@ekrooh/bare 0.5.0 → 0.6.1

package/README.md

@@ -3,11 +3,14 @@
 **One soul, many platforms.** One codebase and identity across Android, iOS,
 web, and desktop.
 
+**Docs: <https://anderscan.github.io/ekrooh>**
+
 [![CI](https://github.com/AndersCan/ekrooh/actions/workflows/test.yml/badge.svg)](https://github.com/AndersCan/ekrooh/actions/workflows/test.yml)
+[![Release](https://img.shields.io/github/v/release/AndersCan/ekrooh)](https://github.com/AndersCan/ekrooh/releases/latest)
 
 The boring bootstrap for cross-platform apps on the Bare runtime (holepunch): a
 binary wire protocol, plugin kernel, RPC messenger, transports, and native host
-bridges, plus a reference app. Public docs: <https://anderscan.github.io/ekrooh>.
+bridges, plus a reference app.
 
 - [`vision.md`](vision.md): what this project is and is not.
 - [`AGENTS.md`](AGENTS.md): how to develop it and the canonical commands.
@@ -99,16 +102,23 @@ ephemeral port. Every request is gated by a per-session token:
 
 1. The shell injects `window.__ekrooh = { bootstrap }`, a single-use nonce (never the raw token).
 2. The page calls `POST /login` with the nonce and receives a
-   `bare_session` cookie (`HttpOnly; SameSite=Lax; Path=/`).
+   `bare_session_<port>` cookie (`HttpOnly; SameSite=Strict; Path=/`). The port
+   in the name keeps two loopback servers in one cookie store apart. The raw
+   token is never a login credential.
 3. The cookie authorizes `<img>`, `<video>`, `fetch`, and the WS upgrade.
    Non-browser clients send `X-Bare-Token`. There is no `?token=` fallback
    (see `docs/adr/0003-loopback-auth-surface.md`).
 
 Only the bootstrap mount at `/` is public pre-auth. The worklet writes
-`{ origin, port, token, bootstrap }` to `handoff.json` in the host's sandbox dir;
-the host keeps `token` and loads `http://127.0.0.1:<port>/index.html`.
+`{ origin, port, bootstrap }` to `handoff.json` in the host's sandbox dir (never
+the session token); the host loads `http://127.0.0.1:<port>/index.html` and
+deletes the file.
+
+Every request must also target the bound loopback server (`Host`), and a page
+`Origin` must be that server or an explicitly allowed one, in every mode.
 
-The dev backend runs the same bundle with auth off on `ws://localhost:8080`.
+The dev backend (`mode=dev`) runs the same bundle with auth off on
+`ws://localhost:8080`, allowing the Vite dev origin (`origin=` tokens).
 
