servo_constellation/

constellation.rs

/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at https://mozilla.org/MPL/2.0/. */

//! The `Constellation`, Servo's Grand Central Station
//!
//! The constellation tracks all information kept globally by the
//! browser engine, which includes:
//!
//! * The set of all `EventLoop` objects. Each event loop is
//!   the constellation's view of a script thread. The constellation
//!   interacts with a script thread by message-passing.
//!
//! * The set of all `Pipeline` objects.  Each pipeline gives the
//!   constellation's view of a `Window`, with its script thread and
//!   layout.  Pipelines may share script threads.
//!
//! * The set of all `BrowsingContext` objects. Each browsing context
//!   gives the constellation's view of a `WindowProxy`.
//!   Each browsing context stores an independent
//!   session history, created by navigation. The session
//!   history can be traversed, for example by the back and forwards UI,
//!   so each session history maintains a list of past and future pipelines,
//!   as well as the current active pipeline.
//!
//! There are two kinds of browsing context: top-level ones (for
//! example tabs in a browser UI), and nested ones (typically caused
//! by `iframe` elements). Browsing contexts have a hierarchy
//! (typically caused by `iframe`s containing `iframe`s), giving rise
//! to a forest whose roots are top-level browsing context.  The logical
//! relationship between these types is:
//!
//! ```text
//! +------------+                      +------------+                 +---------+
//! |  Browsing  | ------parent?------> |  Pipeline  | --event_loop--> |  Event  |
//! |  Context   | ------current------> |            |                 |  Loop   |
//! |            | ------prev*--------> |            | <---pipeline*-- |         |
//! |            | ------next*--------> |            |                 +---------+
//! |            |                      |            |
//! |            | <-top_level--------- |            |
//! |            | <-browsing_context-- |            |
//! +------------+                      +------------+
//! ```
//
//! The constellation also maintains channels to other parts of Servo, including:
//!
//! * The script thread.
//! * The `Paint` subsystem, which runs in the same thread as the `Servo` instance.
//! * The font cache, image cache, and resource manager, which load
//!   and cache shared fonts, images, or other resources.
//! * The service worker manager.
//! * The devtools and webdriver servers.
//!
//! The constellation passes messages between the threads, and updates its state
//! to track the evolving state of the browsing context tree.
//!
//! The constellation acts as a logger, tracking any `warn!` messages from threads,
//! and converting any `error!` or `panic!` into a crash report.
//!
//! Since there is only one constellation, and its responsibilities include crash reporting,
//! it is very important that it does not panic.
//!
//! It's also important that the constellation not deadlock. In particular, we need
//! to be careful that we don't introduce any cycles in the can-block-on relation.
//! Blocking is typically introduced by `receiver.recv()`, which blocks waiting for the
//! sender to send some data. Servo tries to achieve deadlock-freedom by using the following
//! can-block-on relation:
//!
//! * Constellation can block on `Paint`
//! * Constellation can block on embedder
//! * Script can block on anything (other than script)
//! * Blocking is transitive (if T1 can block on T2 and T2 can block on T3 then T1 can block on T3)
//! * Nothing can block on itself!
//!
//! There is a complexity intoduced by IPC channels, since they do not support
//! non-blocking send. This means that as well as `receiver.recv()` blocking,
//! `sender.send(data)` can also block when the IPC buffer is full. For this reason it is
//! very important that all IPC receivers where we depend on non-blocking send
//! use a router to route IPC messages to an mpsc channel. The reason why that solves
//! the problem is that under the hood, the router uses a dedicated thread to forward
//! messages, and:
//!
//! * Anything (other than a routing thread) can block on a routing thread
//!
//! See <https://github.com/servo/servo/issues/14704>

use std::borrow::ToOwned;
use std::cell::{Cell, OnceCell, RefCell};
use std::collections::hash_map::Entry;
use std::collections::{HashMap, HashSet, VecDeque};
use std::marker::PhantomData;
use std::mem::replace;
use std::rc::{Rc, Weak};
use std::sync::Arc;
use std::thread::JoinHandle;
use std::{process, thread};

use accesskit::{ActionRequest, TreeId};
use background_hang_monitor_api::{
    BackgroundHangMonitorControlMsg, BackgroundHangMonitorRegister, HangAlert,
};
use content_security_policy::sandboxing_directive::SandboxingFlagSet;
use crossbeam_channel::{Receiver, Select, Sender, unbounded};
#[cfg(feature = "devtools")]
use devtools_traits::{
    ChromeToDevtoolsControlMsg, DevtoolsControlMsg, DevtoolsPageInfo, NavigationState,
    ScriptToDevtoolsControlMsg,
};
use embedder_traits::resources::{self, Resource};
use embedder_traits::user_contents::{UserContentManagerId, UserContents};
use embedder_traits::{
    AnimationState, EmbedderControlId, EmbedderControlResponse, EmbedderProxy, FocusSequenceNumber,
    GenericEmbedderProxy, InputEvent, InputEventAndId, InputEventOutcome, JSValue,
    JavaScriptEvaluationError, JavaScriptEvaluationId, KeyboardEvent, MediaSessionActionType,
    MediaSessionEvent, MediaSessionPlaybackState, MouseButtonAction, MouseButtonEvent,
    NewWebViewDetails, PaintHitTestResult, Theme, ViewportDetails, WakeLockDelegate, WakeLockType,
    WebDriverCommandMsg, WebDriverLoadStatus, WebDriverScriptCommand,
};
use euclid::default::Size2D as UntypedSize2D;
use fonts::SystemFontServiceProxy;
use ipc_channel::router::ROUTER;
use keyboard_types::{Key, KeyState, Modifiers, NamedKey};
use layout_api::{LayoutFactory, ScriptThreadFactory};
use log::{debug, error, info, trace, warn};
use media::WindowGLContext;
use net::image_cache::ImageCacheFactoryImpl;
use net_traits::pub_domains::registered_domain_name;
use net_traits::{self, AsyncRuntime, FetchThread, ResourceThreads};
use paint_api::{
    PaintMessage, PaintProxy, PinchZoomInfos, PipelineExitSource, SendableFrameTree,
    WebRenderExternalImageIdManager,
};
use profile_traits::mem::ProfilerMsg;
use profile_traits::{mem, time};
use rand::rngs::SmallRng;
use rand::seq::IndexedRandom;
use rand::{RngExt, SeedableRng, make_rng};
use rustc_hash::{FxHashMap, FxHashSet};
use script_traits::{
    ConstellationInputEvent, DiscardBrowsingContext, DocumentActivity, MouseButtons,
    NewPipelineInfo, ScriptThreadMessage, UpdatePipelineIdReason,
};
use servo_background_hang_monitor::HangMonitorRegister;
use servo_base::generic_channel;
use servo_base::generic_channel::{
    GenericCallback, GenericSend, GenericSender, RoutedReceiver, SendError,
};
use servo_base::id::{
    BrowsingContextId, CONSTELLATION_PIPELINE_NAMESPACE_ID, FIRST_CONTENT_PIPELINE_NAMESPACE_ID,
    HistoryStateId, MessagePortId, MessagePortRouterId, PainterId, PipelineId, PipelineNamespace,
    PipelineNamespaceId, PipelineNamespaceRequest, ScriptEventLoopId, WebViewId, WorkerId,
};
use servo_base::threadboost::{BoostAffinity, ThreadPriority};
#[cfg(feature = "bluetooth")]
use servo_bluetooth_traits::BluetoothRequest;
use servo_canvas::canvas_paint_thread::CanvasPaintThread;
use servo_canvas_traits::ConstellationCanvasMsg;
use servo_canvas_traits::canvas::{CanvasId, CanvasMsg};
use servo_config::{opts, pref};
use servo_constellation_traits::{
    AuxiliaryWebViewCreationRequest, AuxiliaryWebViewCreationResponse, ConstellationInterest,
    EmbedderToConstellationMessage, HistoryTraversalSource, IFrameLoadInfo, IFrameLoadInfoWithData,
    IFrameSizeMsg, LoadData, LogEntry, MessagePortMsg, NavigationHistoryBehavior, PaintMetricEvent,
    PortMessageTask, PortTransferInfo, RemoteFocusOperation, SWManagerSenders,
    ScreenshotReadinessResponse, ScriptToConstellationMessage, ScrollStateUpdate,
    ServiceWorkerAlgorithm, ServiceWorkerManagerFactory, ServiceWorkerMsg,
    SessionHistoryTraversalRequest, StructuredSerializedData, TargetSnapshotParams,
    TraversalDirection, UserContentManagerAction, WindowSizeType, WorkerAnimationFrameTick,
};
use servo_url::{Host, ImmutableOrigin, ServoUrl};
use storage_traits::StorageThreads;
use storage_traits::cache_storage::CacheStorageThreadMessage;
use storage_traits::client_storage::ClientStorageThreadMessage;
use storage_traits::indexeddb::{IndexedDBThreadMsg, SyncOperation};
use storage_traits::webstorage_thread::{WebStorageThreadMsg, WebStorageType};
#[cfg(feature = "webgpu")]
use webgpu::canvas_context::WebGpuExternalImageMap;
#[cfg(feature = "webgpu")]
use webgpu_traits::{WebGPU, WebGPURequest};

use super::embedder::ConstellationToEmbedderMsg;
use crate::broadcastchannel::BroadcastChannels;
use crate::browsingcontext::{
    AllBrowsingContextsIterator, BrowsingContext, FullyActiveBrowsingContextsIterator,
    NewBrowsingContextInfo,
};
use crate::constellation_webview::{ConstellationWebView, OngoingHistoryTraversalRequest};
use crate::event_loop::EventLoop;
use crate::pipeline::Pipeline;
use crate::serviceworker::ServiceWorkerUnprivilegedContent;
use crate::session_history::{NeedsToReload, SessionHistoryChange, SessionHistoryDiff};

struct PendingApprovalNavigation {
    load_data: LoadData,
    history_behaviour: NavigationHistoryBehavior,
    target_snapshot_params: TargetSnapshotParams,
}

type PendingApprovalNavigations = FxHashMap<PipelineId, PendingApprovalNavigation>;

#[derive(Debug)]
/// The state used by MessagePortInfo to represent the various states the port can be in.
enum TransferState {
    /// The port is currently managed by a given global,
    /// identified by its router id.
    Managed(MessagePortRouterId),
    /// The port is currently in-transfer,
    /// and incoming tasks should be buffered until it becomes managed again.
    TransferInProgress(VecDeque<PortMessageTask>),
    /// A global has requested the transfer to be completed,
    /// it's pending a confirmation of either failure or success to complete the transfer.
    CompletionInProgress(MessagePortRouterId),
    /// While a completion of a transfer was in progress, the port was shipped,
    /// hence the transfer failed to complete.
    /// We start buffering incoming messages,
    /// while awaiting the return of the previous buffer from the global
    /// that failed to complete the transfer.
    CompletionFailed(VecDeque<PortMessageTask>),
    /// While a completion failed, another global requested to complete the transfer.
    /// We are still buffering messages, and awaiting the return of the buffer from the global who failed.
    CompletionRequested(MessagePortRouterId, VecDeque<PortMessageTask>),
}

#[derive(Debug)]
/// Info related to a message-port tracked by the constellation.
struct MessagePortInfo {
    /// The current state of the messageport.
    state: TransferState,

    /// The id of the entangled port, if any.
    entangled_with: Option<MessagePortId>,
}

#[cfg(feature = "webgpu")]
/// WebRender related objects required by WebGPU threads
struct WebRenderWGPU {
    /// List of Webrender external images
    webrender_external_image_id_manager: WebRenderExternalImageIdManager,

    /// WebGPU data that supplied to Webrender for rendering
    wgpu_image_map: WebGpuExternalImageMap,
}

/// A browsing context group.
///
/// <https://html.spec.whatwg.org/multipage/#browsing-context-group>
#[derive(Default)]
pub(crate) struct BrowsingContextGroup {
    /// The set of all event loops in this BrowsingContextGroup.
    /// We store the event loops in a map
    /// indexed by registered domain name (as a `Host`) to event loops.
    /// It is important that scripts with the same eTLD+1,
    /// who are part of the same browsing-context group
    /// share an event loop, since they can use `document.domain`
    /// to become same-origin, at which point they can share DOM objects.
    event_loops: HashMap<Host, Weak<EventLoop>>,

    /// The set of all WebGPU channels in this BrowsingContextGroup.
    #[cfg(feature = "webgpu")]
    webgpus: HashMap<Host, WebGPU>,
}

impl Drop for BrowsingContextGroup {
    fn drop(&mut self) {
        #[cfg(feature = "webgpu")]
        for webgpu in self.webgpus.values() {
            // Request that the WebGPU exit, but do not wait for it to do so. We are explicitly
            // avoiding a synchronous wait here in the middle of Constellation operation. If
            // it becomes necessary in the future these receivers could be waited on asynchronously
            // via polling.
            if let Some((sender, _)) = generic_channel::oneshot() &&
                let Err(error) = webgpu.exit(sender)
            {
                warn!("Failed to request WebGPU exit: {error}.");
            }
        }
    }
}

struct WorkerAnimationFrameProvider {
    webview_id: WebViewId,
    pipeline_id: PipelineId,
    sender: GenericSender<WorkerAnimationFrameTick>,
    tick_pending: bool,
}

/// The `Constellation` itself. In the servo browser, there is one
/// constellation, which maintains all of the browser global data.
/// In embedded applications, there may be more than one constellation,
/// which are independent of each other.
///
/// The constellation may be in a different process from the pipelines,
/// and communicates using IPC.
///
/// It is parameterized over a `LayoutThreadFactory` and a
/// `ScriptThreadFactory` (which in practice are implemented by
/// `LayoutThread` in the `layout` crate, and `ScriptThread` in
/// the `script` crate). Script and layout communicate using a `Message`
/// type.
pub struct Constellation<STF, SWF> {
    /// An ipc-sender/threaded-receiver pair
    /// to facilitate installing pipeline namespaces in threads
    /// via a per-process installer.
    namespace_receiver: RoutedReceiver<PipelineNamespaceRequest>,
    pub(crate) namespace_ipc_sender: GenericSender<PipelineNamespaceRequest>,

    /// A [`Vec`] of all [`EventLoop`]s that have been created for this [`Constellation`].
    /// This will be cleaned up periodically. This stores weak references so that [`EventLoop`]s
    /// can be stopped when they are no longer used.
    event_loops: Vec<Weak<EventLoop>>,

    /// An IPC channel for script threads to send messages to the constellation.
    /// This is the script threads' view of `script_receiver`.
    pub(crate) script_sender: GenericSender<(WebViewId, PipelineId, ScriptToConstellationMessage)>,

    /// A channel for the constellation to receive messages from script threads.
    /// This is the constellation's view of `script_sender`.
    script_receiver:
        Receiver<Result<(WebViewId, PipelineId, ScriptToConstellationMessage), SendError>>,

    /// A handle to register components for hang monitoring.
    /// None when in multiprocess mode.
    pub(crate) background_monitor_register: Option<Box<dyn BackgroundHangMonitorRegister>>,

    /// In single process mode, a join handle on the BHM worker thread.
    background_monitor_register_join_handle: Option<JoinHandle<()>>,

    /// When running in single-process mode, this is a channel to the shared BackgroundHangMonitor
    /// for all [`EventLoop`]s. This will be `None` in multiprocess mode.
    background_monitor_control_sender: Option<GenericSender<BackgroundHangMonitorControlMsg>>,

    /// A channel for the background hang monitor to send messages
    /// to the constellation.
    #[cfg_attr(not(feature = "multiprocess"), expect(unused))]
    pub(crate) background_hang_monitor_sender: GenericSender<HangAlert>,

    /// A channel for the constellation to receiver messages
    /// from the background hang monitor.
    background_hang_monitor_receiver: RoutedReceiver<HangAlert>,

    /// A factory for creating layouts. This allows customizing the kind
    /// of layout created for a [`Constellation`] and prevents a circular crate
    /// dependency between script and layout.
    pub(crate) layout_factory: Arc<dyn LayoutFactory>,

    /// A channel for the embedder (renderer and libservo) to send messages to the [`Constellation`].
    embedder_to_constellation_receiver: Receiver<EmbedderToConstellationMessage>,

    /// A channel through which messages can be sent to the embedder. This is not used by the `Constellation`
    /// itself but only needed to create an `EventLoop`.
    /// Messages from the `Constellation` to the embedder are sent using the `constellation_to_embedder_proxy`
    pub(crate) embedder_proxy: EmbedderProxy,

    /// A channel through which messages can be sent to the embedder.
    pub(crate) constellation_to_embedder_proxy: GenericEmbedderProxy<ConstellationToEmbedderMsg>,

    /// A channel (the implementation of which is port-specific) for the
    /// constellation to send messages to `Paint`.
    pub(crate) paint_proxy: PaintProxy,

    /// Bookkeeping data for all webviews in the constellation.
    webviews: FxHashMap<WebViewId, ConstellationWebView>,

    /// Channels for the constellation to send messages to the public
    /// resource-related threads. There are two groups of resource threads: one
    /// for public browsing, and one for private browsing.
    pub(crate) public_resource_threads: ResourceThreads,

    /// Channels for the constellation to send messages to the private
    /// resource-related threads.  There are two groups of resource
    /// threads: one for public browsing, and one for private
    /// browsing.
    pub(crate) private_resource_threads: ResourceThreads,

    /// Channels for the constellation to send messages to the public
    /// storage-related threads. There are two groups of storage threads: one
    /// for public browsing, and one for private browsing.
    pub(crate) public_storage_threads: StorageThreads,

    /// Channels for the constellation to send messages to the private
    /// storage-related threads.  There are two groups of storage
    /// threads: one for public browsing, and one for private
    /// browsing.
    pub(crate) private_storage_threads: StorageThreads,

    /// A channel for the constellation to send messages to the font
    /// cache thread.
    pub(crate) system_font_service: Arc<SystemFontServiceProxy>,

    /// A channel for the constellation to send messages to the
    /// devtools thread.
    #[cfg(feature = "devtools")]
    pub(crate) devtools_sender: Option<Sender<DevtoolsControlMsg>>,

    /// A (potentially) IPC-based channel to the developer tools, if enabled. This allows
    /// `EventLoop`s to send messages to then. Shared with all `EventLoop`s.
    #[cfg(feature = "devtools")]
    pub script_to_devtools_callback: OnceCell<Option<GenericCallback<ScriptToDevtoolsControlMsg>>>,

    /// An IPC channel for the constellation to send messages to the
    /// bluetooth thread.
    #[cfg(feature = "bluetooth")]
    pub(crate) bluetooth_ipc_sender: GenericSender<BluetoothRequest>,

    /// A map of origin to sender to a Service worker manager.
    sw_managers: HashMap<ImmutableOrigin, GenericSender<ServiceWorkerMsg>>,

    /// A channel for the constellation to send messages to the
    /// time profiler thread.
    pub(crate) time_profiler_chan: time::ProfilerChan,

    /// A channel for the constellation to send messages to the
    /// memory profiler thread.
    pub(crate) mem_profiler_chan: mem::ProfilerChan,

    /// WebRender related objects required by WebGPU threads
    #[cfg(feature = "webgpu")]
    webrender_wgpu: WebRenderWGPU,

    /// A map of message-port Id to info.
    message_ports: FxHashMap<MessagePortId, MessagePortInfo>,

    /// A map of router-id to ipc-sender, to route messages to ports.
    message_port_routers: FxHashMap<MessagePortRouterId, GenericCallback<MessagePortMsg>>,

    /// Bookkeeping for BroadcastChannel functionnality.
    broadcast_channels: BroadcastChannels,

    /// Tracks which pipelines have registered interest in each notification category.
    pipeline_interests: FxHashMap<ConstellationInterest, FxHashSet<PipelineId>>,

    /// The set of all the pipelines in the browser.  (See the `pipeline` module
    /// for more details.)
    pipelines: FxHashMap<PipelineId, Pipeline>,

    worker_animation_frame_providers: FxHashMap<WorkerId, WorkerAnimationFrameProvider>,

    /// The set of all the browsing contexts in the browser.
    browsing_contexts: FxHashMap<BrowsingContextId, BrowsingContext>,

    /// Pipeline IDs are namespaced in order to avoid name collisions,
    /// and the namespaces are allocated by the constellation.
    next_pipeline_namespace_id: Cell<PipelineNamespaceId>,

    /// A [`GenericSender`] to notify navigation events to webdriver.
    webdriver_load_status_sender: Option<(GenericSender<WebDriverLoadStatus>, PipelineId)>,

    /// Are we shutting down?
    shutting_down: bool,

    /// Have we seen any warnings? Hopefully always empty!
    /// The buffer contains `(thread_name, reason)` entries.
    handled_warnings: VecDeque<(Option<String>, String)>,

    /// The random number generator and probability for closing pipelines.
    /// This is for testing the hardening of the constellation.
    random_pipeline_closure: Option<(SmallRng, f32)>,

    /// Phantom data that keeps the Rust type system happy.
    phantom: PhantomData<(STF, SWF)>,

    /// Entry point to create and get channels to a WebGLThread.
    #[cfg(feature = "webgl")]
    pub(crate) webgl_threads: Option<servo_canvas_traits::webgl::WebGLThreads>,

    /// The XR device registry
    pub(crate) webxr_registry: Option<webxr_api::Registry>,

    /// Lazily initialized channels for canvas paint thread.
    canvas: OnceCell<(Sender<ConstellationCanvasMsg>, GenericSender<CanvasMsg>)>,

    /// Navigation requests from script awaiting approval from the embedder.
    pending_approval_navigations: PendingApprovalNavigations,

    /// Bitmask which indicates which combination of mouse buttons are
    /// currently being pressed.
    pressed_mouse_buttons: MouseButtons,

    /// The currently activated keyboard modifiers.
    active_keyboard_modifiers: Modifiers,

    /// If True, exits on thread failure instead of displaying about:failure
    hard_fail: bool,

    /// Pipeline ID of the active media session.
    active_media_session: Option<PipelineId>,

    /// Aggregate screen wake lock count across all webviews. The provider is notified
    /// only when this transitions 0→1 (acquire) or N→0 (release).
    screen_wake_lock_count: u32,

    /// Provider for OS-level screen wake lock acquisition and release.
    wake_lock_provider: Box<dyn WakeLockDelegate>,

    /// The image bytes associated with the BrokenImageIcon embedder resource.
    /// Read during startup and provided to image caches that are created
    /// on an as-needed basis, rather than retrieving it every time.
    #[cfg(feature = "multiprocess")]
    pub(crate) broken_image_icon_data: Vec<u8>,

    /// The process manager.
    #[cfg(feature = "multiprocess")]
    pub(crate) process_manager: crate::process_manager::ProcessManager,

    /// The async runtime.
    async_runtime: Box<dyn AsyncRuntime>,

    /// A vector of [`JoinHandle`]s used to ensure full termination of threaded [`EventLoop`]s
    /// which are runnning in the same process.
    event_loop_join_handles: Vec<JoinHandle<()>>,

    /// A list of URLs that can access privileged internal APIs.
    pub(crate) privileged_urls: Vec<ServoUrl>,

    /// The [`ImageCacheFactory`] to use for all `ScriptThread`s when we are running in
    /// single-process mode. In multi-process mode, each process will create its own
    /// [`ImageCacheFactoryImpl`].
    pub(crate) image_cache_factory: Arc<ImageCacheFactoryImpl>,

    /// A map from `UserContentManagerId` to the `UserContents` for that manager.
    /// Multiple `WebView`s can share the same `UserContentManager` and any mutations
    /// to the `UserContents` need to be forwared to all the `ScriptThread`s that host
    /// the relevant `WebView`.
    pub(crate) user_contents_for_manager_id: FxHashMap<UserContentManagerId, UserContents>,
}

/// State needed to construct a constellation.
pub struct InitialConstellationState {
    /// A channel through which messages can be sent to the embedder. This is not used by the `Constellation`
    /// itself but only needed to create an `EventLoop`.
    /// Messages from the `Constellation` to the embedder are sent using the `constellation_to_embedder_proxy`
    pub embedder_proxy: EmbedderProxy,

    /// A channel through which messages can be sent to the embedder.
    pub constellation_to_embedder_proxy: GenericEmbedderProxy<ConstellationToEmbedderMsg>,

    /// A channel through which messages can be sent to `Paint` in-process.
    pub paint_proxy: PaintProxy,

    /// A channel to the developer tools, if applicable.
    #[cfg(feature = "devtools")]
    pub devtools_sender: Option<Sender<DevtoolsControlMsg>>,

    /// A channel to the bluetooth thread.
    #[cfg(feature = "bluetooth")]
    pub bluetooth_thread: GenericSender<BluetoothRequest>,

    /// A proxy to the `SystemFontService` which manages the list of system fonts.
    pub system_font_service: Arc<SystemFontServiceProxy>,

    /// A channel to the resource thread.
    pub public_resource_threads: ResourceThreads,

    /// A channel to the resource thread.
    pub private_resource_threads: ResourceThreads,

    /// A channel to the storage thread.
    pub public_storage_threads: StorageThreads,

    /// A channel to the storage thread.
    pub private_storage_threads: StorageThreads,

    /// A channel to the time profiler thread.
    pub time_profiler_chan: time::ProfilerChan,

    /// A channel to the memory profiler thread.
    pub mem_profiler_chan: mem::ProfilerChan,

    /// A [`WebRenderExternalImageIdManager`] used to lazily start up the WebGPU threads.
    pub webrender_external_image_id_manager: WebRenderExternalImageIdManager,

    /// Entry point to create and get channels to a WebGLThread.
    #[cfg(feature = "webgl")]
    pub webgl_threads: Option<servo_canvas_traits::webgl::WebGLThreads>,

    /// The XR device registry
    pub webxr_registry: Option<webxr_api::Registry>,

    #[cfg(feature = "webgpu")]
    pub wgpu_image_map: WebGpuExternalImageMap,

    /// A list of URLs that can access privileged internal APIs.
    pub privileged_urls: Vec<ServoUrl>,

    /// The async runtime.
    pub async_runtime: Box<dyn AsyncRuntime>,

    /// The wake lock provider for acquiring and releasing OS-level screen wake locks.
    pub wake_lock_provider: Box<dyn WakeLockDelegate>,
}

/// When we are exiting a pipeline, we can either force exiting or not. A normal exit
/// waits for `Paint` to update its state before exiting, and delegates layout exit to
/// script. A forced exit does not notify `Paint`, and exits layout without involving
/// script.
#[derive(Clone, Copy, Debug)]
enum ExitPipelineMode {
    Normal,
    Force,
}

