@fkn/lib 0.9.18 → 0.9.20

package/{net-5t6B2LnQ.d.ts → net-ByL9yG7X.d.ts}

@@ -1,4 +1,4 @@
-import { i as TcpSocketOption, r as LocalTcpSocket, t as Resolvers } from "./api-BPnL3UKE.js";
+import { i as TcpSocketOption, r as LocalTcpSocket, t as Resolvers } from "./api-CyWF0RUj.js";
 import { AddressInfo, ListenOptions, Server, ServerOpts, Socket, SocketConnectOpts, SocketConstructorOpts } from "net";
 import { DuplexOptions, Stream } from "stream";
 import { EventEmitter } from "events";

package/net.d.ts

@@ -1,2 +1,2 @@
-import { a as createConnection, c as isIP, i as connect, l as isIPv4, n as Socket, o as createServer, r as _default, t as Server, u as isIPv6 } from "./net-5t6B2LnQ.js";
+import { a as createConnection, c as isIP, i as connect, l as isIPv4, n as Socket, o as createServer, r as _default, t as Server, u as isIPv6 } from "./net-ByL9yG7X.js";
 export { Server, Socket, _default, _default as default, connect, createConnection, createServer, isIP, isIPv4, isIPv6 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fkn/lib",
-  "version": "0.9.18",
+  "version": "0.9.20",
   "main": "index.js",
   "types": "index.d.ts",
   "type": "module",

package/{packages-vX-1yfRK.d.ts → packages-Cn8S-Hkn.d.ts}

@@ -1,5 +1,24 @@
 import { Remote } from "osra";
 
+//#region src/api/packages/identity.d.ts
+/**
+ * A connection's identity. `id` is the normalized package uri when the other end runs on a sandbox
+ * tenant origin (e.g. 'npm:@banou/stub'), otherwise its plain page origin. Version-pinned tenant
+ * origins normalize to the version-free id, so a package keeps one identity (and one set of install
+ * records) across its own updates, for every handler rather than only for npm.
+ */
+type Caller = {
+  id: string;
+  origin: string; /** a package's display name, when provenance knew it. Attribution only, never an identity. */
+  name?: string;
+  /**
+   * Set when PROVENANCE established this caller is a package, which is the only way to know it for a
+   * connection whose `origin` is this realm's own (a broker nested inside a tenant we mounted). Every
+   * other package caller is recognised from its browser-set tenant origin instead.
+   */
+  isPackage?: boolean;
+};
+//#endregion
 //#region src/api/packages/types.d.ts
 type PackageQuery = {
   /** package kind, e.g. 'plugin' - becomes the keyword `fkn-type:<type>` */type: string; /** host app scope, e.g. 'stub' - becomes the keyword `fkn-<type>--<id>` */
@@ -61,25 +80,6 @@ type PackagesFail = {
   message: string;
 };
 //#endregion
-//#region src/api/packages/identity.d.ts
-/**
- * A connection's identity. `id` is the normalized package uri when the other end runs on a sandbox
- * tenant origin (e.g. 'npm:@banou/stub'), otherwise its plain page origin. Version-pinned tenant
- * origins normalize to the version-free id, so a package keeps one identity (and one set of install
- * records) across its own updates, for every handler rather than only for npm.
- */
-type Caller = {
-  id: string;
-  origin: string; /** a package's display name, when provenance knew it. Attribution only, never an identity. */
-  name?: string;
-  /**
-   * Set when PROVENANCE established this caller is a package, which is the only way to know it for a
-   * connection whose `origin` is this realm's own (a broker nested inside a tenant we mounted). Every
-   * other package caller is recognised from its browser-set tenant origin instead.
-   */
-  isPackage?: boolean;
-};
-//#endregion
 //#region src/api/packages/host.d.ts
 type MountDescriptor = {
   /** where to point the iframe: the tenant origin plus the package's path */url: string; /** the tenant origin alone, which is what a `postMessage` to that frame must target */
@@ -214,4 +214,4 @@ declare const onVisibilityChange: (handler: (visible: boolean) => void) => {
   unsubscribe: () => void;
 };
 //#endregion
-export { InstallOptions as A, pick as C, MountDescriptor as D, uninstall as E, PackagesFail as F, PickOptions as I, Placement as L, PackageQuery as M, PackageResult as N, Caller as O, PackagesErrorCode as P, Radii as R, packages_d_exports as S, show as T, isVisible as _, IncomingConnectionInfo as a, onConnect as b, PackageConnection as c, RawPackageConnection as d, ShowOptions as f, install as g, hide as h, IncomingConnection as i, InstalledPackage as j, ConnectOptions as k, PackageView as l, connect as m, Connect as n, MountOptions as o, attach as p, ConnectPayload as r, MountedPackage as s, AppConnectOptions as t, PackagesError as u, list as v, search as w, onVisibilityChange as x, mount as y, SurfaceRect as z };
+export { InstalledPackage as A, pick as C, MountDescriptor as D, uninstall as E, PickOptions as F, Placement as I, Radii as L, PackageResult as M, PackagesErrorCode as N, ConnectOptions as O, PackagesFail as P, SurfaceRect as R, packages_d_exports as S, show as T, isVisible as _, IncomingConnectionInfo as a, onConnect as b, PackageConnection as c, RawPackageConnection as d, ShowOptions as f, install as g, hide as h, IncomingConnection as i, PackageQuery as j, InstallOptions as k, PackageView as l, connect as m, Connect as n, MountOptions as o, attach as p, ConnectPayload as r, MountedPackage as s, AppConnectOptions as t, PackagesError as u, list as v, search as w, onVisibilityChange as x, mount as y, Caller as z };

