@fkn/lib 0.9.23 → 0.9.25

package/cloud-B7pI3pp1.d.ts

@@ -0,0 +1,37 @@
+import { t as cloudFetch } from "./proxy-BubvP9sg.js";
+import { i as Frame, r as AttachFrameOptions } from "./index-BhO-wymH.js";
+import { t as dns_d_exports } from "./dns.js";
+import { n as fs_d_exports } from "./fs-DlGE0ZNu.js";
+import { s as net_d_exports } from "./net-DAOcF3Eb.js";
+import { t as dgram_d_exports } from "./dgram.js";
+import { t as http_d_exports } from "./http.js";
+//#region src/cloud/frame.d.ts
+declare const attachFrame: ({ iframe, domains, syncCookies, lockdown }: AttachFrameOptions) => Promise<Frame>;
+//#endregion
+//#region src/quota.d.ts
+type QuotaStatus = {
+  /** the user has a paid subscription, throttle never applies */
+  premium: boolean;
+  /** today's free-tier volume is spent (true even for premium, see `throttled`) */
+  overQuota: boolean;
+  /** transfers are actually being rate-limited right now (overQuota and not premium) */
+  throttled: boolean;
+  /** bytes egressed through FKN relays today (per connected account or anonymized IP), saturates at limitBytes:
+   *  consumption past the free-tier volume is private and never reported */
+  usedBytes: number;
+  /** free-tier daily volume before throttling kicks in */
+  limitBytes: number;
+  /** bytes of free-tier volume left today */
+  remainingBytes: number;
+  /** current effective egress rate cap, bytes per second */
+  bytesPerSecond: number;
+  /** current effective egress rate cap, bits per second (for display) */
+  bitsPerSecond: number;
+};
+declare const quota: () => Promise<QuotaStatus>;
+declare namespace cloud_d_exports {
+  export { QuotaStatus, attachFrame, available, dgram_d_exports as dgram, dns_d_exports as dns, cloudFetch as fetch, fs_d_exports as fs, http_d_exports as http, net_d_exports as net, quota };
+}
+declare const available: () => boolean;
+//#endregion
+export { attachFrame as a, quota as i, cloud_d_exports as n, QuotaStatus as r, available as t };

