@fkn/lib 0.9.23 → 0.9.25

package/{api-Jq4OSTp1.js → api-DLvscoll.js}

@@ -1,7 +1,6 @@
-import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { expose as t } from "osra";
-//#region src/lib/frame-ready.ts
-var n = 1e4, r = 16, i = (e) => {
+import { expose as e } from "osra";
+//#region src/frame-ready.ts
+var t = 1e4, n = 16, r = (e) => {
 	let t;
 	try {
 		t = e.contentWindow;
@@ -15,22 +14,22 @@ var n = 1e4, r = 16, i = (e) => {
 	} catch {
 		return !0;
 	}
-}, a = (e, t = n) => new Promise((n) => {
-	if (i(e)) return n();
+}, i = (e, i = t) => new Promise((t) => {
+	if (r(e)) return t();
 	let a = () => {
-		clearInterval(o), clearTimeout(s), e.removeEventListener("load", a), n();
+		clearInterval(o), clearTimeout(s), e.removeEventListener("load", a), t();
 	}, o = setInterval(() => {
-		i(e) && a();
-	}, r), s = setTimeout(a, t);
+		r(e) && a();
+	}, n), s = setTimeout(a, i);
 	e.addEventListener("load", a);
-}), o = 32, s = 8, c = 120, l = typeof CSS < "u" && CSS.supports("clip-path", "path('M0 0H1V1H0Z')"), u = typeof CSS < "u" && CSS.supports("clip-path", "polygon(nonzero, 0px 0px, 1px 0px, 1px 1px)"), d = (e) => {
+}), a = 32, o = 8, s = 120, c = typeof CSS < "u" && CSS.supports("clip-path", "path('M0 0H1V1H0Z')"), l = typeof CSS < "u" && CSS.supports("clip-path", "polygon(nonzero, 0px 0px, 1px 0px, 1px 1px)"), u = (e) => {
 	let t = e.style;
 	t.setProperty("display", "block", "important"), t.setProperty("position", "fixed", "important"), t.setProperty("top", "0", "important"), t.setProperty("left", "0", "important"), t.setProperty("width", "100%", "important"), t.setProperty("height", "100%", "important"), t.setProperty("border", "none", "important"), t.setProperty("padding", "0", "important"), t.setProperty("box-sizing", "border-box", "important"), t.setProperty("clip-path", "inset(100%)", "important"), t.setProperty("background", "transparent"), t.setProperty("color-scheme", "normal"), t.setProperty("z-index", "2147483647"), e.setAttribute("title", "FKN");
-}, f = ({ x: e, y: t, width: n, height: r, radius: i }) => {
+}, d = ({ x: e, y: t, width: n, height: r, radius: i }) => {
 	if (!i) return `M${e} ${t}h${n}v${r}h${-n}Z`;
 	let a = Math.min(n, r) / 2, [o, s, c, l] = i.map((e) => Math.max(0, Math.min(e, a)));
 	return `M${e + o} ${t}h${n - o - s}a${s} ${s} 0 0 1 ${s} ${s}v${r - s - c}a${c} ${c} 0 0 1 ${-c} ${c}h${-(n - c - l)}a${l} ${l} 0 0 1 ${-l} ${-l}v${-(r - l - o)}a${o} ${o} 0 0 1 ${o} ${-o}Z`;
-}, p = () => l && u, m = ({ x: e, y: t, width: n, height: r }) => [
+}, f = () => c && l, p = ({ x: e, y: t, width: n, height: r }) => [
 	[e, t],
 	[e + n, t],
 	[e + n, t + r],
@@ -39,18 +38,18 @@ var n = 1e4, r = 16, i = (e) => {
 ], ee = (e) => {
 	let t = e[0];
 	if (!t) return [];
-	let n = m(t)[0], r = [];
+	let n = p(t)[0], r = [];
 	return e.forEach((t, i) => {
-		r.push(...m(t)), i > 0 && i < e.length - 1 && r.push(n);
+		r.push(...p(t)), i > 0 && i < e.length - 1 && r.push(n);
 	}), r;
-}, h = (e) => `polygon(nonzero, ${ee(e).map(([e, t]) => `${e}px ${t}px`).join(", ")})`, g = ({ x: e, y: t, width: n, height: r, radius: i }, a) => {
+}, m = (e) => `polygon(nonzero, ${ee(e).map(([e, t]) => `${e}px ${t}px`).join(", ")})`, h = ({ x: e, y: t, width: n, height: r, radius: i }, a) => {
 	let o = `${t}px ${a.width - e - n}px ${a.height - t - r}px ${e}px`;
 	return i ? `inset(${o} round ${i.map((e) => `${e}px`).join(" ")})` : `inset(${o})`;
-}, te = (e, t, n) => {
+}, g = (e, t, n) => {
 	if (t) return "none";
 	if (e.length === 0) return "inset(100%)";
 	let r = e.length === 1 ? e[0] : void 0;
-	return r ? g(r, n) : u && e.length <= 5 && !e.some((e) => e.radius) ? h(e) : `path('${e.map(f).join("")}')`;
+	return r ? h(r, n) : l && e.length <= 5 && !e.some((e) => e.radius) ? m(e) : `path('${e.map(d).join("")}')`;
 }, _ = (e) => {
 	if (e.length < 2) return null;
 	let t = Math.min(...e.map((e) => e.x)), n = Math.min(...e.map((e) => e.y));
@@ -60,51 +59,51 @@ var n = 1e4, r = 16, i = (e) => {
 		width: Math.max(...e.map((e) => e.x + e.width)) - t,
 		height: Math.max(...e.map((e) => e.y + e.height)) - n
 	};
-}, v = (e, t, n) => t >= e.x && t < e.x + e.width && n >= e.y && n < e.y + e.height, y = 16, b = (e, t, n) => t === 1 ? e * y : t === 2 ? e * n : e, ne = (e, t, n) => {
+}, v = (e, t, n) => t >= e.x && t < e.x + e.width && n >= e.y && n < e.y + e.height, te = 16, y = (e, t, n) => t === 1 ? e * te : t === 2 ? e * n : e, ne = (e, t, n) => {
 	let r = getComputedStyle(e);
 	return n !== 0 && /auto|scroll/.test(r.overflowY) && e.scrollHeight > e.clientHeight ? !0 : t !== 0 && /auto|scroll/.test(r.overflowX) && e.scrollWidth > e.clientWidth;
-}, x = (e, t, n) => {
+}, re = (e, t, n) => {
 	for (let r = e; r; r = r.parentElement) if (ne(r, t, n)) return r;
 	return document.scrollingElement;
-}, S = null, C = null, w = (e) => ({
+}, b = null, x = null, S = (e) => ({
 	width: e.offsetWidth || window.innerWidth,
 	height: e.offsetHeight || window.innerHeight
-}), T = (e) => {
-	if (!C || !S || !v(C, e.clientX, e.clientY)) return;
+}), C = (e) => {
+	if (!x || !b || !v(x, e.clientX, e.clientY)) return;
 	let t = document.elementFromPoint(e.clientX, e.clientY);
-	if (!t || t === S) return;