package/packages.d.ts

@@ -1,2 +1,2 @@
-import { A as InstallOptions, C as pick, E as uninstall, I as PickOptions, L as Placement, M as PackageQuery, N as PackageResult, P as PackagesErrorCode, R as Radii, T as show, _ as isVisible, a as IncomingConnectionInfo, b as onConnect, c as PackageConnection, d as RawPackageConnection, f as ShowOptions, g as install, h as hide, i as IncomingConnection, j as InstalledPackage, k as ConnectOptions, l as PackageView, m as connect, n as Connect, o as MountOptions, p as attach, r as ConnectPayload, s as MountedPackage, t as AppConnectOptions, u as PackagesError, v as list, w as search, x as onVisibilityChange, y as mount, z as SurfaceRect } from "./packages-vX-1yfRK.js";
+import { A as InstalledPackage, C as pick, E as uninstall, F as PickOptions, I as Placement, L as Radii, M as PackageResult, N as PackagesErrorCode, O as ConnectOptions, R as SurfaceRect, T as show, _ as isVisible, a as IncomingConnectionInfo, b as onConnect, c as PackageConnection, d as RawPackageConnection, f as ShowOptions, g as install, h as hide, i as IncomingConnection, j as PackageQuery, k as InstallOptions, l as PackageView, m as connect, n as Connect, o as MountOptions, p as attach, r as ConnectPayload, s as MountedPackage, t as AppConnectOptions, u as PackagesError, v as list, w as search, x as onVisibilityChange, y as mount } from "./packages-Cn8S-Hkn.js";
 export { AppConnectOptions, Connect, type ConnectOptions, ConnectPayload, IncomingConnection, IncomingConnectionInfo, type InstallOptions, type InstalledPackage, MountOptions, MountedPackage, PackageConnection, type PackageQuery, type PackageResult, PackageView, PackagesError, type PackagesErrorCode, type PickOptions, type Placement, type Radii, RawPackageConnection, ShowOptions, type SurfaceRect, attach, connect, hide, install, isVisible, list, mount, onConnect, onVisibilityChange, pick, search, show, uninstall };

package/{proxy-DcALGZ-U.d.ts → proxy-RU8sbq68.d.ts}

@@ -1,4 +1,4 @@
-import { t as Resolvers } from "./api-BPnL3UKE.js";
+import { t as Resolvers } from "./api-CyWF0RUj.js";
 
 //#region src/lib/proxy.d.ts
 type ProxyFetch = Resolvers['cloud']['fetch'];

package/storage-BW-jDLUL.cjs

@@ -0,0 +1 @@
+const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./api-kHMHDGar.cjs");var n=`FKN_STORAGE_NOT_FOUND`,r=e.t({StorageLockedError:()=>i,StorageNotFoundError:()=>a,availability:()=>p,available:()=>c,encryption:()=>y,isNotFound:()=>o,list:()=>m,quota:()=>h,readFile:()=>g,remove:()=>v,unlock:()=>b,writeFile:()=>_}),i=class extends Error{code=`FKN_E2E_LOCKED`;constructor(){super(`storage locked: this account stores encrypted data, unlock it from the FKN card or unlock()`)}},a=class extends Error{code=n;constructor(e=`storage: no object at that path`){super(e)}},o=e=>e?.code===n,s=e=>{throw e instanceof Error&&e.message.startsWith(`fkn:e2e-locked`)?new i:o(e)||e instanceof Error&&(/^not found$/i.test(e.message)||/\(404\)$/.test(e.message))?new a(e.message):e},c=()=>t.t.then(e=>e.cloud.fs.available()).catch(()=>!1),l=8e3,u=1e3,d=!1,f=async()=>{let e=(await t.t).cloud.fs;return typeof e.availability==`function`?e.availability():await e.available()?`connected`:`disconnected`},p=async()=>{let e=d?u:l,t=await new Promise(t=>{let n=setTimeout(()=>t(`timeout`),e);f().then(e=>{clearTimeout(n),t(e)},()=>{clearTimeout(n),t(`unknown`)})});return t===`timeout`?(d=!0,`unknown`):(d=!1,t)},m=()=>t.t.then(e=>e.cloud.fs.list()),h=()=>t.t.then(e=>e.cloud.fs.quota()),g=async e=>{let n=await(await t.t).cloud.fs.readFile(e).catch(s);return new Blob([n])},_=async(e,n,r)=>{let i=await t.t,a=n instanceof Blob?new Uint8Array(await n.arrayBuffer()):n;await i.cloud.fs.writeFile(e,a,r?.contentType??null).catch(s)},v=e=>t.t.then(t=>t.cloud.fs.remove(e)).then(()=>void 0),y=()=>t.t.then(e=>e.cloud.fs.encryption()),b=()=>t.t.then(e=>e.cloud.fs.unlock());Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return o}}),Object.defineProperty(exports,"c",{enumerable:!0,get:function(){return g}}),Object.defineProperty(exports,"d",{enumerable:!0,get:function(){return b}}),Object.defineProperty(exports,"f",{enumerable:!0,get:function(){return _}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return y}}),Object.defineProperty(exports,"l",{enumerable:!0,get:function(){return v}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"o",{enumerable:!0,get:function(){return m}}),Object.defineProperty(exports,"p",{enumerable:!0,get:function(){return n}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return p}}),Object.defineProperty(exports,"s",{enumerable:!0,get:function(){return h}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return i}}),Object.defineProperty(exports,"u",{enumerable:!0,get:function(){return r}});