 ## Testing
 

package/dist/{index-BkwUzwVt.d.mts → index-Do-kTNXw.d.mts}

@@ -154,6 +154,18 @@ declare function coerceErrorCode(code: string | undefined): ErrorCode;
 type Ok<T> = [null, T];
 type Err = [CoreError, null];
 type PluginResult<T> = Either<CoreError, T>;
+/**
+ * Environment capabilities the message layer needs but must not read from
+ * globals: Bare has no Web Crypto global, so reaching for
+ * `globalThis.crypto` broke host invokes in consumer worklets (ekrooh#268).
+ * Each entry point injects its own implementation; tests override fields.
+ */
+interface Platform {
+  /** Fill `bytes` with CSPRNG output and return it. Never Math.random. */
+  randomBytes(bytes: Uint8Array<ArrayBuffer>): Uint8Array<ArrayBuffer>;
+  /** Milliseconds since the epoch. */
+  now(): number;
+}
 type DistributiveOmit<T, K extends keyof any> = T extends any ? Omit<T, K> : never;
 type InternalDispatchRequest = (PluginDispatchHeader & {
   requestId: string;
@@ -167,7 +179,9 @@ interface ProtocolMessenger {
   invoke(request: InvokeRequest, payload?: Uint8Array | ArrayBuffer | string | null, timeoutMs?: number): Promise<MessageHeader>;
   handleIncoming(header: MessageHeader): void;
 }
-declare function createProtocolMessenger(send: (request: InternalDispatchRequest, payload?: Uint8Array | ArrayBuffer | string | null) => void): ProtocolMessenger;
+declare function createProtocolMessenger(send: (request: InternalDispatchRequest, payload?: Uint8Array | ArrayBuffer | string | null) => void, options?: {
+  platform?: Partial<Platform>;
+}): ProtocolMessenger;
 interface PluginRegistry {
   register(plugin: PluginManifest): void;
   resolve(pluginId: string, runtime: RuntimeTarget): PluginManifest['runtimes'][RuntimeTarget] | undefined;
@@ -332,4 +346,4 @@ type WebConsoleCapture = {
  * where there is no loopback backend to ingest into.
  */
 declare function installWebConsoleCapture(options?: WebConsoleCaptureOptions): WebConsoleCapture;
-export { PluginRuntimeAdapter as $, Ok as A, ErrorCodeOrString as B, createPluginRegistry as C, ProtocolMessenger as D, InvokeRequest as E, CapabilityDescriptor as F, InvokeEnvelope as G, HostCapabilitiesResponseHeader as H, CoreError as I, PluginDispatchHeader as J, MessageHeader as K, CoreErrorWire as L, coerceErrorCode as M, err as N, createProtocolMessenger as O, ok as P, PluginManifest as Q, DispatchEnvelope as R, createPluginBus as S, DispatchRequest as T, HostInvokeRequestHeader as U, HostCapabilitiesQueryHeader as V, HostInvokeResponseHeader as W, PluginInvokeRequestHeader as X, PluginHeader as Y, PluginInvokeResponseHeader as Z, ProtocolOptions as _, LogStore as a, MessageType as at, PluginRouter as b, DispatchHandler as c, definePlugin as d, RuntimeTarget as et, dispatchEvent as f, MessageProtocol as g, Encoder as h, LogSource as i, MAX_HEADER_BYTES as it, PluginResult as j, Err as k, EventSpec as l, Decoder as m, LogEntry as n, ErrorCode as nt, BareRuntimeContext as o, MessageTypeValue as ot, invokeEvent as p, PluginContext as q, LogLevel as r, MAX_FRAME_BYTES as rt, createBareRuntimeContext as s, VERSION as st, installWebConsoleCapture as t, WireMessage as tt, InvokeHandler as u, PluginBus as v, createPluginRouter as w, PluginRouterOptions as x, PluginRegistry as y, Either as z };
+export { PluginManifest as $, Err as A, Either as B, createPluginRegistry as C, ProtocolMessenger as D, InvokeRequest as E, ok as F, HostInvokeResponseHeader as G, HostCapabilitiesQueryHeader as H, CapabilityDescriptor as I, PluginContext as J, InvokeEnvelope as K, CoreError as L, PluginResult as M, coerceErrorCode as N, createProtocolMessenger as O, err as P, PluginInvokeResponseHeader as Q, CoreErrorWire as R, createPluginBus as S, DispatchRequest as T, HostCapabilitiesResponseHeader as U, ErrorCodeOrString as V, HostInvokeRequestHeader as W, PluginHeader as X, PluginDispatchHeader as Y, PluginInvokeRequestHeader as Z, ProtocolOptions as _, LogStore as a, MAX_HEADER_BYTES as at, PluginRouter as b, DispatchHandler as c, VERSION as ct, definePlugin as d, PluginRuntimeAdapter as et, dispatchEvent as f, MessageProtocol as g, Encoder as h, LogSource as i, MAX_FRAME_BYTES as it, Ok as j, Platform as k, EventSpec as l, Decoder as m, LogEntry as n, WireMessage as nt, BareRuntimeContext as o, MessageType as ot, invokeEvent as p, MessageHeader as q, LogLevel as r, ErrorCode as rt, createBareRuntimeContext as s, MessageTypeValue as st, installWebConsoleCapture as t, RuntimeTarget as tt, InvokeHandler as u, PluginBus as v, createPluginRouter as w, PluginRouterOptions as x, PluginRegistry as y, DispatchEnvelope as z };