-	let n = b(e.deltaX, e.deltaMode, window.innerWidth), r = b(e.deltaY, e.deltaMode, window.innerHeight), i = x(t, n, r);
+	if (!t || t === b) return;
+	let n = y(e.deltaX, e.deltaMode, window.innerWidth), r = y(e.deltaY, e.deltaMode, window.innerHeight), i = re(t, n, r);
 	i && (i.scrollBy({
 		left: n,
 		top: r,
 		behavior: "instant"
 	}), e.cancelable && e.preventDefault());
-}, E = (e) => {
-	let t = C !== null;
-	C = e, t !== (e !== null) && (e ? window.addEventListener("wheel", T, {
+}, w = (e) => {
+	let t = x !== null;
+	x = e, t !== (e !== null) && (e ? window.addEventListener("wheel", C, {
 		capture: !0,
 		passive: !1
-	}) : window.removeEventListener("wheel", T, { capture: !0 }));
-}, D = 0, O = (e) => {
-	if (e === D) return;
-	D = e;
+	}) : window.removeEventListener("wheel", C, { capture: !0 }));
+}, T = 0, ie = (e) => {
+	if (e === T) return;
+	T = e;
 	let t = document.documentElement.style;
 	e > 0 ? (t.setProperty("margin-top", `${e}px`, "important"), t.setProperty("--fkn-inset-top", `${e}px`)) : (t.removeProperty("margin-top"), t.removeProperty("--fkn-inset-top"));
-}, k = (e, { modal: t, rects: n, inset: r }, i) => {
-	if (O(r), !l) {
+}, E = (e, { modal: t, rects: n, inset: r }, i) => {
+	if (ie(r), !c) {
 		let r = t || n.length > 0;
 		e.style.setProperty("pointer-events", r ? "auto" : "none", "important"), e.style.setProperty("visibility", r ? "visible" : "hidden", "important");
 		return;
 	}
-	let a = te(n, t, i), o = a === "none" || CSS.supports("clip-path", a) ? a : "inset(100%)";
-	e.style.setProperty("clip-path", o, "important"), E(t || o !== a ? null : _(n));
-}, re = (e) => {
+	let a = g(n, t, i), o = a === "none" || CSS.supports("clip-path", a) ? a : "inset(100%)";
+	e.style.setProperty("clip-path", o, "important"), w(t || o !== a ? null : _(n));
+}, ae = (e) => {
 	if (typeof e != "object" || !e) return 0;
 	let { top: t } = e;
-	return typeof t != "number" || !Number.isFinite(t) || t <= 0 ? 0 : Math.min(Math.round(t), c);
-}, ie = (e) => {
+	return typeof t != "number" || !Number.isFinite(t) || t <= 0 ? 0 : Math.min(Math.round(t), s);
+}, oe = (e) => {
 	if (!(!Array.isArray(e) || e.length !== 4) && e.every((e) => typeof e == "number" && Number.isFinite(e) && e >= 0)) return e.some((e) => e > 0) ? e : void 0;
-}, ae = (e, t) => {
+}, se = (e, t) => {
 	if (typeof e != "object" || !e) return null;
 	let { x: n, y: r, width: i, height: a } = e;
 	if (![
@@ -113,7 +112,7 @@ var n = 1e4, r = 16, i = (e) => {
 		i,
 		a
 	].every((e) => typeof e == "number" && Number.isFinite(e))) return null;
-	let o = t.width, s = t.height, c = Math.max(0, Math.min(Math.round(n), o)), l = Math.max(0, Math.min(Math.round(r), s)), u = Math.max(c, Math.min(Math.round(n + i), o)), d = Math.max(l, Math.min(Math.round(r + a), s)), f = ie(e.radius);
+	let o = t.width, s = t.height, c = Math.max(0, Math.min(Math.round(n), o)), l = Math.max(0, Math.min(Math.round(r), s)), u = Math.max(c, Math.min(Math.round(n + i), o)), d = Math.max(l, Math.min(Math.round(r + a), s)), f = oe(e.radius);
 	return {
 		x: c,
 		y: l,
@@ -121,49 +120,49 @@ var n = 1e4, r = 16, i = (e) => {
 		height: d - l,
 		...f ? { radius: f } : {}
 	};
-}, A = {
+}, D = {
 	"not-rendered": "this page is not painting it at all, so it or an ancestor is display:none, or the frame was moved out of the layout",
 	clipped: "it is clipped away or positioned outside the viewport",
 	"not-shown": "it is rendered but would not be seen, so either something is drawn over it, or it or an ancestor has opacity below 1, visibility:hidden, or a filter"
-}, oe = (e) => Array.isArray(e) ? e.slice(0, s).flatMap((e) => {
+}, ce = (e) => Array.isArray(e) ? e.slice(0, o).flatMap((e) => {
 	if (typeof e != "object" || !e) return [];
 	let { kind: t, cause: n, level: r } = e;
-	return typeof t != "string" || t.length > 40 || typeof n != "string" || !(n in A) || r !== "full" && r !== "liveness" ? [] : [{
+	return typeof t != "string" || t.length > 40 || typeof n != "string" || !(n in D) || r !== "full" && r !== "liveness" ? [] : [{
 		kind: t,
 		cause: n,
 		level: r
 	}];
-}) : [], j = /* @__PURE__ */ new Set(), M = (e) => {
-	for (let { kind: t, cause: n, level: r } of e) j.has(t) || (j.add(t), console.error(`[FKN] The FKN ${JSON.stringify(t)} is not visible on this page: ${A[n]}. Nobody using this page can see or answer it.
+}) : [], O = /* @__PURE__ */ new Set(), le = (e) => {
+	for (let { kind: t, cause: n, level: r } of e) O.has(t) || (O.add(t), console.error(`[FKN] The FKN ${JSON.stringify(t)} is not visible on this page: ${D[n]}. Nobody using this page can see or answer it.
 @fkn/lib draws its UI inside <iframe title="FKN"> and sets display, position, top, left, width, height, border, padding, box-sizing, clip-path and z-index on that element. Leave those as they are, then check for an ancestor with opacity, visibility, display or a clipping transform, and for an element stacked above it.` + (r === "liveness" ? "\nThis browser reports limited detail, so the cause above is a best guess." : "")));
-}, N = (e, t) => {
+}, k = (e, t) => {
 	if (typeof e != "object" || !e) return null;
-	let n = e, r = (Array.isArray(n.rects) ? n.rects.slice(0, o) : []).map((e) => ae(e, t)).filter((e) => e !== null && e.width > 0 && e.height > 0);