package/{cloud-7rfQ2BRH.js → cloud-DolBoNvR.js}

@@ -1,73 +1,35 @@
 import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { R as t, _ as n, a as r, f as i, m as a, s as o } from "./lib-k3lstfa4.js";
-import { i as s, t as c } from "./api-Jq4OSTp1.js";
-import { t as l } from "./busy-Bp1E3JPT.js";
-import { t as u } from "./proxy-CRbkWS4E.js";
-import { t as d } from "./dns.js";
-import { t as f } from "./cloud/fs.js";
-import { s as p } from "./net-yBkobZqK.js";
-import { i as m } from "./dgram-DHQcHefn.js";
-import { t as h } from "./http.js";
-import { expose as g } from "osra";
-//#region node_modules/@mfkn/web-extension/lib/lib/locator-permissions.js
-var _ = {
+import { W as t, a as n, d as r, m as i, s as a, u as o } from "./lib-duLPF_WZ.js";
+import { a as s, c } from "./api-DLvscoll.js";
+import { t as l } from "./busy-B189uX--.js";
+import { t as u } from "./proxy-KUfE4cEQ.js";
+import { frameFetchVerdict as d, normalizeDeclaredHosts as f } from "./attach-policy.js";
+import { t as p } from "./dns.js";
+import { t as m } from "./cloud/fs.js";
+import { t as h } from "./net.js";
+import { t as g } from "./dgram.js";
+import { t as _ } from "./http.js";
+import { expose as v } from "osra";
+//#region ../web-extension/lib/lib/locator-permissions.js
+var y = {
 	scope: "frame.fetchRead",
 	category: "network",
 	severity: 3,
 	unsafe: !0,
 	title: "Read your account data on this site",
 	description: "Lets the app read pages and data from this site as you, using the session in the frame."
-}, v = {
+}, b = {
 	scope: "frame.fetchWrite",
 	category: "network",
 	severity: 3,
 	unsafe: !0,
 	title: "Change your account data on this site",
 	description: "Lets the app send changes to this site as you, using the session in the frame."
-}, y = /* @__PURE__ */ new Set([
+}, x = /* @__PURE__ */ new Set([
 	"GET",
 	"HEAD",
 	"OPTIONS"
-]), b = (e, t) => y.has((t?.method ?? "GET").toUpperCase()) ? _ : v, x = (e) => {
-	let t = [];
-	for (let n of e) {
-		let e = n.trim().toLowerCase();
-		!e || e.length > 253 || /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/.test(e) && (t.includes(e) || t.push(e));
-	}
-	return t;
-}, S = (e, t) => {
-	if (!e.session) return {
-		kind: "refuse",
-		reason: "frame.fetch on the cloud backend needs its own session: attach with syncCookies: false"
-	};
-	if (typeof t != "string") return {
-		kind: "refuse",
-		reason: "frame.fetch: url must be a string"
-	};
-	let n;
-	try {
-		n = new URL(t);
-	} catch {
-		return {
-			kind: "refuse",
-			reason: "frame.fetch on the cloud backend needs an absolute url"
-		};
-	}
-	if (n.protocol !== "https:" && n.protocol !== "http:") return {
-		kind: "refuse",
-		reason: "frame.fetch: only http(s) urls are supported"
-	};
-	if (!(e.declaredHosts.includes(n.hostname) || e.approvedOrigins.has(n.origin))) return {
-		kind: "refuse",
-		reason: "frame.fetch: the target is outside the origins this attachment declared"
-	};
-	let r = e.declaredHosts.length ? e.declaredHosts : [n.hostname];
-	return {
-		kind: "consent",
-		targetHost: n.hostname,
-		promptHosts: r
-	};
-}, C = (e) => e, w = "autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write", T = 2e4, E = 65e3, D = 3e4, O = 5e3, k = /* @__PURE__ */ new Set([]), A = () => "https://fkn.app", j = (e) => !e || e === "about:blank", M = (e) => e ? "" : `incognito-${crypto.randomUUID()}`, N = ({ target: e, session: t, domains: n }) => {
+]), S = (e, t) => x.has((t?.method ?? "GET").toUpperCase()) ? y : b, C = (e) => e, w = "autoplay; fullscreen; encrypted-media; picture-in-picture; clipboard-read; clipboard-write", T = 2e4, E = 65e3, D = 3e4, O = 5e3, k = /* @__PURE__ */ new Set([]), A = () => "https://fkn.app", j = (e) => !e || e === "about:blank", M = (e) => e ? "" : `incognito-${crypto.randomUUID()}`, N = ({ target: e, session: t, domains: n }) => {
 	let r = new URL("/attach-frame", A());
 	return e && r.searchParams.set("url", e), t && r.searchParams.set("session", t), n.length && r.searchParams.set("domains", n.join(",")), r.href;
 }, P = (e, t, n) => {
@@ -84,7 +46,7 @@ var _ = {
 		window.removeEventListener("pagehide", n), i.disconnect();
 	};
 	window.addEventListener("pagehide", n, { once: !0 }), r && i.observe(r, { childList: !0 }), e.isConnected || (a(), t());
-}, I = () => Object.assign(/* @__PURE__ */ Error("cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe"), { name: a }), L = (e, t) => {
+}, I = () => Object.assign(/* @__PURE__ */ Error("cloud.attachFrame: the attached iframe left the document or was reloaded; attach a fresh iframe"), { name: o }), L = (e, t) => {
 	let n = [...e.split(";"), ...t.split(";")].map((e) => e.trim()).filter(Boolean);
 	return [...new Set(n)].join("; ");
 }, R = [
@@ -106,87 +68,87 @@ var _ = {
 	if (t === null) return;
 	let n = new Set(t.toLowerCase().split(/\s+/).filter(Boolean)), r = ["allow-scripts", "allow-same-origin"].filter((e) => !n.has(e));
 	if (r.length) throw Error(`cloud.attachFrame: the iframe's sandbox attribute must include ${r.join(" and ")} for the render proxy to load`);
-}, V = async ({ iframe: e, domains: a = [], syncCookies: s = !0, lockdown: u = !1 }) => {
+}, V = async ({ iframe: e, domains: o = [], syncCookies: c = !0, lockdown: u = !1 }) => {
 	if (typeof window > "u") throw Error("cloud.attachFrame needs a window realm");
 	if (u) throw Error("cloud.attachFrame does not support lockdown; use the extension backend for a sealed frame");
 	if (!e.isConnected) throw Error("cloud.attachFrame: the iframe must be connected to the document before attaching");
 	B(e);
-	let d = e.getAttribute("src") ?? "", f = (() => {
-		if (j(d)) return null;
+	let p = e.getAttribute("src") ?? "", m = (() => {
+		if (j(p)) return null;
 		try {
-			return new URL(e.src || d, location.href);
+			return new URL(e.src || p, location.href);
 		} catch {
-			throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${d}`);
+			throw Error(`cloud.attachFrame: the iframe src is not a valid URL: ${p}`);
 		}
 	})();
-	if (f) {
+	if (m) {
 		let e = new URL("/attach-frame", A());
-		if (f.origin === e.origin && f.pathname === e.pathname) throw Error("cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe");
+		if (m.origin === e.origin && m.pathname === e.pathname) throw Error("cloud.attachFrame: this iframe is already attached; navigate with the Frame returned by that attach or use a fresh iframe");
 	}
-	let p = f?.href ?? "";
-	p && o(p);
-	let m = p, h = M(s), _ = x(a), v = /* @__PURE__ */ new Set();
+	let h = m?.href ?? "";
+	h && a(h);
+	let g = h, _ = M(c), y = f(o), b = /* @__PURE__ */ new Set();
 	try {
-		v.add(new URL(p).origin);
+		b.add(new URL(h).origin);
 	} catch {}
-	let y = new AbortController(), R = e.referrerPolicy, V = e.allow;
+	let x = new AbortController(), R = e.referrerPolicy, V = e.allow;
 	if (e.referrerPolicy = "origin", e.allow = L(w, e.allow), e.src = N({
-		target: p,
-		session: h,
-		domains: _
+		target: h,
+		session: _,
+		domains: y
 	}), !e.contentWindow) throw Error("cloud.attachFrame: the iframe window is not available");
 	try {
-		let a = await P(g({}, {
+		let a = await P(v({}, {
 			key: "fkn-attach-frame",
 			origin: A(),
 			transport: {
 				receive: window,
 				emit: e.contentWindow
 			},
-			unregisterSignal: y.signal,
+			unregisterSignal: x.signal,
 			revivableModules: C(t)
 		}), T, "cloud.attachFrame: timed out connecting to the render proxy page");
-		await P(a.ready(), E, "cloud.attachFrame: the render proxy never became ready"), p && z(e), F(e, () => y.abort());
+		await P(a.ready(), E, "cloud.attachFrame: the render proxy never became ready"), h && z(e), F(e, () => x.abort());
 		let o = l("attached frame");
-		y.signal.aborted ? o() : y.signal.addEventListener("abort", o, { once: !0 });
-		let s = e.contentWindow, u = () => {
-			if (!(!y.signal.aborted && e.isConnected && e.contentWindow === s)) throw y.abort(), I();
+		x.signal.aborted ? o() : x.signal.addEventListener("abort", o, { once: !0 });
+		let c = e.contentWindow, u = () => {
+			if (!(!x.signal.aborted && e.isConnected && e.contentWindow === c)) throw x.abort(), I();
 		};
-		return r({
+		return n({
 			executor: {
-				execute: (e, t, n) => k.has(t) ? Promise.reject(i(t, "cloud")) : (u(), a.executeLocator(e, t, n)),
+				execute: (e, t, n) => k.has(t) ? Promise.reject(r(t, "cloud")) : (u(), a.executeLocator(e, t, n)),
 				highlight: async () => {}
 			},
 			gate: async (e) => {
 				if (e.operation !== "fetch") return;
-				let t = S({
-					session: h,
-					declaredHosts: _,
-					approvedOrigins: v
+				let t = d({
+					session: _,
+					declaredHosts: y,
+					approvedOrigins: b
 				}, e.args[0]);
-				if (t.kind === "refuse") throw n(t.reason, "fetch");
-				if (!await (await c).frameConsent.ensure({
-					scope: b(e.args[0], e.args[1]).scope,
+				if (t.kind === "refuse") throw i(t.reason, "fetch");
+				if (!await (await s).frameConsent.ensure({
+					scope: S(e.args[0], e.args[1]).scope,
 					hosts: t.promptHosts
-				})) throw n("frame.fetch: the user did not grant this", "fetch");
+				})) throw i("frame.fetch: the user did not grant this", "fetch");
 			},
 			goto: async (t, n = {}) => {
 				let r = new URL(t, location.href).href;
 				u();
 				let { timeoutMs: i } = n;
-				await P(a.goto(r, n), (i ?? D) + O, "cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded"), m = r;
+				await P(a.goto(r, n), (i ?? D) + O, "cloud.attachFrame: the render proxy did not answer goto; the frame may have been detached or its page reloaded"), g = r;
 				try {
-					v.add(new URL(r).origin);
+					b.add(new URL(r).origin);
 				} catch {}
 				z(e);
 			},
-			url: () => m
+			url: () => g
 		});
 	} catch (t) {
-		throw y.abort(), e.referrerPolicy = R, e.allow = V, e.src = p || "about:blank", t;
+		throw x.abort(), e.referrerPolicy = R, e.allow = V, e.src = h || "about:blank", t;
 	}
 }, H = () => typeof window < "u" && !0, U = async () => {
-	let e = await c.then((e) => e.cloud.quota());
+	let e = await s.then((e) => e.cloud.quota());
 	return {
 		premium: e.premium,
 		overQuota: e.overQuota,
@@ -200,13 +162,13 @@ var _ = {
 }, W = /* @__PURE__ */ e({
 	attachFrame: () => V,
 	available: () => G,
-	dgram: () => m,
-	dns: () => d,
+	dgram: () => g,
+	dns: () => p,
 	fetch: () => u,
-	fs: () => f,
-	http: () => h,
-	net: () => p,
+	fs: () => m,
+	http: () => _,
+	net: () => h,
 	quota: () => U
-}), G = () => s;
+}), G = () => c;
 //#endregion
 export { H as a, V as i, W as n, U as r, G as t };