/// The number of warnings to include in each crash report.
const WARNINGS_BUFFER_SIZE: usize = 32;

impl<STF, SWF> Constellation<STF, SWF>
where
    STF: ScriptThreadFactory,
    SWF: ServiceWorkerManagerFactory,
{
    /// Create a new constellation thread.
    #[servo_tracing::instrument(skip(state, layout_factory))]
    pub fn start(
        embedder_to_constellation_receiver: Receiver<EmbedderToConstellationMessage>,
        state: InitialConstellationState,
        layout_factory: Arc<dyn LayoutFactory>,
        random_pipeline_closure_probability: Option<f32>,
        random_pipeline_closure_seed: Option<usize>,
        hard_fail: bool,
    ) {
        thread::Builder::new()
            .name("Constellation".to_owned())
            .spawn(move || {
                servo_base::threadboost::boost_thread(ThreadPriority::Elevated, BoostAffinity::Boost);
                let (script_ipc_sender, script_ipc_receiver) =
                    generic_channel::channel().expect("ipc channel failure");
                let script_receiver = script_ipc_receiver.route_preserving_errors();

                let (namespace_ipc_sender, namespace_ipc_receiver) =
                    generic_channel::channel().expect("ipc channel failure");
                let namespace_receiver = namespace_ipc_receiver.route_preserving_errors();

                let (background_hang_monitor_ipc_sender, background_hang_monitor_ipc_receiver) =
                    generic_channel::channel().expect("ipc channel failure");
                let background_hang_monitor_receiver =
                    background_hang_monitor_ipc_receiver.route_preserving_errors();

                // If we are in multiprocess mode,
                // a dedicated per-process hang monitor will be initialized later inside the content process.
                // See run_content_process in servo/lib.rs

                let (
                    background_monitor_register,
                    background_monitor_register_join_handle,
                    background_monitor_control_sender
                ) = if opts::get().multiprocess {
                    (None, None, None)
                } else {
                    let (
                        background_hang_monitor_control_ipc_sender,
                        background_hang_monitor_control_ipc_receiver,
                    ) = generic_channel::channel().expect("ipc channel failure");
                    let (register, join_handle) = HangMonitorRegister::init(
                        background_hang_monitor_ipc_sender.clone(),
                        background_hang_monitor_control_ipc_receiver,
                        opts::get().background_hang_monitor,
                    );
                    (
                        Some(register),
                        Some(join_handle),
                        Some(background_hang_monitor_control_ipc_sender),
                    )
                };

                PipelineNamespace::install(CONSTELLATION_PIPELINE_NAMESPACE_ID);

                #[cfg(feature = "webgpu")]
                let webrender_wgpu = WebRenderWGPU {
                    webrender_external_image_id_manager: state.webrender_external_image_id_manager,
                    wgpu_image_map: state.wgpu_image_map,
                };

                let broken_image_icon_data = resources::read_bytes(Resource::BrokenImageIcon);

                let mut constellation: Constellation<STF, SWF> = Constellation {
                    event_loops: Default::default(),
                    namespace_receiver,
                    namespace_ipc_sender,
                    script_sender: script_ipc_sender,
                    background_hang_monitor_sender: background_hang_monitor_ipc_sender,
                    background_hang_monitor_receiver,
                    background_monitor_register,
                    background_monitor_register_join_handle,
                    background_monitor_control_sender,
                    script_receiver,
                    embedder_to_constellation_receiver,
                    layout_factory,
                    embedder_proxy: state.embedder_proxy,
                    constellation_to_embedder_proxy: state.constellation_to_embedder_proxy,
                    paint_proxy: state.paint_proxy,
                    webviews: Default::default(),
                    #[cfg(feature = "devtools")]
                    devtools_sender: state.devtools_sender,
                    #[cfg(feature = "devtools")]
                    script_to_devtools_callback: Default::default(),
                    #[cfg(feature = "bluetooth")]
                    bluetooth_ipc_sender: state.bluetooth_thread,
                    public_resource_threads: state.public_resource_threads,
                    private_resource_threads: state.private_resource_threads,
                    public_storage_threads: state.public_storage_threads,
                    private_storage_threads: state.private_storage_threads,
                    system_font_service: state.system_font_service,
                    sw_managers: Default::default(),
                    message_ports: Default::default(),
                    message_port_routers: Default::default(),
                    broadcast_channels: Default::default(),
                    pipeline_interests: Default::default(),
                    pipelines: Default::default(),
                    worker_animation_frame_providers: Default::default(),
                    browsing_contexts: Default::default(),
                    next_pipeline_namespace_id: Cell::new(FIRST_CONTENT_PIPELINE_NAMESPACE_ID),
                    time_profiler_chan: state.time_profiler_chan,
                    mem_profiler_chan: state.mem_profiler_chan.clone(),
                    phantom: PhantomData,
                    webdriver_load_status_sender: None,
                    #[cfg(feature = "webgpu")]
                    webrender_wgpu,
                    shutting_down: false,
                    handled_warnings: VecDeque::new(),
                    random_pipeline_closure: random_pipeline_closure_probability.map(|probability| {
                        let rng = random_pipeline_closure_seed
                            .map(|seed| SmallRng::seed_from_u64(seed as u64))
                            .unwrap_or_else(make_rng);
                        warn!("Randomly closing pipelines using seed {random_pipeline_closure_seed:?}.");
                        (rng, probability)
                    }),
                    #[cfg(feature = "webgl")]
                    webgl_threads: state.webgl_threads,
                    webxr_registry: state.webxr_registry,
                    canvas: OnceCell::new(),
                    pending_approval_navigations: Default::default(),
                    pressed_mouse_buttons: MouseButtons::empty(),
                    active_keyboard_modifiers: Modifiers::empty(),
                    hard_fail,
                    active_media_session: None,
                    screen_wake_lock_count: 0,
                    wake_lock_provider: state.wake_lock_provider,
                    #[cfg(feature = "multiprocess")]
                    broken_image_icon_data: broken_image_icon_data.clone(),
                    #[cfg(feature = "multiprocess")]
                    process_manager: crate::process_manager::ProcessManager::new(state.mem_profiler_chan),
                    async_runtime: state.async_runtime,
                    event_loop_join_handles: Default::default(),
                    privileged_urls: state.privileged_urls,
                    image_cache_factory: Arc::new(ImageCacheFactoryImpl::new(
                        broken_image_icon_data,
                    )),
                    user_contents_for_manager_id: Default::default(),
                };

                constellation.run();
            })
            .expect("Thread spawning failed");
    }

    fn event_loops(&self) -> Vec<Rc<EventLoop>> {
        self.event_loops
            .iter()
            .filter_map(|weak_event_loop| weak_event_loop.upgrade())
            .collect()
    }

    pub(crate) fn add_event_loop(&mut self, event_loop: &Rc<EventLoop>) {
        self.event_loops.push(Rc::downgrade(event_loop));
    }

    pub(crate) fn add_event_loop_join_handle(&mut self, join_handle: JoinHandle<()>) {
        self.event_loop_join_handles.push(join_handle);
    }

    fn clean_up_finished_script_event_loops(&mut self) {
        self.event_loop_join_handles
            .retain(|join_handle| !join_handle.is_finished());
        self.event_loops
            .retain(|event_loop| event_loop.upgrade().is_some());
    }

    /// The main event loop for the constellation.
    fn run(&mut self) {
        while !self.shutting_down || !self.pipelines.is_empty() {
            // Randomly close a pipeline if --random-pipeline-closure-probability is set
            // This is for testing the hardening of the constellation.
            self.maybe_close_random_pipeline();
            self.handle_request();
            self.finish_completed_session_history_traversal_requests();
            self.clean_up_finished_script_event_loops();
        }
        self.handle_shutdown();

        if !opts::get().multiprocess {
            style::global_style_data::StyleThreadPool::shutdown();
        }

        // Shut down the `FetchThread` if it has been started at any time.
        FetchThread::exit();

        // Note: the last thing the constellation does, is asking the embedder to
        // shut down. This helps ensure we've shut down all our internal threads before
        // de-initializing Servo (see the `thread_count` warning on MacOS).
        debug!("Asking embedding layer to complete shutdown.");
        self.constellation_to_embedder_proxy
            .send(ConstellationToEmbedderMsg::ShutdownComplete);
    }

    /// Helper that sends a message to the event loop of a given pipeline, logging the
    /// given failure message and returning `false` on failure.
    fn send_message_to_pipeline(
        &mut self,
        pipeline_id: PipelineId,
        message: ScriptThreadMessage,
        failure_message: &str,
    ) -> bool {
        let result = match self.pipelines.get(&pipeline_id) {
            Some(pipeline) => pipeline.event_loop.send(message),
            None => {
                warn!("{pipeline_id}: {failure_message}");
                return false;
            },
        };
        if let Err(err) = result {
            self.handle_send_error(pipeline_id, err);
        }
        true
    }

    /// Generate a new pipeline id namespace.
    pub(crate) fn next_pipeline_namespace_id(&self) -> PipelineNamespaceId {
        let pipeline_namespace_id = self.next_pipeline_namespace_id.get();
        self.next_pipeline_namespace_id
            .set(PipelineNamespaceId(pipeline_namespace_id.0 + 1));
        pipeline_namespace_id
    }

    fn browsing_context_group_for_webview_id(
        &self,
        webview_id: &WebViewId,
    ) -> Option<Rc<RefCell<BrowsingContextGroup>>> {
        self.webviews
            .get(webview_id)
            .map(ConstellationWebView::browsing_context_group)
    }

    fn get_event_loop(
        &self,
        host: &Host,
        webview_id: &WebViewId,
    ) -> Result<Weak<EventLoop>, &'static str> {
        let Some(browsing_context_group) = self.browsing_context_group_for_webview_id(webview_id)
        else {
            return Err("Trying to get an event-loop for an unknown WebView");
        };
        browsing_context_group
            .borrow()
            .event_loops
            .get(host)
            .ok_or("Trying to get an event-loop from an unknown browsing context group")
            .cloned()
    }

    fn set_event_loop(&mut self, event_loop: &Rc<EventLoop>, host: Host, webview_id: &WebViewId) {
        let Some(browsing_context_group) = self.browsing_context_group_for_webview_id(webview_id)
        else {
            return warn!("Trying to add an event loop to an unknown WebView ({webview_id})");
        };

        if browsing_context_group
            .borrow_mut()
            .event_loops
            .insert(host.clone(), Rc::downgrade(event_loop))
            .is_some_and(|old_event_loop| old_event_loop.strong_count() != 0)
        {
            warn!("Double-setting an event loop for {host:?} in {webview_id:?}");
        }
    }

    fn get_event_loop_for_new_pipeline(
        &self,
        load_data: &LoadData,
        webview_id: WebViewId,
        parent_pipeline_id: Option<PipelineId>,
        registered_domain_name: &Option<Host>,
    ) -> Option<Rc<EventLoop>> {
        // Never reuse an existing EventLoop when requesting a sandboxed origin.
        if load_data
            .creation_sandboxing_flag_set
            .contains(SandboxingFlagSet::SANDBOXED_ORIGIN_BROWSING_CONTEXT_FLAG)
        {
            return None;
        }

        // If this is an about:blank or about:srcdoc load, it must share the creator's
        // event loop. This must match the logic in the ScriptThread when determining
        // the proper origin.
        if load_data.url.as_str() == "about:blank" || load_data.url.as_str() == "about:srcdoc" {
            if let Some(parent) =
                parent_pipeline_id.and_then(|pipeline_id| self.pipelines.get(&pipeline_id))
            {
                return Some(parent.event_loop.clone());
            }

            if let Some(creator) = load_data
                .creator_pipeline_id
                .and_then(|pipeline_id| self.pipelines.get(&pipeline_id))
            {
                return Some(creator.event_loop.clone());
            }

            // This might happen if a new Pipeline is requested and in the meantime the parent
            // Pipeline has shut down. In this case, just make a new ScriptThread.
            return None;
        }

        let Some(registered_domain_name) = registered_domain_name else {
            return None;
        };

        self.get_event_loop(registered_domain_name, &webview_id)
            .ok()?
            .upgrade()
    }

    fn get_or_create_event_loop_for_new_pipeline(
        &mut self,
        webview_id: WebViewId,
        parent_pipeline_id: Option<PipelineId>,
        load_data: &LoadData,
        is_private: bool,
    ) -> Result<Rc<EventLoop>, SendError> {
        let registered_domain_name = if load_data
            .creation_sandboxing_flag_set
            .contains(SandboxingFlagSet::SANDBOXED_ORIGIN_BROWSING_CONTEXT_FLAG)
        {
            None
        } else {
            registered_domain_name(&load_data.url)
        };

        if let Some(event_loop) = self.get_event_loop_for_new_pipeline(
            load_data,
            webview_id,
            parent_pipeline_id,
            &registered_domain_name,
        ) {
            return Ok(event_loop);
        }

        let event_loop = EventLoop::spawn(self, is_private)?;
        if let Some(registered_domain_name) = registered_domain_name {
            self.set_event_loop(&event_loop, registered_domain_name, &webview_id);
        }
        Ok(event_loop)
    }

    /// Helper function for creating a pipeline
    #[expect(clippy::too_many_arguments)]
    fn new_pipeline(
        &mut self,
        new_pipeline_id: PipelineId,
        browsing_context_id: BrowsingContextId,
        webview_id: WebViewId,
        parent_pipeline_id: Option<PipelineId>,
        opener: Option<BrowsingContextId>,
        initial_viewport_details: ViewportDetails,
        // TODO: we have to provide ownership of the LoadData
        // here, because it will be send on an ipc channel,
        // and ipc channels take onership of their data.
        // https://github.com/servo/ipc-channel/issues/138
        load_data: LoadData,
        is_private: bool,
        target_snapshot_params: TargetSnapshotParams,
        name: Option<String>,
    ) {
        if self.shutting_down {
            return;
        }

        debug!("Creating new pipeline ({new_pipeline_id:?}) in {browsing_context_id}");
        let (webview_hidden, webview_state) = {
            let Some(webview) = self.webviews.get(&webview_id) else {
                warn!("Tried to create Pipeline for unknown WebViewId: {webview_id:?}");
                return;
            };
            (webview.hidden(), webview.state())
        };

        let event_loop = match self.get_or_create_event_loop_for_new_pipeline(
            webview_id,
            parent_pipeline_id,
            &load_data,
            is_private,
        ) {
            Ok(event_loop) => event_loop,
            Err(error) => return self.handle_send_error(new_pipeline_id, error),
        };

        let user_content_manager_id = self
            .webviews
            .get(&webview_id)
            .and_then(|webview| webview.user_content_manager_id);

        let new_pipeline_info = NewPipelineInfo {
            webview_state,
            parent_info: parent_pipeline_id,
            new_pipeline_id,
            browsing_context_id,
            opener,
            load_data,
            viewport_details: initial_viewport_details,
            user_content_manager_id,
            target_snapshot_params,
            frame_name: name,
        };
        let pipeline = match Pipeline::spawn(new_pipeline_info, event_loop, self, webview_hidden) {
            Ok(pipeline) => pipeline,
            Err(error) => return self.handle_send_error(new_pipeline_id, error),
        };

        assert!(!self.pipelines.contains_key(&new_pipeline_id));
        self.pipelines.insert(new_pipeline_id, pipeline);
    }

    /// Get an iterator for the fully active browsing contexts in a subtree.
    fn fully_active_descendant_browsing_contexts_iter(
        &self,
        browsing_context_id: BrowsingContextId,
    ) -> FullyActiveBrowsingContextsIterator<'_> {
        FullyActiveBrowsingContextsIterator::new(
            browsing_context_id,
            &self.browsing_contexts,
            &self.pipelines,
        )
    }

    /// Get an iterator for the fully active browsing contexts in a tree.
    fn fully_active_browsing_contexts_iter(
        &self,
        webview_id: WebViewId,
    ) -> FullyActiveBrowsingContextsIterator<'_> {
        self.fully_active_descendant_browsing_contexts_iter(BrowsingContextId::from(webview_id))
    }

    /// Get an iterator for the browsing contexts in a subtree.
    fn all_descendant_browsing_contexts_iter(
        &self,
        browsing_context_id: BrowsingContextId,
    ) -> AllBrowsingContextsIterator<'_> {
        AllBrowsingContextsIterator {
            stack: vec![browsing_context_id],
            pipelines: &self.pipelines,
            browsing_contexts: &self.browsing_contexts,
        }
    }

    /// Enumerate the specified browsing context's ancestor pipelines up to
    /// the top-level pipeline.
    fn ancestor_pipelines_of_browsing_context_iter(
        &self,
        browsing_context_id: BrowsingContextId,
    ) -> impl Iterator<Item = &Pipeline> + '_ {
        let mut state: Option<PipelineId> = self
            .browsing_contexts
            .get(&browsing_context_id)
            .and_then(|browsing_context| browsing_context.parent_pipeline_id);
        std::iter::from_fn(move || {
            if let Some(pipeline_id) = state {
                let pipeline = self.pipelines.get(&pipeline_id)?;
                let browsing_context = self.browsing_contexts.get(&pipeline.browsing_context_id)?;
                state = browsing_context.parent_pipeline_id;
                Some(pipeline)
            } else {
                None
            }
        })
    }

    /// Enumerate the specified browsing context's ancestor-or-self pipelines up
    /// to the top-level pipeline.
    fn ancestor_or_self_pipelines_of_browsing_context_iter(
        &self,
        browsing_context_id: BrowsingContextId,
    ) -> impl Iterator<Item = &Pipeline> + '_ {
        let this_pipeline = self
            .browsing_contexts
            .get(&browsing_context_id)
            .map(|browsing_context| browsing_context.pipeline_id)
            .and_then(|pipeline_id| self.pipelines.get(&pipeline_id));
        this_pipeline
            .into_iter()
            .chain(self.ancestor_pipelines_of_browsing_context_iter(browsing_context_id))
    }

    /// Create a new browsing context and update the internal bookkeeping.
    #[expect(clippy::too_many_arguments)]
    fn new_browsing_context(
        &mut self,
        browsing_context_id: BrowsingContextId,
        webview_id: WebViewId,
        pipeline_id: PipelineId,
        parent_pipeline_id: Option<PipelineId>,
        viewport_details: ViewportDetails,
        is_private: bool,
        inherited_secure_context: Option<bool>,
    ) {
        debug!("{browsing_context_id}: Creating new browsing context");
        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            println!("Adding BrowsingContext for unknown WebView: {webview_id:?}");
            return;
        };

        // Override the viewport details if we have a pending change for that browsing context.
        let viewport_details = webview
            .take_pending_viewport_details(&browsing_context_id)
            .unwrap_or(viewport_details);
        let browsing_context = BrowsingContext::new(
            browsing_context_id,
            webview_id,
            pipeline_id,
            parent_pipeline_id,
            viewport_details,
            is_private,
            inherited_secure_context,
        );
        self.browsing_contexts
            .insert(browsing_context_id, browsing_context);

        // If this context is a nested container, attach it to parent pipeline.
        if let Some(parent_pipeline_id) = parent_pipeline_id &&
            let Some(parent) = self.pipelines.get_mut(&parent_pipeline_id)
        {
            parent.add_child(browsing_context_id);
        }
    }

    /// Handles loading pages, navigation, and granting access to `Paint`.
    #[servo_tracing::instrument(skip_all)]
    fn handle_request(&mut self) {
        #[expect(clippy::large_enum_variant)]
        #[derive(Debug)]
        enum Request {
            PipelineNamespace(PipelineNamespaceRequest),
            Script((WebViewId, PipelineId, ScriptToConstellationMessage)),
            BackgroundHangMonitor(HangAlert),
            Embedder(EmbedderToConstellationMessage),
            #[cfg_attr(not(feature = "multiprocess"), expect(unused))]
            RemoveProcess(usize),
        }
        // Get one incoming request.
        // This is one of the few places where `Paint` is
        // allowed to panic. If one of the receiver.recv() calls
        // fails, it is because the matching sender has been
        // reclaimed, but this can't happen in normal execution
        // because the constellation keeps a pointer to the sender,
        // so it should never be reclaimed. A possible scenario in
        // which receiver.recv() fails is if some unsafe code
        // produces undefined behaviour, resulting in the destructor
        // being called. If this happens, there's not much we can do
        // other than panic.
        let mut sel = Select::new();
        sel.recv(&self.namespace_receiver);
        sel.recv(&self.script_receiver);
        sel.recv(&self.background_hang_monitor_receiver);
        sel.recv(&self.embedder_to_constellation_receiver);

        #[cfg(feature = "multiprocess")]
        self.process_manager.register(&mut sel);

        let request = {
            let oper = {
                let _span = profile_traits::trace_span!("handle_request::select").entered();
                sel.select()
            };
            let index = oper.index();

            match index {
                0 => oper
                    .recv(&self.namespace_receiver)
                    .expect("Unexpected script channel panic in constellation")
                    .map(Request::PipelineNamespace),
                1 => oper
                    .recv(&self.script_receiver)
                    .expect("Unexpected script channel panic in constellation")
                    .map(Request::Script),
                2 => oper
                    .recv(&self.background_hang_monitor_receiver)
                    .expect("Unexpected BHM channel panic in constellation")
                    .map(Request::BackgroundHangMonitor),
                3 => Ok(Request::Embedder(
                    oper.recv(&self.embedder_to_constellation_receiver)
                        .expect("Unexpected embedder channel panic in constellation"),
                )),
                _ => {
                    // This can only be a error reading on a closed lifeline receiver.
                    let process_index = index - 4;
                    #[cfg(feature = "multiprocess")]
                    let _ = oper.recv(self.process_manager.receiver_at(process_index));
                    Ok(Request::RemoveProcess(process_index))
                },
            }
        };

        let request = match request {
            Ok(request) => request,
            Err(err) => return error!("Deserialization failed ({}).", err),
        };

        match request {
            Request::PipelineNamespace(message) => {
                self.handle_request_for_pipeline_namespace(message)
            },
            Request::Embedder(message) => self.handle_request_from_embedder(message),
            Request::Script(message) => {
                self.handle_request_from_script(message);
            },
            Request::BackgroundHangMonitor(message) => {
                self.handle_request_from_background_hang_monitor(message);
            },
            #[cfg(feature = "multiprocess")]
            Request::RemoveProcess(index) => self.process_manager.remove(index),
            #[cfg(not(feature = "multiprocess"))]
            Request::RemoveProcess(_) => {},
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_request_for_pipeline_namespace(&mut self, request: PipelineNamespaceRequest) {
        let PipelineNamespaceRequest(sender) = request;
        let _ = sender.send(self.next_pipeline_namespace_id());
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_request_from_background_hang_monitor(&self, message: HangAlert) {
        // TODO: In case of a permanent hang being reported, add a "kill script" workflow,
        // via the embedder?
        warn!("Component hang alert: {:?}", message);
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_request_from_embedder(&mut self, message: EmbedderToConstellationMessage) {
        trace_msg_from_embedder!(message, "{message:?}");
        match message {
            EmbedderToConstellationMessage::Exit => {
                self.handle_exit();
            },
            EmbedderToConstellationMessage::AllowNavigationResponse(pipeline_id, allowed) => {
                self.handle_allow_navigation_response(pipeline_id, allowed);
            },
            // Load a new page from a typed url
            // If there is already a pending page (self.pending_changes), it will not be overridden;
            // However, if the id is not encompassed by another change, it will be.
            EmbedderToConstellationMessage::LoadUrl(webview_id, url_request) => {
                let mut load_data = LoadData::new_for_new_unrelated_webview(url_request.url);

                if !url_request.headers.is_empty() {
                    load_data.headers.extend(url_request.headers);
                }

                let ctx_id = BrowsingContextId::from(webview_id);
                let pipeline_id = match self.browsing_contexts.get(&ctx_id) {
                    Some(ctx) => ctx.pipeline_id,
                    None => {
                        return warn!("{}: LoadUrl for unknown browsing context", webview_id);
                    },
                };
                // Since this is a top-level load, initiated by the embedder, go straight to load_url,
                // bypassing schedule_navigation.
                self.load_url(
                    webview_id,
                    pipeline_id,
                    load_data,
                    NavigationHistoryBehavior::Push,
                    TargetSnapshotParams::default(),
                );
            },
            // Create a new top level browsing context. Will use response_chan to return
            // the browsing context id.
            EmbedderToConstellationMessage::NewWebView(url, new_webview_details) => {
                self.handle_new_top_level_browsing_context(url, new_webview_details);
            },
            // Close a top level browsing context.
            EmbedderToConstellationMessage::CloseWebView(webview_id) => {
                self.handle_close_top_level_browsing_context(webview_id);
            },
            EmbedderToConstellationMessage::SetWebViewHasSystemFocus(
                webview_id,
                has_system_focus,
            ) => {
                self.handle_set_has_system_focus(webview_id, has_system_focus);
            },
            // Handle a forward or back request
            EmbedderToConstellationMessage::TraverseHistory(request) => {
                self.handle_traverse_session_history_msg(request);
            },
            EmbedderToConstellationMessage::ChangeViewportDetails(
                webview_id,
                new_viewport_details,
                size_type,
            ) => {
                self.handle_change_viewport_details_msg(
                    webview_id,
                    new_viewport_details,
                    size_type,
                );
            },
            EmbedderToConstellationMessage::ThemeChange(webview_id, theme) => {
                self.handle_theme_change(webview_id, theme);
            },
            EmbedderToConstellationMessage::TickAnimation(webview_ids) => {
                self.handle_tick_animation(webview_ids)
            },
            EmbedderToConstellationMessage::NoLongerWaitingOnAsynchronousImageUpdates(
                pipeline_ids,
            ) => self.handle_no_longer_waiting_on_asynchronous_image_updates(pipeline_ids),
            EmbedderToConstellationMessage::WebDriverCommand(command) => {
                self.handle_webdriver_msg(command);
            },
            EmbedderToConstellationMessage::Reload(webview_id) => {
                self.handle_reload_msg(webview_id);
            },
            EmbedderToConstellationMessage::LogEntry(event_loop_id, thread_name, entry) => {
                self.handle_log_entry(event_loop_id, thread_name, entry);
            },
            EmbedderToConstellationMessage::ForwardInputEvent(webview_id, event, hit_test) => {
                self.forward_input_event(webview_id, event, hit_test);
            },
            EmbedderToConstellationMessage::RefreshCursor(pipeline_id) => {
                self.handle_refresh_cursor(pipeline_id)
            },
            EmbedderToConstellationMessage::ExitFullScreen(webview_id) => {
                self.handle_exit_fullscreen_msg(webview_id);
            },
            EmbedderToConstellationMessage::MediaSessionAction(action) => {
                self.handle_media_session_action_msg(action);
            },
            EmbedderToConstellationMessage::SetWebViewHidden(webview_id, hidden) => {
                self.set_webview_hidden(webview_id, hidden);
            },
            EmbedderToConstellationMessage::SetScrollStates(pipeline_id, scroll_states) => {
                self.handle_set_scroll_states(pipeline_id, scroll_states)
            },
            EmbedderToConstellationMessage::PaintMetric(pipeline_id, paint_metric_event) => {
                self.handle_paint_metric(pipeline_id, paint_metric_event);
            },
            EmbedderToConstellationMessage::EvaluateJavaScript(
                webview_id,
                evaluation_id,
                script,
            ) => {
                self.handle_evaluate_javascript(webview_id, evaluation_id, script);
            },
            EmbedderToConstellationMessage::CreateMemoryReport(sender) => {
                self.mem_profiler_chan.send(ProfilerMsg::Report(sender));
            },
            EmbedderToConstellationMessage::SendImageKeysForPipeline(pipeline_id, image_keys) => {
                if let Some(pipeline) = self.pipelines.get(&pipeline_id) {
                    if pipeline
                        .event_loop
                        .send(ScriptThreadMessage::SendImageKeysBatch(
                            pipeline_id,
                            image_keys,
                        ))
                        .is_err()
                    {
                        warn!("Could not send image keys to pipeline {:?}", pipeline_id);
                    }
                } else {
                    warn!(
                        "Keys were generated for a pipeline ({:?}) that was
                            closed before the request could be fulfilled.",
                        pipeline_id
                    )
                }
            },
            EmbedderToConstellationMessage::PreferencesUpdated(updates) => {
                let event_loops = self
                    .pipelines
                    .values()
                    .map(|pipeline| pipeline.event_loop.clone());
                for event_loop in event_loops {
                    let _ = event_loop.send(ScriptThreadMessage::PreferencesUpdated(
                        updates
                            .iter()
                            .map(|(name, value)| (String::from(*name), value.clone()))
                            .collect(),
                    ));
                }
            },
            EmbedderToConstellationMessage::RequestScreenshotReadiness(webview_id) => {
                if let Some(webview) = self.webviews.get_mut(&webview_id) {
                    webview.handle_screenshot_readiness_request(
                        &self.browsing_contexts,
                        &self.pipelines,
                    );
                }
            },
            EmbedderToConstellationMessage::EmbedderControlResponse(id, response) => {
                self.handle_embedder_control_response(id, response);
            },
            EmbedderToConstellationMessage::UserContentManagerAction(
                user_content_manager_id,
                action,
            ) => {
                self.handle_user_content_manager_action(user_content_manager_id, action);
            },
            EmbedderToConstellationMessage::UpdatePinchZoomInfos(pipeline_id, pinch_zoom) => {
                self.handle_update_pinch_zoom_infos(pipeline_id, pinch_zoom);
            },
            EmbedderToConstellationMessage::SetAccessibilityActive(webview_id, active) => {
                self.set_accessibility_active(webview_id, active);
            },
            EmbedderToConstellationMessage::ForwardAccessibilityAction(action_request) => {
                self.forward_accessibility_action(action_request);
            },
            EmbedderToConstellationMessage::ClearSessionHistory(webview_id) => {
                self.handle_clear_session_history(webview_id);
            },
        }
    }

