v2.0). Dark only. */\n:root {\n /* Surfaces */\n --surface-page: #2C2C30; /* --ccl-charcoal */\n --surface-raised: #36363A; /* --ccl-charcoal-2 */\n --surface-medium: #3D3D44; /* hover / menu (= --ccl-border) */\n --surface-code: #1B1B1E; /* --ccl-charcoal-3: input well, evidence, terminal */\n --surface-paper: #F4F4F6; /* auth callout card (= --ccl-text) */\n --ink-paper: #2A2431; /* --ccl-ink */\n\n /* Text */\n --text-primary: #F4F4F6;\n --text-body: #F4F4F6;\n --text-secondary: #B2B2BA;\n --text-on-accent: #2A2431; /* ink on violet 5.68:1 */\n\n /* Accent — violet, one filled action per view */\n --accent: #A493E9;\n --accent-hover: #B3A5EE; /* lighter, not --ccl-gold-dim: ink on #7A63CC is 3.21 */\n --accent-text: #A493E9; /* on page/raised/code only */\n --accent-strong: #C4B8F2; /* accent text on washes + hover */\n --accent-wash: #454353; /* rgba(164,147,233,.14) on raised */\n --accent-soft: #464359;\n --brand-accent: #8F7AE0; /* maestro mark + cursor */\n --console: #4DFF91; /* neon terminal readout */\n\n /* Status */\n --status-success: #4DFF91; --status-success-soft: #22362B; --status-success-line: #2F7A4C;\n --status-warning: #E0B15C; --status-warning-soft: #4A453E; --status-warning-line: #6E5B39;\n --status-danger: #F08B93; --status-danger-soft: #1B1B1E; --status-danger-line: #7A4A50;\n --status-muted: #B2B2BA;\n\n /* Lines */\n --border-hairline: #3D3D44;\n --border-grid: #4E4E57;\n --border-strong: #6A6A75;\n --glow: 0 0 0 1px rgba(164,147,233,.22), 0 0 24px rgba(143,122,224,.16);\n\n /* Radius */\n --r-input: 6px; --r-badge: 8px; --r-panel: 12px; --r-pill: 9999px;\n\n /* Type */\n --font-display: \"Space Grotesk\", system-ui, sans-serif;\n --font-ui: \"Manrope\", system-ui, sans-serif;\n --font-mono: \"Share Tech Mono\", \"JetBrains Mono\", ui-monospace, monospace;\n --focus-ring: #C4B8F2;\n}\n<\u002Fstyle>\n<style>/* maestro v2 — Machine (blueprint monitor) mockup stylesheet. Requires tokens.css.\n Mockup-only: fonts load from Google Fonts for review. Production self-hosts woff2. */\n/* cyrillic-ext */\n@font-face {\n font-family: 'Manrope';\n font-style: normal;\n font-weight: 400;\n font-display: swap;\n src: url(\"8310c3e4-f2a7-427c-aa94-30bd4e3ce952\") format('woff2');\n unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;\n}\n/* cyrillic */\n@font-face {\n font-family: 'Manrope';\n font-style: normal;\n font-weight: 400;\n font-display: swap;\n src: url(\"21de3439-5dcc-44ca-bb92-ac3e5f04067d\") format('woff2');\n unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;\n}\n/* greek */\n@font-face {\n font-family: 'Manrope';\n font-style: normal;\n font-weight: 400;\n font-display: swap;\n src: url(\"46420fcd-ae10-4134-90f9-e97cc3e42c0c\") format('woff2');\n unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;\n}\n/* vietnamese */\n@font-face {\n font-family: 'Manrope';\n font-style: normal;\n font-weight: 400;\n font-display: swap;\n src: url(\"e0ac3742-7262-4cfe-b1fd-600f012deb0e\") format('woff2');\n unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;\n}\n/* latin-ext */\n@font-face {\n font-family: 'Manrope';\n font-style: normal;\n font-weight: 400;\n font-display: swap;\n src: url(\"b0112808-3efa-4bfc-a2e0-1402a0f83eee\") format('woff2');\n unicode-range: U+0100-02BA, U+02BD-02C5,
2026-10-19 13:25:16 -04:00
</script>
</body>
</html>