package/cloud.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./proxy-BNdvRifw.cjs"),t=require("./cloud-BqjwL5KM.cjs"),n=require("./dns.cjs"),r=require("./cloud/fs.cjs"),i=require("./net-B6RHtWwe.cjs"),a=require("./dgram-BLN-mfgq.cjs"),o=require("./http.cjs");exports.attachFrame=t.i,exports.available=t.t,Object.defineProperty(exports,"dgram",{enumerable:!0,get:function(){return a.i}}),Object.defineProperty(exports,"dns",{enumerable:!0,get:function(){return n.t}}),exports.fetch=e.t,Object.defineProperty(exports,"fs",{enumerable:!0,get:function(){return r.t}}),Object.defineProperty(exports,"http",{enumerable:!0,get:function(){return o.t}}),Object.defineProperty(exports,"net",{enumerable:!0,get:function(){return i.s}}),exports.quota=t.r;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./proxy-CefKCs-i.cjs"),t=require("./cloud-B2ZG-0MF.cjs"),n=require("./dns.cjs"),r=require("./cloud/fs.cjs"),i=require("./net.cjs"),a=require("./dgram.cjs"),o=require("./http.cjs");exports.attachFrame=t.i,exports.available=t.t,Object.defineProperty(exports,"dgram",{enumerable:!0,get:function(){return a.t}}),Object.defineProperty(exports,"dns",{enumerable:!0,get:function(){return n.t}}),exports.fetch=e.t,Object.defineProperty(exports,"fs",{enumerable:!0,get:function(){return r.t}}),Object.defineProperty(exports,"http",{enumerable:!0,get:function(){return o.t}}),Object.defineProperty(exports,"net",{enumerable:!0,get:function(){return i.t}}),exports.quota=t.r;