+	let n = e, r = (Array.isArray(n.rects) ? n.rects.slice(0, a) : []).map((e) => se(e, t)).filter((e) => e !== null && e.width > 0 && e.height > 0);
 	return {
 		modal: n.modal === !0,
 		rects: r,
-		hidden: oe(n.hidden),
-		inset: re(n.inset)
+		hidden: ce(n.hidden),
+		inset: ae(n.inset)
 	};
-}, P = () => S !== null, F = null, I = null, L = () => {
-	if (!S || F === null) return;
-	let e = w(S), t = N(F, e);
-	t && k(S, t, e);
-}, R = (e) => {
-	typeof ResizeObserver > "u" || (I ??= new ResizeObserver(L), I.disconnect(), I.observe(e));
-}, z = (e) => {
-	d(e), k(e, {
+}, A = () => b !== null, j = null, M = null, N = () => {
+	if (!b || j === null) return;
+	let e = S(b), t = k(j, e);
+	t && E(b, t, e);
+}, P = (e) => {
+	typeof ResizeObserver > "u" || (M ??= new ResizeObserver(N), M.disconnect(), M.observe(e));
+}, F = (e) => {
+	u(e), E(e, {
 		modal: !1,
 		rects: [],
 		hidden: [],
 		inset: 0
-	}, w(e)), S = e, R(e);
-}, B = (e) => {
-	if (!S) return;
-	let t = w(S), n = N(e, t);
-	n && (F = e, k(S, n, t), M(n.hidden));
-}, V = "https://fkn.app", H = typeof globalThis < "u" && globalThis.document ? globalThis.document : void 0, U = typeof globalThis < "u" && globalThis.crossOriginIsolated === !0, W = `${V}/api${U ? "?coi=1" : ""}`, G = "fkn-api-port", K = "fkn-api-port-ack", se = 2e3, ce = () => {
-	if (!H || typeof window > "u" || window.parent === window) return Promise.resolve(void 0);
+	}, S(e)), b = e, P(e);
+}, I = (e) => {
+	if (!b) return;
+	let t = S(b), n = k(e, t);
+	n && (j = e, E(b, n, t), le(n.hidden));
+}, L = "https://fkn.app", R = typeof globalThis < "u" && globalThis.document ? globalThis.document : void 0, z = typeof globalThis < "u" && globalThis.crossOriginIsolated === !0, B = `${L}/api${z ? "?coi=1" : ""}`, V = "fkn-api-port", H = "fkn-api-port-ack", U = 2e3, W = () => {
+	if (!R || typeof window > "u" || window.parent === window) return Promise.resolve(void 0);
 	let e;
 	try {
 		e = window.parent;
@@ -178,40 +177,40 @@ var n = 1e4, r = 16, i = (e) => {
 			} catch {}
 			n(e);
 		}, i = (e) => {
-			e.data?.type === K && r(t.port1);
-		}, a = setTimeout(() => r(void 0), se);
+			e.data?.type === H && r(t.port1);
+		}, a = setTimeout(() => r(void 0), U);
 		t.port1.addEventListener("message", i), t.port1.start();
 		try {
-			e.postMessage({ type: G }, V, [t.port2]);
+			e.postMessage({ type: V }, L, [t.port2]);
 		} catch {
 			r(void 0);
 		}
 	});
-}, q, le = () => {
-	if (q || !H) return q;
-	let e = H.querySelector(`iframe[src="${W}"]`);
-	if (e) q = e;
+}, G, ue = () => {
+	if (G || !R) return G;
+	let e = R.querySelector(`iframe[src="${B}"]`);
+	if (e) G = e;
 	else {
-		let e = H.createElement("iframe");
-		U && e.setAttribute("allow", "cross-origin-isolated"), e.src = W, H.body.appendChild(e), q = e;
+		let e = R.createElement("iframe");
+		z && e.setAttribute("allow", "cross-origin-isolated"), e.src = B, R.body.appendChild(e), G = e;
 	}
-	return z(q), q;
-}, J = (async () => {
-	if (!H) return;
-	let e = await ce();
+	return F(G), G;
+}, K = (async () => {
+	if (!R) return;
+	let e = await W();
 	if (e) return {
 		receive: e,
 		emit: e
 	};
-	let t = le();
+	let t = ue();
 	if (!t) return;
-	await a(t);
+	await i(t);
 	let n = t.contentWindow;
 	return n ? {
 		receive: window,
 		emit: n
 	} : void 0;
-})(), ue = (e) => {
+})(), de = (e) => {
 	let t, n = () => {}, r = new Promise((e) => {
 		n = e;
 	}), i = /* @__PURE__ */ new Set(), a = /* @__PURE__ */ new Set(), o = 0, s = 0;
@@ -280,30 +279,34 @@ var n = 1e4, r = 16, i = (e) => {
 		lastCall: () => o,
 		inFlight: () => s
 	};
-}, de = /* @__PURE__ */ e({
-	apiPromise: () => Z,
-	currentApiEpoch: () => $,
-	hasTransport: () => Y,
-	onApiEpoch: () => Q
-}), Y = typeof window < "u" || typeof self < "u", fe = async () => {
-	if (typeof window < "u") return J;
+}, fe = typeof window < "u" || typeof self < "u", pe = async () => {
+	if (typeof window < "u") return K;
 	if (typeof self < "u") return {
 		receive: self,
 		emit: self
 	};
-}, X = ue({ async *[Symbol.asyncIterator]() {
-	let e = await fe();
-	if (!e) {
+}, q = de({ async *[Symbol.asyncIterator]() {
+	let t = await pe();
+	if (!t) {
 		await new Promise(() => {});
 		return;
 	}
-	yield* t({}, {
+	yield* e({}, {
 		key: "fkn-api",
-		transport: e
+		transport: t
 	});
-} }), Z = X.first.then(() => X.facade), Q = X.onEpoch, $ = X.current;
-X.lastCall, X.inFlight, Q((e) => {
-	P() && e.overlay.setHost(B, { exactClips: p() }).catch(() => {});
+} }), J = q.first.then(() => q.facade), Y = 8e3, me = 1e3, X = !1, Z = class extends Error {
+	constructor(e, t) {
+		super(`@fkn/lib: no broker connection within ${t}ms, so ${e} could not be requested`), this.name = "BrokerUnreachableError";
+	}
+}, he = (e) => {
+	let t = X ? me : Y;
+	return Promise.race([J, new Promise((n, r) => setTimeout(() => {
+		X = !0, r(new Z(e, t));
+	}, t))]);
+}, Q = q.onEpoch, ge = q.current, $ = q.lastCall, _e = q.inFlight;
+Q((e) => {
+	A() && e.overlay.setHost(I, { exactClips: f() }).catch(() => {});
 });
 //#endregion
-export { Q as a, Y as i, de as n, J as o, $ as r, Z as t };
+export { J as a, fe as c, $ as i, Q as l, Z as n, he as o, _e as r, ge as s, Y as t, K as u };