    fn mutate_user_contents_for_manager_id_and_notify_script_threads(
        &mut self,
        user_content_manager_id: UserContentManagerId,
        callback: impl FnOnce(&mut UserContents),
    ) {
        let event_loops = self.event_loops();
        let user_contents = self
            .user_contents_for_manager_id
            .entry(user_content_manager_id)
            .or_default();

        callback(user_contents);

        for event_loop in event_loops {
            let _ = event_loop.send(ScriptThreadMessage::SetUserContents(
                user_content_manager_id,
                user_contents.clone(),
            ));
        }
    }

    fn handle_user_content_manager_action(
        &mut self,
        user_content_manager_id: UserContentManagerId,
        action: UserContentManagerAction,
    ) {
        match action {
            UserContentManagerAction::AddUserScript(user_script) => {
                self.mutate_user_contents_for_manager_id_and_notify_script_threads(
                    user_content_manager_id,
                    |user_contents| {
                        user_contents.scripts.push(user_script);
                    },
                );
            },
            UserContentManagerAction::RemoveUserScript(user_script_id) => {
                self.mutate_user_contents_for_manager_id_and_notify_script_threads(
                    user_content_manager_id,
                    |user_contents| {
                        user_contents
                            .scripts
                            .retain(|user_script| user_script.id() != user_script_id);
                    },
                );
            },
            UserContentManagerAction::AddUserStyleSheet(user_stylesheet) => {
                self.mutate_user_contents_for_manager_id_and_notify_script_threads(
                    user_content_manager_id,
                    |user_contents| {
                        user_contents.stylesheets.push(user_stylesheet);
                    },
                );
            },
            UserContentManagerAction::RemoveUserStyleSheet(user_stylesheet_id) => {
                self.mutate_user_contents_for_manager_id_and_notify_script_threads(
                    user_content_manager_id,
                    |user_contents| {
                        user_contents
                            .stylesheets
                            .retain(|user_stylesheet| user_stylesheet.id() != user_stylesheet_id);
                    },
                );
            },
            UserContentManagerAction::DestroyUserContentManager => {
                self.user_contents_for_manager_id
                    .remove(&user_content_manager_id);

                for event_loop in self.event_loops() {
                    let _ = event_loop.send(ScriptThreadMessage::DestroyUserContentManager(
                        user_content_manager_id,
                    ));
                }
            },
        }
    }

    fn send_message_to_all_background_hang_monitors(
        &self,
        message: BackgroundHangMonitorControlMsg,
    ) {
        if let Some(background_monitor_control_sender) = &self.background_monitor_control_sender &&
            let Err(error) = background_monitor_control_sender.send(message.clone())
        {
            error!("Could not send message ({message:?}) to BHM: {error}");
        }
        for event_loop in self.event_loops() {
            event_loop.send_message_to_background_hang_monitor(&message);
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_evaluate_javascript(
        &mut self,
        webview_id: WebViewId,
        evaluation_id: JavaScriptEvaluationId,
        script: String,
    ) {
        let browsing_context_id = BrowsingContextId::from(webview_id);
        let Some(pipeline) = self
            .browsing_contexts
            .get(&browsing_context_id)
            .and_then(|browsing_context| self.pipelines.get(&browsing_context.pipeline_id))
        else {
            self.handle_finish_javascript_evaluation(
                evaluation_id,
                Err(JavaScriptEvaluationError::InternalError),
            );
            return;
        };

        if pipeline
            .event_loop
            .send(ScriptThreadMessage::EvaluateJavaScript(
                webview_id,
                pipeline.id,
                evaluation_id,
                script,
            ))
            .is_err()
        {
            self.handle_finish_javascript_evaluation(
                evaluation_id,
                Err(JavaScriptEvaluationError::InternalError),
            );
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_request_from_script(
        &mut self,
        message: (WebViewId, PipelineId, ScriptToConstellationMessage),
    ) {
        let (webview_id, source_pipeline_id, content) = message;
        trace_script_msg!(content, "{source_pipeline_id}: {content:?}");

        match content {
            ScriptToConstellationMessage::CompleteMessagePortTransfer(router_id, ports) => {
                self.handle_complete_message_port_transfer(router_id, ports);
            },
            ScriptToConstellationMessage::MessagePortTransferResult(
                router_id,
                succeeded,
                failed,
            ) => {
                self.handle_message_port_transfer_completed(router_id, succeeded);
                self.handle_message_port_transfer_failed(failed);
            },
            ScriptToConstellationMessage::RerouteMessagePort(port_id, task) => {
                self.handle_reroute_messageport(port_id, task);
            },
            ScriptToConstellationMessage::MessagePortShipped(port_id) => {
                self.handle_messageport_shipped(port_id);
            },
            ScriptToConstellationMessage::NewMessagePortRouter(router_id, callback) => {
                self.handle_new_messageport_router(router_id, callback);
            },
            ScriptToConstellationMessage::RemoveMessagePortRouter(router_id) => {
                self.handle_remove_messageport_router(router_id);
            },
            ScriptToConstellationMessage::NewMessagePort(router_id, port_id) => {
                self.handle_new_messageport(router_id, port_id);
            },
            ScriptToConstellationMessage::EntanglePorts(port1, port2) => {
                self.handle_entangle_messageports(port1, port2);
            },
            ScriptToConstellationMessage::DisentanglePorts(port1, port2) => {
                self.handle_disentangle_messageports(port1, port2);
            },
            ScriptToConstellationMessage::NewBroadcastChannelRouter(
                router_id,
                response_sender,
                origin,
            ) => {
                if self
                    .check_origin_against_pipeline(&source_pipeline_id, &origin)
                    .is_err()
                {
                    return warn!("Attempt to add broadcast router from an unexpected origin.");
                }
                self.broadcast_channels
                    .new_broadcast_channel_router(router_id, response_sender);
            },
            ScriptToConstellationMessage::NewBroadcastChannelNameInRouter(
                router_id,
                channel_name,
                origin,
            ) => {
                if self
                    .check_origin_against_pipeline(&source_pipeline_id, &origin)
                    .is_err()
                {
                    return warn!("Attempt to add channel name from an unexpected origin.");
                }
                self.broadcast_channels
                    .new_broadcast_channel_name_in_router(router_id, channel_name, origin);
            },
            ScriptToConstellationMessage::RemoveBroadcastChannelNameInRouter(
                router_id,
                channel_name,
                origin,
            ) => {
                if self
                    .check_origin_against_pipeline(&source_pipeline_id, &origin)
                    .is_err()
                {
                    return warn!("Attempt to remove channel name from an unexpected origin.");
                }
                self.broadcast_channels
                    .remove_broadcast_channel_name_in_router(router_id, channel_name, origin);
            },
            ScriptToConstellationMessage::RemoveBroadcastChannelRouter(router_id, origin) => {
                if self
                    .check_origin_against_pipeline(&source_pipeline_id, &origin)
                    .is_err()
                {
                    return warn!("Attempt to remove broadcast router from an unexpected origin.");
                }
                self.broadcast_channels
                    .remove_broadcast_channel_router(router_id);
            },
            ScriptToConstellationMessage::ScheduleBroadcast(router_id, message) => {
                if self
                    .check_origin_against_pipeline(&source_pipeline_id, &message.origin)
                    .is_err()
                {
                    return warn!(
                        "Attempt to schedule broadcast from an origin not matching the origin of the msg."
                    );
                }
                self.broadcast_channels
                    .schedule_broadcast(router_id, message);
            },
            ScriptToConstellationMessage::PipelineExited => {
                self.handle_pipeline_exited(source_pipeline_id, PipelineExitSource::Constellation);
            },
            ScriptToConstellationMessage::DiscardDocument => {
                self.handle_discard_document(webview_id, source_pipeline_id);
            },
            ScriptToConstellationMessage::DiscardTopLevelBrowsingContext => {
                self.handle_close_top_level_browsing_context(webview_id);
            },
            ScriptToConstellationMessage::ScriptLoadedURLInIFrame(load_info) => {
                self.handle_script_loaded_url_in_iframe_msg(load_info);
            },
            ScriptToConstellationMessage::ScriptNewIFrame(load_info) => {
                self.handle_script_new_iframe(load_info);
            },
            ScriptToConstellationMessage::CreateAuxiliaryWebView(load_info) => {
                self.handle_script_new_auxiliary(load_info);
            },
            ScriptToConstellationMessage::ChangeRunningAnimationsState(animation_state) => {
                self.handle_change_running_animations_state(source_pipeline_id, animation_state)
            },
            ScriptToConstellationMessage::RegisterWorkerAnimationFrameProvider(
                worker_id,
                sender,
            ) => self.handle_register_worker_animation_frame_provider(
                webview_id,
                source_pipeline_id,
                worker_id,
                sender,
            ),
            ScriptToConstellationMessage::UnregisterWorkerAnimationFrameProvider(worker_id) => {
                self.handle_unregister_worker_animation_frame_provider(worker_id)
            },
            ScriptToConstellationMessage::ChangeWorkerAnimationFrameProviderState(
                worker_id,
                active,
            ) => self.handle_change_worker_animation_frame_provider_state(
                source_pipeline_id,
                worker_id,
                active,
            ),
            // Ask the embedder for permission to load a new page.
            ScriptToConstellationMessage::LoadUrl(
                load_data,
                history_handling,
                target_snapshot_params,
            ) => {
                self.schedule_navigation(
                    webview_id,
                    source_pipeline_id,
                    load_data,
                    history_handling,
                    target_snapshot_params,
                );
            },
            ScriptToConstellationMessage::AbortLoadUrl => {
                self.handle_abort_load_url_msg(webview_id, source_pipeline_id);
            },
            // A page loaded has completed all parsing, script, and reflow messages have been sent.
            ScriptToConstellationMessage::LoadComplete => {
                self.handle_load_complete_msg(webview_id, source_pipeline_id)
            },
            // Handle navigating to a fragment
            ScriptToConstellationMessage::NavigatedToFragment(new_url, replacement_enabled) => {
                self.handle_navigated_to_fragment(source_pipeline_id, new_url, replacement_enabled);
            },
            // Handle a forward or back request
            ScriptToConstellationMessage::TraverseHistory(request) => {
                self.handle_traverse_session_history_msg(request);
            },
            // Handle a push history state request.
            ScriptToConstellationMessage::PushHistoryState(history_state_id, url) => {
                self.handle_push_history_state_msg(source_pipeline_id, history_state_id, url);
            },
            ScriptToConstellationMessage::ReplaceHistoryState(history_state_id, url) => {
                self.handle_replace_history_state_msg(source_pipeline_id, history_state_id, url);
            },
            // Handle a joint session history length request.
            ScriptToConstellationMessage::JointSessionHistoryLength(response_sender) => {
                self.handle_joint_session_history_length(webview_id, response_sender);
            },
            // Notification that the new document is ready to become active
            ScriptToConstellationMessage::ActivateDocument => {
                self.handle_activate_document_msg(webview_id, source_pipeline_id);
            },
            // Update pipeline url after redirections
            ScriptToConstellationMessage::SetFinalUrl(final_url) => {
                // The script may have finished loading after we already started shutting down.
                if let Some(ref mut pipeline) = self.pipelines.get_mut(&source_pipeline_id) {
                    pipeline.url = final_url;
                } else {
                    warn!("constellation got set final url message for dead pipeline");
                }
            },
            ScriptToConstellationMessage::PostMessage {
                target: browsing_context_id,
                source: source_pipeline_id,
                target_origin: origin,
                source_origin,
                data,
            } => {
                self.handle_post_message_msg(
                    browsing_context_id,
                    source_pipeline_id,
                    origin,
                    source_origin,
                    data,
                );
            },
            ScriptToConstellationMessage::FocusAncestorBrowsingContextsForFocusingSteps(
                focused_child_browsing_context_id,
                sequence,
            ) => {
                self.handle_focus_ancestor_browsing_contexts_for_focusing_steps(
                    source_pipeline_id,
                    focused_child_browsing_context_id,
                    sequence,
                );
            },
            ScriptToConstellationMessage::FocusRemoteBrowsingContext(
                focused_browsing_context_id,
                remote_focus_operation,
            ) => {
                self.handle_focus_remote_browsing_context(
                    focused_browsing_context_id,
                    remote_focus_operation,
                );
            },
            ScriptToConstellationMessage::RemoveIFrame(browsing_context_id, response_sender) => {
                let removed_pipeline_ids =
                    self.handle_remove_iframe_msg(webview_id, browsing_context_id);
                if let Err(e) = response_sender.send(removed_pipeline_ids) {
                    warn!("Error replying to remove iframe ({})", e);
                }
            },
            ScriptToConstellationMessage::CreateCanvasPaintThread(size, response_sender) => {
                self.handle_create_canvas_paint_thread_msg(size, response_sender)
            },
            ScriptToConstellationMessage::LogEntry(event_loop_id, thread_name, entry) => {
                self.handle_log_entry(event_loop_id, thread_name, entry);
            },
            ScriptToConstellationMessage::GetBrowsingContextInfo(pipeline_id, response_sender) => {
                let result = self
                    .pipelines
                    .get(&pipeline_id)
                    .and_then(|pipeline| self.browsing_contexts.get(&pipeline.browsing_context_id))
                    .map(|ctx| (ctx.id, ctx.parent_pipeline_id));
                if let Err(e) = response_sender.send(result) {
                    warn!(
                        "Sending reply to get browsing context info failed ({:?}).",
                        e
                    );
                }
            },
            ScriptToConstellationMessage::GetTopForBrowsingContext(
                browsing_context_id,
                response_sender,
            ) => {
                let result = self
                    .browsing_contexts
                    .get(&browsing_context_id)
                    .map(|bc| bc.webview_id);
                if let Err(e) = response_sender.send(result) {
                    warn!(
                        "Sending reply to get top for browsing context info failed ({:?}).",
                        e
                    );
                }
            },
            ScriptToConstellationMessage::GetChildBrowsingContextCount(
                browsing_context_id,
                response_sender,
            ) => {
                let count = self
                    .browsing_contexts
                    .get(&browsing_context_id)
                    .and_then(|browsing_context| self.pipelines.get(&browsing_context.pipeline_id))
                    .map(|pipeline| pipeline.children.len())
                    .unwrap_or_default();
                if let Err(error) = response_sender.send(count) {
                    warn!("Sending reply to get child browsing context count failed ({error:?}).",);
                }
            },

            ScriptToConstellationMessage::GetChildBrowsingContextId(
                browsing_context_id,
                index,
                response_sender,
            ) => {
                let result = self
                    .browsing_contexts
                    .get(&browsing_context_id)
                    .and_then(|bc| self.pipelines.get(&bc.pipeline_id))
                    .and_then(|pipeline| pipeline.children.get(index))
                    .copied();
                if let Err(error) = response_sender.send(result) {
                    warn!("Sending reply to get child browsing context ID failed ({error:?}).",);
                }
            },
            ScriptToConstellationMessage::IsCurrentlyFullyActive(pipeline_id, response_sender) => {
                if let Err(error) = response_sender
                    .send(self.get_activity(pipeline_id) == DocumentActivity::FullyActive)
                {
                    warn!("Sending reply to get document activity failed ({error:?}).");
                }
            },
            ScriptToConstellationMessage::GetDocumentOrigin(pipeline_id, response_sender) => {
                self.send_message_to_pipeline(
                    pipeline_id,
                    ScriptThreadMessage::GetDocumentOrigin(pipeline_id, response_sender),
                    "Document origin retrieval after closure",
                );
            },
            ScriptToConstellationMessage::GetDocumentOriginDetails(
                pipeline_id,
                response_sender,
            ) => {
                self.send_message_to_pipeline(
                    pipeline_id,
                    ScriptThreadMessage::GetDocumentOriginDetails(pipeline_id, response_sender),
                    "Document ancestor origin details retrieval after closure",
                );
            },
            ScriptToConstellationMessage::ServiceWorkerAlgorithm(algorithm) => {
                self.handle_serviceworker_algorithm(source_pipeline_id, algorithm);
            },
            ScriptToConstellationMessage::ForwardDOMMessage(msg_vec, scope_url) => {
                if let Some(mgr) = self.sw_managers.get(&scope_url.origin()) {
                    let _ = mgr.send(ServiceWorkerMsg::ForwardDOMMessage(msg_vec, scope_url));
                } else {
                    warn!("Unable to forward DOMMessage for postMessage call");
                }
            },
            ScriptToConstellationMessage::RegisterInterest(interest) => {
                self.pipeline_interests
                    .entry(interest)
                    .or_default()
                    .insert(source_pipeline_id);
            },
            ScriptToConstellationMessage::UnregisterInterest(interest) => {
                if let Some(set) = self.pipeline_interests.get_mut(&interest) {
                    set.remove(&source_pipeline_id);
                    if set.is_empty() {
                        self.pipeline_interests.remove(&interest);
                    }
                }
            },
            ScriptToConstellationMessage::BroadcastStorageEvent(
                storage,
                url,
                key,
                old_value,
                new_value,
            ) => {
                self.handle_broadcast_storage_event(
                    source_pipeline_id,
                    storage,
                    url,
                    key,
                    old_value,
                    new_value,
                );
            },
            ScriptToConstellationMessage::MediaSessionEvent(pipeline_id, event) => {
                // Unlikely at this point, but we may receive events coming from
                // different media sessions, so we set the active media session based
                // on Playing events.
                // The last media session claiming to be in playing state is set to
                // the active media session.
                // Events coming from inactive media sessions are discarded.
                if self.active_media_session.is_some() &&
                    let MediaSessionEvent::PlaybackStateChange(ref state) = event &&
                    !matches!(
                        state,
                        MediaSessionPlaybackState::Playing | MediaSessionPlaybackState::Paused
                    )
                {
                    return;
                };
                self.active_media_session = Some(pipeline_id);
                self.constellation_to_embedder_proxy.send(
                    ConstellationToEmbedderMsg::MediaSessionEvent(webview_id, event),
                );
            },
            #[cfg(feature = "webgpu")]
            ScriptToConstellationMessage::RequestAdapter(response_sender, options, ids) => self
                .handle_wgpu_request(
                    webview_id,
                    source_pipeline_id,
                    ScriptToConstellationMessage::RequestAdapter(response_sender, options, ids),
                ),
            #[cfg(feature = "webgpu")]
            ScriptToConstellationMessage::GetWebGPUChan(response_sender) => self
                .handle_wgpu_request(
                    webview_id,
                    source_pipeline_id,
                    ScriptToConstellationMessage::GetWebGPUChan(response_sender),
                ),
            ScriptToConstellationMessage::TitleChanged(pipeline, title) => {
                if let Some(pipeline) = self.pipelines.get_mut(&pipeline) {
                    pipeline.title = title;
                }
            },
            ScriptToConstellationMessage::IFrameSizes(iframe_sizes) => {
                self.handle_iframe_size_msg(webview_id, iframe_sizes)
            },
            ScriptToConstellationMessage::ReportMemory(sender) => {
                // get memory report and send it back.
                self.mem_profiler_chan
                    .send(mem::ProfilerMsg::Report(sender));
            },
            ScriptToConstellationMessage::FinishJavaScriptEvaluation(evaluation_id, result) => {
                self.handle_finish_javascript_evaluation(evaluation_id, result)
            },
            ScriptToConstellationMessage::ForwardKeyboardScroll(pipeline_id, scroll) => {
                if let Some(pipeline) = self.pipelines.get(&pipeline_id) &&
                    let Err(error) =
                        pipeline
                            .event_loop
                            .send(ScriptThreadMessage::ForwardKeyboardScroll(
                                pipeline_id,
                                scroll,
                            ))
                {
                    warn!("Could not forward {scroll:?} to {pipeline_id}: {error:?}");
                }
            },
            ScriptToConstellationMessage::RespondToScreenshotReadinessRequest(response) => {
                if let Some(webview) = self.webviews.get_mut(&webview_id) {
                    webview.handle_screenshot_readiness_response(
                        source_pipeline_id,
                        response,
                        &self.paint_proxy,
                    );
                }
            },
            ScriptToConstellationMessage::TriggerGarbageCollection => {
                for event_loop in self.event_loops() {
                    let _ = event_loop.send(ScriptThreadMessage::TriggerGarbageCollection);
                }
            },
            ScriptToConstellationMessage::AcquireWakeLock(type_) => match type_ {
                WakeLockType::Screen => {
                    self.screen_wake_lock_count += 1;
                    if self.screen_wake_lock_count == 1 &&
                        let Err(e) = self.wake_lock_provider.acquire(type_)
                    {
                        warn!("Failed to acquire screen wake lock: {e}");
                    }
                },
            },
            ScriptToConstellationMessage::ReleaseWakeLock(type_) => match type_ {
                WakeLockType::Screen => {
                    self.screen_wake_lock_count = self.screen_wake_lock_count.saturating_sub(1);
                    if self.screen_wake_lock_count == 0 &&
                        let Err(e) = self.wake_lock_provider.release(type_)
                    {
                        warn!("Failed to release screen wake lock: {e}");
                    }
                },
            },
        }
    }

    /// Check the origin of a message against that of the pipeline it came from.
    /// Note: this is still limited as a security check,
    /// see <https://github.com/servo/servo/issues/11722>
    fn check_origin_against_pipeline(
        &self,
        pipeline_id: &PipelineId,
        origin: &ImmutableOrigin,
    ) -> Result<(), ()> {
        let pipeline_origin = match self.pipelines.get(pipeline_id) {
            Some(pipeline) => pipeline.load_data.url.origin(),
            None => {
                warn!("Received message from closed or unknown pipeline.");
                return Err(());
            },
        };
        if &pipeline_origin == origin {
            return Ok(());
        }
        Err(())
    }

    #[servo_tracing::instrument(skip_all)]
    #[cfg(feature = "webgpu")]
    fn handle_wgpu_request(
        &mut self,
        webview_id: WebViewId,
        source_pipeline_id: PipelineId,
        request: ScriptToConstellationMessage,
    ) {
        use webgpu::start_webgpu_thread;

        let Some(browsing_context_group) = self.browsing_context_group_for_webview_id(&webview_id)
        else {
            return warn!("WebView ({webview_id:?}) not found when handling WebGPU request");
        };
        let Some(source_pipeline) = self.pipelines.get(&source_pipeline_id) else {
            return warn!("{source_pipeline_id}: ScriptMsg from closed pipeline");
        };
        let Some(host) = registered_domain_name(&source_pipeline.url) else {
            return warn!("Invalid host url");
        };

        let mut browsing_context_group = browsing_context_group.borrow_mut();
        let webgpu_chan = match browsing_context_group.webgpus.entry(host) {
            Entry::Vacant(v) => start_webgpu_thread(
                self.paint_proxy.cross_process_paint_api.clone(),
                self.webrender_wgpu
                    .webrender_external_image_id_manager
                    .clone(),
                self.webrender_wgpu.wgpu_image_map.clone(),
            )
            .map(|webgpu| {
                let msg = ScriptThreadMessage::SetWebGPUPort(webgpu.1);
                if let Err(e) = source_pipeline.event_loop.send(msg) {
                    warn!(
                        "{}: Failed to send SetWebGPUPort to pipeline ({:?})",
                        source_pipeline_id, e
                    );
                }
                v.insert(webgpu.0).clone()
            }),
            Entry::Occupied(o) => Some(o.get().clone()),
        };
        match request {
            ScriptToConstellationMessage::RequestAdapter(response_sender, options, adapter_id) => {
                match webgpu_chan {
                    None => {
                        if let Err(e) = response_sender.send(None) {
                            warn!("Failed to send request adapter message: {}", e)
                        }
                    },
                    Some(webgpu_chan) => {
                        let adapter_request = WebGPURequest::RequestAdapter {
                            sender: response_sender,
                            options,
                            adapter_id,
                        };
                        if webgpu_chan.0.send(adapter_request).is_err() {
                            warn!("Failed to send request adapter message on WebGPU channel");
                        }
                    },
                }
            },
            ScriptToConstellationMessage::GetWebGPUChan(response_sender) => {
                if response_sender.send(webgpu_chan).is_err() {
                    warn!(
                        "{}: Failed to send WebGPU channel to pipeline",
                        source_pipeline_id
                    )
                }
            },
            _ => warn!("Wrong message type in handle_wgpu_request"),
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_message_port_transfer_completed(
        &mut self,
        router_id: Option<MessagePortRouterId>,
        ports: Vec<MessagePortId>,
    ) {
        let Some(router_id) = router_id else {
            if !ports.is_empty() {
                warn!(
                    "Constellation unable to process port transfer successes, since no router id was received"
                );
            }
            return;
        };
        for port_id in ports.into_iter() {
            let mut entry = match self.message_ports.entry(port_id) {
                Entry::Vacant(_) => {
                    warn!(
                        "Constellation received a port transfer completed msg for unknown messageport {port_id:?}",
                    );
                    continue;
                },
                Entry::Occupied(entry) => entry,
            };
            match entry.get().state {
                TransferState::CompletionInProgress(expected_router_id) => {
                    // Here, the transfer was normally completed.

                    if expected_router_id != router_id {
                        return warn!(
                            "Transfer completed by an unexpected router: {:?}",
                            router_id
                        );
                    }
                    // Update the state to managed.
                    let new_info = MessagePortInfo {
                        state: TransferState::Managed(router_id),
                        entangled_with: entry.get().entangled_with,
                    };
                    entry.insert(new_info);
                },
                _ => warn!("Constellation received unexpected port transfer completed message"),
            }
        }
    }

    fn handle_message_port_transfer_failed(
        &mut self,
        ports: FxHashMap<MessagePortId, PortTransferInfo>,
    ) {
        for (port_id, mut transfer_info) in ports.into_iter() {
            let Some(entry) = self.message_ports.remove(&port_id) else {
                warn!(
                    "Constellation received a port transfer completed msg for unknown messageport {port_id:?}",
                );
                continue;
            };
            let new_info = match entry.state {
                TransferState::CompletionFailed(mut current_buffer) => {
                    // The transfer failed,
                    // and now the global has returned us the buffer we previously sent.
                    // So the next update is back to a "normal" transfer in progress.