package/cloud.d.ts

@@ -1,8 +1,8 @@
-import { t as cloudFetch } from "./proxy-DmMu2_1z.js";
-import { a as attachFrame, i as quota, r as QuotaStatus, t as available } from "./cloud-DMTkzfcf.js";
+import { t as cloudFetch } from "./proxy-BubvP9sg.js";
+import { a as attachFrame, i as quota, r as QuotaStatus, t as available } from "./cloud-B7pI3pp1.js";
 import { t as dns_d_exports } from "./dns.js";
-import { n as fs_d_exports } from "./fs-CUmugp10.js";
-import { s as net_d_exports } from "./net-DaWv81tQ.js";
+import { n as fs_d_exports } from "./fs-DlGE0ZNu.js";
+import { s as net_d_exports } from "./net-DAOcF3Eb.js";
 import { t as dgram_d_exports } from "./dgram.js";
 import { t as http_d_exports } from "./http.js";
 export { type QuotaStatus, attachFrame, available, dgram_d_exports as dgram, dns_d_exports as dns, cloudFetch as fetch, fs_d_exports as fs, http_d_exports as http, net_d_exports as net, quota };

package/cloud.js

@@ -1,8 +1,8 @@
-import { t as e } from "./proxy-CRbkWS4E.js";
-import { i as t, r as n, t as r } from "./cloud-7rfQ2BRH.js";
+import { t as e } from "./proxy-KUfE4cEQ.js";
+import { i as t, r as n, t as r } from "./cloud-DolBoNvR.js";
 import { t as i } from "./dns.js";
 import { t as a } from "./cloud/fs.js";
-import { s as o } from "./net-yBkobZqK.js";
-import { i as s } from "./dgram-DHQcHefn.js";
+import { t as o } from "./net.js";
+import { t as s } from "./dgram.js";
 import { t as c } from "./http.js";
 export { t as attachFrame, r as available, s as dgram, i as dns, e as fetch, a as fs, c as http, o as net, n as quota };

package/{connect-button-Ds9KpXHe.js → connect-button-CN4ZJwT6.js}

@@ -1,4 +1,4 @@
-//#region src/lib/connect-button.ts
+//#region src/connect-button.ts
 var e = "https://fkn.app", t = (t) => {
 	let n = t ?? (typeof location < "u" ? location.origin : void 0);
 	return n ? `${e}/connect-button?origin=${encodeURIComponent(n)}` : `${e}/connect-button`;

package/{connect-button-D8KXSL6s.d.ts → connect-button-DdoEikEd.d.ts}

@@ -1,4 +1,4 @@
-//#region src/lib/connect-button.d.ts
+//#region src/connect-button.d.ts
 declare const connectButtonUrl: (origin?: string) => string;
 //#endregion
 export { connectButtonUrl as t };