package/api.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./api-BCJO3EWi.cjs");exports.API_DEADLINE_MS=e.t,exports.BrokerUnreachableError=e.n,exports.apiInFlight=e.r,exports.apiLastCall=e.i,exports.apiPromise=e.a,exports.apiWithin=e.o,exports.currentApiEpoch=e.s,exports.hasTransport=e.c,exports.onApiEpoch=e.l;

package/api.d.ts

@@ -0,0 +1,3 @@
+import { P as Resolvers } from "./contract-D6ksmIm6.js";
+import { a as apiPromise, c as hasTransport, i as apiLastCall, l as onApiEpoch, n as BrokerUnreachableError, o as apiWithin, r as apiInFlight, s as currentApiEpoch, t as API_DEADLINE_MS } from "./api-CesI0aMl.js";
+export { API_DEADLINE_MS, BrokerUnreachableError, type Resolvers, apiInFlight, apiLastCall, apiPromise, apiWithin, currentApiEpoch, hasTransport, onApiEpoch };

package/api.js

@@ -0,0 +1,2 @@
+import { a as e, c as t, i as n, l as r, n as i, o as a, r as o, s, t as c } from "./api-DLvscoll.js";
+export { c as API_DEADLINE_MS, i as BrokerUnreachableError, o as apiInFlight, n as apiLastCall, e as apiPromise, a as apiWithin, s as currentApiEpoch, t as hasTransport, r as onApiEpoch };

package/attach-policy.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=e=>{let t=[];for(let n of e){let e=n.trim().toLowerCase();!e||e.length>253||/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/.test(e)&&(t.includes(e)||t.push(e))}return t},t=(e,t)=>{if(!e.session)return{kind:`refuse`,reason:`frame.fetch on the cloud backend needs its own session: attach with syncCookies: false`};if(typeof t!=`string`)return{kind:`refuse`,reason:`frame.fetch: url must be a string`};let n;try{n=new URL(t)}catch{return{kind:`refuse`,reason:`frame.fetch on the cloud backend needs an absolute url`}}if(n.protocol!==`https:`&&n.protocol!==`http:`)return{kind:`refuse`,reason:`frame.fetch: only http(s) urls are supported`};if(!(e.declaredHosts.includes(n.hostname)||e.approvedOrigins.has(n.origin)))return{kind:`refuse`,reason:`frame.fetch: the target is outside the origins this attachment declared`};let r=e.declaredHosts.length?e.declaredHosts:[n.hostname];return{kind:`consent`,targetHost:n.hostname,promptHosts:r}};exports.frameFetchVerdict=t,exports.normalizeDeclaredHosts=e;