                    // Tasks in the previous buffer are older,
                    // hence need to be added to the front of the current one.
                    while let Some(task) = transfer_info.port_message_queue.pop_back() {
                        current_buffer.push_front(task);
                    }
                    // Update the state to transfer-in-progress.
                    MessagePortInfo {
                        state: TransferState::TransferInProgress(current_buffer),
                        entangled_with: entry.entangled_with,
                    }
                },
                TransferState::CompletionRequested(target_router_id, mut current_buffer) => {
                    // Here, before the global who failed the last transfer could return us the buffer,
                    // another global already sent us a request to complete a new transfer.
                    // So we use the returned buffer to update
                    // the current-buffer(of new incoming messages),
                    // and we send everything to the global
                    // who is waiting for completion of the current transfer.

                    // Tasks in the previous buffer are older,
                    // hence need to be added to the front of the current one.
                    while let Some(task) = transfer_info.port_message_queue.pop_back() {
                        current_buffer.push_front(task);
                    }
                    // Forward the buffered message-queue to complete the current transfer.
                    if let Some(ipc_sender) = self.message_port_routers.get(&target_router_id) {
                        if ipc_sender
                            .send(MessagePortMsg::CompletePendingTransfer(
                                port_id,
                                PortTransferInfo {
                                    port_message_queue: current_buffer,
                                    disentangled: entry.entangled_with.is_none(),
                                },
                            ))
                            .is_err()
                        {
                            warn!("Constellation failed to send complete port transfer response.");
                        }
                    } else {
                        warn!("No message-port sender for {:?}", target_router_id);
                    }

                    // Update the state to completion-in-progress.
                    MessagePortInfo {
                        state: TransferState::CompletionInProgress(target_router_id),
                        entangled_with: entry.entangled_with,
                    }
                },
                _ => {
                    warn!("Unexpected port transfer failed message received");
                    continue;
                },
            };
            self.message_ports.insert(port_id, new_info);
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_complete_message_port_transfer(
        &mut self,
        router_id: MessagePortRouterId,
        ports: Vec<MessagePortId>,
    ) {
        let mut response = FxHashMap::default();
        for port_id in ports.into_iter() {
            let Some(entry) = self.message_ports.remove(&port_id) else {
                warn!(
                    "Constellation asked to complete transfer for unknown messageport {port_id:?}",
                );
                continue;
            };
            let new_info = match entry.state {
                TransferState::TransferInProgress(buffer) => {
                    response.insert(
                        port_id,
                        PortTransferInfo {
                            port_message_queue: buffer,
                            disentangled: entry.entangled_with.is_none(),
                        },
                    );

                    // If the port was in transfer, and a global is requesting completion,
                    // we note the start of the completion.
                    MessagePortInfo {
                        state: TransferState::CompletionInProgress(router_id),
                        entangled_with: entry.entangled_with,
                    }
                },
                TransferState::CompletionFailed(buffer) |
                TransferState::CompletionRequested(_, buffer) => {
                    // If the completion had already failed,
                    // this is a request coming from a global to complete a new transfer,
                    // but we're still awaiting the return of the buffer
                    // from the first global who failed.
                    //
                    // So we note the request from the new global,
                    // and continue to buffer incoming messages
                    // and wait for the buffer used in the previous transfer to be returned.
                    //
                    // If another global requests completion in the CompletionRequested state,
                    // we simply swap the target router-id for the new one,
                    // keeping the buffer.
                    MessagePortInfo {
                        state: TransferState::CompletionRequested(router_id, buffer),
                        entangled_with: entry.entangled_with,
                    }
                },
                _ => {
                    warn!("Unexpected complete port transfer message received");
                    continue;
                },
            };
            self.message_ports.insert(port_id, new_info);
        }

        if !response.is_empty() {
            // Forward the buffered message-queue.
            if let Some(ipc_sender) = self.message_port_routers.get(&router_id) {
                if ipc_sender
                    .send(MessagePortMsg::CompleteTransfer(response))
                    .is_err()
                {
                    warn!("Constellation failed to send complete port transfer response.");
                }
            } else {
                warn!("No message-port sender for {:?}", router_id);
            }
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_reroute_messageport(&mut self, port_id: MessagePortId, task: PortMessageTask) {
        let Some(info) = self.message_ports.get_mut(&port_id) else {
            return warn!(
                "Constellation asked to re-route msg to unknown messageport {:?}",
                port_id
            );
        };
        match &mut info.state {
            TransferState::Managed(router_id) | TransferState::CompletionInProgress(router_id) => {
                // In both the managed and completion of a transfer case, we forward the message.
                // Note that in both cases, if the port is transferred before the message is handled,
                // it will be sent back here and buffered while the transfer is ongoing.
                if let Some(ipc_sender) = self.message_port_routers.get(router_id) {
                    let _ = ipc_sender.send(MessagePortMsg::NewTask(port_id, task));
                } else {
                    warn!("No message-port sender for {:?}", router_id);
                }
            },
            TransferState::TransferInProgress(queue) => queue.push_back(task),
            TransferState::CompletionFailed(queue) => queue.push_back(task),
            TransferState::CompletionRequested(_, queue) => queue.push_back(task),
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_messageport_shipped(&mut self, port_id: MessagePortId) {
        if let Some(info) = self.message_ports.get_mut(&port_id) {
            match info.state {
                TransferState::Managed(_) => {
                    // If shipped while managed, note the start of a transfer.
                    info.state = TransferState::TransferInProgress(VecDeque::new());
                },
                TransferState::CompletionInProgress(_) => {
                    // If shipped while completion of a transfer was in progress,
                    // the completion failed.
                    // This will be followed by a MessagePortTransferFailed message,
                    // containing the buffer we previously sent.
                    info.state = TransferState::CompletionFailed(VecDeque::new());
                },
                _ => warn!("Unexpected messageport shipped received"),
            }
        } else {
            warn!(
                "Constellation asked to mark unknown messageport as shipped {:?}",
                port_id
            );
        }
    }

    fn handle_new_messageport_router(
        &mut self,
        router_id: MessagePortRouterId,
        message_port_callbacks: GenericCallback<MessagePortMsg>,
    ) {
        self.message_port_routers
            .insert(router_id, message_port_callbacks);
    }

    fn handle_remove_messageport_router(&mut self, router_id: MessagePortRouterId) {
        self.message_port_routers.remove(&router_id);
    }

    fn handle_new_messageport(&mut self, router_id: MessagePortRouterId, port_id: MessagePortId) {
        match self.message_ports.entry(port_id) {
            // If it's a new port, we should not know about it.
            Entry::Occupied(_) => warn!(
                "Constellation asked to start tracking an existing messageport {:?}",
                port_id
            ),
            Entry::Vacant(entry) => {
                let info = MessagePortInfo {
                    state: TransferState::Managed(router_id),
                    entangled_with: None,
                };
                entry.insert(info);
            },
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_entangle_messageports(&mut self, port1: MessagePortId, port2: MessagePortId) {
        if let Some(info) = self.message_ports.get_mut(&port1) {
            info.entangled_with = Some(port2);
        } else {
            warn!(
                "Constellation asked to entangle unknown messageport: {:?}",
                port1
            );
        }
        if let Some(info) = self.message_ports.get_mut(&port2) {
            info.entangled_with = Some(port1);
        } else {
            warn!(
                "Constellation asked to entangle unknown messageport: {:?}",
                port2
            );
        }
    }

    #[servo_tracing::instrument(skip_all)]
    /// <https://html.spec.whatwg.org/multipage/#disentangle>
    fn handle_disentangle_messageports(
        &mut self,
        port1: MessagePortId,
        port2: Option<MessagePortId>,
    ) {
        // Disentangle initiatorPort and otherPort,
        // so that they are no longer entangled or associated with each other.
        // Note: If `port2` is some, then this is the first message
        // and `port1` is the initiatorPort, `port2` is the otherPort.
        // We can immediately remove the initiator.
        let _ = self.message_ports.remove(&port1);

        // Note: the none case is when otherPort sent this message
        // in response to completing its own local disentanglement.
        let Some(port2) = port2 else {
            return;
        };

        // Start disentanglement of the other port.
        if let Some(info) = self.message_ports.get_mut(&port2) {
            info.entangled_with = None;
            match &mut info.state {
                TransferState::Managed(router_id) |
                TransferState::CompletionInProgress(router_id) => {
                    // We try to disentangle the other port now,
                    // and if it has been transfered out by the time the message is received,
                    // it will be ignored,
                    // and disentanglement will be completed as part of the transfer.
                    if let Some(ipc_sender) = self.message_port_routers.get(router_id) {
                        let _ = ipc_sender.send(MessagePortMsg::CompleteDisentanglement(port2));
                    } else {
                        warn!("No message-port sender for {:?}", router_id);
                    }
                },
                _ => {
                    // Note: the port is in transfer, disentanglement will complete along with it.
                },
            }
        } else {
            warn!(
                "Constellation asked to disentangle unknown messageport: {:?}",
                port2
            );
        }
    }

    /// <https://www.w3.org/TR/service-workers/#algorithms>
    /// Algorithms invoked from in-parallel steps run on the service worker mananager,
    /// per origin and routed by the constellation.
    #[servo_tracing::instrument(skip_all)]
    fn handle_serviceworker_algorithm(
        &mut self,
        pipeline_id: PipelineId,
        algorithm: ServiceWorkerAlgorithm,
    ) {
        let origin = match &algorithm {
            ServiceWorkerAlgorithm::StartRegister(job) => job.storage_key.clone(),
            ServiceWorkerAlgorithm::Unregister(job) => job.storage_key.clone(),
            ServiceWorkerAlgorithm::MatchServiceWorkerRegistration { storage_key, .. } => {
                storage_key.clone()
            },
        };

        if self
            .check_origin_against_pipeline(&pipeline_id, &origin)
            .is_err()
        {
            return warn!(
                "Attempt to schedule a serviceworker job from an origin not matching the origin of the job."
            );
        }

        // This match is equivalent to Entry.or_insert_with but allows for early return.
        let sw_manager = match self.sw_managers.entry(origin.clone()) {
            Entry::Occupied(entry) => entry.into_mut(),
            Entry::Vacant(entry) => {
                let (own_sender, receiver) =
                    generic_channel::channel().expect("Failed to create IPC channel!");

                let sw_senders = SWManagerSenders {
                    resource_threads: self.public_resource_threads.clone(),
                    own_sender: own_sender.clone(),
                    receiver,
                    paint_api: self.paint_proxy.cross_process_paint_api.clone(),
                    system_font_service_sender: self.system_font_service.to_sender(),
                };

                #[cfg(feature = "multiprocess")]
                if opts::get().multiprocess {
                    let (sender, receiver) = generic_channel::channel()
                        .expect("Failed to create lifeline channel for sw");
                    let content =
                        ServiceWorkerUnprivilegedContent::new(sw_senders, origin, Some(sender));

                    if let Ok(process) = content.spawn_multiprocess() {
                        let crossbeam_receiver = receiver.route_preserving_errors();
                        self.process_manager.add(crossbeam_receiver, process);
                    } else {
                        return warn!("Failed to spawn process for SW manager.");
                    }
                } else {
                    let content = ServiceWorkerUnprivilegedContent::new(sw_senders, origin, None);
                    content.start::<SWF>();
                }
                #[cfg(not(feature = "multiprocess"))]
                {
                    let content = ServiceWorkerUnprivilegedContent::new(sw_senders, origin, None);
                    content.start::<SWF>();
                }

                entry.insert(own_sender)
            },
        };
        if let Err(err) = sw_manager.send(ServiceWorkerMsg::HandleAlgorithm(algorithm)) {
            warn!("Failed to send algorithm to SW manager: {:?}", err);
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_broadcast_storage_event(
        &self,
        pipeline_id: PipelineId,
        storage: WebStorageType,
        url: ServoUrl,
        key: Option<String>,
        old_value: Option<String>,
        new_value: Option<String>,
    ) {
        let origin = url.origin();
        let Some(source_pipeline) = self.pipelines.get(&pipeline_id) else {
            warn!("Received storage event broadcast request from closed pipeline.");
            return;
        };

        if source_pipeline.url.origin() != origin {
            return warn!(
                "Attempt to broadcast storage event from an origin not matching the source pipeline origin."
            );
        }

        let interested = match self
            .pipeline_interests
            .get(&ConstellationInterest::StorageEvent)
        {
            Some(set) => set,
            None => return,
        }
        .iter()
        .filter_map(|interested_id| self.pipelines.get(interested_id));

        for pipeline in interested {
            if pipeline.id == pipeline_id || pipeline.url.origin() != origin {
                continue;
            }

            // https://html.spec.whatwg.org/multipage/#concept-storage-broadcast
            // "Step 3. Let remoteStorages be all Storage objects excluding storage whose:
            // type is storage's type
            // relevant settings object's origin is same origin with storage's relevant settings object's origin
            // and, if type is "session", whose relevant settings object's associated Document's
            // node navigable's traversable navigable is thisDocument's node navigable's
            // traversable navigable."
            if storage == WebStorageType::Session &&
                pipeline.webview_id != source_pipeline.webview_id
            {
                continue;
            }

            let msg = ScriptThreadMessage::DispatchStorageEvent(
                pipeline.id,
                storage,
                url.clone(),
                key.clone(),
                old_value.clone(),
                new_value.clone(),
            );
            if let Err(err) = pipeline.event_loop.send(msg) {
                warn!(
                    "{}: Failed to broadcast storage event to pipeline ({:?}).",
                    pipeline.id, err
                );
            }
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_exit(&mut self) {
        debug!("Handling exit.");

        // TODO: add a timer, which forces shutdown if threads aren't responsive.
        if self.shutting_down {
            return;
        }
        self.shutting_down = true;

        self.mem_profiler_chan.send(mem::ProfilerMsg::Exit);

        // Tell all BHMs to exit, and to ensure their monitored components exit even when currently
        // hanging (on JS or sync XHR). This must be done before starting the process of closing all
        // pipelines.
        self.send_message_to_all_background_hang_monitors(BackgroundHangMonitorControlMsg::Exit);

        // Close the top-level browsing contexts
        let browsing_context_ids: Vec<_> = self
            .browsing_contexts
            .values()
            .filter(|browsing_context| browsing_context.is_top_level())
            .map(|browsing_context| (browsing_context.webview_id, browsing_context.id))
            .collect();
        for (webview_id, browsing_context_id) in browsing_context_ids {
            debug!(
                "{}: Removing top-level browsing context",
                browsing_context_id
            );
            self.close_browsing_context(webview_id, browsing_context_id, ExitPipelineMode::Normal);
        }

        // Close any pending changes and pipelines
        let pending_changes: Vec<_> = self
            .webviews
            .values_mut()
            .flat_map(|webview| webview.pending_changes.drain(..))
            .collect();
        for pending in pending_changes {
            debug!(
                "{}: Removing pending browsing context",
                pending.browsing_context_id
            );
            self.close_browsing_context(
                pending.webview_id,
                pending.browsing_context_id,
                ExitPipelineMode::Normal,
            );
            debug!("{}: Removing pending pipeline", pending.new_pipeline_id);
            self.close_pipeline(
                pending.new_pipeline_id,
                DiscardBrowsingContext::Yes,
                ExitPipelineMode::Normal,
            );
        }

        // In case there are browsing contexts which weren't attached, we close them.
        let browsing_context_ids: Vec<_> = self
            .browsing_contexts
            .iter()
            .map(|(browsing_context_id, browsing_context)| {
                (*browsing_context_id, browsing_context.webview_id)
            })
            .collect();

        for (browsing_context_id, webview_id) in browsing_context_ids {
            debug!(
                "{}: Removing detached browsing context",
                browsing_context_id
            );
            self.close_browsing_context(webview_id, browsing_context_id, ExitPipelineMode::Normal);
        }

        // In case there are pipelines which weren't attached to the pipeline tree, we close them.
        let pipeline_ids: Vec<PipelineId> = self.pipelines.keys().cloned().collect();
        for pipeline_id in pipeline_ids {
            debug!("{}: Removing detached pipeline", pipeline_id);
            self.close_pipeline(
                pipeline_id,
                DiscardBrowsingContext::Yes,
                ExitPipelineMode::Normal,
            );
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_shutdown(&mut self) {
        debug!("Handling shutdown.");

        for join_handle in self.event_loop_join_handles.drain(..) {
            if join_handle.join().is_err() {
                error!("Failed to join on a script-thread.");
            }
        }

        // In single process mode, join on the background hang monitor worker thread.
        drop(self.background_monitor_register.take());
        if let Some(join_handle) = self.background_monitor_register_join_handle.take() &&
            join_handle.join().is_err()
        {
            error!("Failed to join on the bhm background thread.");
        }

        // At this point, there are no active pipelines,
        // so we can safely block on other threads, without worrying about deadlock.
        // Channels to receive signals when threads are done exiting.
        let (core_ipc_sender, core_ipc_receiver) =
            generic_channel::oneshot().expect("Failed to create IPC channel!");
        let (public_client_storage_generic_sender, public_client_storage_generic_receiver) =
            generic_channel::channel().expect("Failed to create generic channel!");
        let (private_client_storage_generic_sender, private_client_storage_generic_receiver) =
            generic_channel::channel().expect("Failed to create generic channel!");
        let (private_cache_storage_generic_sender, private_cache_storage_generic_receiver) =
            generic_channel::channel().expect("Failed to create generic channel!");
        let (public_cache_storage_generic_sender, public_cache_storage_generic_receiver) =
            generic_channel::channel().expect("Failed to create generic channel!");
        let (public_indexeddb_ipc_sender, public_indexeddb_ipc_receiver) =
            generic_channel::channel().expect("Failed to create generic channel!");
        let (private_indexeddb_ipc_sender, private_indexeddb_ipc_receiver) =
            generic_channel::channel().expect("Failed to create generic channel!");
        let (public_web_storage_generic_sender, public_web_storage_generic_receiver) =
            generic_channel::channel().expect("Failed to create generic channel!");
        let (private_web_storage_generic_sender, private_web_storage_generic_receiver) =
            generic_channel::channel().expect("Failed to create generic channel!");

        debug!("Exiting core resource threads.");
        if let Err(e) = self
            .public_resource_threads
            .send(net_traits::CoreResourceMsg::Exit(core_ipc_sender))
        {
            warn!("Exit resource thread failed ({})", e);
        }

        #[cfg(feature = "devtools")]
        if let Some(ref chan) = self.devtools_sender {
            debug!("Exiting devtools.");
            let msg = DevtoolsControlMsg::FromChrome(ChromeToDevtoolsControlMsg::ServerExitMsg);
            if let Err(e) = chan.send(msg) {
                warn!("Exit devtools failed ({:?})", e);
            }
        }

        debug!("Exiting public client storage thread.");
        if let Err(e) = generic_channel::GenericSend::send(
            &self.public_storage_threads,
            ClientStorageThreadMessage::Exit(public_client_storage_generic_sender),
        ) {
            warn!("Exit public client storage thread failed ({})", e);
        }
        debug!("Exiting private client storage thread.");
        if let Err(e) = generic_channel::GenericSend::send(
            &self.private_storage_threads,
            ClientStorageThreadMessage::Exit(private_client_storage_generic_sender),
        ) {
            warn!("Exit private client storage thread failed ({})", e);
        }

        debug!("Exiting public cache storage thread.");
        if let Err(e) = generic_channel::GenericSend::send(
            &self.public_storage_threads,
            CacheStorageThreadMessage::Exit(public_cache_storage_generic_sender),
        ) {
            warn!("Exit public cache storage thread failed ({})", e);
        }
        debug!("Exiting private cache storage thread.");
        if let Err(e) = generic_channel::GenericSend::send(
            &self.private_storage_threads,
            CacheStorageThreadMessage::Exit(private_cache_storage_generic_sender),
        ) {
            warn!("Exit private cache storage thread failed ({})", e);
        }

        debug!("Exiting public indexeddb resource threads.");
        if let Err(e) =
            self.public_storage_threads
                .send(IndexedDBThreadMsg::Sync(SyncOperation::Exit(
                    public_indexeddb_ipc_sender,
                )))
        {
            warn!("Exit public indexeddb thread failed ({})", e);
        }

        debug!("Exiting private indexeddb resource threads.");
        if let Err(e) =
            self.private_storage_threads
                .send(IndexedDBThreadMsg::Sync(SyncOperation::Exit(
                    private_indexeddb_ipc_sender,
                )))
        {
            warn!("Exit private indexeddb thread failed ({})", e);
        }

        debug!("Exiting public web storage thread.");
        if let Err(e) = generic_channel::GenericSend::send(
            &self.public_storage_threads,
            WebStorageThreadMsg::Exit(public_web_storage_generic_sender),
        ) {
            warn!("Exit public web storage thread failed ({})", e);
        }

        debug!("Exiting private web storage thread.");
        if let Err(e) = generic_channel::GenericSend::send(
            &self.private_storage_threads,
            WebStorageThreadMsg::Exit(private_web_storage_generic_sender),
        ) {
            warn!("Exit private web storage thread failed ({})", e);
        }

        #[cfg(feature = "bluetooth")]
        {
            debug!("Exiting bluetooth thread.");
            if let Err(e) = self.bluetooth_ipc_sender.send(BluetoothRequest::Exit) {
                warn!("Exit bluetooth thread failed ({})", e);
            }
        }

        debug!("Exiting service worker manager thread.");
        for (_, mgr) in self.sw_managers.drain() {
            if let Err(e) = mgr.send(ServiceWorkerMsg::Exit) {
                warn!("Exit service worker manager failed ({})", e);
            }
        }

        let canvas_exit_receiver = if let Some((canvas_sender, _)) = self.canvas.get() {
            debug!("Exiting Canvas Paint thread.");
            let (canvas_exit_sender, canvas_exit_receiver) = unbounded();
            if let Err(e) = canvas_sender.send(ConstellationCanvasMsg::Exit(canvas_exit_sender)) {
                warn!("Exit Canvas Paint thread failed ({})", e);
            }
            Some(canvas_exit_receiver)
        } else {
            None
        };

        debug!("Exiting WebGPU threads.");
        #[cfg(feature = "webgpu")]
        {
            let receivers: Vec<_> = self
                .webviews
                .values()
                .flat_map(|webview| {
                    // This `take` is necessary as it ensures that WebViews that
                    // share a BrowsingContextGroup don't have their WebGPU
                    // entries processed more than once.
                    std::mem::take(&mut webview.browsing_context_group().borrow_mut().webgpus)
                })
                .filter_map(|(_, webgpu)| {
                    let (sender, receiver) =
                        generic_channel::oneshot().expect("Failed to create IPC channel!");
                    webgpu.exit(sender).is_ok().then_some(receiver)
                })
                .collect();

            for receiver in receivers {
                if let Err(error) = receiver.recv() {
                    warn!("Failed to receive exit response from WebGPU: {error:?}.");
                }
            }
        }

        debug!("Exiting GLPlayer thread.");
        WindowGLContext::get().exit();

        // Wait for the canvas thread to exit before shutting down the font service, as
        // canvas might still be using the system font service before shutting down.
        if let Some(canvas_exit_receiver) = canvas_exit_receiver {
            let _ = canvas_exit_receiver.recv();
        }

        debug!("Exiting the system font service thread.");
        self.system_font_service.exit();

        // Receive exit signals from threads.
        if let Err(e) = core_ipc_receiver.recv() {
            warn!("Exit resource thread failed ({:?})", e);
        }
        if let Err(e) = public_client_storage_generic_receiver.recv() {
            warn!("Exit public client storage thread failed ({:?})", e);
        }
        if let Err(e) = private_client_storage_generic_receiver.recv() {
            warn!("Exit private client storage thread failed ({:?})", e);
        }
        if let Err(e) = private_cache_storage_generic_receiver.recv() {
            warn!("Exit private cache storage thread failed ({:?})", e);
        }
        if let Err(e) = public_cache_storage_generic_receiver.recv() {
            warn!("Exit public cache storage thread failed ({:?})", e);
        }
        if let Err(e) = public_indexeddb_ipc_receiver.recv() {
            warn!("Exit public indexeddb thread failed ({:?})", e);
        }
        if let Err(e) = private_indexeddb_ipc_receiver.recv() {
            warn!("Exit private indexeddb thread failed ({:?})", e);
        }
        if let Err(e) = public_web_storage_generic_receiver.recv() {
            warn!("Exit public web storage thread failed ({:?})", e);
        }
        if let Err(e) = private_web_storage_generic_receiver.recv() {
            warn!("Exit private web storage thread failed ({:?})", e);
        }

        debug!("Shutting-down IPC router thread in constellation.");
        ROUTER.shutdown();

        debug!("Shutting-down the async runtime in constellation.");
        self.async_runtime.shutdown();
    }

    fn handle_pipeline_exited(&mut self, pipeline_id: PipelineId, exit_source: PipelineExitSource) {
        debug!("{}: Exited", pipeline_id);
        self.remove_worker_animation_frame_providers_for_pipeline(pipeline_id);

        let Some(pipeline) = self.pipelines.remove(&pipeline_id) else {
            return;
        };

        // Clean up any registered interests for this pipeline.
        self.pipeline_interests.retain(|_, set| {
            set.remove(&pipeline_id);
            !set.is_empty()
        });

        // Now that the Script and Constellation parts of Servo no longer have a reference to
        // this pipeline, tell `Paint` that it has shut down. This is delayed until the
        // last moment.
        self.paint_proxy.send(PaintMessage::PipelineExited(
            pipeline.webview_id,
            pipeline.id,
            exit_source,
        ));
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_send_error(&mut self, pipeline_id: PipelineId, error: SendError) {
        error!("Error sending message to {pipeline_id:?}: {error}",);

        // Ignore errors from unknown Pipelines.
        let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
            return;
        };

