kernl API
    Preparing search index...

    Interface GuardPipeline

    The composed guard the shell puts in front of kehto's bridge.

    interface GuardPipeline {
        config: GuardConfig;
        profile$: Observable<GuardProfile>;
        drainAll(windowId: string): void;
        forget(windowId: string): void;
        getVisibility(windowId: string): WindowVisibility;
        handleWindowMessage(
            event: MessageEvent,
            resolveWindow: (event: MessageEvent) => WindowResolution | null,
            forward: (event: MessageEvent) => void,
        ): PipelineDisposition;
        isQuarantined(windowId: string): boolean;
        observe(
            windowId: string,
            napplet: string,
            message: unknown,
        ): NappletMessageDecision;
        release(windowId: string): void;
        setProfile(profile: GuardProfile): void;
        setVisibility(windowId: string, visibility: WindowVisibility): void;
    }
    Index
    config profile$
    drainAll forget getVisibility handleWindowMessage isQuarantined observe release setProfile setVisibility
    config: GuardConfig
    profile$: Observable<GuardProfile>

    • Forward what the budget and visibility now allow.

      Parameters

      • windowId: string

      Returns void

    • Drop every queue and counter for a window.

      Parameters

      • windowId: string

      Returns void

    • Parameters

      • windowId: string

      Returns WindowVisibility

    • Admit, hold or drop one window-level message. Messages from unregistered windows are forwarded so the bridge can report them as unrouted.

      Parameters

      • event: MessageEvent
      • resolveWindow: (event: MessageEvent) => WindowResolution | null
      • forward: (event: MessageEvent) => void

      Returns PipelineDisposition

    • Parameters

      • windowId: string

      Returns boolean

    • Decide one envelope that arrived over a bound port, for kehto's filterNappletMessage. defer holds every non-control envelope from a window that is not visible (reason hidden:<class>) until it is visible again, up to deferQueue envelopes. drop discards an envelope over its size cap, a burst above the per-second rate, a request over the focus-aware firewall's budget, a hidden window's envelope past the defer queue, and the envelope that triggers a quarantine. Control envelopes are dispatched unless the window is quarantined.

      Parameters

      • windowId: string
      • napplet: string
      • message: unknown

      Returns NappletMessageDecision

    • Lift quarantine after the user chose to.

      Parameters

      • windowId: string

      Returns void

    • Rebuild every layer for a profile. Held messages are dropped; counters restart.

      Parameters

      • profile: GuardProfile

      Returns void

    • Parameters

      • windowId: string
      • visibility: WindowVisibility

      Returns void

    Settings
    Member Visibility

    On This Page
    Properties
    Methods