package/attach-policy.d.ts

@@ -0,0 +1,35 @@
+//#region src/attach-policy.d.ts
+/**
+ * The pure half of the middle page's frame.fetch gate: everything that can be decided from the
+ * attachment's own facts, with no broker and no UI. The middle page enforces this on EVERY fetch
+ * call, because any app can drive the 'fkn-attach-frame' channel directly and skip the client
+ * library's copy of the same checks.
+ *
+ * Refusals here must surface under a TERMINAL locator error name (the caller maps them through
+ * `locatorDeniedError`), or the shared dispatch loop retries them to its 30 second deadline and
+ * reports a timeout that names neither the operation nor the reason.
+ */
+type FrameFetchPolicy = {
+  /** '' means the shared render-proxy jar; non-empty is an isolated per-attach session */
+  session: string;
+  /** bare hostnames the app declared at attach; matched on hostname alone, any scheme or port */
+  declaredHosts: string[];
+  /** exact origins this attachment has legitimately visited: the attach url plus every goto target */
+  approvedOrigins: ReadonlySet<string>;
+};
+type FrameFetchVerdict = {
+  kind: 'refuse';
+  reason: string;
+} | {
+  kind: 'consent';
+  targetHost: string;
+  promptHosts: string[];
+};
+/**
+ * Bare hostnames only: lowercase, no scheme, no port, no path. Anything else is dropped rather
+ * than repaired, so a malformed declaration narrows the app's reach instead of widening it.
+ */
+declare const normalizeDeclaredHosts: (raw: string[]) => string[];
+declare const frameFetchVerdict: (policy: FrameFetchPolicy, url: unknown) => FrameFetchVerdict;
+//#endregion
+export { FrameFetchPolicy, FrameFetchVerdict, frameFetchVerdict, normalizeDeclaredHosts };

package/attach-policy.js

@@ -0,0 +1,43 @@
+//#region src/attach-policy.ts
+var e = (e) => {
+	let t = [];
+	for (let n of e) {
+		let e = n.trim().toLowerCase();
+		!e || e.length > 253 || /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/.test(e) && (t.includes(e) || t.push(e));
+	}
+	return t;
+}, t = (e, t) => {
+	if (!e.session) return {
+		kind: "refuse",
+		reason: "frame.fetch on the cloud backend needs its own session: attach with syncCookies: false"
+	};
+	if (typeof t != "string") return {
+		kind: "refuse",
+		reason: "frame.fetch: url must be a string"
+	};
+	let n;
+	try {
+		n = new URL(t);
+	} catch {
+		return {
+			kind: "refuse",
+			reason: "frame.fetch on the cloud backend needs an absolute url"
+		};
+	}
+	if (n.protocol !== "https:" && n.protocol !== "http:") return {
+		kind: "refuse",
+		reason: "frame.fetch: only http(s) urls are supported"
+	};
+	if (!(e.declaredHosts.includes(n.hostname) || e.approvedOrigins.has(n.origin))) return {
+		kind: "refuse",
+		reason: "frame.fetch: the target is outside the origins this attachment declared"
+	};
+	let r = e.declaredHosts.length ? e.declaredHosts : [n.hostname];
+	return {
+		kind: "consent",
+		targetHost: n.hostname,
+		promptHosts: r
+	};
+};
+//#endregion
+export { t as frameFetchVerdict, e as normalizeDeclaredHosts };

package/{busy-Bp1E3JPT.js → busy-B189uX--.js}

@@ -1,4 +1,4 @@
-//#region src/lib/busy.ts
+//#region src/busy.ts
 var e = /* @__PURE__ */ new Map(), t = /* @__PURE__ */ new Set(), n = (t) => {
 	e.set(t, (e.get(t) ?? 0) + 1);
 	let n = !1;

package/cloud/dgram.cjs

@@ -1 +1 @@
-Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("../dgram-BLN-mfgq.cjs");exports.Socket=e.t,exports.createSocket=e.n,exports.default=e.r;
+Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("../dgram.cjs");exports.Socket=e.Socket,exports.createSocket=e.createSocket,exports.default=e.default;

package/cloud/dgram.js

@@ -1,2 +1,2 @@
-import { n as e, r as t, t as n } from "../dgram-DHQcHefn.js";
-export { n as Socket, e as createSocket, t as default };
+import e, { Socket as t, createSocket as n } from "../dgram.js";
+export { t as Socket, n as createSocket, e as default };

package/cloud/dns.d.ts

@@ -1,3 +1,3 @@
-import { t as AddressLookupResult } from "../lookup-BtwWaCZJ.js";
+import { n as AddressLookupResult } from "../contract-D6ksmIm6.js";
 import { lookup } from "../dns.js";
 export { type AddressLookupResult, lookup };

package/cloud/fetch.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../proxy-BNdvRifw.cjs");exports.fetch=e.t;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../proxy-CefKCs-i.cjs");exports.fetch=e.t;

package/cloud/fetch.d.ts

@@ -1,2 +1,2 @@
-import { t as cloudFetch } from "../proxy-DmMu2_1z.js";
+import { t as cloudFetch } from "../proxy-BubvP9sg.js";
 export { cloudFetch as fetch };

package/cloud/fetch.js

@@ -1,2 +1,2 @@
-import { t as e } from "../proxy-CRbkWS4E.js";
+import { t as e } from "../proxy-KUfE4cEQ.js";
 export { e as fetch };