        // Treat send error the same as receiving a panic message
        self.handle_panic_in_webview(
            pipeline.webview_id,
            &format!("Send failed ({error})"),
            &None,
        );
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_panic(
        &mut self,
        event_loop_id: Option<ScriptEventLoopId>,
        reason: String,
        backtrace: Option<String>,
    ) {
        if self.hard_fail {
            // It's quite difficult to make Servo exit cleanly if some threads have failed.
            // Hard fail exists for test runners so we crash and that's good enough.
            error!("Pipeline failed in hard-fail mode.  Crashing!");
            process::exit(1);
        }

        let Some(event_loop_id) = event_loop_id else {
            return;
        };
        debug!("Panic handler for {event_loop_id:?}: {reason:?}",);

        let mut webview_ids = HashSet::new();
        let mut crashed_pipelines = Vec::new();
        for pipeline in self.pipelines.values() {
            if pipeline.event_loop.id() == event_loop_id {
                crashed_pipelines.push(pipeline.id);
                webview_ids.insert(pipeline.webview_id);
            }
        }

        for webview_id in webview_ids {
            self.handle_panic_in_webview(webview_id, &reason, &backtrace);
        }

        for pipeline_id in crashed_pipelines {
            self.close_pipeline(
                pipeline_id,
                DiscardBrowsingContext::No,
                ExitPipelineMode::Force,
            );
            // The pipeline is now unreachable, so we should consider it gone. We should
            // not try to send any subsequent messages to this pipeline. all() here ensures
            // that `Paint` cleans up the pipeline display immediately without waiting for
            // confirmation from the event loop.
            self.handle_pipeline_exited(pipeline_id, PipelineExitSource::all());
        }
    }

    fn handle_panic_in_webview(
        &mut self,
        webview_id: WebViewId,
        reason: &String,
        backtrace: &Option<String>,
    ) {
        self.constellation_to_embedder_proxy
            .send(ConstellationToEmbedderMsg::Panic(
                webview_id,
                reason.clone(),
                backtrace.clone(),
            ));

        let browsing_context_id = BrowsingContextId::from(webview_id);
        let Some(browsing_context) = self.browsing_contexts.get(&browsing_context_id) else {
            return warn!("failed browsing context is missing");
        };
        let viewport_details = browsing_context.viewport_details;
        let pipeline_id = browsing_context.pipeline_id;

        let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
            return warn!("failed pipeline is missing");
        };
        let opener = pipeline.opener;

        let old_pipeline_id = pipeline_id;
        let Some(old_load_data) = self.refresh_load_data(pipeline_id) else {
            return warn!("failed pipeline is missing");
        };

        self.close_browsing_context_children(
            webview_id,
            browsing_context_id,
            DiscardBrowsingContext::No,
            ExitPipelineMode::Force,
        );

        if old_load_data.crash.is_some() {
            return error!("crash page crashed");
        }

        warn!("creating replacement pipeline for crash page");

        let new_pipeline_id = PipelineId::new();
        let new_load_data = LoadData {
            crash: Some(
                backtrace
                    .clone()
                    .map(|backtrace| format!("{reason}\n{backtrace}"))
                    .unwrap_or_else(|| reason.clone()),
            ),
            creation_sandboxing_flag_set: SandboxingFlagSet::all(),
            ..old_load_data.clone()
        };

        let is_private = false;
        self.new_pipeline(
            new_pipeline_id,
            browsing_context_id,
            webview_id,
            None,
            opener,
            viewport_details,
            new_load_data,
            is_private,
            TargetSnapshotParams::default(),
            None,
        );

        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            return warn!("Adding pending change to unknown WebView: {webview_id:?}");
        };
        webview.add_pending_change(SessionHistoryChange {
            webview_id,
            browsing_context_id,
            new_pipeline_id,
            // Pipeline already closed by close_browsing_context_children, so we can pass Yes here
            // to avoid closing again in handle_activate_document_msg (though it would be harmless)
            replace: Some(NeedsToReload::Yes(old_pipeline_id, old_load_data)),
            new_browsing_context_info: None,
            viewport_details,
        });
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_set_has_system_focus(&mut self, webview_id: WebViewId, has_system_focus: bool) {
        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            return warn!("Tried to focus a nonexistent WebView: {webview_id:?}");
        };
        if !webview.set_has_system_focus(has_system_focus) {
            return;
        }

        let state = webview.state();
        for event_loop in self.event_loops() {
            if let Err(error) =
                event_loop.send(ScriptThreadMessage::UpdateWebViewState(state.clone()))
            {
                warn!(
                    "Sending to closed event loop ({:?}): {error}",
                    event_loop.id()
                );
            }
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_log_entry(
        &mut self,
        event_loop_id: Option<ScriptEventLoopId>,
        thread_name: Option<String>,
        entry: LogEntry,
    ) {
        if let LogEntry::Panic(ref reason, ref backtrace) = entry {
            self.handle_panic(event_loop_id, reason.clone(), Some(backtrace.clone()));
        }

        match entry {
            LogEntry::Panic(reason, _) | LogEntry::Error(reason) | LogEntry::Warn(reason) => {
                // VecDeque::truncate is unstable
                if WARNINGS_BUFFER_SIZE <= self.handled_warnings.len() {
                    self.handled_warnings.pop_front();
                }
                self.handled_warnings.push_back((thread_name, reason));
            },
        }
    }

    fn update_pressed_mouse_buttons(&mut self, event: &MouseButtonEvent) {
        let Ok(buttons) = MouseButtons::try_from(event.button) else {
            return;
        };
        match event.action {
            MouseButtonAction::Down => {
                self.pressed_mouse_buttons |= buttons;
            },
            MouseButtonAction::Up => {
                self.pressed_mouse_buttons &= !(buttons);
            },
        }
    }

    #[expect(deprecated)]
    fn update_active_keybord_modifiers(&mut self, event: &KeyboardEvent) {
        self.active_keyboard_modifiers = event.event.modifiers;

        // `KeyboardEvent::modifiers` contains the pre-existing modifiers before this key was
        // either pressed or released, but `active_keyboard_modifiers` should track the subsequent
        // state. If this event will update that state, we need to ensure that we are tracking what
        // the event changes.
        let Key::Named(named_key) = event.event.key else {
            return;
        };

        let modified_modifier = match named_key {
            NamedKey::Alt => Modifiers::ALT,
            NamedKey::AltGraph => Modifiers::ALT_GRAPH,
            NamedKey::CapsLock => Modifiers::CAPS_LOCK,
            NamedKey::Control => Modifiers::CONTROL,
            NamedKey::Fn => Modifiers::FN,
            NamedKey::FnLock => Modifiers::FN_LOCK,
            NamedKey::Meta => Modifiers::META,
            NamedKey::NumLock => Modifiers::NUM_LOCK,
            NamedKey::ScrollLock => Modifiers::SCROLL_LOCK,
            NamedKey::Shift => Modifiers::SHIFT,
            NamedKey::Symbol => Modifiers::SYMBOL,
            NamedKey::SymbolLock => Modifiers::SYMBOL_LOCK,
            NamedKey::Hyper => Modifiers::HYPER,
            // The web doesn't make a distinction between these keys (there is only
            // "meta") so map "super" to "meta".
            NamedKey::Super => Modifiers::META,
            _ => return,
        };
        match event.event.state {
            KeyState::Down => self.active_keyboard_modifiers.insert(modified_modifier),
            KeyState::Up => self.active_keyboard_modifiers.remove(modified_modifier),
        }
    }

    fn set_accessibility_active(&mut self, webview_id: WebViewId, active: bool) {
        if !(pref!(accessibility_enabled)) {
            return;
        }

        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            return;
        };

        webview.accessibility_active = active;
        let Some(pipeline_id) = webview.active_top_level_pipeline_id else {
            return;
        };
        let epoch = webview.active_top_level_pipeline_epoch;
        // Forward the activation to the webview’s active top-level pipeline, if any. For inactive
        // pipelines (documents in bfcache), we only need to forward the activation if and when they
        // become active (see set_frame_tree_for_webview()).
        // There are two sites like this; this is the a11y activation site.
        self.send_message_to_pipeline(
            pipeline_id,
            ScriptThreadMessage::SetAccessibilityActive(pipeline_id, active, epoch),
            "Set accessibility active after closure",
        );
    }

    fn forward_accessibility_action(&mut self, action_request: ActionRequest) {
        let Some(pipeline_id) = self
            .pipelines
            .keys()
            .copied()
            .find(|&pipeline_id| TreeId::from(pipeline_id) == action_request.target_tree)
        else {
            warn!(
                "Could not complete accessibility action {action_request:?}: no matching pipeline."
            );
            return;
        };

        self.send_message_to_pipeline(
            pipeline_id,
            ScriptThreadMessage::ForwardAccessibilityAction(pipeline_id, action_request),
            "Action request failed: sending message to pipeline failed.",
        );
    }

    fn handle_clear_session_history(&mut self, webview_id: WebViewId) {
        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            return;
        };
        webview.session_history.future.clear();
        webview.session_history.past.clear();
        self.notify_history_changed(webview_id);
    }

    fn forward_input_event(
        &mut self,
        webview_id: WebViewId,
        event: InputEventAndId,
        hit_test_result: Option<PaintHitTestResult>,
    ) {
        if let InputEvent::MouseButton(event) = &event.event {
            self.update_pressed_mouse_buttons(event);
        }

        if let InputEvent::Keyboard(event) = &event.event {
            self.update_active_keybord_modifiers(event);
        }

        // The constellation tracks the state of pressed mouse buttons and keyboard
        // modifiers and updates the event here to reflect the current state.
        let pressed_mouse_buttons = self.pressed_mouse_buttons;
        let active_keyboard_modifiers = self.active_keyboard_modifiers;

        let event_id = event.id;
        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            warn!("Got input event for unknown WebViewId: {webview_id:?}");
            self.constellation_to_embedder_proxy.send(
                ConstellationToEmbedderMsg::InputEventsHandled(
                    webview_id,
                    vec![InputEventOutcome {
                        id: event_id,
                        result: Default::default(),
                    }],
                ),
            );
            return;
        };

        let event = ConstellationInputEvent {
            hit_test_result,
            pressed_mouse_buttons,
            active_keyboard_modifiers,
            event,
        };

        if !webview.forward_input_event(event, &self.pipelines, &self.browsing_contexts) {
            self.constellation_to_embedder_proxy.send(
                ConstellationToEmbedderMsg::InputEventsHandled(
                    webview_id,
                    vec![InputEventOutcome {
                        id: event_id,
                        result: Default::default(),
                    }],
                ),
            );
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_new_top_level_browsing_context(
        &mut self,
        url: ServoUrl,
        NewWebViewDetails {
            webview_id,
            viewport_details,
            user_content_manager_id,
        }: NewWebViewDetails,
    ) {
        let pipeline_id = PipelineId::new();
        let browsing_context_id = BrowsingContextId::from(webview_id);
        let load_data = LoadData::new_for_new_unrelated_webview(url);
        let is_private = false;

        // Register this new top-level browsing context id as a webview and set
        // its focused browsing context to be itself.
        let mut new_webview = ConstellationWebView::new(
            webview_id,
            // https://html.spec.whatwg.org/multipage/#creating-a-new-browsing-context-group
            Rc::new(RefCell::new(BrowsingContextGroup::default())),
            browsing_context_id,
            user_content_manager_id,
        );
        new_webview.add_pending_change(SessionHistoryChange {
            webview_id,
            browsing_context_id,
            new_pipeline_id: pipeline_id,
            replace: None,
            new_browsing_context_info: Some(NewBrowsingContextInfo {
                parent_pipeline_id: None,
                is_private,
                inherited_secure_context: None,
            }),
            viewport_details,
        });
        self.webviews.insert(webview_id, new_webview);

        self.new_pipeline(
            pipeline_id,
            browsing_context_id,
            webview_id,
            None,
            None,
            viewport_details,
            load_data,
            is_private,
            TargetSnapshotParams::default(),
            None,
        );

        self.system_font_service
            .prefetch_font_keys_for_painter(PainterId::from(webview_id));
    }

    #[servo_tracing::instrument(skip_all)]
    /// <https://html.spec.whatwg.org/multipage/#destroy-a-top-level-traversable>
    fn handle_close_top_level_browsing_context(&mut self, webview_id: WebViewId) {
        debug!("{webview_id}: Closing");

        // Step 1. Let browsingContext be traversable's active browsing context.
        let browsing_context_id = BrowsingContextId::from(webview_id);
        // Step 2. For each historyEntry in traversable's session history
        // Step 2.1 Let document be historyEntry's document.
        // Step 2.2 If document is not null, then destroy a document and its
        // descendants given document.

        // Step 3. Remove browsingContext.
        self.close_browsing_context(webview_id, browsing_context_id, ExitPipelineMode::Normal);

        // Step 4. Remove traversable from the user interface (e.g., close or
        // hide its tab in a tabbed browser).
        self.constellation_to_embedder_proxy
            .send(ConstellationToEmbedderMsg::WebViewClosed(webview_id));

        // Step 5. Remove traversable from the user agent's top-level traversable set.
        if let Some(mut webview) = self.webviews.remove(&webview_id) {
            // Any queued history traversal requests are never going to finish at this point,
            // so notify the embedder that they are now finished.
            if let Some(ongoing_request) = webview.ongoing_history_traversal_request {
                self.notify_embedder_of_completed_session_history_traversal_request(
                    &ongoing_request.traversal_request,
                );
            }
            for request in webview.session_history_traversal_request_queue.drain(..) {
                self.notify_embedder_of_completed_session_history_traversal_request(&request);
            }
        }

        debug!("{webview_id}: Closed");
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_iframe_size_msg(&mut self, webview_id: WebViewId, iframe_sizes: Vec<IFrameSizeMsg>) {
        for IFrameSizeMsg {
            browsing_context_id,
            size,
            type_,
        } in iframe_sizes
        {
            self.resize_browsing_context(webview_id, size, type_, browsing_context_id);
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_finish_javascript_evaluation(
        &mut self,
        evaluation_id: JavaScriptEvaluationId,
        result: Result<JSValue, JavaScriptEvaluationError>,
    ) {
        self.constellation_to_embedder_proxy.send(
            ConstellationToEmbedderMsg::FinishJavaScriptEvaluation(evaluation_id, result),
        );
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_subframe_loaded(&mut self, pipeline_id: PipelineId) {
        let browsing_context_id = match self.pipelines.get(&pipeline_id) {
            Some(pipeline) => pipeline.browsing_context_id,
            None => return warn!("{}: Subframe loaded after closure", pipeline_id),
        };
        let parent_pipeline_id = match self.browsing_contexts.get(&browsing_context_id) {
            Some(browsing_context) => browsing_context.parent_pipeline_id,
            None => {
                return warn!(
                    "{}: Subframe loaded in closed {}",
                    pipeline_id, browsing_context_id,
                );
            },
        };
        let Some(parent_pipeline_id) = parent_pipeline_id else {
            return warn!("{}: Subframe has no parent", pipeline_id);
        };
        // https://html.spec.whatwg.org/multipage/#the-iframe-element:completely-loaded
        // When a Document in an iframe is marked as completely loaded,
        // the user agent must run the iframe load event steps.
        let msg = ScriptThreadMessage::DispatchIFrameLoadEvent {
            target: browsing_context_id,
            parent: parent_pipeline_id,
            child: pipeline_id,
        };
        let result = match self.pipelines.get(&parent_pipeline_id) {
            Some(parent) => parent.event_loop.send(msg),
            None => {
                return warn!(
                    "{}: Parent pipeline browsing context loaded after closure",
                    parent_pipeline_id
                );
            },
        };
        if let Err(e) = result {
            self.handle_send_error(parent_pipeline_id, e);
        }
    }

    /// The script thread associated with pipeline_id has loaded a URL in an
    /// iframe via script. This will result in a new pipeline being spawned and
    /// a child being added to the parent browsing context. This message is never
    /// the result of a page navigation.
    #[servo_tracing::instrument(skip_all)]
    fn handle_script_loaded_url_in_iframe_msg(&mut self, load_info: IFrameLoadInfoWithData) {
        let IFrameLoadInfo {
            parent_pipeline_id,
            browsing_context_id,
            webview_id,
            new_pipeline_id,
            is_private,
            mut history_handling,
            target_snapshot_params,
            name,
            ..
        } = load_info.info;

        // If no url is specified, reload.
        let old_pipeline = load_info
            .old_pipeline_id
            .and_then(|id| self.pipelines.get(&id));

        // Replacement enabled also takes into account whether the document is "completely loaded",
        // see https://html.spec.whatwg.org/multipage/#the-iframe-element:completely-loaded
        if let Some(old_pipeline) = old_pipeline {
            if !old_pipeline.completely_loaded {
                history_handling = NavigationHistoryBehavior::Replace;
            }
            debug!(
                "{:?}: Old pipeline is {}completely loaded",
                load_info.old_pipeline_id,
                if old_pipeline.completely_loaded {
                    ""
                } else {
                    "not "
                }
            );
        }

        let is_parent_private = {
            let parent_browsing_context_id = match self.pipelines.get(&parent_pipeline_id) {
                Some(pipeline) => pipeline.browsing_context_id,
                None => {
                    return warn!(
                        "{parent_pipeline_id}: Script loaded url in iframe \
                        {browsing_context_id} in closed parent pipeline",
                    );
                },
            };

            let Some(ctx) = self.browsing_contexts.get(&parent_browsing_context_id) else {
                return warn!(
                    "{parent_browsing_context_id}: Script loaded url in \
                     iframe {browsing_context_id} in closed parent browsing context",
                );
            };
            ctx.is_private
        };
        let is_private = is_private || is_parent_private;

        let Some(browsing_context) = self.browsing_contexts.get(&browsing_context_id) else {
            return warn!(
                "{browsing_context_id}: Script loaded url in iframe with closed browsing context",
            );
        };

        let replace = if history_handling == NavigationHistoryBehavior::Replace {
            Some(NeedsToReload::No(browsing_context.pipeline_id))
        } else {
            None
        };

        let browsing_context_size = browsing_context.viewport_details;
        debug_assert_eq!(browsing_context_size, load_info.viewport_details);

        // Create the new pipeline, attached to the parent and push to pending changes
        self.new_pipeline(
            new_pipeline_id,
            browsing_context_id,
            webview_id,
            Some(parent_pipeline_id),
            None,
            browsing_context_size,
            load_info.load_data,
            is_private,
            target_snapshot_params,
            name,
        );

        if let Some(webview) = self.webviews.get_mut(&webview_id) {
            webview.add_pending_change(SessionHistoryChange {
                webview_id,
                browsing_context_id,
                new_pipeline_id,
                replace,
                // Browsing context for iframe already exists.
                new_browsing_context_info: None,
                viewport_details: load_info.viewport_details,
            });
        } else {
            warn!("Could not find WebView for script-loaded iframe: ({webview_id:?})");
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_script_new_iframe(&mut self, load_info: IFrameLoadInfoWithData) {
        let IFrameLoadInfo {
            parent_pipeline_id,
            new_pipeline_id,
            browsing_context_id,
            webview_id,
            is_private,
            ..
        } = load_info.info;

        let (script_sender, parent_browsing_context_id) =
            match self.pipelines.get(&parent_pipeline_id) {
                Some(pipeline) => (pipeline.event_loop.clone(), pipeline.browsing_context_id),
                None => {
                    return warn!(
                        "{}: Script loaded url in closed iframe pipeline",
                        parent_pipeline_id
                    );
                },
            };
        let (is_parent_private, is_parent_secure) =
            match self.browsing_contexts.get(&parent_browsing_context_id) {
                Some(ctx) => (ctx.is_private, ctx.inherited_secure_context),
                None => {
                    return warn!(
                        "{}: New iframe {} loaded in closed parent browsing context",
                        parent_browsing_context_id, browsing_context_id,
                    );
                },
            };

        let webview_hidden = self
            .webviews
            .get(&webview_id)
            .is_none_or(|webview| webview.hidden());
        let is_private = is_private || is_parent_private;
        let pipeline = Pipeline::new_already_spawned(
            new_pipeline_id,
            browsing_context_id,
            webview_id,
            None,
            script_sender,
            self.paint_proxy.clone(),
            webview_hidden,
            load_info.load_data,
        );

        assert!(!self.pipelines.contains_key(&new_pipeline_id));
        self.pipelines.insert(new_pipeline_id, pipeline);

        if let Some(webview) = self.webviews.get_mut(&webview_id) {
            webview.add_pending_change(SessionHistoryChange {
                webview_id,
                browsing_context_id,
                new_pipeline_id,
                replace: None,
                // Browsing context for iframe doesn't exist yet.
                new_browsing_context_info: Some(NewBrowsingContextInfo {
                    parent_pipeline_id: Some(parent_pipeline_id),
                    is_private,
                    inherited_secure_context: is_parent_secure,
                }),
                viewport_details: load_info.viewport_details,
            });
        } else {
            warn!("Could not find WebView for new iframe: ({webview_id:?})");
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_script_new_auxiliary(&mut self, load_info: AuxiliaryWebViewCreationRequest) {
        let AuxiliaryWebViewCreationRequest {
            load_data,
            opener_webview_id,
            opener_pipeline_id,
            response_sender,
        } = load_info;

        let Some(browsing_context_group) =
            self.browsing_context_group_for_webview_id(&opener_webview_id)
        else {
            warn!("Opener WebView ({opener_webview_id:?}) not found for new auxiliary WebView");
            let _ = response_sender.send(None);
            return;
        };

        let Some((webview_id_sender, webview_id_receiver)) = generic_channel::channel() else {
            warn!("Failed to create channel");
            let _ = response_sender.send(None);
            return;
        };
        self.constellation_to_embedder_proxy
            .send(ConstellationToEmbedderMsg::AllowOpeningWebView(
                opener_webview_id,
                webview_id_sender,
            ));
        let NewWebViewDetails {
            webview_id: new_webview_id,
            viewport_details,
            user_content_manager_id,
        } = match webview_id_receiver.recv() {
            Ok(Some(new_webview_details)) => new_webview_details,
            Ok(None) | Err(_) => {
                let _ = response_sender.send(None);
                return;
            },
        };
        let new_browsing_context_id = BrowsingContextId::from(new_webview_id);

        let (script_sender, opener_browsing_context_id) =
            match self.pipelines.get(&opener_pipeline_id) {
                Some(pipeline) => (pipeline.event_loop.clone(), pipeline.browsing_context_id),
                None => {
                    return warn!(
                        "{}: Auxiliary loaded url in closed iframe pipeline",
                        opener_pipeline_id
                    );
                },
            };
        let (is_opener_private, is_opener_secure) =
            match self.browsing_contexts.get(&opener_browsing_context_id) {
                Some(ctx) => (ctx.is_private, ctx.inherited_secure_context),
                None => {
                    return warn!(
                        "{}: New auxiliary {} loaded in closed opener browsing context",
                        opener_browsing_context_id, new_browsing_context_id,
                    );
                },
            };
        let new_pipeline_id = PipelineId::new();
        let pipeline = Pipeline::new_already_spawned(
            new_pipeline_id,
            new_browsing_context_id,
            new_webview_id,
            Some(opener_browsing_context_id),
            script_sender,
            self.paint_proxy.clone(),
            // New auxiliary WebViews start out as visible. The embedder can still
            // hide it with an explicit call to `WebView::hide()` in which case a
            // followup message will arrive to the Constellation to hide it.
            false, /* hidden */
            load_data,
        );
        let _ = response_sender.send(Some(AuxiliaryWebViewCreationResponse {
            new_webview_id,
            new_pipeline_id,
            user_content_manager_id,
        }));

        assert!(!self.pipelines.contains_key(&new_pipeline_id));
        self.pipelines.insert(new_pipeline_id, pipeline);

        let mut new_webview = ConstellationWebView::new(
            new_webview_id,
            browsing_context_group,
            new_browsing_context_id,
            user_content_manager_id,
        );

        // Inherit the opener's theme, which is also what script does. This
        // ensures that the two states are in sync.
        let opener_theme = self
            .webviews
            .get(&opener_webview_id)
            .map_or(Theme::Light, |webview| webview.theme());
        new_webview.set_theme(opener_theme);

        new_webview.add_pending_change(SessionHistoryChange {
            webview_id: new_webview_id,
            browsing_context_id: new_browsing_context_id,
            new_pipeline_id,
            replace: None,
            new_browsing_context_info: Some(NewBrowsingContextInfo {
                // Auxiliary browsing contexts are always top-level.
                parent_pipeline_id: None,
                is_private: is_opener_private,
                inherited_secure_context: is_opener_secure,
            }),
            viewport_details,
        });
        self.webviews.insert(new_webview_id, new_webview);
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_refresh_cursor(&self, pipeline_id: PipelineId) {
        let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
            return;
        };

        if let Err(error) = pipeline
            .event_loop
            .send(ScriptThreadMessage::RefreshCursor(pipeline_id))
        {
            warn!("Could not send RefreshCursor message to pipeline: {error:?}");
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_change_running_animations_state(
        &mut self,
        pipeline_id: PipelineId,
        animation_state: AnimationState,
    ) {
        match animation_state {
            AnimationState::AnimationCallbacksPresent => {
                self.handle_change_document_animation_frame_provider_state(pipeline_id, true);
            },
            AnimationState::AnimationCallbacksAbsent => {
                self.handle_change_document_animation_frame_provider_state(pipeline_id, false);
            },
            AnimationState::AnimationsPresent | AnimationState::NoAnimationsPresent => {
                if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) &&
                    pipeline.animation_state != animation_state
                {
                    pipeline.animation_state = animation_state;
                    self.paint_proxy
                        .send(PaintMessage::ChangeRunningAnimationsState(
                            pipeline.webview_id,
                            pipeline_id,
                            animation_state,
                        ))
                }
            },
        }
    }

    fn send_animation_frame_callbacks_state_if_changed(&mut self, pipeline_id: PipelineId) {
        let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) else {
            return;
        };