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as PluginRuntimeAdapter, A as Ok, B as ErrorCodeOrString, C as createPluginRegistry, D as ProtocolMessenger, E as InvokeRequest, F as CapabilityDescriptor, G as InvokeEnvelope, H as HostCapabilitiesResponseHeader, I as CoreError, J as PluginDispatchHeader, K as MessageHeader, L as CoreErrorWire, M as coerceErrorCode, N as err, O as createProtocolMessenger, P as ok, Q as PluginManifest, R as DispatchEnvelope, S as createPluginBus, T as DispatchRequest, U as HostInvokeRequestHeader, V as HostCapabilitiesQueryHeader, W as HostInvokeResponseHeader, X as PluginInvokeRequestHeader, Y as PluginHeader, Z as PluginInvokeResponseHeader, _ as ProtocolOptions, at as MessageType, b as PluginRouter, c as DispatchHandler, d as definePlugin, et as RuntimeTarget, f as dispatchEvent, g as MessageProtocol, h as Encoder, it as MAX_HEADER_BYTES, j as PluginResult, k as Err, l as EventSpec, m as Decoder, nt as ErrorCode, o as BareRuntimeContext, ot as MessageTypeValue, p as invokeEvent, q as PluginContext, rt as MAX_FRAME_BYTES, s as createBareRuntimeContext, st as VERSION, t as installWebConsoleCapture, tt as WireMessage, u as InvokeHandler, v as PluginBus, w as createPluginRouter, x as PluginRouterOptions, y as PluginRegistry, z as Either } from "./index-BkwUzwVt.mjs";
-export { BareRuntimeContext, CapabilityDescriptor, CoreError, CoreErrorWire, Decoder, DispatchEnvelope, DispatchHandler, DispatchRequest, Either, Encoder, Err, ErrorCode, ErrorCodeOrString, EventSpec, HostCapabilitiesQueryHeader, HostCapabilitiesResponseHeader, HostInvokeRequestHeader, HostInvokeResponseHeader, InvokeEnvelope, InvokeHandler, InvokeRequest, MAX_FRAME_BYTES, MAX_HEADER_BYTES, MessageHeader, MessageProtocol, MessageType, MessageTypeValue, Ok, PluginBus, PluginContext, PluginDispatchHeader, PluginHeader, PluginInvokeRequestHeader, PluginInvokeResponseHeader, PluginManifest, PluginRegistry, PluginResult, PluginRouter, PluginRouterOptions, PluginRuntimeAdapter, ProtocolMessenger, ProtocolOptions, RuntimeTarget, VERSION, WireMessage, coerceErrorCode, createBareRuntimeContext, createPluginBus, createPluginRegistry, createPluginRouter, createProtocolMessenger, definePlugin, dispatchEvent, err, installWebConsoleCapture, invokeEvent, ok };
+import { $ as PluginManifest, A as Err, B as Either, C as createPluginRegistry, D as ProtocolMessenger, E as InvokeRequest, F as ok, G as HostInvokeResponseHeader, H as HostCapabilitiesQueryHeader, I as CapabilityDescriptor, J as PluginContext, K as InvokeEnvelope, L as CoreError, M as PluginResult, N as coerceErrorCode, O as createProtocolMessenger, P as err, Q as PluginInvokeResponseHeader, R as CoreErrorWire, S as createPluginBus, T as DispatchRequest, U as HostCapabilitiesResponseHeader, V as ErrorCodeOrString, W as HostInvokeRequestHeader, X as PluginHeader, Y as PluginDispatchHeader, Z as PluginInvokeRequestHeader, _ as ProtocolOptions, at as MAX_HEADER_BYTES, b as PluginRouter, c as DispatchHandler, ct as VERSION, d as definePlugin, et as PluginRuntimeAdapter, f as dispatchEvent, g as MessageProtocol, h as Encoder, it as MAX_FRAME_BYTES, j as Ok, k as Platform, l as EventSpec, m as Decoder, nt as WireMessage, o as BareRuntimeContext, ot as MessageType, p as invokeEvent, q as MessageHeader, rt as ErrorCode, s as createBareRuntimeContext, st as MessageTypeValue, t as installWebConsoleCapture, tt as RuntimeTarget, u as InvokeHandler, v as PluginBus, w as createPluginRouter, x as PluginRouterOptions, y as PluginRegistry, z as DispatchEnvelope } from "./index-Do-kTNXw.mjs";
+export { BareRuntimeContext, CapabilityDescriptor, CoreError, CoreErrorWire, Decoder, DispatchEnvelope, DispatchHandler, DispatchRequest, Either, Encoder, Err, ErrorCode, ErrorCodeOrString, EventSpec, HostCapabilitiesQueryHeader, HostCapabilitiesResponseHeader, HostInvokeRequestHeader, HostInvokeResponseHeader, InvokeEnvelope, InvokeHandler, InvokeRequest, MAX_FRAME_BYTES, MAX_HEADER_BYTES, MessageHeader, MessageProtocol, MessageType, MessageTypeValue, Ok, type Platform, PluginBus, PluginContext, PluginDispatchHeader, PluginHeader, PluginInvokeRequestHeader, PluginInvokeResponseHeader, PluginManifest, PluginRegistry, PluginResult, PluginRouter, PluginRouterOptions, PluginRuntimeAdapter, ProtocolMessenger, ProtocolOptions, RuntimeTarget, VERSION, WireMessage, coerceErrorCode, createBareRuntimeContext, createPluginBus, createPluginRegistry, createPluginRouter, createProtocolMessenger, definePlugin, dispatchEvent, err, installWebConsoleCapture, invokeEvent, ok };