package/cloud/fs/promises.d.ts

@@ -1,9 +1,10 @@
-import { a as Stats, i as ReadOptions, o as WriteData, r as MakeOptions, s as WriteOptions } from "../../index-CJ0vHTcS.js";
-//#region src/lib/cloud/fs-promises.d.ts
+import { a as WriteData, i as Stats, n as MakeOptions, o as WriteOptions, r as ReadOptions } from "../../index-BQgZVQl7.js";
+import "../../fs-DlGE0ZNu.js";
+//#region src/cloud/fs-promises.d.ts
 declare const readFile: (path: import("node:fs").PathLike, options?: ReadOptions) => Promise<Buffer | string>, writeFile: (path: import("node:fs").PathLike, data: WriteData, options?: WriteOptions) => Promise<void>, unlink: (path: import("node:fs").PathLike) => Promise<void>, rename: (from: import("node:fs").PathLike, to: import("node:fs").PathLike) => Promise<void>, readdir: (path: import("node:fs").PathLike) => Promise<string[]>, mkdir: (_path?: import("node:fs").PathLike, _options?: MakeOptions) => Promise<void>, rm: (path: import("node:fs").PathLike, options?: {
-    recursive?: boolean;
-  }) => Promise<void>, rmdir: (path: import("node:fs").PathLike, options?: {
-    recursive?: boolean;
-  }) => Promise<void>, stat: (path: import("node:fs").PathLike) => Promise<Stats>, lstat: (path: import("node:fs").PathLike) => Promise<Stats>, access: (path: import("node:fs").PathLike) => Promise<void>;
+  recursive?: boolean;
+}) => Promise<void>, rmdir: (path: import("node:fs").PathLike, options?: {
+  recursive?: boolean;
+}) => Promise<void>, stat: (path: import("node:fs").PathLike) => Promise<Stats>, lstat: (path: import("node:fs").PathLike) => Promise<Stats>, access: (path: import("node:fs").PathLike) => Promise<void>;
 //#endregion
 export { access, lstat, mkdir, readFile, readdir, rename, rm, rmdir, stat, unlink, writeFile };

package/cloud/fs/promises.js

@@ -1,5 +1,5 @@
 import { promises as e } from "../fs.js";
-//#region src/lib/cloud/fs-promises.ts
+//#region src/cloud/fs-promises.ts
 var { readFile: t, writeFile: n, unlink: r, rename: i, readdir: a, mkdir: o, rm: s, rmdir: c, stat: l, lstat: u, access: d } = e;
 //#endregion
 export { d as access, u as lstat, o as mkdir, t as readFile, a as readdir, i as rename, s as rm, c as rmdir, l as stat, r as unlink, n as writeFile };

package/cloud/fs.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../rolldown-runtime-BIInC43l.cjs"),t=require("../node-fs-DZPGCYWg.cjs"),n=require("../storage-xAeRQQiz.cjs");var r=e.t({STORAGE_NOT_FOUND:()=>n.p,StorageLockedError:()=>n.t,StorageNotFoundError:()=>n.n,available:()=>i,encryption:()=>n.i,isNotFound:()=>n.a,mkdir:()=>u,promises:()=>p,quota:()=>n.s,readFile:()=>a,readdir:()=>l,rename:()=>c,rm:()=>d,stat:()=>f,unlink:()=>s,unlock:()=>n.d,writeFile:()=>o}),{available:i,readFile:a,writeFile:o,unlink:s,rename:c,readdir:l,mkdir:u,rm:d,stat:f,promises:p}=t.t(n.u,{memfs:!1});exports.STORAGE_NOT_FOUND=n.p,exports.StorageLockedError=n.t,exports.StorageNotFoundError=n.n,exports.available=i,exports.encryption=n.i,exports.isNotFound=n.a,exports.mkdir=u,exports.promises=p,exports.quota=n.s,exports.readFile=a,exports.readdir=l,exports.rename=c,exports.rm=d,exports.stat=f,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return r}}),exports.unlink=s,exports.unlock=n.d,exports.writeFile=o;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../rolldown-runtime-BIInC43l.cjs"),t=require("../node-fs-DZPGCYWg.cjs"),n=require("../messages.cjs"),r=require("../storage-DLB4ciMf.cjs");var i=e.t({STORAGE_NOT_FOUND:()=>n.STORAGE_NOT_FOUND,StorageLockedError:()=>r.t,StorageNotFoundError:()=>r.n,available:()=>a,encryption:()=>r.i,isNotFound:()=>r.a,mkdir:()=>d,promises:()=>m,quota:()=>r.s,readFile:()=>o,readdir:()=>u,rename:()=>l,rm:()=>f,stat:()=>p,unlink:()=>c,unlock:()=>r.d,writeFile:()=>s}),{available:a,readFile:o,writeFile:s,unlink:c,rename:l,readdir:u,mkdir:d,rm:f,stat:p,promises:m}=t.t(r.u,{memfs:!1});exports.STORAGE_NOT_FOUND=n.STORAGE_NOT_FOUND,exports.StorageLockedError=r.t,exports.StorageNotFoundError=r.n,exports.available=a,exports.encryption=r.i,exports.isNotFound=r.a,exports.mkdir=d,exports.promises=m,exports.quota=r.s,exports.readFile=o,exports.readdir=u,exports.rename=l,exports.rm=f,exports.stat=p,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return i}}),exports.unlink=c,exports.unlock=r.d,exports.writeFile=s;

package/cloud/fs.d.ts

@@ -1,4 +1,4 @@
-import { n as STORAGE_NOT_FOUND } from "../storage-qxXFLgTM.js";
-import { a as Stats } from "../index-CJ0vHTcS.js";
-import { _ as encryption, a as readFile, b as unlock, c as rm, d as writeFile, f as EncryptionStatus, g as StorageQuota, h as StorageNotFoundError, i as promises, l as stat, m as StorageLockedError, o as readdir, p as FileEntry, r as mkdir, s as rename, t as available, u as unlink, v as isNotFound, y as quota } from "../fs-CUmugp10.js";
+import { i as Stats } from "../index-BQgZVQl7.js";
+import { _ as encryption, a as readFile, b as unlock, c as rm, d as writeFile, f as EncryptionStatus, g as StorageQuota, h as StorageNotFoundError, i as promises, l as stat, m as StorageLockedError, o as readdir, p as FileEntry, r as mkdir, s as rename, t as available, u as unlink, v as isNotFound, y as quota } from "../fs-DlGE0ZNu.js";
+import { i as STORAGE_NOT_FOUND } from "../messages-DvpKMTsY.js";
 export { type EncryptionStatus, type FileEntry, STORAGE_NOT_FOUND, type Stats, StorageLockedError, StorageNotFoundError, type StorageQuota, available, encryption, isNotFound, mkdir, promises, quota, readFile, readdir, rename, rm, stat, unlink, unlock, writeFile };