        // Paint only tracks per-pipeline callback state.
        let callbacks_active =
            pipeline.document_callbacks_active || !pipeline.worker_callbacks_active.is_empty();
        if pipeline.last_callbacks_active_sent_to_paint == callbacks_active {
            return;
        }

        pipeline.last_callbacks_active_sent_to_paint = callbacks_active;
        let animation_state = if callbacks_active {
            AnimationState::AnimationCallbacksPresent
        } else {
            AnimationState::AnimationCallbacksAbsent
        };

        self.paint_proxy
            .send(PaintMessage::ChangeRunningAnimationsState(
                pipeline.webview_id,
                pipeline_id,
                animation_state,
            ));
    }

    fn handle_change_document_animation_frame_provider_state(
        &mut self,
        pipeline_id: PipelineId,
        active: bool,
    ) {
        let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) else {
            return;
        };

        if pipeline.document_callbacks_active == active {
            return;
        }

        pipeline.document_callbacks_active = active;
        self.send_animation_frame_callbacks_state_if_changed(pipeline_id);
    }

    fn handle_register_worker_animation_frame_provider(
        &mut self,
        webview_id: WebViewId,
        pipeline_id: PipelineId,
        worker_id: WorkerId,
        sender: GenericSender<WorkerAnimationFrameTick>,
    ) {
        if !self.pipelines.contains_key(&pipeline_id) {
            debug!(
                "Ignoring worker animation frame provider for closed pipeline: worker={worker_id:?}, pipeline={pipeline_id:?} ---->",
            );
            return;
        }

        debug!(
            "Registering worker animation frame provider: worker={worker_id:?}, pipeline={pipeline_id:?}---->",
        );
        self.worker_animation_frame_providers.insert(
            worker_id,
            WorkerAnimationFrameProvider {
                webview_id,
                pipeline_id,
                sender,
                tick_pending: false,
            },
        );
    }

    fn handle_unregister_worker_animation_frame_provider(&mut self, worker_id: WorkerId) {
        let Some(provider) = self.worker_animation_frame_providers.remove(&worker_id) else {
            return;
        };

        debug!(
            "Unregistering worker animation frame provider: worker={worker_id:?}, pipeline={:?}",
            provider.pipeline_id,
        );
        if let Some(pipeline) = self.pipelines.get_mut(&provider.pipeline_id) {
            pipeline.worker_callbacks_active.remove(&worker_id);
        }
        self.send_animation_frame_callbacks_state_if_changed(provider.pipeline_id);
    }

    fn remove_worker_animation_frame_providers_for_pipeline(&mut self, pipeline_id: PipelineId) {
        let worker_ids = self
            .worker_animation_frame_providers
            .iter()
            .filter_map(|(worker_id, provider)| {
                (provider.pipeline_id == pipeline_id).then_some(*worker_id)
            })
            .collect::<Vec<_>>();

        if worker_ids.is_empty() {
            return;
        }

        for worker_id in &worker_ids {
            self.worker_animation_frame_providers.remove(worker_id);
        }

        if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
            let mut changed = false;
            for worker_id in &worker_ids {
                changed |= pipeline.worker_callbacks_active.remove(worker_id);
            }
            if changed {
                self.send_animation_frame_callbacks_state_if_changed(pipeline_id);
            }
        }
    }

    fn handle_change_worker_animation_frame_provider_state(
        &mut self,
        pipeline_id: PipelineId,
        worker_id: WorkerId,
        active: bool,
    ) {
        let Some(provider) = self.worker_animation_frame_providers.get_mut(&worker_id) else {
            return;
        };
        let provider_pipeline_id = provider.pipeline_id;
        let provider_webview_id = provider.webview_id;
        if provider_pipeline_id != pipeline_id {
            warn!("Worker animation frame state arrived for an unexpected pipeline --->");
            return;
        }
        let tick_was_pending = std::mem::take(&mut provider.tick_pending);

        if !self.pipelines.contains_key(&pipeline_id) {
            debug!(
                "Removing worker animation frame provider for closed pipeline: worker={worker_id:?}, pipeline={pipeline_id:?}",
            );
            self.worker_animation_frame_providers.remove(&worker_id);
            return;
        }

        let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) else {
            return;
        };

        let changed = if active {
            pipeline.worker_callbacks_active.insert(worker_id)
        } else {
            pipeline.worker_callbacks_active.remove(&worker_id)
        };
        debug!(
            "Worker animation frame provider state: worker={worker_id:?}, pipeline={pipeline_id:?}, active={active}, changed={changed}",
        );
        if changed {
            self.send_animation_frame_callbacks_state_if_changed(pipeline_id);
        } else if active && tick_was_pending {
            // Worker only rAF may not produce a display list so request a frame
            // for the next refresh-driver tick.
            self.paint_proxy
                .send(PaintMessage::GenerateFrame(vec![PainterId::from(
                    provider_webview_id,
                )]));
        }
    }

    fn deliver_rendering_opportunity_to_worker(&mut self, worker_id: WorkerId) {
        let mut send_failed = false;
        {
            let Some(provider) = self.worker_animation_frame_providers.get_mut(&worker_id) else {
                return;
            };
            if provider.tick_pending {
                debug!("Skipping pending rendering opportunity: worker={worker_id:?}");
                return;
            }
            if provider.sender.send(WorkerAnimationFrameTick).is_err() {
                send_failed = true;
            } else {
                debug!("Delivered rendering opportunity: worker={worker_id:?}");
                provider.tick_pending = true;
            }
        }

        if send_failed {
            self.handle_unregister_worker_animation_frame_provider(worker_id);
        }
    }

    /// <https://html.spec.whatwg.org/multipage/#rendering-opportunity>
    #[servo_tracing::instrument(skip_all)]
    fn handle_tick_animation(&mut self, webview_ids: Vec<WebViewId>) {
        let mut animating_event_loops = HashSet::new();
        let mut animating_workers = FxHashSet::default();

        for webview_id in webview_ids.iter() {
            for browsing_context in self.fully_active_browsing_contexts_iter(*webview_id) {
                let Some(pipeline) = self.pipelines.get(&browsing_context.pipeline_id) else {
                    continue;
                };

                animating_workers.extend(pipeline.worker_callbacks_active.iter().copied());

                // Window rAF still follows the existing script-thread path.
                let event_loop = &pipeline.event_loop;
                if !animating_event_loops.contains(&event_loop.id()) {
                    // No error handling here. It's unclear what to do when this fails as the error isn't associated
                    // with a particular pipeline. In addition, the danger of not progressing animations is pretty
                    // low, so it's probably safe to ignore this error and handle the crashed ScriptThread on
                    // some other message.
                    let _ = event_loop
                        .send(ScriptThreadMessage::TickAllAnimations(webview_ids.clone()));
                    animating_event_loops.insert(event_loop.id());
                }
            }
        }

        // Step 6.1.2 runs on the worker event loop; constellation only sends
        // tick messages for workers active on this refresh tick.
        for worker_id in animating_workers {
            let Some(provider) = self.worker_animation_frame_providers.get(&worker_id) else {
                error!(
                    "No animation frame provider found for active worker: worker={worker_id:?}, webviews={webview_ids:?}",
                );
                continue;
            };
            if webview_ids.contains(&provider.webview_id) {
                self.deliver_rendering_opportunity_to_worker(worker_id);
            } else {
                error!(
                    "Worker animation frame provider's WebView is not part of the current refresh tick: worker={worker_id:?}, provider_webview={:?}, webviews={webview_ids:?}",
                    provider.webview_id,
                );
            }
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_no_longer_waiting_on_asynchronous_image_updates(
        &mut self,
        pipeline_ids: Vec<PipelineId>,
    ) {
        for pipeline_id in pipeline_ids.into_iter() {
            if let Some(pipeline) = self.pipelines.get(&pipeline_id) {
                let _ = pipeline.event_loop.send(
                    ScriptThreadMessage::NoLongerWaitingOnAsychronousImageUpdates(pipeline_id),
                );
            }
        }
    }

    /// Schedule a navigation(via load_url).
    /// 1: Ask the embedder for permission.
    /// 2: Store the details of the navigation, pending approval from the embedder.
    #[servo_tracing::instrument(skip_all)]
    fn schedule_navigation(
        &mut self,
        webview_id: WebViewId,
        source_id: PipelineId,
        load_data: LoadData,
        history_handling: NavigationHistoryBehavior,
        target_snapshot_params: TargetSnapshotParams,
    ) {
        match self.pending_approval_navigations.entry(source_id) {
            Entry::Occupied(_) => {
                return warn!(
                    "{}: Tried to schedule a navigation while one is already pending",
                    source_id
                );
            },
            Entry::Vacant(entry) => {
                let _ = entry.insert(PendingApprovalNavigation {
                    load_data: load_data.clone(),
                    history_behaviour: history_handling,
                    target_snapshot_params,
                });
            },
        };

        if load_data.is_initial_about_blank {
            assert_eq!(load_data.url.as_str(), "about:blank");
            // The initial about:blank is not a navigation; the embedder only
            // cares about a navigation that follows it.
            self.handle_allow_navigation_response(source_id, true);
        } else {
            // Allow the embedder to handle the url itself
            self.constellation_to_embedder_proxy.send(
                ConstellationToEmbedderMsg::AllowNavigationRequest(
                    webview_id,
                    source_id,
                    load_data.url,
                ),
            );
        }
    }

    /// Perform a navigation previously requested by script, if approved by the embedder.
    /// If there is already a pending page (self.pending_changes), it will not be overridden;
    /// However, if the id is not encompassed by another change, it will be.
    fn handle_allow_navigation_response(&mut self, pipeline_id: PipelineId, allowed: bool) {
        let pending = self.pending_approval_navigations.remove(&pipeline_id);

        let webview_id = match self.pipelines.get(&pipeline_id) {
            Some(pipeline) => pipeline.webview_id,
            None => return warn!("{}: Attempted to navigate after closure", pipeline_id),
        };

        match pending {
            Some(pending) => {
                if allowed {
                    self.load_url(
                        webview_id,
                        pipeline_id,
                        pending.load_data,
                        pending.history_behaviour,
                        pending.target_snapshot_params,
                    );
                } else {
                    if let Some((sender, id)) = &self.webdriver_load_status_sender &&
                        pipeline_id == *id
                    {
                        let _ = sender.send(WebDriverLoadStatus::NavigationStop);
                    }

                    let pipeline_is_top_level_pipeline = self
                        .browsing_contexts
                        .get(&BrowsingContextId::from(webview_id))
                        .is_some_and(|ctx| ctx.pipeline_id == pipeline_id);
                    // If the navigation is refused, and this concerns an iframe,
                    // we need to take it out of it's "delaying-load-events-mode".
                    // https://html.spec.whatwg.org/multipage/#delaying-load-events-mode
                    if !pipeline_is_top_level_pipeline {
                        self.send_message_to_pipeline(
                            pipeline_id,
                            ScriptThreadMessage::StopDelayingLoadEventsMode(pipeline_id),
                            "Attempted to navigate after closure",
                        );
                    }
                }
            },
            None => {
                warn!(
                    "{}: AllowNavigationResponse for unknown request",
                    pipeline_id
                )
            },
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn load_url(
        &mut self,
        webview_id: WebViewId,
        source_id: PipelineId,
        load_data: LoadData,
        history_handling: NavigationHistoryBehavior,
        target_snapshot_params: TargetSnapshotParams,
    ) -> Option<PipelineId> {
        debug!(
            "{}: Loading ({}replacing): {}",
            source_id,
            match history_handling {
                NavigationHistoryBehavior::Push => "not ",
                NavigationHistoryBehavior::Replace => "",
                NavigationHistoryBehavior::Auto => "unsure if ",
            },
            load_data.url,
        );
        // If this load targets an iframe, its framing element may exist
        // in a separate script thread than the framed document that initiated
        // the new load. The framing element must be notified about the
        // requested change so it can update its internal state.
        //
        // If replace is true, the current entry is replaced instead of a new entry being added.
        let (browsing_context_id, opener) = match self.pipelines.get(&source_id) {
            Some(pipeline) => (pipeline.browsing_context_id, pipeline.opener),
            None => {
                warn!("{}: Loaded after closure", source_id);
                return None;
            },
        };
        let (viewport_details, pipeline_id, parent_pipeline_id, is_private) =
            match self.browsing_contexts.get(&browsing_context_id) {
                Some(ctx) => (
                    ctx.viewport_details,
                    ctx.pipeline_id,
                    ctx.parent_pipeline_id,
                    ctx.is_private,
                ),
                None => {
                    // This should technically never happen (since `load_url` is
                    // only called on existing browsing contexts), but we prefer to
                    // avoid `expect`s or `unwrap`s in `Constellation` to ward
                    // against future changes that might break things.
                    warn!(
                        "{}: Loaded url in closed {}",
                        source_id, browsing_context_id,
                    );
                    return None;
                },
            };

        #[cfg(feature = "devtools")]
        if let Some(ref chan) = self.devtools_sender {
            let state = NavigationState::Start(load_data.url.clone());
            let _ = chan.send(DevtoolsControlMsg::FromScript(
                ScriptToDevtoolsControlMsg::Navigate(browsing_context_id, state),
            ));
        }

        match parent_pipeline_id {
            Some(parent_pipeline_id) => {
                // Find the script thread for the pipeline containing the iframe
                // and issue an iframe load through there.
                let msg = ScriptThreadMessage::NavigateIframe(
                    parent_pipeline_id,
                    browsing_context_id,
                    load_data,
                    history_handling,
                    target_snapshot_params,
                );
                let result = match self.pipelines.get(&parent_pipeline_id) {
                    Some(parent_pipeline) => parent_pipeline.event_loop.send(msg),
                    None => {
                        warn!("{}: Child loaded after closure", parent_pipeline_id);
                        return None;
                    },
                };
                if let Err(e) = result {
                    self.handle_send_error(parent_pipeline_id, e);
                } else if let Some((sender, id)) = &self.webdriver_load_status_sender &&
                    source_id == *id
                {
                    let _ = sender.send(WebDriverLoadStatus::NavigationStop);
                }

                None
            },
            None => {
                // Make sure no pending page would be overridden.
                if let Some(webview) = self.webviews.get(&webview_id) &&
                    webview.pending_changes.iter().any(|pending_change| {
                        pending_change.browsing_context_id == browsing_context_id
                    })
                {
                    // id that sent load msg is being changed already; abort
                    return None;
                }

                if self.get_activity(source_id) == DocumentActivity::Inactive {
                    // Disregard this load if the navigating pipeline is not actually
                    // active. This could be caused by a delayed navigation (eg. from
                    // a timer) or a race between multiple navigations (such as an
                    // onclick handler on an anchor element).
                    return None;
                }

                // Being here means either there are no pending changes, or none of the pending
                // changes would be overridden by changing the subframe associated with source_id.

                // Create the new pipeline

                let replace = if history_handling == NavigationHistoryBehavior::Replace {
                    Some(NeedsToReload::No(pipeline_id))
                } else {
                    None
                };

                let new_pipeline_id = PipelineId::new();
                self.new_pipeline(
                    new_pipeline_id,
                    browsing_context_id,
                    webview_id,
                    None,
                    opener,
                    viewport_details,
                    load_data,
                    is_private,
                    target_snapshot_params,
                    None,
                );

                if let Some(webview) = self.webviews.get_mut(&webview_id) {
                    webview.add_pending_change(SessionHistoryChange {
                        webview_id,
                        browsing_context_id,
                        new_pipeline_id,
                        replace,
                        // `load_url` is always invoked on an existing browsing context.
                        new_browsing_context_info: None,
                        viewport_details,
                    });
                } else {
                    warn!("Could not find WebView for URL load: ({webview_id:?})");
                }

                Some(new_pipeline_id)
            },
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_abort_load_url_msg(&mut self, webview_id: WebViewId, new_pipeline_id: PipelineId) {
        if self
            .webviews
            .get_mut(&webview_id)
            .and_then(|webview| webview.remove_pending_change_for_pipeline(new_pipeline_id))
            .is_none()
        {
            return;
        }

        self.close_pipeline(
            new_pipeline_id,
            DiscardBrowsingContext::No,
            ExitPipelineMode::Normal,
        );

        if let Some(webview) = self.webviews.get_mut(&webview_id) {
            webview.send_screenshot_readiness_requests_to_pipelines(
                &self.browsing_contexts,
                &self.pipelines,
            );
        };
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_load_complete_msg(&mut self, webview_id: WebViewId, pipeline_id: PipelineId) {
        if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
            debug!("{}: Marking as loaded", pipeline_id);
            pipeline.completely_loaded = true;
        }

        // Notify the embedder that the TopLevelBrowsingContext current document
        // has finished loading.
        // We need to make sure the pipeline that has finished loading is the current
        // pipeline and that no pending pipeline will replace the current one.
        let pipeline_is_top_level_pipeline = self
            .browsing_contexts
            .get(&BrowsingContextId::from(webview_id))
            .is_some_and(|ctx| ctx.pipeline_id == pipeline_id);
        if !pipeline_is_top_level_pipeline {
            self.handle_subframe_loaded(pipeline_id);
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_navigated_to_fragment(
        &mut self,
        pipeline_id: PipelineId,
        new_url: ServoUrl,
        history_handling: NavigationHistoryBehavior,
    ) {
        let (webview_id, old_url) = match self.pipelines.get_mut(&pipeline_id) {
            Some(pipeline) => {
                let old_url = replace(&mut pipeline.url, new_url.clone());
                (pipeline.webview_id, old_url)
            },
            None => {
                return warn!("{}: Navigated to fragment after closure", pipeline_id);
            },
        };

        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            return warn!("Ignoring navigation in non-existent WebView ({webview_id:?}).");
        };

        match history_handling {
            NavigationHistoryBehavior::Replace => {},
            _ => {
                let diff = SessionHistoryDiff::Hash {
                    pipeline_reloader: NeedsToReload::No(pipeline_id),
                    new_url,
                    old_url,
                };

                webview.session_history.push_diff(diff);
                self.notify_history_changed(webview_id);
            },
        }
    }

    /// Step 4 of <https://html.spec.whatwg.org/multipage/#traverse-the-history-by-a-delta>
    ///
    /// This change appends a session history traversal to the session history traversal queue,
    /// which is stored as [`ConstellationWebView::history_traversal_request_queue`].
    ///
    /// See also: <https://html.spec.whatwg.org/multipage/#tn-session-history-traversal-queue>
    #[servo_tracing::instrument(skip_all)]
    fn handle_traverse_session_history_msg(
        &mut self,
        traversal_request: SessionHistoryTraversalRequest,
    ) {
        let webview_id = traversal_request.webview_id;
        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            self.notify_embedder_of_completed_session_history_traversal_request(&traversal_request);
            return warn!("Ignoring history traversal in non-existent WebView ({webview_id:?}).");
        };

        webview
            .session_history_traversal_request_queue
            .push_back(traversal_request);
        self.apply_queued_session_history_traversal_requests(webview_id);
    }

    /// Apply the given [`HistoryTraversalRequest`], triggering the session history navigation.
    /// Return the same [`HistoryTraversalRequest`] when it completes immediately or is out
    /// of range, otherwise return `None` when it is still pending.
    fn apply_session_history_traversal_request(
        &mut self,
        traversal_request: SessionHistoryTraversalRequest,
    ) -> Option<SessionHistoryTraversalRequest> {
        let mut browsing_context_changes = FxHashMap::<BrowsingContextId, NeedsToReload>::default();
        let mut pipeline_changes =
            FxHashMap::<PipelineId, (Option<HistoryStateId>, ServoUrl)>::default();
        let mut url_to_load = FxHashMap::<PipelineId, ServoUrl>::default();
        let webview_id = traversal_request.webview_id;

        {
            let Some(webview) = self.webviews.get_mut(&webview_id) else {
                warn!("Ignoring history traversal in non-existent WebView ({webview_id:?}).");
                return Some(traversal_request);
            };

            match traversal_request.direction {
                TraversalDirection::Forward(forward) => {
                    let future_length = webview.session_history.future.len();
                    if future_length < forward {
                        warn!("Cannot traverse that far into the future.");
                        return Some(traversal_request);
                    }

                    for diff in webview
                        .session_history
                        .future
                        .drain(future_length - forward..)
                        .rev()
                    {
                        match diff {
                            SessionHistoryDiff::BrowsingContext {
                                browsing_context_id,
                                ref new_reloader,
                                ..
                            } => {
                                browsing_context_changes
                                    .insert(browsing_context_id, new_reloader.clone());
                            },
                            SessionHistoryDiff::Pipeline {
                                ref pipeline_reloader,
                                new_history_state_id,
                                ref new_url,
                                ..
                            } => match *pipeline_reloader {
                                NeedsToReload::No(pipeline_id) => {
                                    pipeline_changes.insert(
                                        pipeline_id,
                                        (Some(new_history_state_id), new_url.clone()),
                                    );
                                },
                                NeedsToReload::Yes(pipeline_id, ..) => {
                                    url_to_load.insert(pipeline_id, new_url.clone());
                                },
                            },
                            SessionHistoryDiff::Hash {
                                ref pipeline_reloader,
                                ref new_url,
                                ..
                            } => match *pipeline_reloader {
                                NeedsToReload::No(pipeline_id) => {
                                    let state = pipeline_changes
                                        .get(&pipeline_id)
                                        .and_then(|change| change.0);
                                    pipeline_changes.insert(pipeline_id, (state, new_url.clone()));
                                },
                                NeedsToReload::Yes(pipeline_id, ..) => {
                                    url_to_load.insert(pipeline_id, new_url.clone());
                                },
                            },
                        }
                        webview.session_history.past.push(diff);
                    }
                },
                TraversalDirection::Back(back) => {
                    let past_length = webview.session_history.past.len();
                    if past_length < back {
                        warn!("Cannot traverse that far into the past.");
                        return Some(traversal_request);
                    }

                    for diff in webview
                        .session_history
                        .past
                        .drain(past_length - back..)
                        .rev()
                    {
                        match diff {
                            SessionHistoryDiff::BrowsingContext {
                                browsing_context_id,
                                ref old_reloader,
                                ..
                            } => {
                                browsing_context_changes
                                    .insert(browsing_context_id, old_reloader.clone());
                            },
                            SessionHistoryDiff::Pipeline {
                                ref pipeline_reloader,
                                old_history_state_id,
                                ref old_url,
                                ..
                            } => match *pipeline_reloader {
                                NeedsToReload::No(pipeline_id) => {
                                    pipeline_changes.insert(
                                        pipeline_id,
                                        (old_history_state_id, old_url.clone()),
                                    );
                                },
                                NeedsToReload::Yes(pipeline_id, ..) => {
                                    url_to_load.insert(pipeline_id, old_url.clone());
                                },
                            },
                            SessionHistoryDiff::Hash {
                                ref pipeline_reloader,
                                ref old_url,
                                ..
                            } => match *pipeline_reloader {
                                NeedsToReload::No(pipeline_id) => {
                                    let state = pipeline_changes
                                        .get(&pipeline_id)
                                        .and_then(|change| change.0);
                                    pipeline_changes.insert(pipeline_id, (state, old_url.clone()));
                                },
                                NeedsToReload::Yes(pipeline_id, ..) => {
                                    url_to_load.insert(pipeline_id, old_url.clone());
                                },
                            },
                        }
                        webview.session_history.future.push(diff);
                    }
                },
            }
        }

        let pipelines_awaiting_activation: FxHashSet<_> = browsing_context_changes
            .drain()
            .filter_map(|(browsing_context_id, mut pipeline_reloader)| {
                if let NeedsToReload::Yes(pipeline_id, ref mut load_data) = pipeline_reloader &&
                    let Some(url) = url_to_load.get(&pipeline_id)
                {
                    load_data.url = url.clone();
                }
                self.activate_history_entry_in_browsing_context(
                    browsing_context_id,
                    pipeline_reloader,
                )
            })
            .collect();

        for (pipeline_id, (history_state_id, url)) in pipeline_changes.drain() {
            self.update_pipeline_history_state(pipeline_id, history_state_id, url);
        }

        self.notify_history_changed(webview_id);
        self.trim_history(webview_id);
        self.set_frame_tree_for_webview(webview_id);

        // The traversal finishes immediately when we are traversing within the same document
        // or between already live pipelines. Note that the script event loop may still be
        // completing these navigations asynchronously.
        if pipelines_awaiting_activation.is_empty() {
            return Some(traversal_request);
        }

        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            return Some(traversal_request);
        };
        webview.ongoing_history_traversal_request = Some(OngoingHistoryTraversalRequest {
            traversal_request,
            pipelines_awaiting_activation,
        });
        None
    }

    /// Finish any completed ongoing history traversal request from any active
    /// [`ConstellationWebView`] and trigger (and possibly finish) any other queued history
    /// traversals on that same `WebView` until there are no remaining completed ongoing history
    /// traversal requests.
    fn finish_completed_session_history_traversal_requests(&mut self) {
        while let Some(traversal_request) = self
            .webviews
            .values_mut()
            .find_map(|webview| webview.maybe_finish_ongoing_session_history_traversal_request())
        {
            self.notify_embedder_of_completed_session_history_traversal_request(&traversal_request);
            self.apply_queued_session_history_traversal_requests(traversal_request.webview_id);
        }
    }

    /// Notify the embedder that the given [`HistoryTraversalRequest`] is complete, if it was
    /// triggered by the embedder.
    fn notify_embedder_of_completed_session_history_traversal_request(
        &self,
        traversal_request: &SessionHistoryTraversalRequest,
    ) {
        if traversal_request.source == HistoryTraversalSource::Embedder {
            self.constellation_to_embedder_proxy.send(
                ConstellationToEmbedderMsg::HistoryTraversalComplete(
                    traversal_request.webview_id,
                    traversal_request.id.clone(),
                ),
            );
        }
    }

    /// If the [`ConstellationWebView`] with the given [`WebViewId`] does not have any
    /// ongoing traversal history request, apply the next queued request, if one exists.
    fn apply_next_queued_session_history_traversal_request(
        &mut self,
        webview_id: WebViewId,
    ) -> Option<SessionHistoryTraversalRequest> {
        let webview = self.webviews.get_mut(&webview_id)?;
        if webview.ongoing_history_traversal_request.is_some() {
            return None;
        }

        let traversal_request = webview
            .session_history_traversal_request_queue
            .pop_front()?;
        self.apply_session_history_traversal_request(traversal_request)
    }

    /// If the [`ConstellationWebView`] with the given [`WebViewId`] does not have any ongoing
    /// traversal history request, apply the next queued request and potentially finish it
    /// until there is either an ongoing history request or no more queued requests.
    fn apply_queued_session_history_traversal_requests(&mut self, webview_id: WebViewId) {
        while let Some(traversal_request) =
            self.apply_next_queued_session_history_traversal_request(webview_id)
        {
            self.notify_embedder_of_completed_session_history_traversal_request(&traversal_request);
        }
    }

    /// <https://html.spec.whatwg.org/multipage/#activate-history-entry>
    ///
    /// Activate the history entry indicated by the given [`NeedsToReload`]. Returns the
    /// [`PipelineId`] of the pipeline if the constellation is waiting for it to reload
    /// and `None` otherwise.
    #[servo_tracing::instrument(skip_all)]
    fn activate_history_entry_in_browsing_context(
        &mut self,
        browsing_context_id: BrowsingContextId,
        new_reloader: NeedsToReload,
    ) -> Option<PipelineId> {
        let new_pipeline_id = match new_reloader {
            NeedsToReload::No(pipeline_id) => pipeline_id,
            NeedsToReload::Yes(pipeline_id, mut load_data) => {
                debug!(
                    "{}: Reloading document {}",
                    browsing_context_id, pipeline_id,
                );