package/storage-C8hBot2f.js

@@ -0,0 +1,51 @@
+import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
+import { t } from "./api-DQ-V4Lls.js";
+//#endregion
+//#region src/api/storage.ts
+var n = "FKN_STORAGE_NOT_FOUND", r = /* @__PURE__ */ e({
+	StorageLockedError: () => i,
+	StorageNotFoundError: () => a,
+	availability: () => p,
+	available: () => c,
+	encryption: () => y,
+	isNotFound: () => o,
+	list: () => m,
+	quota: () => h,
+	readFile: () => g,
+	remove: () => v,
+	unlock: () => b,
+	writeFile: () => _
+}), i = class extends Error {
+	code = "FKN_E2E_LOCKED";
+	constructor() {
+		super("storage locked: this account stores encrypted data, unlock it from the FKN card or unlock()");
+	}
+}, a = class extends Error {
+	code = n;
+	constructor(e = "storage: no object at that path") {
+		super(e);
+	}
+}, o = (e) => e?.code === n, s = (e) => {
+	throw e instanceof Error && e.message.startsWith("fkn:e2e-locked") ? new i() : o(e) || e instanceof Error && (/^not found$/i.test(e.message) || /\(404\)$/.test(e.message)) ? new a(e.message) : e;
+}, c = () => t.then((e) => e.cloud.fs.available()).catch(() => !1), l = 8e3, u = 1e3, d = !1, f = async () => {
+	let e = (await t).cloud.fs;
+	return typeof e.availability == "function" ? e.availability() : await e.available() ? "connected" : "disconnected";
+}, p = async () => {
+	let e = d ? u : l, t = await new Promise((t) => {
+		let n = setTimeout(() => t("timeout"), e);
+		f().then((e) => {
+			clearTimeout(n), t(e);
+		}, () => {
+			clearTimeout(n), t("unknown");
+		});
+	});
+	return t === "timeout" ? (d = !0, "unknown") : (d = !1, t);
+}, m = () => t.then((e) => e.cloud.fs.list()), h = () => t.then((e) => e.cloud.fs.quota()), g = async (e) => {
+	let n = await (await t).cloud.fs.readFile(e).catch(s);
+	return new Blob([n]);
+}, _ = async (e, n, r) => {
+	let i = await t, a = n instanceof Blob ? new Uint8Array(await n.arrayBuffer()) : n;
+	await i.cloud.fs.writeFile(e, a, r?.contentType ?? null).catch(s);
+}, v = (e) => t.then((t) => t.cloud.fs.remove(e)).then(() => void 0), y = () => t.then((e) => e.cloud.fs.encryption()), b = () => t.then((e) => e.cloud.fs.unlock());
+//#endregion
+export { o as a, g as c, b as d, _ as f, y as i, v as l, a as n, m as o, n as p, p as r, h as s, i as t, r as u };

package/storage-qxXFLgTM.d.ts

@@ -0,0 +1,44 @@
+//#region src/api/storage.d.ts
+type StorageEntry = {
+  path: string;
+  size: number;
+  contentType: string | null;
+  updatedAt: string;
+  encryption: string | null;
+};
+type StorageQuota = {
+  usedBytes: number;
+  limitBytes: number;
+  remaining: number;
+  objects: number;
+  maxObjects: number;
+};
+type WriteData = ArrayBuffer | Uint8Array | string;
+type StorageReadResult = {
+  bytes: Uint8Array;
+  encryption: string | null;
+  appOrigin: string;
+};
+type KeyState = {
+  keyEpoch: number | null;
+  keyFingerprint: string | null;
+  storageEncrypted: boolean;
+};
+/**
+ * "There is no object at this path", as a thing a caller can TEST rather than parse.
+ *
+ * osra's error boxer ships name, message, stack and cause ONLY, so this code survives same-realm
+ * hops but NOT the SharedWorker boundary; the message fallback in src/lib/storage.ts's rethrow is
+ * what carries absence across that hop and re-mints the coded error for apps. The message does not
+ * survive being reworded, which is the problem this exists to end: absence arrives in two
+ * completely different sentences depending on which half of the read failed, and every consumer
+ * was left regex-matching both. Ripple got one of them and missed the other, and a library quietly
+ * went un-backed-up for a day because a missing backup read as a transient error.
+ */
+declare const STORAGE_NOT_FOUND = "FKN_STORAGE_NOT_FOUND";
+type SealedGeneration = {
+  epoch: number;
+  fingerprint: string;
+};
+//#endregion
+export { StorageQuota as a, StorageEntry as i, STORAGE_NOT_FOUND as n, StorageReadResult as o, SealedGeneration as r, WriteData as s, KeyState as t };