package/cloud/fs.js

@@ -1,14 +1,15 @@
 import { t as e } from "../rolldown-runtime-Dy4uBu1J.js";
-import { t } from "../node-fs-BZCQUmeE.js";
-import { a as n, d as r, i, n as a, p as o, s, t as c, u as l } from "../storage-BNjLc1FV.js";
-//#region src/lib/cloud/fs.ts
+import { t } from "../node-fs-C9ECR_9H.js";
+import { STORAGE_NOT_FOUND as n } from "../messages.js";
+import { a as r, d as i, i as a, n as o, s, t as c, u as l } from "../storage-BjGr_vC4.js";
+//#region src/cloud/fs.ts
 var u = /* @__PURE__ */ e({
-	STORAGE_NOT_FOUND: () => o,
+	STORAGE_NOT_FOUND: () => n,
 	StorageLockedError: () => c,
-	StorageNotFoundError: () => a,
+	StorageNotFoundError: () => o,
 	available: () => d,
-	encryption: () => i,
-	isNotFound: () => n,
+	encryption: () => a,
+	isNotFound: () => r,
 	mkdir: () => _,
 	promises: () => b,
 	quota: () => s,
@@ -18,8 +19,8 @@ var u = /* @__PURE__ */ e({
 	rm: () => v,
 	stat: () => y,
 	unlink: () => m,
-	unlock: () => r,
+	unlock: () => i,
 	writeFile: () => p
 }), { available: d, readFile: f, writeFile: p, unlink: m, rename: h, readdir: g, mkdir: _, rm: v, stat: y, promises: b } = t(l, { memfs: !1 });
 //#endregion
-export { o as STORAGE_NOT_FOUND, c as StorageLockedError, a as StorageNotFoundError, d as available, i as encryption, n as isNotFound, _ as mkdir, b as promises, s as quota, f as readFile, g as readdir, h as rename, v as rm, y as stat, u as t, m as unlink, r as unlock, p as writeFile };
+export { n as STORAGE_NOT_FOUND, c as StorageLockedError, o as StorageNotFoundError, d as available, a as encryption, r as isNotFound, _ as mkdir, b as promises, s as quota, f as readFile, g as readdir, h as rename, v as rm, y as stat, u as t, m as unlink, i as unlock, p as writeFile };

package/cloud/net.cjs

@@ -1 +1 @@
-Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("../utils-QfNXtEhb.cjs"),t=require("../net-B6RHtWwe.cjs");exports.Server=t.t,exports.Socket=t.n,exports._default=t.r,exports.default=t.r,exports.connect=t.i,exports.createConnection=t.a,exports.createServer=t.o,exports.isIP=e.r,exports.isIPv4=e.i,exports.isIPv6=e.a;
+Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("../utils-BvgGdrgN.cjs"),t=require("../net.cjs");exports.Server=t.Server,exports.Socket=t.Socket,exports._default=t._default,exports.default=t._default,exports.connect=t.connect,exports.createConnection=t.createConnection,exports.createServer=t.createServer,exports.isIP=e.r,exports.isIPv4=e.i,exports.isIPv6=e.a;

package/cloud/net.d.ts

@@ -1,2 +1,2 @@
-import { a as createConnection, c as isIP, i as connect, l as isIPv4, n as Socket, o as createServer, r as _default, t as Server, u as isIPv6 } from "../net-DaWv81tQ.js";
+import { a as createConnection, c as isIP, i as connect, l as isIPv4, n as Socket, o as createServer, r as _default, t as Server, u as isIPv6 } from "../net-DAOcF3Eb.js";
 export { Server, Socket, _default, _default as default, connect, createConnection, createServer, isIP, isIPv4, isIPv6 };

package/cloud/net.js

@@ -1,3 +1,3 @@
-import { a as e, i as t, r as n } from "../utils-DVlbuXmW.js";
-import { a as r, i, n as a, o, r as s, t as c } from "../net-yBkobZqK.js";
-export { c as Server, a as Socket, s as _default, s as default, i as connect, r as createConnection, o as createServer, n as isIP, t as isIPv4, e as isIPv6 };
+import { a as e, i as t, r as n } from "../utils-C-cAd4r4.js";
+import { Server as r, Socket as i, _default as a, connect as o, createConnection as s, createServer as c } from "../net.js";
+export { r as Server, i as Socket, a as _default, a as default, o as connect, s as createConnection, c as createServer, n as isIP, t as isIPv4, e as isIPv6 };