package/dist/index.mjs

@@ -1 +1 @@
-export { h as CoreError, g as ErrorCode, _ as MAX_FRAME_BYTES, v as MAX_HEADER_BYTES, o as MessageProtocol, y as MessageType, b as VERSION, f as coerceErrorCode, n as createBareRuntimeContext, l as createPluginBus, u as createPluginRegistry, d as createPluginRouter, s as createProtocolMessenger, r as definePlugin, i as dispatchEvent, p as err, t as installWebConsoleCapture, a as invokeEvent, m as ok } from "./messages-BbpF3wNH.mjs";
+export { h as CoreError, g as ErrorCode, _ as MAX_FRAME_BYTES, v as MAX_HEADER_BYTES, o as MessageProtocol, y as MessageType, b as VERSION, f as coerceErrorCode, n as createBareRuntimeContext, l as createPluginBus, u as createPluginRegistry, d as createPluginRouter, s as createProtocolMessenger, r as definePlugin, i as dispatchEvent, p as err, t as installWebConsoleCapture, a as invokeEvent, m as ok } from "./messages-CMNIFMFY.mjs";

package/dist/{messages-BbpF3wNH.mjs → messages-CMNIFMFY.mjs}

@@ -204,8 +204,8 @@ function createPluginRouter(registry, runtime, options) {
 				logger.error(`invoke ${header.pluginId}.${header.event} failed: ${error.message}`);
 				return invokeErrorResponse(header, error);
 			}
-			if (header.requestId && options?.delegateToHost) {
-				if (await hostAnnounces(header.pluginId, header.event)) try {
+			if (header.requestId && options?.delegateToHost) try {
+				if (await hostAnnounces(header.pluginId, header.event)) {
 					const delegated = await options.delegateToHost(header, payload);
 					if (delegated) {
 						const code = delegated.error?.code;
@@ -213,10 +213,10 @@ function createPluginRouter(registry, runtime, options) {
 						return delegated;
 					}
 					capsCache = null;
-				} catch (e) {
-					capsCache = null;
-					return invokeErrorResponse(header, new CoreError(ErrorCode.HOST_ERROR, e instanceof Error ? e.message : String(e)));
 				}
+			} catch (e) {
+				capsCache = null;
+				return invokeErrorResponse(header, new CoreError(ErrorCode.HOST_ERROR, e instanceof Error ? e.message : String(e)));
 			}
 			return invokeErrorResponse(header, new CoreError(ErrorCode.UNSUPPORTED_CAPABILITY, `Unsupported capability ${header.pluginId}.${header.event} on ${runtime}`));
 		}
@@ -296,25 +296,46 @@ function isPluginInvokeResponseHeader(header) {
 /**
 * CSPRNG-backed correlation id for RPC requests.
 *
-* Shared by the production messenger (`rpc-messenger.ts`) and the mantaq
-* prototype (`rpc-messenger.mantaq.ts`) so the unguessable,
-* collision-resistant guarantee can never regress in a single copy. Request
+* Shared by the RPC messenger (`rpc-messenger.ts`) and the host IPC bridge
+* (`host-ipc.ts`) so the unguessable, collision-resistant guarantee can never
+* regress in a single copy. Request
 * IDs must never be derived from `Math.random()` — a guessable id lets a peer
 * spoof or collide with an in-flight request and corrupt correlation. See
-* ekrooh#141.
+* ekrooh#141. The random source is injected, never read from a global
+* (ekrooh#268).
 */
-function createRequestId() {
-	const bytes = /* @__PURE__ */ new Uint8Array(16);
-	globalThis.crypto.getRandomValues(bytes);
-	const rand = bytes.reduce((acc, b) => acc + b.toString(36), "").slice(0, 22);
-	return `${Date.now().toString(36)}-${rand}`;
+function createRequestId(platform) {
+	const rand = platform.randomBytes(/* @__PURE__ */ new Uint8Array(16)).reduce((acc, b) => acc + b.toString(36), "").slice(0, 22);
+	return `${platform.now().toString(36)}-${rand}`;
+}
+// core/messages/platform.ts
+/**
+* Fill in any field `override` leaves out from the Web platform (browser,
+* Node). Throws when a CSPRNG is needed but the environment has none, rather
+* than falling back to a guessable source (ekrooh#141).
+*/
+function resolvePlatform(override = {}) {
+	return {
+		randomBytes: override.randomBytes ?? webRandomBytes(),
+		now: override.now ?? Date.now
+	};
+}
+function webRandomBytes() {
+	const c = globalThis.crypto;
+	if (typeof c?.getRandomValues !== "function") throw new Error("ekrooh: no CSPRNG in this environment; pass `platform.randomBytes`");
+	return (bytes) => c.getRandomValues(bytes);
 }
 // core/messages/rpc-messenger.ts
 /** Hard ceiling on concurrently in-flight invokes. Above this, the oldest call
 * is dropped (its timer cleared and promise rejected) so a flood of requests
 * cannot grow the pending map without bound. */
 const MAX_CONCURRENT_INVOKES = 1024;
-function createProtocolMessenger(send) {
+function createProtocolMessenger(send, options = {}) {
+	const platform = resolvePlatform(options.platform);
+	const withRequestId = (request) => ({
+		...request,
+		requestId: createRequestId(platform)
+	});
 	const pending = /* @__PURE__ */ new Map();
 	const sharedLogTail = createSharedLogTail();
 	return {
@@ -383,12 +404,6 @@ function createProtocolMessenger(send) {
 		}
 	};
 }
-function withRequestId(request) {
-	return {
-		...request,
-		requestId: createRequestId()
-	};
-}
 const INVOKE_TAIL_TIMEOUT_MS = 2e3;
 /** A tail fetched within this window is reused for later timeouts instead of
 * fetching again. Timeouts cluster (a stalled peer times out every pending
@@ -747,9 +762,11 @@ function dispatchEvent(spec, args, payload) {
 // core/messages/create-bare-runtime-context.ts
 function createBareRuntimeContext(plugins = [], routerOptions) {
 	const runtime = "bare";
+	const textEncoder = new TextEncoder$1();
+	const textDecoder = new TextDecoder$1();
 	const protocol = new MessageProtocol({
-		encode: (str) => new TextEncoder$1().encode(str),
-		decode: (bytes) => new TextDecoder$1().decode(bytes)
+		encode: (str) => textEncoder.encode(str),
+		decode: (bytes) => textDecoder.decode(bytes)
 	});
 	const pluginRegistry = createPluginRegistry();
 	for (const plugin of plugins) pluginRegistry.register(plugin);