package/cloud-BQoppUw4.cjs

@@ -1 +0,0 @@
-const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-ulyxIbTr.cjs"),n=require("./api-kHMHDGar.cjs"),r=require("./proxy-B0gNjT8-.cjs"),i=require("./dns.cjs"),a=require("./cloud/fs.cjs"),o=require("./net-COzDDBnS.cjs"),s=require("./dgram-D2Or5f2e.cjs"),c=require("./http.cjs");let l=require("osra");var u=e=>e,d=`autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write`,f=2e4,p=65e3,m=3e4,h=5e3,g=new Set,_=()=>`https://fkn.app`,v=e=>!e||e===`about:blank`,y=e=>e?``:`incognito-${crypto.randomUUID()}`,b=({target:e,session:t})=>{let n=new URL(`/attach-frame`,_());return e&&n.searchParams.set(`url`,e),t&&n.searchParams.set(`session`,t),n.href},x=(e,t,n)=>{let r,i=new Promise((e,i)=>{r=setTimeout(()=>i(Error(n)),t)});return Promise.race([e,i]).finally(()=>clearTimeout(r))},S=(e,t)=>{let n=()=>{a(),t()},r=e.parentNode,i=new MutationObserver(()=>{(!e.isConnected||e.parentNode!==r)&&(a(),t())}),a=()=>{window.removeEventListener(`pagehide`,n),i.disconnect()};window.addEventListener(`pagehide`,n,{once:!0}),r&&i.observe(r,{childList:!0}),e.isConnected||(a(),t())},C=()=>Object.assign(Error(`cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe`),{name:t.h}),w=(e,t)=>{let n=[...e.split(`;`),...t.split(`;`)].map(e=>e.trim()).filter(Boolean);return[...new Set(n)].join(`; `)},T=[300,1200,4e3],E=e=>{let t=()=>{if(!e.isConnected)return;let t=e.style.height,n=e.getBoundingClientRect();n.height&&(e.style.height=`${n.height-1}px`,setTimeout(()=>{e.style.height=t},50))};t();for(let e of T)setTimeout(t,e)},D=e=>{let t=e.getAttribute(`sandbox`);if(t===null)return;let n=new Set(t.toLowerCase().split(/\s+/).filter(Boolean)),r=[`allow-scripts`,`allow-same-origin`].filter(e=>!n.has(e));if(r.length)throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(` and `)} for the render proxy to load`)},O=async({iframe:e,domains:n=[],syncCookies:r=!0,lockdown:i=!1})=>{if(typeof window>`u`)throw Error(`cloud.attachFrame needs a window realm`);if(i)throw Error(`cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame`);if(!e.isConnected)throw Error(`cloud.attachFrame: the iframe must be connected to the document before attaching`);D(e);let a=e.getAttribute(`src`)??``,o=(()=>{if(v(a))return null;try{return new URL(e.src||a,location.href)}catch{throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${a}`)}})();if(o){let e=new URL(`/attach-frame`,_());if(o.origin===e.origin&&o.pathname===e.pathname)throw Error(`cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe`)}let s=o?.href??``;s&&t.s(s);let c=s,T=y(r),O=new AbortController,k=e.referrerPolicy,A=e.allow;if(e.referrerPolicy=`origin`,e.allow=w(d,e.allow),e.src=b({target:s,session:T}),!e.contentWindow)throw Error(`cloud.attachFrame: the iframe window is not available`);try{let n=await x((0,l.expose)({},{key:`fkn-attach-frame`,origin:_(),transport:{receive:window,emit:e.contentWindow},unregisterSignal:O.signal,revivableModules:u(t.L)}),f,`cloud.attachFrame: timed out connecting to the render proxy page`);await x(n.ready(),p,`cloud.attachFrame: the render proxy never became ready`),s&&E(e),S(e,()=>O.abort());let r=e.contentWindow,i=()=>{if(!(!O.signal.aborted&&e.isConnected&&e.contentWindow===r))throw O.abort(),C()};return t.a({executor:{execute:(e,r,a)=>g.has(r)?Promise.reject(t.f(r,`cloud`)):(i(),n.executeLocator(e,r,a)),highlight:async()=>{}},goto:async(t,r={})=>{let a=new URL(t,location.href).href;i();let{timeoutMs:o}=r;await x(n.goto(a,r),(o??m)+h,`cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded`),c=a,E(e)},url:()=>c})}catch(t){throw O.abort(),e.referrerPolicy=k,e.allow=A,e.src=s||`about:blank`,t}},k=()=>typeof window<`u`&&!0,A=async()=>{let e=await n.t.then(e=>e.cloud.quota());return{premium:e.premium,overQuota:e.overQuota,throttled:e.overQuota&&!e.premium,usedBytes:e.usedBytes,limitBytes:e.limitBytes,remainingBytes:e.remaining,bytesPerSecond:e.bytesPerSecond,bitsPerSecond:e.bytesPerSecond*8}},j=e.t({attachFrame:()=>O,available:()=>M,dgram:()=>s.i,dns:()=>i.t,fetch:()=>r.t,fs:()=>a.t,http:()=>c.t,net:()=>o.s,quota:()=>A}),M=()=>n.r;Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return k}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return O}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return j}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return A}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return M}});