                // <https://html.spec.whatwg.org/multipage/#process-a-navigate-fetch>
                // Step 7. If entry's document state's reload pending is true, then set request's reload-navigation flag.
                // Step 8. Otherwise, if entry's document state's ever populated is true, then set request's history-navigation flag.
                load_data.history_navigation = true;
                load_data.reload_navigation = false;

                let (webview_id, old_pipeline_id, parent_pipeline_id, viewport_details, is_private) =
                    match self.browsing_contexts.get(&browsing_context_id) {
                        Some(ctx) => (
                            ctx.webview_id,
                            ctx.pipeline_id,
                            ctx.parent_pipeline_id,
                            ctx.viewport_details,
                            ctx.is_private,
                        ),
                        None => {
                            warn!("No browsing context to traverse!");
                            return None;
                        },
                    };
                let opener = match self.pipelines.get(&old_pipeline_id) {
                    Some(pipeline) => pipeline.opener,
                    None => None,
                };
                let new_pipeline_id = PipelineId::new();
                self.new_pipeline(
                    new_pipeline_id,
                    browsing_context_id,
                    webview_id,
                    parent_pipeline_id,
                    opener,
                    viewport_details,
                    load_data.clone(),
                    is_private,
                    // TODO(jdm): We need to store the original target snapshot params
                    // with the pipeline when it's created, so we can support reloading
                    // a discarded document properly.
                    TargetSnapshotParams::default(),
                    None,
                );

                let webview = self
                    .webviews
                    .get_mut(&webview_id)
                    .expect("WebView for history traversal should always exist at this point");
                webview.add_pending_change(SessionHistoryChange {
                    webview_id,
                    browsing_context_id,
                    new_pipeline_id,
                    replace: Some(NeedsToReload::Yes(pipeline_id, load_data)),
                    // Browsing context must exist at this point.
                    new_browsing_context_info: None,
                    viewport_details,
                });
                return Some(new_pipeline_id);
            },
        };

        let (old_pipeline_id, parent_pipeline_id, webview_id) =
            match self.browsing_contexts.get_mut(&browsing_context_id) {
                Some(browsing_context) => {
                    let old_pipeline_id = browsing_context.pipeline_id;
                    browsing_context.update_current_entry(new_pipeline_id);
                    (
                        old_pipeline_id,
                        browsing_context.parent_pipeline_id,
                        browsing_context.webview_id,
                    )
                },
                None => {
                    warn!("{browsing_context_id}: Closed during traversal");
                    return None;
                },
            };

        self.unload_document(old_pipeline_id);

        if let Some(new_pipeline) = self.pipelines.get_mut(&new_pipeline_id) {
            #[cfg(feature = "devtools")]
            if let Some(ref chan) = self.devtools_sender {
                let state = NavigationState::Start(new_pipeline.url.clone());
                let _ = chan.send(DevtoolsControlMsg::FromScript(
                    ScriptToDevtoolsControlMsg::Navigate(browsing_context_id, state),
                ));
                let page_info = DevtoolsPageInfo {
                    title: new_pipeline.title.clone(),
                    url: new_pipeline.url.clone(),
                    is_top_level_global: webview_id == browsing_context_id,
                    is_service_worker: false,
                };
                let state = NavigationState::Stop(new_pipeline.id, page_info);
                let _ = chan.send(DevtoolsControlMsg::FromScript(
                    ScriptToDevtoolsControlMsg::Navigate(browsing_context_id, state),
                ));
            }

            new_pipeline.set_has_active_document(true);

            // When navigating away from a Pipeline it is throttled, so if the WebView
            // is not hidden we must now unthrottle it.
            let webview_hidden = self
                .webviews
                .get(&webview_id)
                .is_none_or(|webview| webview.hidden());
            new_pipeline.send_throttle_messages(webview_hidden);

            self.notify_focus_state(new_pipeline_id);
        }

        self.update_activity(old_pipeline_id);
        self.update_activity(new_pipeline_id);

        if let Some(parent_pipeline_id) = parent_pipeline_id {
            let msg = ScriptThreadMessage::UpdatePipelineId(
                parent_pipeline_id,
                browsing_context_id,
                webview_id,
                new_pipeline_id,
                UpdatePipelineIdReason::Traversal,
            );
            self.send_message_to_pipeline(parent_pipeline_id, msg, "Child traversed after closure");
        }

        None
    }

    #[servo_tracing::instrument(skip_all)]
    fn update_pipeline_history_state(
        &mut self,
        pipeline_id: PipelineId,
        history_state_id: Option<HistoryStateId>,
        url: ServoUrl,
    ) {
        if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
            pipeline.history_state_id = history_state_id;
            pipeline.url = url.clone();
        }
        let msg = ScriptThreadMessage::UpdateHistoryState(pipeline_id, history_state_id, url);
        self.send_message_to_pipeline(pipeline_id, msg, "History state updated after closure");
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_joint_session_history_length(
        &self,
        webview_id: WebViewId,
        response_sender: GenericSender<u32>,
    ) {
        let length = self
            .webviews
            .get(&webview_id)
            .map(|webview| webview.session_history.history_length())
            .unwrap_or(1);
        let _ = response_sender.send(length as u32);
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_push_history_state_msg(
        &mut self,
        pipeline_id: PipelineId,
        history_state_id: HistoryStateId,
        url: ServoUrl,
    ) {
        let (webview_id, old_state_id, old_url) = match self.pipelines.get_mut(&pipeline_id) {
            Some(pipeline) => {
                let old_history_state_id = pipeline.history_state_id;
                let old_url = replace(&mut pipeline.url, url.clone());
                pipeline.history_state_id = Some(history_state_id);
                pipeline.history_states.insert(history_state_id);
                (pipeline.webview_id, old_history_state_id, old_url)
            },
            None => {
                return warn!(
                    "{}: Push history state {} for closed pipeline",
                    pipeline_id, history_state_id,
                );
            },
        };

        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            return warn!("Ignoring history change in non-existent WebView ({webview_id:?}).");
        };

        let diff = SessionHistoryDiff::Pipeline {
            pipeline_reloader: NeedsToReload::No(pipeline_id),
            new_history_state_id: history_state_id,
            new_url: url,
            old_history_state_id: old_state_id,
            old_url,
        };
        webview.session_history.push_diff(diff);
        self.notify_history_changed(webview_id);
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_replace_history_state_msg(
        &mut self,
        pipeline_id: PipelineId,
        history_state_id: HistoryStateId,
        url: ServoUrl,
    ) {
        let webview_id = match self.pipelines.get_mut(&pipeline_id) {
            Some(pipeline) => {
                pipeline.history_state_id = Some(history_state_id);
                pipeline.url = url.clone();
                pipeline.webview_id
            },
            None => {
                return warn!(
                    "{}: Replace history state {} for closed pipeline",
                    history_state_id, pipeline_id
                );
            },
        };

        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            return warn!("Ignoring history change in non-existent WebView ({webview_id:?}).");
        };

        webview
            .session_history
            .replace_history_state(pipeline_id, history_state_id, url);
        self.notify_history_changed(webview_id);
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_reload_msg(&mut self, webview_id: WebViewId) {
        let browsing_context_id = BrowsingContextId::from(webview_id);
        let pipeline_id = match self.browsing_contexts.get(&browsing_context_id) {
            Some(browsing_context) => browsing_context.pipeline_id,
            None => {
                return warn!("{}: Got reload event after closure", browsing_context_id);
            },
        };
        self.send_message_to_pipeline(
            pipeline_id,
            ScriptThreadMessage::Reload(pipeline_id),
            "Got reload event after closure",
        );
    }

    /// <https://html.spec.whatwg.org/multipage/#window-post-message-steps>
    #[servo_tracing::instrument(skip_all)]
    fn handle_post_message_msg(
        &mut self,
        browsing_context_id: BrowsingContextId,
        source_pipeline: PipelineId,
        origin: Option<ImmutableOrigin>,
        source_origin: ImmutableOrigin,
        data: StructuredSerializedData,
    ) {
        let pipeline_id = match self.browsing_contexts.get(&browsing_context_id) {
            None => {
                return warn!(
                    "{}: PostMessage to closed browsing context",
                    browsing_context_id
                );
            },
            Some(browsing_context) => browsing_context.pipeline_id,
        };
        let source_webview = match self.pipelines.get(&source_pipeline) {
            Some(pipeline) => pipeline.webview_id,
            None => return warn!("{}: PostMessage from closed pipeline", source_pipeline),
        };

        let browsing_context_for_pipeline = |pipeline_id| {
            self.pipelines
                .get(&pipeline_id)
                .and_then(|pipeline| self.browsing_contexts.get(&pipeline.browsing_context_id))
        };
        let mut maybe_browsing_context = browsing_context_for_pipeline(source_pipeline);
        if maybe_browsing_context.is_none() {
            return warn!("{source_pipeline}: PostMessage from pipeline with closed parent");
        }

        // Step 8.3: Let source be the WindowProxy object corresponding to
        // incumbentSettings's global object (a Window object).
        // Note: done here to prevent a round-trip to the constellation later,
        // and to prevent panic as part of that round-trip
        // in the case that the source would already have been closed.
        let mut source_with_ancestry = vec![];
        while let Some(browsing_context) = maybe_browsing_context {
            source_with_ancestry.push(browsing_context.id);
            maybe_browsing_context = browsing_context
                .parent_pipeline_id
                .and_then(browsing_context_for_pipeline);
        }
        let msg = ScriptThreadMessage::PostMessage {
            target: pipeline_id,
            source_webview,
            source_with_ancestry,
            target_origin: origin,
            source_origin,
            data: Box::new(data),
        };
        self.send_message_to_pipeline(pipeline_id, msg, "PostMessage to closed pipeline");
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_focus_ancestor_browsing_contexts_for_focusing_steps(
        &mut self,
        pipeline_id: PipelineId,
        focused_child_browsing_context_id: Option<BrowsingContextId>,
        sequence: FocusSequenceNumber,
    ) {
        let browsing_context_id = match self.pipelines.get_mut(&pipeline_id) {
            Some(pipeline) => {
                pipeline.focus_sequence = sequence;
                pipeline.browsing_context_id
            },
            None => return warn!("{}: Focus parent after closure", pipeline_id),
        };

        // Ignore if the pipeline isn't fully active.
        if self.get_activity(pipeline_id) != DocumentActivity::FullyActive {
            debug!(
                "Ignoring the focus request because pipeline {} is not \
                fully active",
                pipeline_id
            );
            return;
        }

        // If a container with a non-null nested browsing context is focused,
        // the nested browsing context's active document becomes the focused
        // area of the top-level browsing context instead.
        let focused_browsing_context_id =
            focused_child_browsing_context_id.unwrap_or(browsing_context_id);

        // Send focus messages to the affected pipelines, except
        // `pipeline_id`, which has already its local focus state
        // updated.
        self.focus_browsing_context(Some(pipeline_id), focused_browsing_context_id);
    }

    fn handle_focus_remote_browsing_context(
        &mut self,
        target: BrowsingContextId,
        operation: RemoteFocusOperation,
    ) {
        let Some(browsing_context) = self.browsing_contexts.get(&target) else {
            return warn!("{target:?} not found for focus message");
        };
        let pipeline_id = browsing_context.pipeline_id;
        let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
            return warn!("{pipeline_id:?} not found for focus message");
        };
        if let Err(error) = pipeline
            .event_loop
            .send(ScriptThreadMessage::FocusDocument(pipeline_id, operation))
        {
            self.handle_send_error(pipeline_id, error);
        }
    }

    /// Perform [the focusing steps][1] for the active document of
    /// `focused_browsing_context_id`.
    ///
    /// If `initiator_pipeline_id` is specified, this method avoids sending
    /// a message to `initiator_pipeline_id`, assuming its local focus state has
    /// already been updated. This is necessary for performing the focusing
    /// steps for an object that is not the document itself but something that
    /// belongs to the document.
    ///
    /// [1]: https://html.spec.whatwg.org/multipage/#focusing-steps
    #[servo_tracing::instrument(skip_all)]
    fn focus_browsing_context(
        &mut self,
        initiator_pipeline_id: Option<PipelineId>,
        focused_browsing_context_id: BrowsingContextId,
    ) {
        let webview_id = match self.browsing_contexts.get(&focused_browsing_context_id) {
            Some(browsing_context) => browsing_context.webview_id,
            None => return warn!("Browsing context {} not found", focused_browsing_context_id),
        };

        // Update the webview’s focused browsing context.
        let old_focused_browsing_context_id = match self.webviews.get_mut(&webview_id) {
            Some(browser) => replace(
                &mut browser.focused_browsing_context_id,
                focused_browsing_context_id,
            ),
            None => {
                return warn!(
                    "{}: Browsing context for focus msg does not exist",
                    webview_id
                );
            },
        };

        // The following part is similar to [the focus update steps][1] except
        // that only `Document`s in the given focus chains are considered. It's
        // ultimately up to the script threads to fire focus events at the
        // affected objects.
        //
        // [1]: https://html.spec.whatwg.org/multipage/#focus-update-steps
        let mut old_focus_chain_pipelines: Vec<&Pipeline> = self
            .ancestor_or_self_pipelines_of_browsing_context_iter(old_focused_browsing_context_id)
            .collect();
        let mut new_focus_chain_pipelines: Vec<&Pipeline> = self
            .ancestor_or_self_pipelines_of_browsing_context_iter(focused_browsing_context_id)
            .collect();

        debug!(
            "old_focus_chain_pipelines = {:?}",
            old_focus_chain_pipelines
                .iter()
                .map(|p| p.id.to_string())
                .collect::<Vec<_>>()
        );
        debug!(
            "new_focus_chain_pipelines = {:?}",
            new_focus_chain_pipelines
                .iter()
                .map(|p| p.id.to_string())
                .collect::<Vec<_>>()
        );

        // At least the last entries should match. Otherwise something is wrong,
        // and we don't want to proceed and crash the top-level pipeline by
        // sending an impossible `Unfocus` message to it.
        match (
            &old_focus_chain_pipelines[..],
            &new_focus_chain_pipelines[..],
        ) {
            ([.., p1], [.., p2]) if p1.id == p2.id => {},
            _ => {
                warn!("Aborting the focus operation - focus chain sanity check failed");
                return;
            },
        }

        // > If the last entry in `old chain` and the last entry in `new chain`
        // > are the same, pop the last entry from `old chain` and the last
        // > entry from `new chain` and redo this step.
        let mut first_common_pipeline_in_chain = None;
        while let ([.., p1], [.., p2]) = (
            &old_focus_chain_pipelines[..],
            &new_focus_chain_pipelines[..],
        ) {
            if p1.id != p2.id {
                break;
            }
            old_focus_chain_pipelines.pop();
            first_common_pipeline_in_chain = new_focus_chain_pipelines.pop();
        }

        let mut send_errors = Vec::new();

        // > For each entry `entry` in `old chain`, in order, run these
        // > substeps: [...]
        for &pipeline in old_focus_chain_pipelines.iter() {
            if Some(pipeline.id) != initiator_pipeline_id {
                let msg = ScriptThreadMessage::UnfocusDocumentAsPartOfFocusingSteps(
                    pipeline.id,
                    pipeline.focus_sequence,
                );
                trace!("Sending {:?} to {}", msg, pipeline.id);
                if let Err(e) = pipeline.event_loop.send(msg) {
                    send_errors.push((pipeline.id, e));
                }
            } else {
                trace!(
                    "Not notifying {} - it's the initiator of this focus operation",
                    pipeline.id
                );
            }
        }

        // > For each entry entry in `new chain`, in reverse order, run these
        // > substeps: [...]
        let mut child_browsing_context_id = None;
        for &pipeline in new_focus_chain_pipelines.iter().rev() {
            // Don't send a message to the browsing context that initiated this
            // focus operation. It already knows that it has gotten focus.
            if Some(pipeline.id) != initiator_pipeline_id &&
                let Err(error) = pipeline.event_loop.send(
                    ScriptThreadMessage::FocusDocumentAsPartOfFocusingSteps(
                        pipeline.id,
                        pipeline.focus_sequence,
                        child_browsing_context_id,
                    ),
                )
            {
                send_errors.push((pipeline.id, error));
            }
            child_browsing_context_id = Some(pipeline.browsing_context_id);
        }

        if let Some(pipeline) = first_common_pipeline_in_chain &&
            Some(pipeline.id) != initiator_pipeline_id &&
            let Err(error) = pipeline.event_loop.send(
                ScriptThreadMessage::FocusDocumentAsPartOfFocusingSteps(
                    pipeline.id,
                    pipeline.focus_sequence,
                    child_browsing_context_id,
                ),
            )
        {
            send_errors.push((pipeline.id, error));
        }

        for (pipeline_id, error) in send_errors {
            self.handle_send_error(pipeline_id, error);
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_remove_iframe_msg(
        &mut self,
        webview_id: WebViewId,
        browsing_context_id: BrowsingContextId,
    ) -> Vec<PipelineId> {
        let result = self
            .all_descendant_browsing_contexts_iter(browsing_context_id)
            .flat_map(|browsing_context| browsing_context.pipelines.iter().cloned())
            .collect();
        self.close_browsing_context(webview_id, browsing_context_id, ExitPipelineMode::Normal);
        result
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_create_canvas_paint_thread_msg(
        &mut self,
        size: UntypedSize2D<u64>,
        response_sender: GenericSender<Option<(GenericSender<CanvasMsg>, CanvasId)>>,
    ) {
        let (canvas_data_sender, canvas_data_receiver) = unbounded();
        let (canvas_sender, canvas_ipc_sender) = self
            .canvas
            .get_or_init(|| self.create_canvas_paint_thread());

        let response = if let Err(e) = canvas_sender.send(ConstellationCanvasMsg::Create {
            sender: canvas_data_sender,
            size,
        }) {
            warn!("Create canvas paint thread failed ({})", e);
            None
        } else {
            match canvas_data_receiver.recv() {
                Ok(Some(canvas_id)) => Some((canvas_ipc_sender.clone(), canvas_id)),
                Ok(None) => None,
                Err(e) => {
                    warn!("Create canvas paint thread id response failed ({})", e);
                    None
                },
            }
        };
        if let Err(e) = response_sender.send(response) {
            warn!("Create canvas paint thread response failed ({})", e);
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_webdriver_msg(&mut self, msg: WebDriverCommandMsg) {
        // Find the script channel for the given parent pipeline,
        // and pass the event to that script thread.
        match msg {
            WebDriverCommandMsg::IsBrowsingContextOpen(browsing_context_id, response_sender) => {
                let is_open = self.browsing_contexts.contains_key(&browsing_context_id);
                let _ = response_sender.send(is_open);
            },
            WebDriverCommandMsg::FocusBrowsingContext(browsing_context_id) => {
                self.handle_focus_remote_browsing_context(
                    browsing_context_id,
                    RemoteFocusOperation::Viewport,
                );
            },
            // TODO: This should use the ScriptThreadMessage::EvaluateJavaScript command
            WebDriverCommandMsg::ScriptCommand(browsing_context_id, cmd) => {
                let pipeline_id = if let Some(browsing_context) =
                    self.browsing_contexts.get(&browsing_context_id)
                {
                    browsing_context.pipeline_id
                } else {
                    return warn!("{}: Browsing context is not ready", browsing_context_id);
                };

                match &cmd {
                    WebDriverScriptCommand::AddLoadStatusSender(_, sender) => {
                        self.webdriver_load_status_sender = Some((sender.clone(), pipeline_id));
                    },
                    WebDriverScriptCommand::RemoveLoadStatusSender(_) => {
                        self.webdriver_load_status_sender = None;
                    },
                    _ => {},
                };

                let control_msg = ScriptThreadMessage::WebDriverScriptCommand(pipeline_id, cmd);
                self.send_message_to_pipeline(
                    pipeline_id,
                    control_msg,
                    "ScriptCommand after closure",
                );
            },
            WebDriverCommandMsg::CloseWebView(..) |
            WebDriverCommandMsg::NewWindow(..) |
            WebDriverCommandMsg::SelectWebViewForInteraction(..) |
            WebDriverCommandMsg::IsWebViewOpen(..) |
            WebDriverCommandMsg::GetWindowRect(..) |
            WebDriverCommandMsg::GetViewportSize(..) |
            WebDriverCommandMsg::SetWindowRect(..) |
            WebDriverCommandMsg::MaximizeWebView(..) |
            WebDriverCommandMsg::LoadUrl(..) |
            WebDriverCommandMsg::Refresh(..) |
            WebDriverCommandMsg::InputEvent(..) |
            WebDriverCommandMsg::TakeScreenshot(..) => {
                unreachable!("This command should be send directly to the embedder.");
            },
            _ => {
                warn!("Unhandled WebDriver command: {:?}", msg);
            },
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn set_webview_hidden(&mut self, webview_id: WebViewId, hidden: bool) {
        if self
            .webviews
            .get_mut(&webview_id)
            .is_none_or(|webview| !webview.set_hidden(hidden))
        {
            return;
        }

        for pipeline in self.pipelines.values() {
            if pipeline.webview_id == webview_id {
                pipeline.send_throttle_messages(hidden);
            }
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn notify_history_changed(&self, webview_id: WebViewId) {
        // Send a flat projection of the history to embedder.
        // The final vector is a concatenation of the URLs of the past
        // entries, the current entry and the future entries.
        // URLs of inner frames are ignored and replaced with the URL
        // of the parent.

        let session_history = match self.webviews.get(&webview_id) {
            Some(webview) => &webview.session_history,
            None => {
                return warn!(
                    "{}: Session history does not exist for browsing context",
                    webview_id
                );
            },
        };

        let browsing_context_id = BrowsingContextId::from(webview_id);
        let Some(browsing_context) = self.browsing_contexts.get(&browsing_context_id) else {
            return warn!("notify_history_changed error after top-level browsing context closed.");
        };

        let current_url = match self.pipelines.get(&browsing_context.pipeline_id) {
            Some(pipeline) => pipeline.url.clone(),
            None => {
                return warn!("{}: Refresh after closure", browsing_context.pipeline_id);
            },
        };

        // If URL was ignored, use the URL of the previous SessionHistoryEntry, which
        // is the URL of the parent browsing context.
        let resolve_url_future =
            |previous_url: &mut ServoUrl, diff: &SessionHistoryDiff| match *diff {
                SessionHistoryDiff::BrowsingContext {
                    browsing_context_id,
                    ref new_reloader,
                    ..
                } => {
                    if browsing_context_id == webview_id {
                        let url = match *new_reloader {
                            NeedsToReload::No(pipeline_id) => {
                                match self.pipelines.get(&pipeline_id) {
                                    Some(pipeline) => pipeline.url.clone(),
                                    None => previous_url.clone(),
                                }
                            },
                            NeedsToReload::Yes(_, ref load_data) => load_data.url.clone(),
                        };
                        *previous_url = url.clone();
                        Some(url)
                    } else {
                        Some(previous_url.clone())
                    }
                },
                SessionHistoryDiff::Hash { ref new_url, .. } => {
                    *previous_url = new_url.clone();
                    Some(new_url.clone())
                },
                _ => Some(previous_url.clone()),
            };

        let resolve_url_past = |previous_url: &mut ServoUrl, diff: &SessionHistoryDiff| match *diff
        {
            SessionHistoryDiff::BrowsingContext {
                browsing_context_id,
                ref old_reloader,
                ..
            } => {
                if browsing_context_id == webview_id {
                    let url = match *old_reloader {
                        NeedsToReload::No(pipeline_id) => match self.pipelines.get(&pipeline_id) {
                            Some(pipeline) => pipeline.url.clone(),
                            None => previous_url.clone(),
                        },
                        NeedsToReload::Yes(_, ref load_data) => load_data.url.clone(),
                    };
                    *previous_url = url.clone();
                    Some(url)
                } else {
                    Some(previous_url.clone())
                }
            },
            SessionHistoryDiff::Hash { ref old_url, .. } => {
                *previous_url = old_url.clone();
                Some(old_url.clone())
            },
            _ => Some(previous_url.clone()),
        };

        let mut entries: Vec<ServoUrl> = session_history
            .past
            .iter()
            .rev()
            .scan(current_url.clone(), &resolve_url_past)
            .collect();

        entries.reverse();

        let current_index = entries.len();

        entries.push(current_url.clone());

        entries.extend(
            session_history
                .future
                .iter()
                .rev()
                .scan(current_url, &resolve_url_future),
        );
        self.constellation_to_embedder_proxy
            .send(ConstellationToEmbedderMsg::HistoryChanged(
                webview_id,
                entries,
                current_index,
            ));
    }

    #[servo_tracing::instrument(skip_all)]
    fn change_session_history(&mut self, change: SessionHistoryChange) {
        debug!(
            "{}: Setting to {}",
            change.browsing_context_id, change.new_pipeline_id
        );

        // If the currently focused browsing context is a child of the browsing
        // context in which the page is being loaded, then update the focused
        // browsing context to be the one where the page is being loaded.
        if self.focused_browsing_context_is_descendant_of(&change) &&
            let Some(webview) = self.webviews.get_mut(&change.webview_id)
        {
            webview.focused_browsing_context_id = change.browsing_context_id;
        }

        let (old_pipeline_id, webview_id) =
            match self.browsing_contexts.get_mut(&change.browsing_context_id) {
                Some(browsing_context) => {
                    debug!("Adding pipeline to existing browsing context.");
                    let old_pipeline_id = browsing_context.pipeline_id;
                    browsing_context.pipelines.insert(change.new_pipeline_id);
                    browsing_context.update_current_entry(change.new_pipeline_id);
                    (Some(old_pipeline_id), Some(browsing_context.webview_id))
                },
                None => {
                    debug!("Adding pipeline to new browsing context.");
                    (None, None)
                },
            };

        if let Some(old_pipeline_id) = old_pipeline_id {
            self.unload_document(old_pipeline_id);
        }

        let Some(webview) = self.webviews.get_mut(&change.webview_id) else {
            return warn!("Ignoring history change in non-existent WebView ({webview_id:?}).");
        };

        match old_pipeline_id {
            None => {
                let Some(new_context_info) = change.new_browsing_context_info else {
                    return warn!(
                        "{}: No NewBrowsingContextInfo for browsing context",
                        change.browsing_context_id,
                    );
                };
                self.new_browsing_context(
                    change.browsing_context_id,
                    change.webview_id,
                    change.new_pipeline_id,
                    new_context_info.parent_pipeline_id,
                    change.viewport_details,
                    new_context_info.is_private,
                    new_context_info.inherited_secure_context,
                );
                self.update_activity(change.new_pipeline_id);
            },
            Some(old_pipeline_id) => {
                // Deactivate the old pipeline, and activate the new one.
                let (pipelines_to_close, states_to_close) = if let Some(replace_reloader) =
                    change.replace
                {
                    webview.session_history.replace_reloader(
                        replace_reloader.clone(),
                        NeedsToReload::No(change.new_pipeline_id),
                    );

                    match replace_reloader {
                        NeedsToReload::No(pipeline_id) => (Some(vec![pipeline_id]), None),
                        NeedsToReload::Yes(..) => (None, None),
                    }
                } else {
                    let diff = SessionHistoryDiff::BrowsingContext {
                        browsing_context_id: change.browsing_context_id,
                        new_reloader: NeedsToReload::No(change.new_pipeline_id),
                        old_reloader: NeedsToReload::No(old_pipeline_id),
                    };

                    let mut pipelines_to_close = vec![];
                    let mut states_to_close = FxHashMap::default();

                    let diffs_to_close = webview.session_history.push_diff(diff);
                    for diff in diffs_to_close {
                        match diff {
                            SessionHistoryDiff::BrowsingContext { new_reloader, .. } => {
                                if let Some(pipeline_id) = new_reloader.alive_pipeline_id() {
                                    pipelines_to_close.push(pipeline_id);
                                }
                            },
                            SessionHistoryDiff::Pipeline {
                                pipeline_reloader,
                                new_history_state_id,
                                ..
                            } => {
                                if let Some(pipeline_id) = pipeline_reloader.alive_pipeline_id() {
                                    let states =
                                        states_to_close.entry(pipeline_id).or_insert(Vec::new());
                                    states.push(new_history_state_id);
                                }
                            },
                            _ => {},
                        }
                    }