package/dist/{plugins-DZu_NWVp.mjs → plugins-BnpdCi3A.mjs}

@@ -1,4 +1,4 @@
-import { g as ErrorCode, m as ok, p as err, r as definePlugin } from "./messages-BbpF3wNH.mjs";
+import { g as ErrorCode, m as ok, p as err, r as definePlugin } from "./messages-CMNIFMFY.mjs";
 import { discoverySpecs } from "./plugins-discovery-events.mjs";
 import { healthSpecs } from "./plugins-health-events.mjs";
 import { logsSpecs } from "./plugins-logs-events.mjs";
@@ -84,6 +84,7 @@ function createLogsPlugin(deps) {
 * mounted at once and evict the least-recently-used so picked/captured files
 * do not accumulate on the loopback server for the whole session. */
 const MEDIA_MOUNT_CAP = 4;
+const MEDIA_KINDS = ["image", "video"];
 function newRequestId() {
 	const rand = crypto.randomBytes(16).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 	return `${Date.now().toString(36)}-${rand}`;
@@ -108,18 +109,20 @@ function createMediaPlugin(deps) {
 		}
 	};
 	const serve = async (event, args) => {
+		const kind = args?.kind;
+		if (kind !== void 0 && !MEDIA_KINDS.includes(kind)) return err(ErrorCode.PLUGIN_ERROR, `Unknown media kind for ${event}`);
 		const host = await deps.invokeOnHost({
 			type: "INVOKE_REQUEST",
 			pluginId: "vendor.media",
 			event,
 			requestId: newRequestId(),
-			args
+			args: kind === void 0 ? {} : { kind }
 		}, /* @__PURE__ */ new Uint8Array(0));
 		if (!host) return err(ErrorCode.HOST_ERROR, `Host did not answer ${event}`);
 		if (host.error) return err(host.error.code || ErrorCode.HOST_ERROR, host.error.message ?? `Host failed ${event}`);
 		const path = host.result?.path;
 		if (!path) return err(ErrorCode.HOST_ERROR, `Host returned no path for ${event}`);
-		const id = `${args?.kind ?? "media"}-${newRequestId()}`;
+		const id = `${kind ?? "media"}-${newRequestId()}`;
 		mountMedia(id, path);
 		const url = await deps.staticServer.url(`/media/${id}`);
 		return ok({ url });

package/dist/plugins-discovery-events.d.mts

@@ -1,4 +1,4 @@
-import { F as CapabilityDescriptor, G as InvokeEnvelope } from "./index-BkwUzwVt.mjs";
+import { I as CapabilityDescriptor, K as InvokeEnvelope } from "./index-Do-kTNXw.mjs";
 export type DiscoveryListResult = {
   schemaVersion: 1;
   capabilities: CapabilityDescriptor[];