package/cloud-C8CeqUht.js

@@ -1,130 +0,0 @@
-import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { L as t, a as n, f as r, h as i, s as a } from "./lib-CegQxwDI.js";
-import { r as o, t as s } from "./api-DQ-V4Lls.js";
-import { t as c } from "./proxy-BpqvCJmA.js";
-import { t as l } from "./dns.js";
-import { t as u } from "./cloud/fs.js";
-import { s as d } from "./net-BbmQeMpt.js";
-import { i as f } from "./dgram-DlGl_ho1.js";
-import { t as p } from "./http.js";
-import { expose as m } from "osra";
-//#region src/lib/cloud/frame.ts
-var h = (e) => e, g = "autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write", _ = 2e4, v = 65e3, y = 3e4, b = 5e3, x = /* @__PURE__ */ new Set(), S = () => "https://fkn.app", C = (e) => !e || e === "about:blank", w = (e) => e ? "" : `incognito-${crypto.randomUUID()}`, T = ({ target: e, session: t }) => {
-	let n = new URL("/attach-frame", S());
-	return e && n.searchParams.set("url", e), t && n.searchParams.set("session", t), n.href;
-}, E = (e, t, n) => {
-	let r, i = new Promise((e, i) => {
-		r = setTimeout(() => i(Error(n)), t);
-	});
-	return Promise.race([e, i]).finally(() => clearTimeout(r));
-}, D = (e, t) => {
-	let n = () => {
-		a(), t();
-	}, r = e.parentNode, i = new MutationObserver(() => {
-		(!e.isConnected || e.parentNode !== r) && (a(), t());
-	}), a = () => {
-		window.removeEventListener("pagehide", n), i.disconnect();
-	};
-	window.addEventListener("pagehide", n, { once: !0 }), r && i.observe(r, { childList: !0 }), e.isConnected || (a(), t());
-}, O = () => Object.assign(/* @__PURE__ */ Error("cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe"), { name: i }), k = (e, t) => {
-	let n = [...e.split(";"), ...t.split(";")].map((e) => e.trim()).filter(Boolean);
-	return [...new Set(n)].join("; ");
-}, A = [
-	300,
-	1200,
-	4e3
-], j = (e) => {
-	let t = () => {
-		if (!e.isConnected) return;
-		let t = e.style.height, n = e.getBoundingClientRect();
-		n.height && (e.style.height = `${n.height - 1}px`, setTimeout(() => {
-			e.style.height = t;
-		}, 50));
-	};
-	t();
-	for (let e of A) setTimeout(t, e);
-}, M = (e) => {
-	let t = e.getAttribute("sandbox");
-	if (t === null) return;
-	let n = new Set(t.toLowerCase().split(/\s+/).filter(Boolean)), r = ["allow-scripts", "allow-same-origin"].filter((e) => !n.has(e));
-	if (r.length) throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(" and ")} for the render proxy to load`);
-}, N = async ({ iframe: e, domains: i = [], syncCookies: o = !0, lockdown: s = !1 }) => {
-	if (typeof window > "u") throw Error("cloud.attachFrame needs a window realm");
-	if (s) throw Error("cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame");
-	if (!e.isConnected) throw Error("cloud.attachFrame: the iframe must be connected to the document before attaching");
-	M(e);
-	let c = e.getAttribute("src") ?? "", l = (() => {
-		if (C(c)) return null;
-		try {
-			return new URL(e.src || c, location.href);
-		} catch {
-			throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${c}`);
-		}
-	})();
-	if (l) {
-		let e = new URL("/attach-frame", S());
-		if (l.origin === e.origin && l.pathname === e.pathname) throw Error("cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe");
-	}
-	let u = l?.href ?? "";
-	u && a(u);
-	let d = u, f = w(o), p = new AbortController(), A = e.referrerPolicy, N = e.allow;
-	if (e.referrerPolicy = "origin", e.allow = k(g, e.allow), e.src = T({
-		target: u,
-		session: f
-	}), !e.contentWindow) throw Error("cloud.attachFrame: the iframe window is not available");
-	try {
-		let i = await E(m({}, {
-			key: "fkn-attach-frame",
-			origin: S(),
-			transport: {
-				receive: window,
-				emit: e.contentWindow
-			},
-			unregisterSignal: p.signal,
-			revivableModules: h(t)
-		}), _, "cloud.attachFrame: timed out connecting to the render proxy page");
-		await E(i.ready(), v, "cloud.attachFrame: the render proxy never became ready"), u && j(e), D(e, () => p.abort());
-		let a = e.contentWindow, o = () => {
-			if (!(!p.signal.aborted && e.isConnected && e.contentWindow === a)) throw p.abort(), O();
-		};
-		return n({
-			executor: {
-				execute: (e, t, n) => x.has(t) ? Promise.reject(r(t, "cloud")) : (o(), i.executeLocator(e, t, n)),
-				highlight: async () => {}
-			},
-			goto: async (t, n = {}) => {
-				let r = new URL(t, location.href).href;
-				o();
-				let { timeoutMs: a } = n;
-				await E(i.goto(r, n), (a ?? y) + b, "cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded"), d = r, j(e);
-			},
-			url: () => d
-		});
-	} catch (t) {
-		throw p.abort(), e.referrerPolicy = A, e.allow = N, e.src = u || "about:blank", t;
-	}
-}, P = () => typeof window < "u" && !0, F = async () => {
-	let e = await s.then((e) => e.cloud.quota());
-	return {
-		premium: e.premium,
-		overQuota: e.overQuota,
-		throttled: e.overQuota && !e.premium,
-		usedBytes: e.usedBytes,
-		limitBytes: e.limitBytes,
-		remainingBytes: e.remaining,
-		bytesPerSecond: e.bytesPerSecond,
-		bitsPerSecond: e.bytesPerSecond * 8
-	};
-}, I = /* @__PURE__ */ e({
-	attachFrame: () => N,
-	available: () => L,
-	dgram: () => f,
-	dns: () => l,
-	fetch: () => c,
-	fs: () => u,
-	http: () => p,
-	net: () => d,
-	quota: () => F
-}), L = () => o;
-//#endregion
-export { P as a, N as i, I as n, F as r, L as t };