                    (Some(pipelines_to_close), Some(states_to_close))
                };

                self.update_activity(old_pipeline_id);
                self.update_activity(change.new_pipeline_id);

                if let Some(states_to_close) = states_to_close {
                    for (pipeline_id, states) in states_to_close {
                        let msg = ScriptThreadMessage::RemoveHistoryStates(pipeline_id, states);
                        if !self.send_message_to_pipeline(
                            pipeline_id,
                            msg,
                            "Removed history states after closure",
                        ) {
                            return;
                        }
                    }
                }

                if let Some(pipelines_to_close) = pipelines_to_close {
                    for pipeline_id in pipelines_to_close {
                        self.close_pipeline(
                            pipeline_id,
                            DiscardBrowsingContext::No,
                            ExitPipelineMode::Normal,
                        );
                    }
                }
            },
        }

        if let Some(webview_id) = webview_id {
            self.trim_history(webview_id);
        }

        self.notify_focus_state(change.new_pipeline_id);

        self.notify_history_changed(change.webview_id);
        self.set_frame_tree_for_webview(change.webview_id);
    }

    /// Update the focus state of the specified pipeline that recently became
    /// active (thus doesn't have a focused container element) and may have
    /// out-dated information.
    fn notify_focus_state(&mut self, pipeline_id: PipelineId) {
        let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
            return warn!("Pipeline {pipeline_id} is closed");
        };

        let is_focused = match self.webviews.get(&pipeline.webview_id) {
            Some(webview) => webview.focused_browsing_context_id == pipeline.browsing_context_id,
            None => {
                return warn!(
                    "Pipeline {pipeline_id}'s top-level browsing context {} is closed",
                    pipeline.webview_id
                );
            },
        };

        // If the browsing context is focused, focus the document
        let msg = if is_focused {
            ScriptThreadMessage::FocusDocumentAsPartOfFocusingSteps(
                pipeline_id,
                pipeline.focus_sequence,
                None,
            )
        } else {
            ScriptThreadMessage::UnfocusDocumentAsPartOfFocusingSteps(
                pipeline_id,
                pipeline.focus_sequence,
            )
        };
        if let Err(e) = pipeline.event_loop.send(msg) {
            self.handle_send_error(pipeline_id, e);
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn focused_browsing_context_is_descendant_of(&self, change: &SessionHistoryChange) -> bool {
        let focused_browsing_context_id = self
            .webviews
            .get(&change.webview_id)
            .map(|webview| webview.focused_browsing_context_id);
        focused_browsing_context_id.is_some_and(|focused_browsing_context_id| {
            focused_browsing_context_id == change.browsing_context_id ||
                self.fully_active_descendant_browsing_contexts_iter(change.browsing_context_id)
                    .any(|nested_ctx| nested_ctx.id == focused_browsing_context_id)
        })
    }

    #[servo_tracing::instrument(skip_all)]
    fn trim_history(&mut self, webview_id: WebViewId) {
        let pipelines_to_evict = {
            let Some(webview) = self.webviews.get_mut(&webview_id) else {
                return warn!("Not trimming history for non-existent WebView ({webview_id:}");
            };
            let history_length = pref!(session_history_max_length) as usize;

            // The past is stored with older entries at the front.
            // We reverse the iter so that newer entries are at the front and then
            // skip _n_ entries and evict the remaining entries.
            let past_trim = webview
                .session_history
                .past
                .iter()
                .rev()
                .map(|diff| diff.alive_old_pipeline())
                .skip(history_length)
                .flatten();

            // The future is stored with oldest entries front, so we must
            // reverse the iterator like we do for the `past`.
            let future_trim = webview
                .session_history
                .future
                .iter()
                .rev()
                .map(|diff| diff.alive_new_pipeline())
                .skip(history_length)
                .flatten();

            past_trim.chain(future_trim).collect::<Vec<_>>()
        };

        let mut dead_pipelines = vec![];
        for evicted_id in pipelines_to_evict {
            let Some(load_data) = self.refresh_load_data(evicted_id) else {
                continue;
            };

            dead_pipelines.push((evicted_id, NeedsToReload::Yes(evicted_id, load_data)));
            self.close_pipeline(
                evicted_id,
                DiscardBrowsingContext::No,
                ExitPipelineMode::Normal,
            );
        }

        if let Some(webview) = self.webviews.get_mut(&webview_id) {
            for (alive_id, dead) in dead_pipelines {
                webview
                    .session_history
                    .replace_reloader(NeedsToReload::No(alive_id), dead);
            }
        };
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_activate_document_msg(&mut self, webview_id: WebViewId, pipeline_id: PipelineId) {
        debug!("{}: Document ready to activate", pipeline_id);

        // Find the pending change whose new pipeline id is pipeline_id. If it is found, remove
        // it from the pending changes, and make it the active document of its frame.
        let Some(change) = self
            .webviews
            .get_mut(&webview_id)
            .and_then(|webview| webview.remove_pending_change_for_pipeline(pipeline_id))
        else {
            return;
        };

        // Notify the parent (if there is one).
        let parent_pipeline_id = match change.new_browsing_context_info {
            // This will be a new browsing context.
            Some(ref info) => info.parent_pipeline_id,
            // This is an existing browsing context.
            None => match self.browsing_contexts.get(&change.browsing_context_id) {
                Some(ctx) => ctx.parent_pipeline_id,
                None => {
                    return warn!(
                        "{}: Activated document after closure of {}",
                        change.new_pipeline_id, change.browsing_context_id,
                    );
                },
            },
        };
        if let Some(parent_pipeline_id) = parent_pipeline_id &&
            let Some(parent_pipeline) = self.pipelines.get(&parent_pipeline_id)
        {
            let msg = ScriptThreadMessage::UpdatePipelineId(
                parent_pipeline_id,
                change.browsing_context_id,
                webview_id,
                pipeline_id,
                UpdatePipelineIdReason::Navigation,
            );
            let _ = parent_pipeline.event_loop.send(msg);
        }

        self.change_session_history(change);

        if let Some(webview) = self.webviews.get_mut(&webview_id) {
            webview.send_screenshot_readiness_requests_to_pipelines(
                &self.browsing_contexts,
                &self.pipelines,
            );
        }
    }

    /// Called when the window is resized.
    #[servo_tracing::instrument(skip_all)]
    fn handle_change_viewport_details_msg(
        &mut self,
        webview_id: WebViewId,
        new_viewport_details: ViewportDetails,
        size_type: WindowSizeType,
    ) {
        debug!(
            "handle_change_viewport_details_msg: {:?}",
            new_viewport_details
        );

        let browsing_context_id = BrowsingContextId::from(webview_id);
        self.resize_browsing_context(
            webview_id,
            new_viewport_details,
            size_type,
            browsing_context_id,
        );
    }

    /// Called when the window exits from fullscreen mode
    #[servo_tracing::instrument(skip_all)]
    fn handle_exit_fullscreen_msg(&mut self, webview_id: WebViewId) {
        let browsing_context_id = BrowsingContextId::from(webview_id);
        self.switch_fullscreen_mode(browsing_context_id);
    }

    /// Get the current activity of a pipeline.
    #[servo_tracing::instrument(skip_all)]
    fn get_activity(&self, pipeline_id: PipelineId) -> DocumentActivity {
        let mut ancestor_id = pipeline_id;
        loop {
            if let Some(ancestor) = self.pipelines.get(&ancestor_id) &&
                let Some(browsing_context) =
                    self.browsing_contexts.get(&ancestor.browsing_context_id) &&
                browsing_context.pipeline_id == ancestor_id
            {
                if let Some(parent_pipeline_id) = browsing_context.parent_pipeline_id {
                    ancestor_id = parent_pipeline_id;
                    continue;
                } else {
                    return DocumentActivity::FullyActive;
                }
            }
            if pipeline_id == ancestor_id {
                return DocumentActivity::Inactive;
            } else {
                return DocumentActivity::Active;
            }
        }
    }

    /// Set the current activity of a pipeline.
    #[servo_tracing::instrument(skip_all)]
    fn set_activity(&self, pipeline_id: PipelineId, activity: DocumentActivity) {
        debug!("{}: Setting activity to {:?}", pipeline_id, activity);
        if let Some(pipeline) = self.pipelines.get(&pipeline_id) {
            pipeline.set_activity(activity);
            let child_activity = if activity == DocumentActivity::Inactive {
                DocumentActivity::Active
            } else {
                activity
            };
            for child_id in &pipeline.children {
                if let Some(child) = self.browsing_contexts.get(child_id) {
                    self.set_activity(child.pipeline_id, child_activity);
                }
            }
        }
    }

    /// Update the current activity of a pipeline.
    #[servo_tracing::instrument(skip_all)]
    fn update_activity(&self, pipeline_id: PipelineId) {
        self.set_activity(pipeline_id, self.get_activity(pipeline_id));
    }

    /// Handle updating the size of a browsing context.
    /// This notifies every pipeline in the context of the new size.
    #[servo_tracing::instrument(skip_all)]
    fn resize_browsing_context(
        &mut self,
        webview_id: WebViewId,
        new_viewport_details: ViewportDetails,
        size_type: WindowSizeType,
        browsing_context_id: BrowsingContextId,
    ) {
        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            warn!("Resizing browsing context for unkown WebView: {webview_id:?}");
            return;
        };

        if let Some(browsing_context) = self.browsing_contexts.get_mut(&browsing_context_id) {
            browsing_context.viewport_details = new_viewport_details;
            // Send Resize (or ResizeInactive) messages to each pipeline in the frame tree.
            let pipeline_id = browsing_context.pipeline_id;
            let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
                return warn!("{}: Resized after closing", pipeline_id);
            };
            let _ = pipeline.event_loop.send(ScriptThreadMessage::Resize(
                pipeline.id,
                new_viewport_details,
                size_type,
            ));
            let pipeline_ids = browsing_context
                .pipelines
                .iter()
                .filter(|pipeline_id| **pipeline_id != pipeline.id);
            for id in pipeline_ids {
                if let Some(pipeline) = self.pipelines.get(id) {
                    let _ = pipeline
                        .event_loop
                        .send(ScriptThreadMessage::ResizeInactive(
                            pipeline.id,
                            new_viewport_details,
                        ));
                }
            }
        } else {
            webview.add_viewport_details(browsing_context_id, new_viewport_details);
        }

        // Send resize message to any pending pipelines that aren't loaded yet.
        for change in &webview.pending_changes {
            let pipeline_id = change.new_pipeline_id;
            let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
                warn!("Pending pipeline is closed: {pipeline_id}");
                continue;
            };
            if pipeline.browsing_context_id == browsing_context_id {
                let _ = pipeline.event_loop.send(ScriptThreadMessage::Resize(
                    pipeline.id,
                    new_viewport_details,
                    size_type,
                ));
            }
        }
    }

    /// Handle theme change events from the embedder and forward them to all appropriate `ScriptThread`s.
    #[servo_tracing::instrument(skip_all)]
    fn handle_theme_change(&mut self, webview_id: WebViewId, theme: Theme) {
        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            warn!("Received theme change request for unknown WebViewId: {webview_id:?}");
            return;
        };
        if !webview.set_theme(theme) {
            return;
        }
        let state = webview.state();
        for event_loop in self.event_loops() {
            if let Err(error) =
                event_loop.send(ScriptThreadMessage::UpdateWebViewState(state.clone()))
            {
                warn!(
                    "Sending to closed event loop ({:?}): {error}",
                    event_loop.id()
                );
            }
        }
    }

    // Handle switching from fullscreen mode
    #[servo_tracing::instrument(skip_all)]
    fn switch_fullscreen_mode(&mut self, browsing_context_id: BrowsingContextId) {
        if let Some(browsing_context) = self.browsing_contexts.get(&browsing_context_id) {
            let pipeline_id = browsing_context.pipeline_id;
            let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
                return warn!("{pipeline_id}: Switched from fullscreen mode after closing",);
            };
            let _ = pipeline
                .event_loop
                .send(ScriptThreadMessage::ExitFullScreen(pipeline.id));
        }
    }

    // Close and return the browsing context with the given id (and its children), if it exists.
    #[servo_tracing::instrument(skip_all)]
    fn close_browsing_context(
        &mut self,
        webview_id: WebViewId,
        browsing_context_id: BrowsingContextId,
        exit_mode: ExitPipelineMode,
    ) -> Option<BrowsingContext> {
        debug!("{}: Closing", browsing_context_id);

        self.close_browsing_context_children(
            webview_id,
            browsing_context_id,
            DiscardBrowsingContext::Yes,
            exit_mode,
        );

        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            warn!("Closing BrowsingContext in unknown WebView: {webview_id:?}");
            return self.browsing_contexts.remove(&browsing_context_id);
        };

        webview.close_browsing_context(browsing_context_id);

        let Some(browsing_context) = self.browsing_contexts.remove(&browsing_context_id) else {
            warn!("fn close_browsing_context: {browsing_context_id}: Closing twice");
            return None;
        };

        if let Some(parent_pipeline_id) = browsing_context.parent_pipeline_id {
            match self.pipelines.get_mut(&parent_pipeline_id) {
                None => {
                    warn!("{parent_pipeline_id}: Child closed after parent");
                },
                Some(parent_pipeline) => {
                    parent_pipeline.remove_child(browsing_context_id);

                    // If `browsing_context_id` has focus, focus the parent browsing context
                    if webview.focused_browsing_context_id == browsing_context_id {
                        trace!(
                            "About-to-be-closed browsing context {} is currently focused, so \
                                focusing its parent {}",
                            browsing_context_id, parent_pipeline.browsing_context_id
                        );
                        webview.focused_browsing_context_id = parent_pipeline.browsing_context_id;
                    }
                },
            };
        }

        debug!("{}: Closed", browsing_context_id);
        Some(browsing_context)
    }

    // Close the children of a browsing context
    #[servo_tracing::instrument(skip_all)]
    fn close_browsing_context_children(
        &mut self,
        webview_id: WebViewId,
        browsing_context_id: BrowsingContextId,
        dbc: DiscardBrowsingContext,
        exit_mode: ExitPipelineMode,
    ) {
        debug!("{}: Closing browsing context children", browsing_context_id);

        // Store information about the pipelines to be closed. Then close the
        // pipelines, before removing ourself from the browsing_contexts hash map. This
        // ordering is vital - so that if close_pipeline() ends up closing
        // any child browsing contexts, they can be removed from the parent browsing context correctly.
        let mut pipelines_to_close: Vec<_> = {
            let Some(webview) = self.webviews.get(&webview_id) else {
                return warn!(
                    "Couldnot find WebView for closing browsing context id: {webview_id:?}"
                );
            };
            webview
                .pending_changes
                .iter()
                .filter(|change| change.browsing_context_id == browsing_context_id)
                .map(|change| change.new_pipeline_id)
                .collect()
        };

        if let Some(browsing_context) = self.browsing_contexts.get(&browsing_context_id) {
            pipelines_to_close.extend(&browsing_context.pipelines)
        }

        for pipeline_id in pipelines_to_close {
            self.close_pipeline(pipeline_id, dbc, exit_mode);
        }

        debug!("{}: Closed browsing context children", browsing_context_id);
    }

    /// Returns the [LoadData] associated with the given pipeline if it exists,
    /// containing the most recent URL associated with the given pipeline.
    fn refresh_load_data(&self, pipeline_id: PipelineId) -> Option<LoadData> {
        self.pipelines.get(&pipeline_id).map(|pipeline| {
            let mut load_data = pipeline.load_data.clone();
            load_data.url = pipeline.url.clone();
            load_data
        })
    }

    // Discard the pipeline for a given document, udpdate the joint session history.
    #[servo_tracing::instrument(skip_all)]
    fn handle_discard_document(&mut self, webview_id: WebViewId, pipeline_id: PipelineId) {
        let Some(load_data) = self.refresh_load_data(pipeline_id) else {
            return warn!("{}: Discarding closed pipeline", pipeline_id);
        };
        match self.webviews.get_mut(&webview_id) {
            Some(webview) => {
                webview.session_history.replace_reloader(
                    NeedsToReload::No(pipeline_id),
                    NeedsToReload::Yes(pipeline_id, load_data),
                );
            },
            None => {
                return warn!("{pipeline_id}: Discarding after closure of {webview_id}",);
            },
        };
        self.close_pipeline(
            pipeline_id,
            DiscardBrowsingContext::No,
            ExitPipelineMode::Normal,
        );
    }

    /// Send a message to script requesting the document associated with this pipeline runs the 'unload' algorithm.
    #[servo_tracing::instrument(skip_all)]
    fn unload_document(&mut self, pipeline_id: PipelineId) {
        if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
            pipeline.set_has_active_document(false);
            let _ = pipeline
                .event_loop
                .send(ScriptThreadMessage::UnloadDocument(pipeline_id));
        }
    }

    // Close all pipelines at and beneath a given browsing context
    #[servo_tracing::instrument(skip_all)]
    fn close_pipeline(
        &mut self,
        pipeline_id: PipelineId,
        dbc: DiscardBrowsingContext,
        exit_mode: ExitPipelineMode,
    ) {
        debug!("{}: Closing", pipeline_id);

        // Sever connection to browsing context
        let Some((webview_id, browsing_context_id)) = self
            .pipelines
            .get(&pipeline_id)
            .map(|pipeline| (pipeline.webview_id, pipeline.browsing_context_id))
        else {
            return warn!("Tried closing unknown pipeline: {pipeline_id:?}");
        };

        if let Some(browsing_context) = self.browsing_contexts.get_mut(&browsing_context_id) {
            browsing_context.pipelines.remove(&pipeline_id);
        }

        // Store information about the browsing contexts to be closed. Then close the
        // browsing contexts, before removing ourself from the pipelines hash map. This
        // ordering is vital - so that if close_browsing_context() ends up closing
        // any child pipelines, they can be removed from the parent pipeline correctly.
        let browsing_contexts_to_close = {
            let mut browsing_contexts_to_close = vec![];

            if let Some(pipeline) = self.pipelines.get(&pipeline_id) {
                browsing_contexts_to_close.extend_from_slice(&pipeline.children);
            }

            browsing_contexts_to_close
        };

        // Remove any child browsing contexts
        for child_browsing_context in &browsing_contexts_to_close {
            self.close_browsing_context(webview_id, *child_browsing_context, exit_mode);
        }

        // Note, we don't remove the pipeline now, we wait for the message to come back from
        // the pipeline.
        let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
            return warn!("fn close_pipeline: {pipeline_id}: Closing twice");
        };

        // Inform script and paint that this pipeline has exited.
        if !pipeline.send_exit_message_to_script(dbc) {
            // The pipeline is now unreachable, so we should consider it gone. We should
            // not try to send any subsequent messages to this pipeline. all() here ensures
            // that `Paint` cleans up the pipeline display immediately without waiting for
            // confirmation from the event loop.
            self.handle_pipeline_exited(pipeline_id, PipelineExitSource::all());
        }

        // Remove this pipeline from pending changes if it hasn't loaded yet.
        if let Some(webview) = self.webviews.get_mut(&webview_id) {
            webview.remove_pending_change_for_pipeline(pipeline_id);
            webview.send_screenshot_readiness_requests_to_pipelines(
                &self.browsing_contexts,
                &self.pipelines,
            );
            webview.handle_screenshot_readiness_response(
                pipeline_id,
                ScreenshotReadinessResponse::NoLongerActive,
                &self.paint_proxy,
            );
        }

        debug!("{}: Closed", pipeline_id);
    }

    // Randomly close a pipeline -if --random-pipeline-closure-probability is set
    fn maybe_close_random_pipeline(&mut self) {
        match self.random_pipeline_closure {
            Some((ref mut rng, probability)) => {
                if probability <= rng.random::<f32>() {
                    return;
                }
            },
            _ => return,
        };
        // In order to get repeatability, we sort the pipeline ids.
        let mut pipeline_ids: Vec<&PipelineId> = self.pipelines.keys().collect();
        pipeline_ids.sort_unstable();
        if let Some((ref mut rng, probability)) = self.random_pipeline_closure &&
            let Some(pipeline_id) = pipeline_ids.choose(rng) &&
            let Some(pipeline) = self.pipelines.get(pipeline_id)
        {
            if self
                .webviews
                .values()
                .any(|webview| webview.pipeline_is_pending(pipeline.id)) &&
                probability <= rng.random::<f32>()
            {
                // We tend not to close pending pipelines, as that almost always
                // results in pipelines being closed early in their lifecycle,
                // and not stressing the constellation as much.
                // https://github.com/servo/servo/issues/18852
                info!("{}: Not closing pending pipeline", pipeline_id);
            } else {
                // Note that we deliberately do not do any of the tidying up
                // associated with closing a pipeline. The constellation should cope!
                warn!("{}: Randomly closing pipeline", pipeline_id);
                pipeline.send_exit_message_to_script(DiscardBrowsingContext::No);
            }
        }
    }

    /// Convert a browsing context to a tree of active pipeline ids, for sending to `Paint`.
    #[servo_tracing::instrument(skip_all)]
    fn browsing_context_to_sendable(
        &self,
        browsing_context_id: BrowsingContextId,
    ) -> Option<SendableFrameTree> {
        self.browsing_contexts
            .get(&browsing_context_id)
            .and_then(|browsing_context| {
                self.pipelines
                    .get(&browsing_context.pipeline_id)
                    .map(|pipeline| {
                        let mut frame_tree = SendableFrameTree {
                            pipeline: pipeline.to_sendable(),
                            children: vec![],
                        };

                        for child_browsing_context_id in &pipeline.children {
                            if let Some(child) =
                                self.browsing_context_to_sendable(*child_browsing_context_id)
                            {
                                frame_tree.children.push(child);
                            }
                        }

                        frame_tree
                    })
            })
    }

    /// Send the frame tree for the given webview to `Paint`.
    #[servo_tracing::instrument(skip_all)]
    fn set_frame_tree_for_webview(&mut self, webview_id: WebViewId) {
        // Note that this function can panic, due to ipc-channel creation failure.
        // avoiding this panic would require a mechanism for dealing
        // with low-resource scenarios.
        let browsing_context_id = BrowsingContextId::from(webview_id);
        let Some(frame_tree) = self.browsing_context_to_sendable(browsing_context_id) else {
            return;
        };

        let new_pipeline_id = frame_tree.pipeline.id;

        debug!("{}: Sending frame tree", browsing_context_id);
        self.paint_proxy
            .send(PaintMessage::SetFrameTreeForWebView(webview_id, frame_tree));

        let Some(webview) = self.webviews.get_mut(&webview_id) else {
            return;
        };
        if webview.active_top_level_pipeline_id == Some(new_pipeline_id) {
            return;
        }

        let old_pipeline_id = webview.active_top_level_pipeline_id;
        let old_epoch = webview.active_top_level_pipeline_epoch;
        let new_epoch = old_epoch.next();

        let accessibility_active = webview.accessibility_active;

        webview.active_top_level_pipeline_id = Some(new_pipeline_id);
        webview.active_top_level_pipeline_epoch = new_epoch;

        // Deactivate accessibility in the now-inactive top-level document in the WebView.
        // This ensures that the document stops sending tree updates, since they will be
        // discarded in libservo anyway, and also ensures that when accessibility is
        // reactivated, the document sends the whole accessibility tree from scratch.
        if let Some(old_pipeline_id) = old_pipeline_id {
            self.send_message_to_pipeline(
                old_pipeline_id,
                ScriptThreadMessage::SetAccessibilityActive(old_pipeline_id, false, old_epoch),
                "Set accessibility active after closure",
            );
        }

        // Forward activation to layout for the active top-level document in the WebView.
        // There are two sites like this; this is the navigation (or bfcache traversal) site.
        self.send_message_to_pipeline(
            new_pipeline_id,
            ScriptThreadMessage::SetAccessibilityActive(
                new_pipeline_id,
                accessibility_active,
                new_epoch,
            ),
            "Set accessibility active after closure",
        );
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_media_session_action_msg(&mut self, action: MediaSessionActionType) {
        if let Some(media_session_pipeline_id) = self.active_media_session {
            self.send_message_to_pipeline(
                media_session_pipeline_id,
                ScriptThreadMessage::MediaSessionAction(media_session_pipeline_id, action),
                "Got media session action request after closure",
            );
        } else {
            error!("Got a media session action but no active media session is registered");
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_set_scroll_states(&self, pipeline_id: PipelineId, scroll_states: ScrollStateUpdate) {
        let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
            warn!("Discarding scroll offset update for unknown pipeline");
            return;
        };
        if let Err(error) = pipeline
            .event_loop
            .send(ScriptThreadMessage::SetScrollStates(
                pipeline_id,
                scroll_states,
            ))
        {
            warn!("Could not send scroll offsets to pipeline: {pipeline_id:?}: {error:?}");
        }
    }

    #[servo_tracing::instrument(skip_all)]
    fn handle_paint_metric(&mut self, pipeline_id: PipelineId, event: PaintMetricEvent) {
        let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
            warn!("Discarding paint metric event for unknown pipeline");
            return;
        };
        if let Err(error) = pipeline
            .event_loop
            .send(ScriptThreadMessage::PaintMetric(pipeline_id, event))
        {
            warn!("Could not send paint metric event to pipeline: {pipeline_id:?}: {error:?}");
        }
    }

    fn create_canvas_paint_thread(
        &self,
    ) -> (Sender<ConstellationCanvasMsg>, GenericSender<CanvasMsg>) {
        CanvasPaintThread::start(
            self.paint_proxy.cross_process_paint_api.clone(),
            self.mem_profiler_chan.clone(),
        )
    }

    fn handle_embedder_control_response(
        &self,
        id: EmbedderControlId,
        response: EmbedderControlResponse,
    ) {
        let pipeline_id = id.pipeline_id;
        let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
            warn!("Not sending embedder control response for unknown pipeline {pipeline_id:?}");
            return;
        };

        if let Err(error) = pipeline
            .event_loop
            .send(ScriptThreadMessage::EmbedderControlResponse(id, response))
        {
            warn!(
                "Could not send embedder control response to pipeline {pipeline_id:?}: {error:?}"
            );
        }
    }

    fn handle_update_pinch_zoom_infos(
        &self,
        pipeline_id: PipelineId,
        pinch_zoom_infos: PinchZoomInfos,
    ) {
        let Some(pipeline) = self.pipelines.get(&pipeline_id) else {
            warn!("Discarding pinch zoom update for unknown pipeline");
            return;
        };
        if let Err(error) = pipeline
            .event_loop
            .send(ScriptThreadMessage::UpdatePinchZoomInfos(
                pipeline_id,
                pinch_zoom_infos,
            ))
        {
            warn!("Could not send pinch zoom update to pipeline: {pipeline_id:?}: {error:?}");
        }
    }

    #[cfg(feature = "devtools")]
    pub(crate) fn script_to_devtools_callback(
        &self,
    ) -> Option<GenericCallback<ScriptToDevtoolsControlMsg>> {
        self.script_to_devtools_callback
            .get_or_init(|| {
                self.devtools_sender.as_ref().and_then(|devtools_sender| {
                    let devtools_sender = devtools_sender.clone();
                    let callback = GenericCallback::new(move |message| match message {
                        Err(error) => {
                            error!("Cast to ScriptToDevtoolsControlMsg failed ({error}).")
                        },
                        Ok(message) => {
                            if let Err(error) =
                                devtools_sender.send(DevtoolsControlMsg::FromScript(message))
                            {
                                warn!("Sending to devtools failed ({error:?})")
                            }
                        },
                    });
                    match callback {
                        Ok(callback) => Some(callback),
                        Err(error) => {
                            error!("Could not create Devtools communication channel: {error}");
                            None
                        },
                    }
                })
            })
            .clone()
    }
}