package/dist/plugins-discovery-events.mjs

@@ -1,4 +1,4 @@
-import { a as invokeEvent } from "./messages-BbpF3wNH.mjs";
+import { a as invokeEvent } from "./messages-CMNIFMFY.mjs";
 // plugins/discovery/events.ts
 const discoverySpecs = { list: {
 	pluginId: "core.discovery",

package/dist/plugins-health-events.d.mts

@@ -1,4 +1,4 @@
-import { G as InvokeEnvelope } from "./index-BkwUzwVt.mjs";
+import { K as InvokeEnvelope } from "./index-Do-kTNXw.mjs";
 export declare const healthSpecs: {
   readonly ping: {
     readonly pluginId: 'core.health';

package/dist/plugins-health-events.mjs

@@ -1,4 +1,4 @@
-import { a as invokeEvent } from "./messages-BbpF3wNH.mjs";
+import { a as invokeEvent } from "./messages-CMNIFMFY.mjs";
 // plugins/health/events.ts
 const healthSpecs = {
 	ping: {

package/dist/plugins-logs-events.d.mts

@@ -1,4 +1,4 @@
-import { G as InvokeEnvelope, i as LogSource, n as LogEntry, r as LogLevel } from "./index-BkwUzwVt.mjs";
+import { K as InvokeEnvelope, i as LogSource, n as LogEntry, r as LogLevel } from "./index-Do-kTNXw.mjs";
 export type LogsViewArgs = {
   /** Most-recent N matching entries. Defaults to a small window. */
   tail?: number;

package/dist/plugins-logs-events.mjs

@@ -1,4 +1,4 @@
-import { a as invokeEvent } from "./messages-BbpF3wNH.mjs";
+import { a as invokeEvent } from "./messages-CMNIFMFY.mjs";
 // plugins/logs/events.ts
 const logsSpecs = {
 	view: {

package/dist/plugins-media-events.d.mts

@@ -1,4 +1,4 @@
-import { G as InvokeEnvelope } from "./index-BkwUzwVt.mjs";
+import { K as InvokeEnvelope } from "./index-Do-kTNXw.mjs";
 export type MediaKind = 'image' | 'video';
 export type MediaResult = {
   /** URL served by the worklet's loopback HTTP server (no bytes on the wire). */

package/dist/plugins-media-events.mjs

@@ -1,4 +1,4 @@
-import { a as invokeEvent } from "./messages-BbpF3wNH.mjs";
+import { a as invokeEvent } from "./messages-CMNIFMFY.mjs";
 // plugins/media/events.ts
 const MEDIA_INVOKE_TIMEOUT_MS = 3e5;
 const mediaSpecs = {

package/dist/plugins-permissions-events.d.mts

@@ -1,4 +1,4 @@
-import { G as InvokeEnvelope } from "./index-BkwUzwVt.mjs";
+import { K as InvokeEnvelope } from "./index-Do-kTNXw.mjs";
 /** Canonical permission ids. Hosts map each to their platform equivalent. */
 export type PermissionId = 'storage' | 'camera';
 export type PermissionStatus = 'granted' | 'denied' | 'notDetermined' | 'unsupported';

package/dist/plugins-permissions-events.mjs

@@ -1,4 +1,4 @@
-import { a as invokeEvent } from "./messages-BbpF3wNH.mjs";
+import { a as invokeEvent } from "./messages-CMNIFMFY.mjs";
 // plugins/permissions/events.ts
 const permissionSpecs = {
 	request: {

package/dist/plugins.d.mts

@@ -1,5 +1,5 @@
-import { F as CapabilityDescriptor, Q as PluginManifest, X as PluginInvokeRequestHeader, Z as PluginInvokeResponseHeader, a as LogStore, et as RuntimeTarget } from "./index-BkwUzwVt.mjs";
-import { n as LoopbackServer } from "./static-file-server-C8pIX1JD.mjs";
+import { $ as PluginManifest, I as CapabilityDescriptor, Q as PluginInvokeResponseHeader, Z as PluginInvokeRequestHeader, a as LogStore, tt as RuntimeTarget } from "./index-Do-kTNXw.mjs";
+import { n as LoopbackServer } from "./static-file-server-COxd-PFR.mjs";
 type DiscoveryPluginDeps = {
   listBareCapabilities: () => Array<{
     pluginId: string;

package/dist/plugins.mjs

@@ -1 +1 @@
-export { t as createDefaultPlugins } from "./plugins-DZu_NWVp.mjs";
+export { t as createDefaultPlugins } from "./plugins-BnpdCi3A.mjs";