package/extension-4BM5hKrn.cjs

@@ -1 +0,0 @@
-const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-ulyxIbTr.cjs"),n=require("./api-kHMHDGar.cjs"),r=require("./proxy-B0gNjT8-.cjs"),i=require("./desktop.cjs");var a=async e=>{if(typeof window>`u`)return!1;if(t.P())return!0;let r=await n.t,i=null,a=new Promise(e=>{i=()=>{t.P()&&e(!0)},t.N.addEventListener(`statuschange`,i)}),o=r.installPrompt.show(e).then(()=>!1),s=await Promise.race([a,o]);return i&&t.N.removeEventListener(`statuschange`,i),await r.installPrompt.hide().catch(()=>{}),s},o=null;t.F(()=>(o||=a().then(()=>void 0).finally(()=>{o=null}),o));var s=()=>typeof document<`u`&&t.P(),c=async(e,n)=>{if(r.n(e),n?.credentials===`include`){if(typeof document>`u`)throw Error(`fetch with credentials needs the FKN extension, which only exists in window realms`);return t.C(e,n)}return s()?t.C(e,{...n,credentials:`omit`}):i.available()?i.fetch(e,n):r.t(e,n)},l=e.t({ATTACH_FRAME_EVENT_KEY:()=>t.n,FORGEABLE_HEADERS:()=>t.k,LOCATOR_DENIED:()=>t.g,LOCATOR_ERROR:()=>t.u,LOCATOR_UNSUPPORTED:()=>t.h,assertAttachableFrameUrl:()=>t.s,assertFetchableUrl:()=>t.S,assertForgeableHeaders:()=>t.A,assertLockdownApplicable:()=>t.c,assertOneCookieIdentity:()=>t.j,attachFrame:()=>t.r,attachFramePermission:()=>t.i,available:()=>s,box:()=>t.R,cookies:()=>t.b,createFrame:()=>t.a,createVideoElementHandle:()=>t.z,events:()=>t.N,extension:()=>t.N,fetch:()=>t.C,fetchCredentialedPermission:()=>t.w,fetchLocalPermission:()=>t.T,fetchPermission:()=>t.E,gotoPermission:()=>t.o,handleRevivableModules:()=>t.L,hasForgedCookie:()=>t.M,isBlockedFetchUrl:()=>t.D,isBlockedFrameUrl:()=>t.l,isExtensionExposed:()=>t.P,isLocalNetworkUrl:()=>t.O,isLocatorDenied:()=>t.d,isLocatorUnsupported:()=>t.m,isTerminalError:()=>t.p,isType:()=>t.B,modifyRequestHeadersPermission:()=>t._,permissions:()=>t.t,promptInstall:()=>a,readCookiePermission:()=>t.x,removeRequestHeaderRule:()=>t.v,revive:()=>t.V,setMissingExtensionHandler:()=>t.F,setRequestHeaderRule:()=>t.y,type:()=>t.H,waitForExtensionExposure:()=>t.I});Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return c}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return l}});