package/cloud-B2ZG-0MF.cjs

@@ -0,0 +1 @@
+const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-DLM2M3_i.cjs"),n=require("./api-BCJO3EWi.cjs"),r=require("./busy-Dv8wzE5M.cjs"),i=require("./proxy-CefKCs-i.cjs"),a=require("./attach-policy.cjs"),o=require("./dns.cjs"),s=require("./cloud/fs.cjs"),c=require("./net.cjs"),l=require("./dgram.cjs"),u=require("./http.cjs");let d=require("osra");var f={scope:`frame.fetchRead`,category:`network`,severity:3,unsafe:!0,title:`Read your account data on this site`,description:`Lets the app read pages and data from this site as you, using the session in the frame.`},p={scope:`frame.fetchWrite`,category:`network`,severity:3,unsafe:!0,title:`Change your account data on this site`,description:`Lets the app send changes to this site as you, using the session in the frame.`},m=new Set([`GET`,`HEAD`,`OPTIONS`]),h=(e,t)=>m.has((t?.method??`GET`).toUpperCase())?f:p,g=e=>e,_=`autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write`,v=2e4,y=65e3,b=3e4,x=5e3,S=new Set([]),C=()=>`https://fkn.app`,w=e=>!e||e===`about:blank`,T=e=>e?``:`incognito-${crypto.randomUUID()}`,E=({target:e,session:t,domains:n})=>{let r=new URL(`/attach-frame`,C());return e&&r.searchParams.set(`url`,e),t&&r.searchParams.set(`session`,t),n.length&&r.searchParams.set(`domains`,n.join(`,`)),r.href},D=(e,t,n)=>{let r,i=new Promise((e,i)=>{r=setTimeout(()=>i(Error(n)),t)});return Promise.race([e,i]).finally(()=>clearTimeout(r))},O=(e,t)=>{let n=()=>{a(),t()},r=e.parentNode,i=new MutationObserver(()=>{(!e.isConnected||e.parentNode!==r)&&(a(),t())}),a=()=>{window.removeEventListener(`pagehide`,n),i.disconnect()};window.addEventListener(`pagehide`,n,{once:!0}),r&&i.observe(r,{childList:!0}),e.isConnected||(a(),t())},k=()=>Object.assign(Error(`cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe`),{name:t.u}),A=(e,t)=>{let n=[...e.split(`;`),...t.split(`;`)].map(e=>e.trim()).filter(Boolean);return[...new Set(n)].join(`; `)},j=[300,1200,4e3],M=e=>{let t=()=>{if(!e.isConnected)return;let t=e.style.height,n=e.getBoundingClientRect();n.height&&(e.style.height=`${n.height-1}px`,setTimeout(()=>{e.style.height=t},50))};t();for(let e of j)setTimeout(t,e)},N=e=>{let t=e.getAttribute(`sandbox`);if(t===null)return;let n=new Set(t.toLowerCase().split(/\s+/).filter(Boolean)),r=[`allow-scripts`,`allow-same-origin`].filter(e=>!n.has(e));if(r.length)throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(` and `)} for the render proxy to load`)},P=async({iframe:e,domains:i=[],syncCookies:o=!0,lockdown:s=!1})=>{if(typeof window>`u`)throw Error(`cloud.attachFrame needs a window realm`);if(s)throw Error(`cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame`);if(!e.isConnected)throw Error(`cloud.attachFrame: the iframe must be connected to the document before attaching`);N(e);let c=e.getAttribute(`src`)??``,l=(()=>{if(w(c))return null;try{return new URL(e.src||c,location.href)}catch{throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${c}`)}})();if(l){let e=new URL(`/attach-frame`,C());if(l.origin===e.origin&&l.pathname===e.pathname)throw Error(`cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe`)}let u=l?.href??``;u&&t.s(u);let f=u,p=T(o),m=a.normalizeDeclaredHosts(i),j=new Set;try{j.add(new URL(u).origin)}catch{}let P=new AbortController,F=e.referrerPolicy,I=e.allow;if(e.referrerPolicy=`origin`,e.allow=A(_,e.allow),e.src=E({target:u,session:p,domains:m}),!e.contentWindow)throw Error(`cloud.attachFrame: the iframe window is not available`);try{let i=await D((0,d.expose)({},{key:`fkn-attach-frame`,origin:C(),transport:{receive:window,emit:e.contentWindow},unregisterSignal:P.signal,revivableModules:g(t.W)}),v,`cloud.attachFrame: timed out connecting to the render proxy page`);await D(i.ready(),y,`cloud.attachFrame: the render proxy never became ready`),u&&M(e),O(e,()=>P.abort());let o=r.t(`attached frame`);P.signal.aborted?o():P.signal.addEventListener(`abort`,o,{once:!0});let s=e.contentWindow,c=()=>{if(!(!P.signal.aborted&&e.isConnected&&e.contentWindow===s))throw P.abort(),k()};return t.a({executor:{execute:(e,n,r)=>S.has(n)?Promise.reject(t.d(n,`cloud`)):(c(),i.executeLocator(e,n,r)),highlight:async()=>{}},gate:async e=>{if(e.operation!==`fetch`)return;let r=a.frameFetchVerdict({session:p,declaredHosts:m,approvedOrigins:j},e.args[0]);if(r.kind===`refuse`)throw t.m(r.reason,`fetch`);if(!await(await n.a).frameConsent.ensure({scope:h(e.args[0],e.args[1]).scope,hosts:r.promptHosts}))throw t.m(`frame.fetch: the user did not grant this`,`fetch`)},goto:async(t,n={})=>{let r=new URL(t,location.href).href;c();let{timeoutMs:a}=n;await D(i.goto(r,n),(a??b)+x,`cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded`),f=r;try{j.add(new URL(r).origin)}catch{}M(e)},url:()=>f})}catch(t){throw P.abort(),e.referrerPolicy=F,e.allow=I,e.src=u||`about:blank`,t}},F=()=>typeof window<`u`&&!0,I=async()=>{let e=await n.a.then(e=>e.cloud.quota());return{premium:e.premium,overQuota:e.overQuota,throttled:e.overQuota&&!e.premium,usedBytes:e.usedBytes,limitBytes:e.limitBytes,remainingBytes:e.remaining,bytesPerSecond:e.bytesPerSecond,bitsPerSecond:e.bytesPerSecond*8}},L=e.t({attachFrame:()=>P,available:()=>R,dgram:()=>l.t,dns:()=>o.t,fetch:()=>i.t,fs:()=>s.t,http:()=>u.t,net:()=>c.t,quota:()=>I}),R=()=>n.c;Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return F}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return P}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return L}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return I}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return R}});