package/dist/runtime.d.mts

@@ -1,17 +1,21 @@
-import { C as createPluginRegistry, F as CapabilityDescriptor, K as MessageHeader, Q as PluginManifest, X as PluginInvokeRequestHeader, Z as PluginInvokeResponseHeader, g as MessageProtocol, o as BareRuntimeContext, tt as WireMessage, w as createPluginRouter } from "./index-BkwUzwVt.mjs";
-import { i as createLoopbackServer, n as LoopbackServer, r as collectRequestBody, t as LoopbackRouteHandler } from "./static-file-server-C8pIX1JD.mjs";
+import { $ as PluginManifest, C as createPluginRegistry, I as CapabilityDescriptor, Q as PluginInvokeResponseHeader, Z as PluginInvokeRequestHeader, g as MessageProtocol, k as Platform, nt as WireMessage, o as BareRuntimeContext, q as MessageHeader, w as createPluginRouter } from "./index-Do-kTNXw.mjs";
+import { i as createLoopbackServer, n as LoopbackServer, r as collectRequestBody, t as LoopbackRouteHandler } from "./static-file-server-COxd-PFR.mjs";
 type BareIpcLike = {
-  write(data: Uint8Array | Buffer | string): boolean;
+  write(data: Uint8Array | string): boolean;
 };
 declare function createHostIpcBridge(config: {
   ipc: BareIpcLike;
   protocol: MessageProtocol;
+  /** Worklet entry points pass `barePlatform`; Bare has no Web Crypto global. */
+  platform: Platform;
 }): {
   tryConsumeDownstream: (parsed: WireMessage) => boolean;
-  tryConsumeDownstreamFromHost(raw: Uint8Array | ArrayBuffer | Buffer): boolean;
+  tryConsumeDownstreamFromHost(raw: Uint8Array | ArrayBuffer): boolean;
   queryCapabilities(timeoutMs?: number): Promise<CapabilityDescriptor[]>;
   invokeOnHost(header: PluginInvokeRequestHeader, payload: Uint8Array, timeoutMs?: number): Promise<PluginInvokeResponseHeader | null>;
 };
+/** Envelope encoder bound to a loopback server's connected protocol socket —
+ * the server-initiated (backend → web) push seam. */
 type LoopbackPush = (header: MessageHeader, payload?: Uint8Array | ArrayBuffer | null) => boolean;
 /** Builds the push seam for the server's connected protocol socket: encodes a
  * `DISPATCH`-style envelope and writes it, mirroring how `attachWebSocketProtocol`
@@ -20,8 +24,9 @@ export declare function createLoopbackPush(server: LoopbackServer, protocol: Mes
 /**
  * Attaches the framed-protocol socket to the unified loopback server. The
  * server owns the WebSocket upgrade (origin check, cookie/token auth, single
- * client, idle timeout); this layer only routes decoded envelopes through the
- * plugin router and writes responses back as raw frames.
+ * client, idle timeout); this layer runs one frame channel per socket. A peer
+ * that sends a malformed frame is not recoverable on that socket, so it is
+ * torn down and the client reconnects.
  */
 export declare function attachWebSocketProtocol(server: LoopbackServer, context: BareRuntimeContext): void;
 /**
@@ -29,36 +34,36 @@ export declare function attachWebSocketProtocol(server: LoopbackServer, context:
  */
 interface BareIPC extends NodeJS.EventEmitter {
   read(n?: number): Buffer | null;
-  write(data: Buffer | string): boolean;
+  write(data: Uint8Array | string): boolean;
   resume?(): void;
   pause?(): void;
 }
 /**
- * Returns the active IPC channel.
- * In BareKit (Android), it uses BareKit.IPC.
+ * Returns the active IPC channel, or null when there is no host.
+ * In BareKit (Android, iOS), it uses BareKit.IPC.
  * In Bare (Sidecar), it uses Bare.IPC.
  */
-export declare function getIPC(): BareIPC;
+export declare function getIPC(): BareIPC | null;
 /** Resolves the host-provided worklet configuration from `start(...)`
  * arguments. On-device hosts pass `["<webAssets>", "<storage>", "<cache>"]`
- * (three existing directories, in that order), landing at `Bare.argv[0..2]`;
- * the Bare CLI (dev) passes the binary and the script path instead, so a
- * missing/absent config means dev mode (auth off, fixed port, no handoff
- * file). Falls back to the labeled CLI token syntax (see `resolveCliConfig`)
- * when the positional shape doesn't match, so the same entry works for both
- * device and dev runs. */
+ * (three existing directories, in that order), landing at `Bare.argv[0..2]`.
+ * Falls back to the labeled CLI token syntax (see `resolveCliConfig`) when the