package/fs-Br0pOpNu.js

@@ -1,315 +0,0 @@
-import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { t } from "./node-fs-DKfokOlh.js";
-import { c as n, f as r, l as i, o as a, r as o } from "./storage-B1stLxSc.js";
-import { a as s, i as c, n as l, o as u, t as d } from "./opfs-BibrNGF0.js";
-//#region src/lib/fs/hybrid.ts
-var f = /* @__PURE__ */ e({
-	adopt: () => F,
-	adoptable: () => I,
-	available: () => te,
-	list: () => ie,
-	onConflict: () => N,
-	pending: () => D,
-	pendingDeletes: () => O,
-	pull: () => ce,
-	readFile: () => ae,
-	remove: () => se,
-	replicating: () => k,
-	writeFile: () => oe
-}), ee, p = async () => await (ee ??= d().catch(() => !1)) ? !0 : (ee = void 0, !1), m = () => o().catch(() => !1), te = async () => await p() || await m(), h = "fkn:fs:pending", g = "fkn:fs:pending-delete", _ = "fkn:fs:adopt-declined", v = !0, y = /* @__PURE__ */ new Map(), b = (e) => {
-	try {
-		let t = localStorage.getItem(e);
-		if (!t) return {};
-		let n = JSON.parse(t);
-		return Array.isArray(n) ? Object.fromEntries(n.filter((e) => typeof e == "string").map((e) => [e, null])) : n && typeof n == "object" ? n : {};
-	} catch {
-		return {};
-	}
-}, x = (e, t) => {
-	try {
-		Object.keys(t).length ? localStorage.setItem(e, JSON.stringify(t)) : localStorage.removeItem(e);
-	} catch {}
-}, S = () => b(h), C = (e) => {
-	let t = S();
-	e in t || (t[e] = y.get(e) ?? null, x(h, t));
-}, w = (e) => {
-	let t = S();
-	e in t && (delete t[e], x(h, t));
-}, T = () => b(g), ne = (e) => {
-	let t = T();
-	e in t || (t[e] = y.get(e) ?? null, x(g, t));
-}, E = (e) => {
-	let t = T();
-	e in t && (delete t[e], x(g, t));
-}, D = () => Object.keys(S()), O = () => Object.keys(T()), k = () => v, A = null, re = null, j = () => re ??= import("./api-DQ-V4Lls.js").then((e) => e.n).then((e) => e.apiPromise), ie = async () => {
-	me();
-	let e = await m(), [t, n] = await Promise.all([p().then((e) => e ? l() : []).catch(() => []), e ? a().then((e) => ({
-		ok: !0,
-		entries: e
-	})).catch(() => ({
-		ok: !1,
-		entries: []
-	})) : Promise.resolve({
-		ok: !0,
-		entries: []
-	})]);
-	v = n.ok, n.ok && (y = new Map(n.entries.map((e) => [e.path, e.updatedAt])));
-	let r = /* @__PURE__ */ new Map(), i = (e) => {
-		let t = Date.parse(e.updatedAt ?? "");
-		return Number.isFinite(t) ? t : 0;
-	}, o = (e) => {
-		let t = r.get(e.path);
-		(!t || i(e) >= i(t)) && r.set(e.path, e);
-	};
-	for (let e of t) o(e);
-	for (let e of n.entries) o(e);
-	if (n.ok && e) {
-		pe(t, n.entries).catch(() => {});
-		let e = Object.keys(S()).length || Object.keys(T()).length;
-		e && !A ? A = P(!1).catch(() => {}).finally(() => {
-			A = null;
-		}) : e || R({
-			local: t,
-			remote: n.entries
-		}).catch(() => {});
-	}
-	return [...r.values()];
-}, ae = async (e) => {
-	if (await p()) try {
-		return await c(e);
-	} catch (e) {
-		if (e?.name !== "NotFoundError") throw e;
-	}
-	let t = await n(e);
-	return await p() && u(e, t).catch(() => {}), t;
-}, oe = async (e, t, n) => {
-	let i = t instanceof Blob ? t : new Blob([t], n?.contentType ? { type: n.contentType } : void 0);
-	if (await p()) {
-		if (await u(e, i, n), !await m()) return;
-		if (!v) {
-			C(e);
-			return;
-		}
-		r(e, i, n).then(() => w(e)).catch((t) => {
-			C(e), console.warn("fs: cloud replicate failed, queued for adopt()", t);
-		});
-		return;
-	}
-	if (await m()) return r(e, i, n);
-	throw Error("fs: no storage backend available");
-}, se = async (e) => {
-	let t = [];
-	await p() && t.push(s(e).catch(() => {}));
-	let n = await m();
-	if (n && t.push(i(e).then(() => E(e)).catch((t) => {
-		ne(e), console.warn("fs: cloud delete failed, queued for retry", t);
-	})), !t.length) throw Error("fs: no storage backend available");
-	n && w(e), await Promise.all(t);
-}, ce = async (e) => {
-	let t = await n(e);
-	return await p() && await u(e, t), t;
-}, M = null, N = (e) => (M = e, () => {
-	M === e && (M = null);
-}), le = async (e) => (await j()).cloud.fs.promptConflict({
-	path: e.path,
-	local: e.local,
-	cloud: e.cloud
-}).catch(() => null), ue = async (e) => {
-	if (M) try {
-		return await M(e);
-	} catch {
-		return null;
-	}
-	return le(e);
-}, P = async (e) => {
-	let t = {
-		uploaded: [],
-		kept: [],
-		resolved: [],
-		unresolved: [],
-		deleted: [],
-		failed: []
-	};
-	if (!await m()) throw Error("fs: this needs a signed-in account");
-	if (!await p()) return t;
-	let [o, s] = await Promise.all([l(), a()]), d = new Map(s.map((e) => [e.path, e])), f = S();
-	for (let [e, n] of Object.entries(T())) {
-		let r = d.get(e);
-		if (!r) {
-			E(e);
-			continue;
-		}
-		if (o.some((t) => t.path === e)) {
-			E(e);
-			continue;
-		}
-		if (r.updatedAt !== n) {
-			E(e);
-			continue;
-		}
-		try {
-			await i(e), E(e), t.deleted.push(e);
-		} catch (n) {
-			t.failed.push({
-				path: e,
-				error: n instanceof Error ? n.message : String(n)