+ * positional shape doesn't match, so the same entry works for device and dev
+ * runs. Nothing here turns auth off: the dev backend is selected only by an
+ * explicit `mode=dev` token. */
 export declare function resolveWorkletConfig(): WorkletRuntimeOptions;
 /**
- * Parses the dev/CLI labeled-token configuration from bare CLI arguments:
- * `webassets=<dir>`, `storage=<dir>`, `cache=<dir>`, `host=<addr>`,
- * `port=<n>`, `auth=<on|off|true|false|1|0>` — a single `key=value` separator.
- * Unknown labels (e.g. `bootstrap=127.0.0.1:49737`) are ignored and stay
- * consumer-owned.
+ * Parses labeled-token configuration from bare CLI arguments, one `key=value`
+ * per token: `webassets=<dir>`, `storage=<dir>`, `cache=<dir>`,
+ * `host=<addr>`, `port=<n>`, `auth=<on|off|true|false|1|0>`,
+ * `mode=<device|dev>` and `origin=<scheme://host[:port]>` (repeatable; an
+ * extra allowed page origin, e.g. the Vite dev server). Unknown labels (e.g.
+ * `bootstrap=127.0.0.1:49737`) are ignored and stay consumer-owned.
  *
- * Returns the equivalent `WorkletRuntimeOptions` in **dev mode**: `deviceMode:
- * false` (so a `storage=` token does not flip auth on or make the port
- * ephemeral), `auth: false`, `port: 8080`, each overridable by a token. When
- * no labeled tokens are present it returns `{}` (plain dev defaults).
+ * Without `mode=dev` the result keeps the secure device defaults (auth on, an
+ * ephemeral port), and `auth=off` is ignored with a warning. `mode=dev` selects the dev backend: `deviceMode: false`,
+ * `auth: false`, `port: 8080`, each overridable by a token. Returns `{}` when
+ * no labeled tokens are present.
  */
 export declare function resolveCliConfig(argv?: readonly string[]): WorkletRuntimeOptions;
 export type WorkletRuntimeOptions = {
@@ -73,16 +78,21 @@ export type WorkletRuntimeOptions = {
   /** Port to bind; `0` picks an ephemeral port (on-device). Defaults to an
    * ephemeral port in device mode, 8080 in dev mode. */
   port?: number;
-  /** Require the per-session token/cookie. Defaults to on in device mode. */
+  /** Require the per-session token/cookie. Defaults to on in device mode and
+   * off in dev mode. The origin check applies either way. */
   auth?: boolean;
-  /** Write the credentials to `<storage>/handoff.json` for the host to read
-   * (auth on only). Defaults to true; a host that receives them over its own
-   * channel (the desktop host reads them from a pipe) sets false so the
-   * session token never touches disk. */
+  /** Extra page origins allowed to call the loopback server, e.g. the Vite dev
+   * server (`http://localhost:5173`). The bound origin and its loopback
+   * aliases are always allowed. */
+  allowedOrigins?: readonly string[];
+  /** Write `{ origin, port, bootstrap }` to `<storage>/handoff.json` for the
+   * host to read (auth on only; the session token is never written). Defaults
+   * to true; a host that receives them over its own channel (the desktop host
+   * reads them from a pipe) sets false so nothing touches disk. */
   handoffFile?: boolean;
-  /** Explicit device-mode override. Defaults to on whenever `storage` is set
-   * (the on-device 3-arg contract); `resolveCliConfig` resolves it to false so
-   * a dev backend keeps auth off + fixed port even with a storage dir. */
+  /** Device mode (the default): auth on, an ephemeral port, and the handoff
+   * file when `storage` is set. Pass `false` (or the `mode=dev` CLI token) for
+   * the dev backend: auth off and port 8080 unless set explicitly. */
   deviceMode?: boolean;
   /** Additional plugin manifests to register after the canonical defaults
    * (consumer product plugins, e.g. `app.photos`). */
@@ -93,7 +103,8 @@ export type WorkletRuntimeOptions = {
    * is destroyed, freeing the slot. Defaults to 10s. */
   wsDeadPeerTimeoutMs?: number;
   /** Minimum gap (ms) before an accepted protocol socket may be replaced by a
-   * new authenticated one. Defaults to 1s. */
+   * new authenticated one; an upgrade that arrives sooner is held until then.
+   * Defaults to 1s. */
   wsReplaceMinIntervalMs?: number;
   /** Bytes queued behind a protocol socket whose reader stopped reading before
    * server pushes are dropped (newest first). Defaults to 2 MiB. */