-			});
-		}
-	}
-	for (let i of o) {
-		let a = d.get(i.path), o = i.path in f;
-		if (!o && (a || !e)) {
-			a && t.kept.push(i.path);
-			continue;
-		}
-		if (o && a && a.updatedAt !== f[i.path]) {
-			let e = await ue({
-				path: i.path,
-				local: {
-					size: i.size,
-					updatedAt: i.updatedAt
-				},
-				cloud: {
-					size: a.size,
-					updatedAt: a.updatedAt
-				},
-				readLocal: () => c(i.path),
-				readCloud: () => n(i.path)
-			});
-			if (!e) {
-				t.unresolved.push(i.path);
-				continue;
-			}
-			try {
-				if (e === "cloud") await u(i.path, await n(i.path));
-				else {
-					let t = e === "local" ? await c(i.path) : e.merged;
-					await r(i.path, t, i.contentType ? { contentType: i.contentType } : void 0), e !== "local" && await u(i.path, t);
-				}
-				w(i.path), t.resolved.push({
-					path: i.path,
-					choice: e === "local" || e === "cloud" ? e : "merged"
-				});
-			} catch (e) {
-				if (e?.code === "FKN_E2E_LOCKED") throw e;
-				t.failed.push({
-					path: i.path,
-					error: e instanceof Error ? e.message : String(e)
-				});
-			}
-			continue;
-		}
-		try {
-			let e = await c(i.path);
-			await r(i.path, e, i.contentType ? { contentType: i.contentType } : void 0), w(i.path), t.uploaded.push(i.path);
-		} catch (e) {
-			if (C(i.path), e?.code === "FKN_E2E_LOCKED") throw e;
-			t.failed.push({
-				path: i.path,
-				error: e instanceof Error ? e.message : String(e)
-			});
-		}
-	}
-	return t;
-}, F = () => P(!0), I = async () => {
-	if (!await m() || !await p()) return {
-		paths: [],
-		bytes: 0
-	};
-	let [e, t] = await Promise.all([l(), a()]), n = new Set(t.map((e) => e.path)), r = e.filter((e) => !n.has(e.path));
-	return {
-		paths: r.map((e) => e.path),
-		bytes: r.reduce((e, t) => e + t.size, 0)
-	};
-}, de = () => new Set(Object.keys(b(_))), fe = (e) => {
-	let t = b(_);
-	for (let n of e) t[n] = null;
-	x(_, t);
-}, L = null, R = (e) => L || (L = (async () => {
-	if (!await m()) return;
-	let t = e ?? (await p() ? {
-		local: await l(),
-		remote: await a()
-	} : null);
-	if (!t) return;
-	let n = new Set(t.remote.map((e) => e.path)), r = de(), i = t.local.filter((e) => !n.has(e.path) && !r.has(e.path));
-	if (!i.length) return;
-	let o = await j(), s = i.reduce((e, t) => e + t.size, 0);
-	if (!await o.cloud.fs.promptAdopt({
-		files: i.length,
-		bytes: s
-	}).catch(() => !1)) {
-		fe(i.map((e) => e.path));
-		return;
-	}
-	await F();
-})().catch(() => {}).finally(() => {
-	L = null;
-}), L), pe = async (e, t) => {
-	let n = new Set(t.map((e) => e.path)), r = e.filter((e) => !n.has(e.path)), i = await j(), a = async () => {
-		await F().catch(() => {});
-		let e = await I().catch(() => ({
-			paths: [],
-			bytes: 0
-		}));
-		await i.cloud.fs.setAdoptSource({
-			files: e.paths.length,
-			bytes: e.bytes
-		}, a).catch(() => {});
-	};
-	await i.cloud.fs.setAdoptSource({
-		files: r.length,
-		bytes: r.reduce((e, t) => e + t.size, 0)
-	}, a);
-}, z = !1, me = () => {
-	z || typeof window > "u" || (z = !0, import("./account.js").then((e) => e.onChange(() => {
-		R().catch(() => {});
-	})).catch(() => {}));
-}, he = /* @__PURE__ */ e({
-	adopt: () => J,
-	adoptable: () => Y,
-	appendFile: () => Ee,
-	appendFileSync: () => W,
-	available: () => V,
-	default: () => Le,
-	exists: () => Ne,
-	existsSync: () => G,
-	flush: () => Fe,
-	lstatSync: () => _e,
-	mkdir: () => ke,
-	mkdirSync: () => ye,
-	mount: () => K,
-	onConflict: () => $,
-	pending: () => X,
-	pendingDeletes: () => Z,
-	promises: () => Pe,
-	pull: () => q,
-	readFile: () => we,
-	readFileSync: () => H,
-	readdir: () => Oe,
-	readdirSync: () => ve,
-	remount: () => Ie,
-	rename: () => Me,
-	renameSync: () => Ce,
-	replicating: () => Q,
-	rm: () => Ae,
-	rmSync: () => be,
-	rmdirSync: () => xe,
-	stat: () => De,
-	statSync: () => ge,
-	unlink: () => je,
-	unlinkSync: () => Se,
-	writeFile: () => Te,
-	writeFileSync: () => U
-}), B = t(f, { memfs: !0 }), { available: V, readFileSync: H, writeFileSync: U, appendFileSync: W, existsSync: G, statSync: ge, lstatSync: _e, readdirSync: ve, mkdirSync: ye, rmSync: be, rmdirSync: xe, unlinkSync: Se, renameSync: Ce, readFile: we, writeFile: Te, appendFile: Ee, stat: De, readdir: Oe, mkdir: ke, rm: Ae, unlink: je, rename: Me, exists: Ne, promises: Pe, mount: K, flush: Fe, remount: Ie } = B, q = ce, J = F, Y = I, X = D, Z = O, Q = k, $ = N, Le = {
-	...B,
-	pull: q,
-	adopt: J,
-	adoptable: Y,
-	pending: X,
-	pendingDeletes: Z,
-	replicating: Q,
-	onConflict: $
-};
-//#endregion
-export { xe as A, ve as C, Q as D, Ce as E, Te as F, U as I, ge as M, je as N, Ae as O, Se as P, Oe as S, Me as T, Z as _, V as a, we as b, Fe as c, _e as d, ke as f, X as g, $ as h, W as i, De as j, be as k, Le as l, K as m, Y as n, Ne as o, ye as p, Ee as r, G as s, J as t, he as u, Pe as v, Ie as w, H as x, q as y };